Data Protection Policy

I. Name and address of the controller

The controller in the sense of the General Data Protection Regulation and other national data protection laws in the member states as well as other data protection law provisions is:

Rhenus SE & Co. KG
Rhenus Platz 1
59439 Holzwickede
Germany
Phone: +49 (0)2301 29-0
Email: info@de.rhenus.com
Website: www.rhenus.com

VIII. Contact form and email contact

1. Description and scope of managing the data

There is a contact form on our website and it can be used to make contact electronically. If a user makes use of this facility, the data entered on the input form is sent to us and stored. This data involves:

• Salutation
• First name (optional)
• Last name
• E-Mail
• Phone
• Further upload (optional)
• Text of message

Your consent to process the data is obtained as part of the sending procedure and reference is made to this data protection declaration.

Alternatively, it is possible to make contact via the email address that is made available. In this case, the user’s personal data that is sent with the email is stored.  

No data is forwarded to third parties in conjunction with this. The data is exclusively used to process the conversation.

2. The legal basis for processing the data

Article 6 Para. 1 a) of the GDPR forms the legal basis for processing the data, provided that the user has given consent for this.

Article 6 Para. 1 f) of the GDPR forms the legal basis for processing the data that is transmitted when an email is sent. If the email contact is aimed at signing an agreement, Article 6 Para. 1 b) of the GDPR forms an additional legal basis for processing the data.

3. The purpose of processing the data

Any processing of the personal data from the input form is solely for the purpose of processing the first contact. If contact is made in the form of an email, there is also a legitimate and necessary interest in processing the data.

The other personal data processed when the email is sent is used to prevent any misuse of the contact form and guarantee the security of our IT systems.

4. The length of time that data is stored

The data is deleted as soon as it is no longer required to achieve the purpose for which it was gathered. This is the case for any personal data from the input form in the contact form and the data that is sent by email when the relevant conversation with the user has been concluded. The conversation has been ended when the circumstances suggest that the facts of the case in question have been finally resolved.

The personal data, which is also gathered during the sending procedure, is deleted after a period of seven days, at the very latest.

5. Opportunity to object and to have the data removed

Users have the opportunity of cancelling their consent for the personal data to be processed at any time. If users make contact with us by email, they can object to any storage of their personal data at any time. If this is the case, the conversation cannot be continued. 

All the personal data, which is stored as part of the contact making procedure, is then deleted in this case.