Privacy Policy

1) Information about the data controller collecting personal data and contact details

1.1 Thank you for visiting our website and your interest in our company. Below we provide information about how we deal with your personal data when using our website. Personal data refers to all data that can identify you personally.

1.2 The data controller responsible for processing the data on this website as per General Data Protection Regulation (GDPR) is “ROBEL Bahnbaumaschinen GmbH, Industriestrasse 31, 83395 Freilassing, Germany, Tel +49-8654-609-0, info@robel.com”. The data controller responsible for processing personal data is the natural or legal person who, on their own or together with others, decides on the purpose and means of processing personal data.

1.3 The data controller has appointed a data protection officer. They can be contacted on: ROBEL Bahnbaumaschinen GmbH, Data Protection Officer, Industriestrasse 31, 83395 Freilassing, Germany Email: datenschutz@robel.com

1.4 For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL and TSL encryption. An encrypted connection can be identified by the character sequence “https://” and the lock symbol in your browser title.

2) Data collection when visiting our website

If you use our website purely for information, i.e. you do not register or transmit information in any other way, we only collect the data that your browser transmits to our server (so-called “server logfiles”). When you call up our website we will collect the following data that we require from a technical point of view to display our website to you:

The website visited
Date and time of accessing the website
Volume of data transmitted in bytes
Source/reference from where you accessed the website
Browser used
Operating system used
IP address used (anonymous if applicable)

The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.

3) Cookies

We use so-called cookies on various pages to make the user experience attractive and enable the use of certain functions. Cookies are small text files which are stored on your end device. Some of the cookies we use will be deleted at the end of the browser session, i.e. after you close your browser. These are so-called session cookies. Other cookies will remain on your end device and enable us or our partner companies (third party cookies) to recognize your browser when you next visit our website (persistent cookies). If cookies are set, they will collect and process certain user information individually, such as browser and location data as well as IP address values. Persistent cookies will be deleted automatically after a specified period; this can vary depending on the cookie.

If individual cookies that we have implemented are also used to process personal data, this data will be processed in accordance with Article 6(1)(b) GDPR to either perform the contract, or, in accordance with Article 6(1)(f) GDPR, to safeguard our legitimate interests in the best possible functionality of our website as well as a user-friendly and effective experience of your visit.

We may work together with advertising partners that help us to make our internet offering more interesting for you. For this purpose and in this case, cookies from partner companies (third party cookies) will also be stored on your hard drive when you visit our website. Where we work together with the above-mentioned advertising partners, you will be informed in the subsequent paragraphs individually and separately about the use of such cookies and the extent of the information collected.

Please note that you can set your browser such that you will be informed about cookie settings and can decide individually which cookies to accept or can reject the acceptance of cookies in certain cases or in general. Each browser manages cookie settings in different ways. This is described in the Help menu of each browser,which also provides an explanation how you can change your cookie settings. You can find this information for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that the functionality of our website may be restricted if you reject cookies.

4) Contacting us

4.1 When contacting us (e.g. via contact form or by email) personal data will be collected. Which data are collected when completing a contact form, can be seen in the respective contact form. These data are solely stored and used for the purpose of answering your enquiry and for making contact as well as the associated technical administration. The legal basis for processing these data is our legitimate interest in answering your enquiry in accordance with Article 6(1)(f) GDPR. If you contact us for the purpose of concluding a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing your data. Your data will be deleted after processing your enquiry has been concluded. This is the case when circumstances indicate that the matter in question has been concluded and resolved and if there is no legal obligation to retain the data.

4.2 WhatsApp Business

We offer our website visitors the option of contacting us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called “Business” version of WhatsApp for this.

If you contact us via WhatsApp in the course of a specific business (for example, an order), we will store and use the mobile phone number you use for WhatsApp and - if provided - your first name and last name for handling and responding to your enquiry in accordance with Article 6(1)(b) GDPR. On the same legal basis we will request further data (order number, customer number, address, or email address) from you via WhatsApp if required to be able to assign your enquiry to the relevant process.

If you use our WhatsApp contact for general enquiries (e.g. regarding our range of services, availabilities, or regarding our website), we will store and use the mobile phone number you use for WhatsApp and, if provided, your first name and last name in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the information requested.

Your data will always only be used for answering your enquiry by WhatsApp. They will not be passed on to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile end device we use for this and will automatically transmit telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For operating our WhatsApp Business account we use a mobile end device, the address book of which only stores the WhatsApp contact details of those users that have contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact details are stored in our address book has agreed to the transmission of their WhatsApp telephone number from the address books of their Chat contacts by accepting the WhatsApp conditions of use when using the App on their device for the first time. This is in accordance with Article 6(1)(a) GDPR. This excludes transmission of data of those users that do not use WhatsApp and/or have not contacted us via WhatsApp.

For information on the purpose and extent of data collection and onward processing and use of data by WhatsApp as well as your rights in this regard and the available settings options for protecting your privacy please refer to the WhatsApp privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5) Use of Social Media: social plugins

5.1 Facebook as a standard plugin

Our website makes use of so-called social plugins (“plugins”) of the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are marked by a Facebook logo or the addition “Social plugin of Facebook” or “Facebook social plugin”. You can find an overview of the Facebook plugins and what they look like here: https://developers.facebook.com/docs/plugins

If you call up one of our web pages that contains such a plugin, your browser will establish a direct connection to the Facebook servers. The content of the plugin will be directly transmitted to your browser by Facebook and embedded in the page. With this embedding Facebook receives the information that your browser has called up the respective page of our website even if you do not have a Facebook profile or are not logged into Facebook at that time. This information (including your IP address) will be transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there.

If you are logged into Facebook, Facebook can assign your visit to our website directly to your Facebook profile. If you interact with the plugins, for example by pressing the “Like” button or writing a “Comment”, this information will also be transmitted directly to a server of Facebook and stored there. This information will also be published in your Facebook profile and displayed to your Facebook friends.

These data handling processes are carried out in line with Article 6(1)(f) GDPR on the basis of Facebook’s legitimate interest in displaying personalized advertisements to inform other users of the social network of your activities on our website and to tailor Facebook’s services.

If you do not want Facebook to assign the data collected through our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can reject Facebook plugins loading and thus the data handling processes described above with add-ons for your browser, which will also apply in future, e.g. by using the “NoScript” script blocker (http://noscript.net/).

For information on the purpose and extent of data collection and onward processing and use of data by Facebook as well as your rights in this regard and the available settings options for protecting your privacy please visit the Facebook privacy policy on:
https://www.facebook.com/policy.php

5.2 Instagram as a standard plugin

Our website makes use of so-called social plugins (“plugins”) of the online service Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are marked with an Instagram logo, e.g. in the form of an “Instagram camera”. You can find an overview of the Instagram plugins and what they look like here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

If you call up one of our web pages that contains such a plugin, your browser will establish a direct connection to the Instagram servers. The content of the plugin will be directly transmitted to your browser by Instagram and embedded in the page. With this embedding Instagram receives the information that your browser has called up the respective page of our website even if you do not have an Instagram profile or are not logged into Instagram at that time. This information (including your IP address) will be transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there.

If you are logged into Instagram, Instagram can assign your visit to our website directly to your Instagram account. If you interact with the plugins, for example by pressing the “Instagram camera” button, this information will also be transmitted directly to a server of Instagram and stored there. This information will also be published in your Instagram account and displayed to your contacts there.

These data handling processes are carried out in line with Article 6(1)(f) GDPR on the basis of Instagram’s legitimate interest in displaying personalized advertisements to inform other users of the social network of your activities on our website and to tailor Instagram’s services.

If you do not want Instagram to assign the data collected through our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can reject Instagram plugins loading and thus the data handling processes described above with add-ons for your browser, which will also apply in future, e.g. by using the “NoScript” script blocker (http://noscript.net/).

For information on the purpose and extent of data collection and onward processing and use of data by Instagram as well as your rights in this regard and the available settings options for protecting your privacy please visit the Instagram privacy policy on: https://help.instagram.com/155833707900388/

6) Use of Social Media: videos

6.1 Use of Vimeo videos

On our website, plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are embedded. If you call up one of our web pages that contains such a plugin, your browser will establish a direct connection to the Vimeo servers. The content of the plugin will be directly transmitted to your browser by Vimeo and embedded in the page. With this embedding Vimeo receives the information that your browser has called up the respective page of our website even if you do not have a Vimeo account or are not logged into Vimeo at that time. This information (including your IP address) will be transmitted by your browser directly to a server of Vimeo in the USA and stored there.
If you are logged into Vimeo, Vimeo can assign your visit to our website directly to your Vimeo account. If you interact with the plugins, for example by pressing the “Start” button of a video, this information will also be transmitted directly to a server of Vimeo and stored there.

These data handling processes are carried out in line with Article 6(1)(f) GDPR on the basis of Vimeo’s legitimate interest in market research and to tailor Vimeo’s services.

If you do not want Vimeo to assign the data collected through our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

For information on the purpose and extent of data collection and onward processing and use of data by Vimeo as well as your rights in this regard and the available settings options for protecting your privacy please visit the Vimeo privacy policy on: https://vimeo.com/privacy

With Vimeo videos that are embedded in our website the Google Analytics tracking tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is integrated automatically. This is a separate tracking by Vimeo to which we do not have any access and which we cannot influence from our website. Google Analytics uses so-called “cookies” for tracking; these are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website are normally transmitted to a Google server and stored there; this can also be a transmission to the servers of Google LLC in the USA.

This processing is in accordance with Article 6(1)(f) GDPR on the basis of Vimeo’s legitimate interest in analyses statistics of network behaviour for optimization and marketing purposes.

As far as is legally required, we have obtained your consent to your data being processed as described above in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect. To withdraw your consent, deactivate this service in the “Cookie consent tool” provided on the website.

6.2 Use of YouTube videos

This website uses the YouTube embedding function do display and play videos of the service provider YouTube, which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Here, the extended data protection mode is in use; according to information by the service provider, the storage of user information is only initiated once (a) video/s is/are played. Once embedded YouTube videos start to be played, the service provider YouTube uses cookies to collect information about the user behaviour. According to information provided by YouTube, these cookies are used, amongst others, to collect video statistics, improve the user experience, and prevent misuse. If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want your profile to be assigned to YouTube you will need to log out before activating a video button. Google stores your data (even for users that are not logged in) as user profiles and uses these for analysis. Such analysis is carried out in particular in accordance with Article 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertisements, in market research, and/or Google’s tailored website service. You have the right to object against the creation of these user profiles; you will need to contact YouTube to exercise this right. Within the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Independent of the embedded videos being played, every time this website is called up a connection is made to the Google network which may initiate further data handling processes that we cannot influence.

For further information on data privacy at YouTube please refer to the YouTube conditions of use on https://www.youtube.com/static?template=terms as well as to the Google privacy policy on https://www.google.de/intl/de/policies/privacy.

7) Tools and miscellaneous

7.1 - Google web fonts
For a uniform presentation of fonts, this website uses so-called web fonts; these are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
For this purpose, the browser you use must make a connection to the Google servers. In doing so, personal data may also be transmitted to the servers of Google LLC in the USA. This way Google becomes aware that our website has been called up via your IP address. We use Google web fonts in the interest of a uniform and appealing presentation of our online offering. According to Article 6(1)(f) GDPR, this presents a legitimate interest. If your browser does not support web fonts your computer will use a standard font. For further information on Google web fonts please refer to https://developers.google.com/fonts/faq and Google’s privacy policy on: https://www.google.com/policies/privacy/

7.2 Google reCAPTCHA

On our website we also make use of the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function mainly serves the purpose of distinguishing between an input being made by a human or being misused by machine or automatic processing. This service includes the transmission of the IP address and any other data required by Google for the reCAPTCHA service to Google and is in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in establishing individual responsibility in the Internet and the prevention of misuse and spam. Within the use Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

For further information on Google reCAPTCHA and Google’s privacy policy please refer to https://www.google.com/intl/de/policies/privacy/

As far as is legally required, we have obtained your consent to your data being processed as described above in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect. To exercise the withdrawal of your consent, please refer to the option for exercising an objection as detailed above.

8) Rights of the data subject

8.1 The effective data privacy law gives you comprehensive rights of the data subject (rights to access and intervention) towards the data controller with regard to the processing of your personal data. These are dealt with below:

Right to access by the data subject in accordance with Article 15 GDPR: You have, in particular, the right to obtain information about the personal data processed by us, the purposes of the processing, the categories of the personal data processed, the recipients or categories of recipient to whom the personal data have been disclosed, the envisaged storage period or the criteria used for determining the storage period, the right to request rectification, erasure, restriction of processing, the right to object against the processing, to lodge a complaint with a supervisory authority, the source of your personal data if these were not collected from you by us, the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, and your right to be informed of the appropriate safeguards pursuant to Article 46 GDPR where personal data are transferred to a third country;
Right to rectification in accordance with Article 16 GDPR: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and/or to have incomplete personal data stored about you by us completed;
Right to erasure in accordance with Article 17 GDPR: You have the right to obtain the erasure of your personal data if the conditions of Article 17(1) GDPR apply. This right shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;
Right to restriction of processing in accordance with Article 18 GDPR: You have the right to obtain restriction of processing your personal data so long as the accuracy of the personal data contested by you is verified, the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead, if you require your data for the establishment, exercise, or defence of legal claims once we no longer need this data for the purposes of the processing, or if you have objected for reasons of your specific situation as long as the verification whether our legitimate grounds are overriding has not been established;
Right to notification in accordance with Article 19 GDPR: If you have exercised the right of rectification, erasure, or restriction of processing towards the data controller they are obliged to inform each recipient to whom your personal data have been disclosed of the rectification, erasure, or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data, which you have provided to to us, in a structured, commonly used, and machine-readable format or request the transmission to another data controller as long as this is technically feasible;
Right to withdraw your consent in accordance with Article 7(3) GDPR: You have the right to withdraw the consent you gave once to the processing of data at any time with future effect. In the event of a withdrawal of consent we will erase the affected data immediately as long as further processing cannot be supported by a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint in accordance with Article 77 GDPR: If you consider that the processing of personal data relating to you infringes GDPR, you - without prejudice to any other administrative or judicial remedy - have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS AND BASED ON OUR OVERRIDING LEGITIAMTE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS EMANATING FROM YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA. WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING PRIVILEGED REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA FOR DIRECT ADVERTISING PURPOSES.

9) Storage period of personal data

The storage duration of personal data is determined by the respective legal framework, the processing purpose, and - where appropriate - additionally by the respective legal retention period (e.g. retention periods pertaining to commercial or tax legislation).

When processing personal data based on an explicit consent in accordance with Article 6(1)(a) GDPR this data will be stored until the data subject withdraws their consent.

If legal retention periods exist for data that have been processed within transactional or transactional-similar obligations on the basis on Article 6(1)(b) GDPR, these data will be routinely erased after expiry of the retention period provided they are no longer required for the fulfilment or initiation of a contract and/or no legitimate interest on continued storage continues from our side.

When processing personal data on the basis of Article 6(1)(f) GDPR we will store these data until the data subject exercises their right to object in line with Article 21(1) GDPR, unless we can prove compelling privileged reasons for processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defence of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6(1)(f) GDPR these data are stored until the data subject exercises their right to object in line with Article 21(2) GDPR.

If any other information of this declaration about specific processing situations does not result in any other outcomes, stored personal data will be erased when they are no longer required for the purposes for which they were collected or processed in any other way.