protect

Legal information

Privacy Policy

Thank you for visiting our website. Protecting your personal data is important to us, which is why we treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. The legal basis for data protection is the German Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG).

It is possible to use our website without providing any personal data. Different regulations may apply to the use of individual areas of our website. These are explained separately below. The following regulations provide information on the type, scope and purpose of collecting, using and processing personal data as well as your rights in this regard.

If you have any questions or wish to object to this at any time, you can get in touch with us using our contact details below:

Arrow Global Germany GmbH
Europaring 60
40878 Ratingen, Germany

info@rewertis.de
+49 (0)210 291 940

Contact person for data privacy:
Data protection officer
Ryan McInnis
datenschutz@rewertis.de
+49 (0)210 291 940

Collection, processing and use of personal data for a specific purpose We only collect, use and manage your personal data on our website if there is a legitimate interest in relation to the operation of the website, in particular:
for answering enquiries by email or via the contact form. In this case, the data provided by the user will be stored for the purpose of processing the enquiry. We do not share this data without your consent. Data collected in this way is also not compared with data that may be collected by other components of our website;
for providing services and/or information intended for you;
for transferring personal data within the company for administrative purposes;
for operating and administering our websites;
if you have consented to use for the specifically named, legitimate purposes.

We observe the basic principle of using data for a specific purpose and only collect, process and use your personal data for the purposes for which you have disclosed it to us.

Storing personal data
In compliance with the provisions of data protection law, we will generally delete the personal data stored about you without any action on your part if knowledge of it is no longer required to fulfil the purpose for which it was stored, unless there are legal obligations to the contrary.

Forwarding data to third parties
Your personal data is not transferred to third parties for any other purposes than those listed below. We shall only pass on your personal data to third parties if:

you have given your express consent pursuant to Article 6(1)(1)(a) of the GDPR, disclosure pursuant to Article 6(1)(1)(f) of the GDPR is necessary for asserting, exercising or defending legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, in the event that there is a legal obligation to disclose your data pursuant to Article 6(1)(1)(c) of the GDPR, and this is legally permissible and necessary for processing contractual relationships with you in accordance with Article 6(1)(1)(b) of the GDPR.

Data privacy in case of applications and the application procedure
Our company collects and processes the personal data of job applicants for the purpose of handling the application process. Processing can also be done electronically. This is particularly the case if an applicant submits relevant application documents to the controller by electronic means, for example by email or via a form on the website. If Rewertis concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If Rewertis does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the German General Act on Equal Treatment (AGG).

Use of cookies
We use cookies on our website. Cookies are small files that your browser creates automatically and that are stored on your end device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we will immediately become aware of your identity.

Firstly, the use of cookies serves to make the use of our website more pleasant for you. For example, we use session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness. These are stored on your end device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and which entries and settings you have created so that you do not have to enter them again.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing what we offer you. These cookies enable us to automatically recognize that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Article 6(1)(1)(f) of the GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notification always appears before a new cookie is created. However, completely deactivating cookies may mean that you are unable to use all of the functions on our website.

Analysis tools
Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Article 6(1)(1)(f) of the GDPR. With the tracking measures used, we seek to provide a website design that meets user needs and is continuously optimized.

We also use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing what we offer you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Use of Google Analytics with anonymization function
The group of companies website uses Google Analytics, a web analysis service from Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie regarding your use of our website is usually transferred to a Google server in the USA where it is stored. However, due to IP anonymization being activated on our websites, your IP address will be shortened by Google beforehand within the Member States of the European Union or in other Contracting States party to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transferred to a Google server in the US and shortened there. Google will use this information on our behalf to analyse your use of our website, compiling reports on website activity and providing other services relating to website and Internet usage. The IP address sent by your browser through Google Analytics will not be linked to any other data held by Google. You may reject the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent. You can also prevent the data generated by the cookies about your use of the website (including your IP address) from being collected by Google and the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout

You can find more information on this at tools.google.com/dlpage/gaoptout (general information on Google Analytics and data privacy). We would like to point out that Google Analytics was extended on this website by the code “gat.anonymizeIp();” in order to guarantee anonymized collection of IP addresses (IP masking).

Data subject rights
You have the right:

pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, category of personal data, categories of recipients to whom your data has been or is disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, existence of a right to appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information on its details;
pursuant to Article 16 of the GDPR, to immediately request the rectification of incorrect or incomplete personal data stored by us;
pursuant to Article 17 of the GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for complying with a legal obligation, for reasons of public interest or for establishing, exercising or defending legal claims;
pursuant to Article 18 of the GDPR, to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for asserting, exercising or defending legal claims or you have lodged an objection to the processing pursuant to Article 21 of the GDPR;
pursuant to Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
pursuant to Article 7(3) of the GDPR, to revoke your consent once given to us at any time. This has the consequence that we will no longer continue the data processing that was based on this consent in future;
pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.

Legal basis for processing

Article 6(I)(a) of the GDPR serves our company as the legal basis for the processing operations we employ when we obtain consent for a specific processing purpose. If processing personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Article 6(I)(b) of the GDPR. The same applies to processing operations that are necessary for implementing pre-contractual measures, for example in cases of enquiries about our services. If our company is subject to a legal obligation that requires the processing of personal data, such as for fulfilling tax obligations, the processing is based on Article 6(I)(c) of the GDPR. In rare cases, processing of personal data may be necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our company premises and their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. In such a case, the processing would be based on Article 6(I)(d) of the GDPR. Ultimately, processing operations could be based on Article 6(I)(f) of the GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal bases if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47(2) of the GDPR).

Legitimate interests in processing pursued by the controller or a third party
If the processing of personal data is based on Article 6(I)(f) of the GDPR, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our customers, tenants, users and other contacts.

Legal or contractual provisions for providing personal data; necessity for concluding the contract; obligation of the data subject to provide personal data; possible consequences of non-provision

We would like to inform you that providing personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether providing personal data is required by law or contract, or is necessary for concluding the contract, whether there is an obligation to provide personal data and what the consequences would be if the personal data were not provided.

Right to object
You have the right to confirm, rectify, update, supplement, anonymize, block, restrict or erase your collected personal data at any time. You can object to us using your personal data at any time.
All you need to do is send us an email (see above).

Data security
We use the popular SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by a closed key or padlock symbol in the lower status bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Amendments to the privacy policy
We reserve the right to amend our privacy policy if necessary. The updated privacy policy is always published on our website. Please check the relevant page regularly. Subject to applicable law, all changes will take effect as soon as the updated privacy policy is published. If we have already collected data about you and/or are subject to a legal obligation to provide information, we will also inform you of any significant changes to our privacy policy and ask for your consent.

Last revised: August 2024