The following information provides an overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

The person responsible for this website is

Reclay Systems GmbH
Austraße 34
35745 Herborn

+49 (0) 2772 5759-0
info.de(at)reclay-group.com

Managing Director:
Jens Nießmann, Antti Tiilikainen

Contact details of the data protection officer (Art. 13 para. 1 lit. b) GDPR)

We have appointed a data protection officer. You can reach him at
data.de(at)raan-group.com

How do we collect your data and what do we use it for?

Your data is collected when you provide it to us, e.g. when you send us an e-mail or commission our services.

All data transmitted to us, including all resulting personal data (e.g. name, e-mail address, etc.), will be stored and processed by us for the purpose of processing your enquiry or providing our services. If you do not provide us with this data, we will not be able to process your enquiry or provide our services.

This data is processed on the basis of Art. 6 para. 1 lit. b or c GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested. Consent can be revoked at any time.

Further data is automatically collected by our IT systems when you visit the website. This is primarily technical data such as the Internet browser used, operating system or time of the page view, etc. This data is required to ensure that the website is displayed correctly. If we cannot collect this data, we will not be able to display the website. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR.

Data processing within the Raan Group

Reclay Systems GmbH is part of the Raan Group. The companies within the group work closely together in terms of internal organisation and sales.

Specialised companies or divisions within our Group perform certain data processing tasks centrally for the companies affiliated with the Group. In addition, certain data processing operations are carried out in centralised IT systems. If a contract exists between you or your company and one or more companies in our group, your data may be processed centrally by a company in the group or jointly by the companies, for example for the central administration of customer data, for telephone customer service, for contract processing, for billing purposes, as well as for collection and disbursement or for joint mail processing.

To guarantee your rights and in compliance with the provisions of the EU General Data Protection Regulation (GDPR), we have concluded an agreement that sets out rules on the processing of your personal data. As joint controllers (in accordance with Art. 26 GDPR), we are jointly responsible for the processing of your data.

You can contact each company involved individually with regard to the processing of your data and assert your rights.

Further information on data protection and the handling of personal data can be found in the data protection notices of the respective affiliated companies.

Storage duration

Your data will be stored until the purpose for data storage no longer applies, you revoke your consent to storage or you request us to delete it. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

What rights do you have?

On the basis of Articles 15 – 20 GDPR, you have the following rights with regard to the processing of personal data:

• You have the right to receive information free of charge at any time about the origin, recipient and purpose of the data stored about you (Art. 15 GDPR)
• If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
• If the legal requirements are met, you can request the erasure or restriction of processing and object to processing (Art. 17, 18 and 21 GDPR).
• If you have provided the data and the data processing is carried out using an automated procedure, you have the right to data portability (Section 20 GDPR).
• You also have the right to lodge a complaint with a supervisory authority.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection information. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).

Hosting

This website is hosted by an external service provider (hoster). The commissioning of this service is called order processing. The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data. To this end, we have concluded the legally required contract with them for order processing.

We use the following hoster:
Net Cologne Gesellschaft für Telekommunikation mbH.

Cookies and external services

We use cookies and external services on our websites. Cookies are files that are stored on your end device. They are generally required to ensure smooth electronic communication. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be restricted.

Borlabs Cookie

In addition to the technically necessary cookies, we also use cookies and external services to optimise our website and our offers.

To do this, we need your consent, which we obtain and store with the help of Borlabs technology in accordance with the legal requirements. When you access our website, a cookie from the provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, is therefore stored in your browser, in which the consent you have given or the revocation of consent is stored.

Once consent has been given, it can be revoked at any time. The data collected will be stored until you ask us to delete it, or you delete the Borlabs cookie yourself, or the purpose for data processing no longer applies. You can make changes at any time at the bottom left by clicking on the sign.

Details on the data processing of Borlabs Cookie can be found at: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

External services and analysis tools

When you visit our website, your user behaviour may be statistically evaluated. This is done using analysis programmes.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.

We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the recorded data records and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

IP anonymisation

Google Analytics IP anonymisation is activated. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

Google Tag Manager, Google Ads

We use various Google services. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The services are used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Google is certified in accordance with the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google AdSense

This website uses Google AdSense, a service for integrating adverts. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Adsense, we can display targeted adverts from third-party companies on our website. The content of the advertisements is based on your interests, which Google determines based on your previous user behaviour. Furthermore, contextual information such as your location, the content of the website you have visited or the Google search terms you have entered are also taken into account when selecting the appropriate adverts. Google AdSense uses cookies, web beacons (invisible graphics) and comparable recognition technologies. This allows information such as visitor traffic on these pages to be analysed.

The information collected by Google Adsense about the use of this website (including your IP address) and the delivery of advertising formats is transferred to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified according to

The company certified by the DPF undertakes to comply with these data protection standards.

Further information on this can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the standardised display of fonts. When you access a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. This informs Google that this website has been accessed via your IP address. The use of Google Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. If your browser does not support Google Fonts, a standard font will be used by your computer. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780. Google reCAPTCHA 23 / 25 We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Social Media

We maintain publicly accessible profiles in social networks in order to communicate with customers, interested parties and users active there and to provide information about our services. This is done in our legitimate interest.

Social networks can generally analyse your user behaviour comprehensively. Visiting our social media presences can trigger numerous data protection-relevant processing operations, such as the linking of data for the display of personalised advertising or similar. For more detailed information on this, please refer to the terms of use and data protection notices of the respective portals.

If you visit one of our social media sites, we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal. Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the company policy of the respective provider.

LinkedIn

We have a profile with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards.

Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Details on the handling of personal data at LinkedIn can be found in the following links:
https://www.linkedin.com/legal/l/dpa
https://www.linkedin.com/legal/privacy-policy

Youtube

YouTube with extended data protection

This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of these websites on which YouTube is integrated, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in extended data protection mode. According to YouTube, videos that are played in extended data protection mode are not used to personalise browsing on YouTube. Ads that are played in extended data protection mode are also not personalised. No cookies are set in extended data protection mode. Instead, however, so-called local storage elements are stored in the user’s browser, which contain personal data similar to cookies and can be used to recognise the user. Details on the extended data protection mode can be found here: https://support.google.com/youtube/answer/171780. After activating a YouTube video, further data processing operations may be triggered over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de. The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries. We have concluded an agreement with Facebook on joint processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

You can customise your advertising settings yourself in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

https://www.facebook.com/legal/EU_data_transfer_addendum

Details can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

For details, please refer to Instagram’s privacy policy
https://help.instagram.com/519522125107875

Newsletter

We offer a newsletter subscription service on this website. To do this, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use the newsletter service provider Brevo to process the newsletter.

The provider of Brevo is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The data you enter for the purpose of subscribing to the newsletter will be stored on the servers of Sendinblue GmbH in Germany.

We have concluded an order processing contract with the service provider.

We use Brevo, among other things, to organise and analyse the sending of newsletters.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Storage duration

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

You can find more details in Brevo’s privacy policy at: https://www.brevo.com/de/datenschutz-uebersicht/ and https://www.brevo.com/de/legal/privacypolicy/.

We do not carry out profiling or automated decision-making.

Status of the information: July 2024