Data Protection Statement
We appreciate your interest in our website and our company. We cannot control the contents of external links despite careful control and thus assume no liability. Protecting your personal data when collecting, processing and use during your visit to our website is very important to us. Your data is protected under the law. Below you will find information on what data is collected during your visit to the home page and how it is used.
A. Responsible authority for data processing
Riese & Müller GmbH
64331 Weiterstadt (Germany)
Telephone: 0049 6151/36686-0
Fax: 0049 6151/36686-489
Email: [email protected]
are responsible for the processing of personal data within the scope of our web presence, and in accordance with the requirements of the General Data Protection Regulation (GDPR).
Through this data protection statement, we would like to inform you of the type, scope and purposes of the processing of your personal data (hereinafter referred to simply as “data”).
B. Data use, purposes of processing and legal basis
We process data when people get in contact, use our services (e.g. register for our newsletter), as well as visit our website. Personal data is only used and processed by us for the purpose for which you supplied it, either by your consent or in order to fulfil our contractual obligations. In addition, data processing is carried out in order to safeguard our legitimate interests.
The processing of your data may also take place by other departments within Riese & Müller GmbH. In some cases, we also make use of external service providers for processing. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
The specific purposes of processing, the subject’s data, as well as the legal basis for data processing are laid out in the following list:
a) Purpose of website visit
We record your visits to our website. In doing this, the following data is processed: Name of the website visited in each case, date and time of the visit, the volume of data transferred, browser type as well as version, the operating system you use, the referrer URL (of the website you visited directly before), your IP address and the requesting provider. We collect this data on the basis of our legitimate interests in accordance with Article 6(1) f) GDPR.
b) Contacting us
If you get in contact with us using one of our contact forms or via email, your details will be used exclusively for the purpose of processing and resolving your query. The subject’s data are: Your email address, surname, first name, subject, message as well as other optional data you have entered. This data is processed by us on the basis of your consent in accordance with Article 6(1) a) GDPR.
c) Registering a bike
If you register a bike with us after purchase, we will store your data for the purpose of providing the warranty service. From 1 September 2018 this data will be linked to an account to which you will assign a password yourself. This will allow you to view, modify and delete your data at a later date. Data affected are: your email address, full name, subject, message and other data given optionally. If registering a warranty, your address, dealer, frame number, serial number, purchase date and purchase price will also be stored. We will process this data on the basis of your consent in accordance with Article 6(1)(a) GDPR.
d) Press mailing list
In order to receive press releases by email, you can register for our press mailing list. When registering for the press mailing list we use the data you have provided. The subject’s data are: Your email address, surname, first name, editor, as well as other optional data you have entered.
Inclusion in the press mailing list occurs exclusively on the basis of your prior consent in accordance with Article 6(1) a) GDPR.
In order to receive advertising information by email, e.g. relating to our products or special offers, you can subscribe to our newsletter. When registering for the newsletter we use the data you have provided. The subject’s data are: Your email address, surname, first name as well as other optional data you have entered.
Sharing your data with third parties and third countries
The newsletter is sent using the MailChimp service provided by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, headquartered in the USA. Your email address, surname and first name, as well as other optional data you have provided are stored on MailChimp servers in the USA. MailChimp uses this information to send and evaluate the newsletters on our behalf. Furthermore, MailChimp may, according to its own statements, use this data to optimise or improve its own services, e.g. for the technical optimisation of the mailing and the presentation of the newsletter or to determine from which countries the recipients come. MailChimp does not, however, use your data to contact our customers itself, nor does it pass the data on to third parties.
You can find further information on data protection at: https://mailchimp.com/legal/privacy/. In order to maintain the European level of data protection “The Rocket Science Group LLC d/b/a MailChimp” has been certified under the privacy shield agreement: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
Sending of the newsletter occurs exclusively on the basis of your prior consent in accordance with Article 6(1) a) GDPR. If you are under 16 years of age, the registration for the newsletter requires the consent of your legal guardian.
Registration for our newsletter is carried out according to the so-called double opt-in procedure. In order to prevent fraudulent activity, we send you an email after registration, asking you to confirm your registration. In order to prove that the registration process has occurred in accordance with legal requirements, the newsletter registration will be recorded. This also includes storing the time of the registration and confirmation as well as the IP address. Changes are recorded by the newsletter service provider employed by us.
You can withdraw consent to receive the newsletter by email at any time. At the end of every newsletter there is also a link for withdrawing consent. If you have registered purely for our newsletter and have then cancelled this registration, your personal data will be erased.
f) Dealer search
We have, however, implemented a solution which means your consent is required before data is transferred. You can provide this at the bottom of the page or in the dealer search itself. This means that the above-mentioned data is only sent to the Google server and relevant data (including map displays) is loaded from there after your consent has been obtained. Data is only transferred in this context if you have also chosen to use the dealer search function. If not, you can use the page search to find a dealer by another means. The results are displayed on the basis of your prior consent in accordance with Article 6(1) a) GDPR.
You can find further information on how Google uses data and may share it with third parties in the Google data protection statement, under the following link: https://www.google.com/policies/privacy/.
g) Processing job applications
Processing your data is necessary for the performance of pre-contractual activities in accordance with Art. 6(1)(b) GDPR.
Personal data that you make available to us as part of an application will only be processed by us within the scope of the associated application process. This data will only be retained until the application process has been completed. This data will be deleted if an application is unsuccessful; if an application is successful, the data is transferred to your personnel file.
Please note that the above provisions notwithstanding, application documents will be kept for three months, unless a longer retention period is necessary to defend legal claims, or you expressly consent to the retention of these documents for a longer period.
Your online application
After entry and transmission of your data, it is received by the server operated by our external service provider directly via an encrypted connection. All data is encrypted using the TLS method. TLS encryption is also used if you log in after your registration using the user data provided to you.
Your data will be hosted at a provider as part of a contract processing arrangement in accordance with Art. 28(3) General Data Protection Regulation (GDPR). Our employees, as well as all external parties, are bound by their respective contractual obligations and data protection rules to treat your personal data confidentially.
Both Riese & Müller and the provider employ technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. These measures are continuously improved in line with the latest technological advancements.
h) Website analytics
In order to analyse user behaviour on our website, optimise our online services and also to personalise content and ads, we use specific cookies that store your IP address. Data processing is undertaken in this context on the basis of our legitimate interests in accordance with Article 6(1) f) GDPR. Please refer also here to section C. c) on Google Analytics.
Sharing your data with third parties and third countries
Within the scope of our website analytics, we use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google uses servers for this, which are located in the USA.
The EU Commission certified in an adequacy decision, the EU-US Privacy Shield, that the level of data protection of the above-mentioned countries is identical with that of the EU. The service provider we employ, Google, is certified. You can find information on this here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Please refer here in addition to following section C.
In order to make the visit to our website appealing and to enable usage of certain functions, we use so-called cookies on several pages. Cookies are small text files that are placed on your terminal device. Some of the cookies we use are deleted at the end of your browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies to recognise your browser upon your next visit (persistent cookies).
In concrete terms, we use the following cookies. If a cookie is not deleted by the user, it will be saved until it is used for its intended purpose of (see table). It will then be automatically deleted within (see table).
|Name of the cookie||Expiration date||Description|
|csrftoken||364 days||Used to ensure the secure transmission of our forms.|
|lang||364 days||This cookie stores your language settings.|
|r-m.accepted_market||364 days||If a user actively switches between the country / language settings (using a language-chooser), this will be saved in the form of a language-country-acronym (e.g. en-dk).|
|rm.city||364 days||This cookie is designed to save the (presumed) city in which we presume the user is located (determined by Google Maps, where enabled).|
|rm.city_next1-3||364 days||Provided that you have activated the transfer to us of location data, this cookie stores the three towns with the nearest dealers. The cookie helps in providing you with suggestions for dealers nearby in the dialogue module.|
|rm.maps_api_accepted||364 days||This cookie stores information on whether you have agreed to the use of Google Maps for the dealer search.|
|rm.latlong||364 days||This cookie stores your last location transferred. However, your current geo-location is not considered in this. For example, if a dealer is searched for in another town, this town is then stored as the location.|
|r-m.precision-layer||364 days||This cookie stores the last bike viewed and helps to display this bike on the start page for your next visit.|
|_ga||2 years||Used to distinguish users.|
|_gid||24 hours||Used to distinguish users.|
|_gat||1 minute||Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_.|
|_gat_globalTracker||31.12.2099||Used to throttle request rate for the global Google Analytics property.|
|ga-disable-UA-(tracking-ID)||31.12.2099||Deactivates the Google tracking function for the relevant tracking IDs (see variable [tracking-ID]).|
You can delete all cookies stored on your computer and change the settings on most browsers so that cookies cannot be stored. You can find out how to do this here for example: www.allaboutcookies.org
If you do this, you may have to adjust some of the settings manually every time you visit a page and accept some impairment of functionality.
In addition, further so-called third-party cookies may be installed when visiting this website, for instance for using Google Maps or Google Analytics. We have no control over the installation of the cookies, their functions and contents.
Please also refer to the following section C b) on the use of Google advertising tools:
b) Google advertising tools
This website uses web analysis services provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). These service are outlined in the following. We share data with Google for these purposes. Please refer to the guidance on Google data usage in the Google Partner Network at:
c) Google Analytics
Google Analytics uses so-called “cookies”, which are text files placed on your computer to enable your use of the website to be analysed. The information generated by the cookie about your use of this website (including your IP address) will be transferred to a Google server in the USA and stored there. Google will use this information to analyse your use of the website, compile reports on website activity for the website operators and provide other services related to use of the website and the internet.
Google will also pass this information on to third parties if required to do so by law or where third parties process these data on behalf of Google. Google will not associate your IP address with other Google data under any circumstances. You can prevent the installation of cookies via the corresponding setting in your browser software; we would also point out that in this case you may not be able to completely utilise all functions of the website. By using this website, you are stating your agreement to the processing of the data obtained about you by Google in the manner described above and for the aforementioned purpose.
You can object to the collection of data with future effect at any time by using the deactivation browser add-on from Google Analytics, found at https://tools.google.com/dlpage/gaoptout?hl=en.
You can also stop Google Analytics from collecting data by clicking this link. An opt-out cookie is installed which prevents the collection of your information when you visit this website in the future.
We would like to point out that this website uses Google Analytics with the “anonymizeIp()” extension. This means that IP address are only stored in an anonymous form, making it impossible to draw a direct connection between an identifiable person and the stored data.
By rejecting the tracking function, a new cookie will be installed, which will however save no personal data on you and all other cookies will remain blocked unless you have given your consent to their use.
D. Your rights as a data subject
You may request details, free of charge, about all of the personal data that we have stored about you.
2. Rectification, erasure, restriction of processing (blocking), objection
Should you no longer consent to the storage of your data or should the data be incorrect, we will arrange for your data to be erased or blocked accordingly, or for the necessary corrections to be made (provided this is permissible under current law). The same applies should you only consent to us processing data in a restricted manner in future.
3. Data transferability
We will store your data in a transferable form, so that the data can also be transferred to another company at your request.
4. Exercising your rights as a data subject
If you have any questions about the processing of your personal data, if you would like information or to rectify, block, object to the use of, or erase data, or request for data to be transferred to another company, please contact:
Riese & Müller GmbH
64331 Weiterstadt (Germany)
Telephone: 0049 6151/36686-0
Fax: 0049 6151/36686-489
Email: [email protected]
5. Our data protection officer
The data protection officer for our company is:
Mr Moritz Görmann
In den Leppsteinswiesen 14
64380 Roßdorf (Germany)
Telephone: 0049 6154-57605111
Email: [email protected]
6. Right of appeal
In addition, a right to appeal to the responsible supervisory authority exists
The Data Protection officer for Hessen [Hesse]
65189 Wiesbaden (Germany)
Telephone: 0049 611/1408-0
Fax: 0049 611/1408-900
Email: [email protected]
7. Please note
Data from which we are unable to identify the data subject, e.g. where this has been anonymised for the purposes of analysis, is not covered by the above-mentioned rights. The right to information, erasure, blocking, correction or transfer to another company of this data is only possible if you make additional information available to us which allows us to identify the data.
E. Withdrawing consent with future effect
You can withdraw your consent at any time with future effect. Data used for the purposes of accounting and bookkeeping is not affected by termination/withdrawal of consent or erasure. Your withdrawal of consent shall not affect the legality of the prior processing.
F. Storage period
Personal data which has been shared with us via our website is only stored until we have fulfilled the purpose for which it was entrusted to us. Where retention periods relating to commercial and tax law must be observed, the period for storing specific data may be up to 10 years.
We protect the transfer of your data with a secure (AES 256 Bit) TLS connection. TLS (Transport Layer Security) is a security technology that ensures your personal data is transferred over the internet securely, without being accessible by external parties.
Document status: 24.05.2018 | 3.0
Privacy Notice for our Facebook page
As you may know, the Court of Justice of the European Union (“ECJ”) recently ruled that Facebook and operators of Facebook pages are jointly responsible for data processing for purposes of data protection law (ECJ, Judgment of 05/06/2018); for more information, see http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398).
To the extent we are able to do so, the purpose of this Privacy Notice is to inform you about how personal data is processed when you use our Facebook page https://www.facebook.com/rieseundmueller/ “(“Fan Page”).
A. Controller, Data Protection Officer
Joint controllers within the meaning the General Data Protection Regulation (“GDPR”) responsible for data processing related to the operation of the Fan Page:
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour Dublin 2
Riese & Müller GmbH
Phone: 0049 6151/36686-0
Fax: 0049 6151/36686-489
E-mail: [email protected]
(“Riese & Müller GmbH” or “we”)
B. Contacting the data protection officers
You can contact the Facebook data protection officer here: https://www.facebook.com/help/contact/540977946302970
C. Data processing related to the operation of the Fan Page
We use the “Facebook Insights” function provided by Facebook as the operator of the Fan Page. Facebook Insights provides us with statistical data from Facebook (e.g. total number of page views, “Like” information, page activity, etc.). This statistical data is only transmitted to us in anonymous form, i.e. we cannot associate this data with any particular visitor to our site, nor do we have access to the data on which the statistics are based.
Facebook stores cookies on devices you use to view the Fan Page so that Facebook is able to provide us with this information. These cookies are small text files that contain a unique user code. The cookies are active for a period of two years, unless you delete them at an earlier time. To the best of our knowledge, Facebook uses data collected by the cookies to provide you with advertising and to enable Facebook-affiliated companies and other advertising partners of Facebook to provide advertising as well.
D. Processing purpose
Facebook also uses data collected by Facebook for market research and advertising purposes, in particular to analyse your behaviour, to create user profiles and to provide personalised advertising (including on behalf of third companies).
The following link allows you to make use of an “opt-out"” option and influence which advertisements are displayed to you in future as a Facebook user: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com. You can apply additional settings here: https://www.facebook.com/help/contact/367438723733209
E. Sharing data
We do not share your data with third parties. We cannot rule out the possibility that Facebook may transmit personal data to Facebook Inc. based in the United States, or other companies outside the EU, where it may be subject to further processing, and the associated risks for data subjects. Facebook Inc. is certified under the so-called “Privacy Shield” and is therefore obliged to comply with European data protection regulations. You may find information about Facebook’s Privacy Shield status here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
F. Legal basis
We maintain this Fan Page to promote our products and to communicate with you. Personal data is processed on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR in effective communication and interaction with users as well as the ideal presentation of our products and services.
G. Your rights
From a practical standpoint, the most effective means of requesting information or asserting any other data subject rights is to communicate directly with Facebook as the provider of the platform. This is also bolstered by the agreement we concluded with Facebook and the fact that only Facebook has direct access to the information and the database from which the statistics transmitted to us are compiled. You may contact us at any time should our support be necessary.
You have the following rights:
(a) Right of access
Upon request, you have the right to obtain from us at any time information about personal data we have processed that concerns you within the scope of Art. 15 GDPR. You can submit such a request by post or e-mail to the address given below.
(b) Right of rectification
You have the right to ask us to rectify your personal data without undue delay if it is inaccurate. You may submit such a request using the contact details provided below.
(c) Right to erasure
Subject to the requirements set out in Art. 17 GDPR, you have the right to request that we erase your personal data. In particular, these conditions provide for a right of erasure if personal data is no longer necessary for the purposes for which it was collected or otherwise processed, or in cases of unlawful processing, the submission of an objection or if the data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject. To exercise your right to erasure, please use the contact details provided below.
(d) Right to restriction of processing
Pursuant to Art. 18 GDPR, you have the right to request us to restrict processing if one of the following conditions is met: This right applies, in particular, if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify the accuracy, and in the event that the user requests a restriction of processing instead of erasure in the case of an existing right to erasure; or in the event that the data is no longer required for the purposes pursued by us, but the user requires it for the establishment, exercise or defence of legal claims, and if the user has objected to processing, pending the verification whether our legitimate grounds override those of the user. To exercise your right to restriction of processing, please use the contact details provided below.
(e) Right to data portability
Pursuant to Art. 20 GDPR, you have the right to obtain your personal data that you have provided to us in a structured, commonly used and machine-readable format. To exercise your right to data portability, please use the contact details provided below.
(f) Right to object
Pursuant to Art. 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out, among other things, on the basis of Art. 6(1)(e) or (f) GDPR. We will cease the processing of your personal data, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of establishing, exercising or defending legal claims.
(g) Right of withdrawal (for any consent you have given)
You have the right to withdraw your consent pursuant to Art. 7(3) GDPR with future effect. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
(h) Right to lodge a complaint
You also have the right to lodge a complaint with the relevant data protection authorities.
Document status: 15.11.2018 | 1.0
Privacy Notice for Instagram and YouTube
We maintain an online presence on the Instagram (https://www.instagram.com/riesemuller/?hl=en) and YouTube (https://www.youtube.com/channel/UC7IPIhyMOUzKIDrRv1XpMJA) platforms.
A. Our own processing of personal data from these online platforms (user comments, news, page statistics) is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR, in order to inform you about our goods and service, to make contributions more user-friendly, to determine the correct time for publication and to communicate with customers, potential customers and users who are active on these platforms. We have no influence on any additional processing by the respective providers.
B. Furthermore, user data is generally processed by the provider for market research and advertising purposes. Thus, for example, user profiles can be created from user behaviour and the associated user interests. The user profiles can, in turn, be used, for example, to display advertisements that presumably correspond to the interests of the users both within and outside of the platforms. To this end, cookies are usually stored on the user’s computer that contain the user’s usage behaviour and interests. Furthermore, data can also be stored in user profiles separate from the devices used by the respective user (especially if the users are members of the respective platforms and are logged in).
C. When accessing the respective online platform, the terms and conditions and data processing guidelines of the respective provider, over which we have no control, apply. Data may also be processed outside the European Union.
D. For a detailed description of the respective processing and the opportunities to object (opt-out), please refer to the information made available by the respective providers indicated below.
E. Please note that requests for information and the assertion of user rights may be directed most effectively to the providers. Only the providers have access to user data and can directly take appropriate measures and provide information. You may nevertheless contact us should you need further assistance.
F. The Instagram/Facebook Privacy Officer can be reached via the contact form at https://www.facebook.com/help/contact/540977946302970.
G. You can reach YouTube’s data protection officer via the contact form https://support.google.com/policies/troubleshooter/7575787?visit_id=636776117994321718-3018523532&hl=en&rd=2.
Document status: 19.11.2018 | 1.0