Privacy Policy

Dear Customer, protecting and safeguarding your personal data is our top priority. Please read the following information:

1. General information

Scope and changes

Scope

This Privacy Policy covers the following processing activities of RCS AUDIO-SYSTEMS GmbH:

The websites at:

https://www.rcs-audio.com/ & https://shop.rcs-audio.com/

  • Contacting us via our contact form
  • Contacting us by email, telephone or fax
  • Registration and orders through our online shop
  • Newsletter subscription
  • Registration for training courses
  • Handling your data in connection with complaints
  • Handling customer data
  • Handling supplier data
  • Presence on social networks (social media)
  • Handling applicant data

In this Privacy Policy, we inform you about

  • data processing for which we are the sole controller,
  • data processing for which we are joint controllers with others, and
  • the third-party providers we use that process data as independent controllers.

The privacy notices of other providers apply to their data processing, for example where we link to their websites.

Changes to the Privacy Policy

We amend or update this Privacy Policy as necessary. The current version applies.

Contacts and controllers

Name and contact details of the controller

RCS AUDIO-SYSTEMS GmbH
Gewerbepark Markfeld 5
D-83043 Bad Aibling

Tel.: +49 8061 – 3501-0
Fax: +49 8061 – 3501-29 01

Email: info@rcs-audio.com
Managing Directors: Tino Elsner, Stefan Eisenhut


Name and contact details of the Data Protection Officer

Monika Kefer-Spieleder
Kefer IT-Beratung
Blumenstr. 9A
83569 Vogtareuth

Email: info@kefer-it.de
Website: https://www.kefer-it.de


Other controllers

Other organisations are also responsible for processing your personal data. In these cases, joint controllership exists pursuant to Article 26 GDPR. The joint controllers have agreed which controller fulfils which obligations under the GDPR. Details of the other joint controllers and the essential provisions of these agreements can be found under the relevant processing activity.

Questions about data protection

If you have questions about how your personal data is handled or wish to exercise your rights as a data subject, you can contact our Data Protection Officer at any time using the contact details above.

2. How we handle your data

Provision of the website and creation of log files

a) Description and scope of data processing

Whenever our website is accessed, our system automatically collects data and information from the computer system of the device accessing it. The data is also stored in our system's log files. The following data is collected:

  • Website visited
  • Date and time of access
  • Time zone difference from Greenwich Mean Time (GMT)
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Language and version of the browser software
  • Operating system used and its interface
  • IP address used
  • Access status/HTTP status code

Third-party provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Telephone: +49 721 – 170 5522
Email: info@ionos.de

b) Legal basis and purpose of data processing

The processing described is technically necessary to deliver requested website content correctly and inevitably occurs when using the internet.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our legitimate interests are analysing website errors and enabling IP addresses to be blocked and, where necessary, legal action to be taken in the event of website misuse, such as DoS attacks.

Temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. The user's IP address must therefore remain stored for the duration of the session.

The data collected is also used for statistical analysis and to improve the website. We reserve the right to review server log files retrospectively if there is specific evidence of unlawful use.

c) Storage period and right to object

The data is deleted after 7 days.

The collection of data to provide the website and its storage in log files are essential for operating the website. Users therefore have no right to object.

3. Consent management with CCM19 (consent banner)

a) Description and scope of data processing

This website uses the consent management service (consent banner) of Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, https://www.papoo.de, to obtain your consent to store certain cookies on your device or use certain technologies and to document this consent in compliance with data protection requirements. This service is referred to below as CCM19.

When you enter our website, your browser connects to CCM19. The tool stores a cookie in your browser to correctly associate consent given or its withdrawal with you.

b) Legal basis and purpose of data processing

We use CCM19 to provide transparency about the cookies we use and to meet the statutory requirements for obtaining consent to the use of cookies.

  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (requesting consent). We have entered into a data processing agreement (DPA) for the use of the above service. This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.
c) Storage period and right to object

The collection of data for the consent banner is essential. Users therefore have no right to object.

You can delete the cookie yourself or ask us to delete it. The cookie is also deleted when the purpose of storing the data no longer applies.

Mandatory statutory retention requirements remain unaffected.

4. Cookies

Cookies are text files stored in the internet browser or by the internet browser on the user's device.

a) Description and scope of data processing

We use various cookies, including session cookies. Session cookies store information about the current session. They are used to associate a user's settings on a page with that user's session. If you visit the homepage in two windows of a browser, the session cookie identifies both visits as belonging to your session.

b) Legal basis and purpose of data processing

Technically necessary cookies are essential for displaying the website.

The legal basis for temporary storage of the data is:

  • Article 6(1)(f) GDPR: legitimate interest, in all other cases
c) Storage period and right to object
  • Session cookies are automatically deleted when you finish visiting the website.

Users have no right to object; these cookies can be disabled through the settings of the relevant browser.

5. Other cookies, analytics tools and advertising

5.1. Google Analytics

a) Description and scope of data processing

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users habitually resident in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the controller responsible for Google services. Google Ireland Limited is therefore the company affiliated with Google LLC whose services are integrated and which must also comply with the GDPR.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. The following data is processed:

  • Access statistics
  • Location data relating to access
  • Device data
  • Duration and time of access
  • Navigation behaviour
  • Click behaviour
  • IP addresses

IP anonymisation

IP anonymisation is enabled on this website. Google truncates your IP address within the EU or EEA before transferring it to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. Google uses this data on behalf of the operator to evaluate website use and compile reports on website activity. The IP address transmitted is not combined with other Google data.

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent
  • Article 6(1)(f) GDPR: legitimate interest, in all other cases. The website operator has a legitimate interest in analysing user and visitor behaviour to optimise both its website and its advertising.
c) Storage period and right to object

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.
  • The cookies remain stored for 14 months.

5.2. Google Tag Manager

a) Description and scope of data processing

This website uses Google Tag Manager from Google. Google is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users habitually resident in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the controller responsible for Google services. Google Ireland Limited is therefore the company affiliated with Google LLC whose services are integrated and which must also comply with the GDPR.

Google Tag Manager is a solution that allows us to manage tags through an interface. The tool triggers other tags, which in turn collect data as described in this Privacy Policy. In doing so, Google Tag Manager sends the IP address to Google's servers. Transfer to a third country is also possible. This is controlled by an internal setting and is not visible in this page's source code. Further information is available here:

https://marketingplatform.google.com/intl/de/about/tag-manager/
https://policies.google.com/privacy?hl=de&gl=de

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent
  • Article 6(1)(f) GDPR: legitimate interest, in all other cases

Purpose: organising tracking tools

c) Storage period and right to object

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.

5.3. Google Ads

a) Description and scope of data processing

We use Google Ads (formerly Google AdWords) as an online marketing measure to advertise our products and services. This is an online advertising programme from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users habitually resident in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the controller responsible for Google services. Google Ireland Limited is therefore the company affiliated with Google LLC whose services are integrated and which must also comply with the GDPR.

We use Google Ads to draw attention to our offerings on other websites as well. The aim is to ensure that our advertising campaigns reach only people interested in our offerings. The conversion tracking tool shows us which keywords (e.g. search terms entered into Google), advertisements, ad groups and campaigns lead to the desired customer actions. Targeted advertisements can be displayed based on available user data (e.g. location data and interests). We can analyse how many clicks our advertisements receive, whether services are used or whether users subsequently take other actions on our website.

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent
  • Article 6(1)(f) GDPR: legitimate interest, in all other cases

Measuring the effectiveness of advertisements and targeted re-engagement.

c) Storage period and right to object

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.

5.4. Google Ads Remarketing

a) Description and scope of data processing

We use the remarketing function of Google Ads on our website to reach previous visitors again with personalised advertising on the Google Display Network and in Google Search. A Google pixel is integrated into our website for this purpose. When you visit, Google sets a cookie or records a unique ID in the browser on your device. The following data is processed and transmitted to Google:

  • The user's IP address
  • Device and browser characteristics (e.g. screen resolution, operating system)
  • Specific interaction data (e.g. which subpages or products were viewed)
  • Online identifiers (such as cookie IDs or advertising IDs)

Google links this visit data to your Google account only if you have given the relevant permission. As processing takes place globally, data may also be transferred to Google LLC in the USA.

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent
  • Article 6(1)(f) GDPR: legitimate interest, in all other cases. Evaluating user behaviour for interest-based advertising avoids irrelevant advertisements and optimises the marketing budget.
c) Storage period and right to object

Storage period: remarketing cookies are automatically deleted from your device after a maximum of 540 days (18 months).

Withdrawal: you can withdraw your consent at any time with effect for the future through our cookie consent banner. Alternatively, you can block cookies in your browser settings or disable personalised advertising directly in Google's advertising settings.

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.

5.5. Google AdSense

a) Description and scope of data processing

We display advertisements on our website through the Google AdSense service. This is an online advertising programme from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA).

When you visit our website, Google AdSense stores cookies and tracking pixels on your device to analyse user behaviour and tailor advertisements to your interests. The following data is transmitted to Google and processed:

  • Device and browser data: IP address, browser type, operating system, device identifiers and approximate geographical location.
  • Usage data: pages viewed, time spent on pages, clicks on advertisements and information about previously visited websites (referrer URLs).
  • Linking to Google accounts: if you are logged into your personal Google account at the same time, Google can link this data directly to your profile.

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent. Google AdSense is used to market our advertising space through personalised advertisements and to measure their success and manage billing.
c) Storage period and right to object

Storage period: the AdSense cookies set by Google have varying lifetimes (often between a few days and up to 24 months) and remain on your device until they expire or you delete them manually. Log and analytics data collected by Google is processed in accordance with Google's internal policies and deleted once it is no longer needed to provide the service or for statistical analysis.

Right to object and options for removal: as processing is based on your consent, you can withdraw it at any time with effect for the future:

  • Consent banner: reopen the cookie settings and deselect Google AdSense.
  • Google account: disable personalised advertisements in Google's advertising settings.
  • Browser: block third-party cookies in your browser settings or delete them manually.

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.

5.6. Embedded YouTube videos

Videos from the YouTube platform are embedded on our website to display multimedia content directly to you. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

a) Description and scope of data processing

YouTube collects the following data about you:

  • IP address
  • Device information
  • Subpages visited
  • Google account details, where applicable, if you are logged in

When a video is played, YouTube stores cookies (e.g. VISITOR_INFO1_LIVE, YSC) on your device to measure bandwidth, assign user IDs and compile viewing statistics.

We use privacy-enhanced mode. Data is transmitted and cookies are set only when you actively start the video.

We have no influence over Google's collection or subsequent processing of data.

b) Legal basis and purpose of data processing
  • Section 25(1) TDDDG (cookie consent)
  • Article 6(1), first sentence, point (a) GDPR: consent. Purpose: presenting our website content attractively and enabling the provider to analyse video use.
c) Storage period and right to object

We do not store any data. Cookies set by YouTube have different lifetimes (session cookies are deleted when the browser is closed, while others remain active for up to several months).

Objection: you can withdraw your consent at any time with effect for the future through our cookie settings or delete YouTube cookies directly in your browser.

You can prevent participation in this tracking process in various ways:

  • by configuring your browser software accordingly; in particular, blocking third-party cookies prevents you from receiving advertisements from third-party providers; by installing the plugin provided by Google at the following link: https://www.google.com/settings/ads/plugin
  • by permanently disabling it in your Firefox, Edge or Google Chrome browser at the link https://support.google.com/accounts/answer/61416?hl=de&co=GENIE.Platform%3DDesktop
  • by configuring the cookie settings for the website accordingly. Please note that, in this case, you may not be able to use all the features of this website to their full extent. Further information about data protection at Google is available here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list
  • These cookies have no automatic expiry date. You can configure your browser to reject cookies or delete them after a certain period.
  • You can withdraw your consent to cookies on our website at any time. The button for changing the cookie settings is marked with an icon at the bottom left.

5.7. 1&1 WEB Analytics

We use the web analytics tool 1&1 WebAnalytics (also known as IONOS WebAnalytics) on our website. This is a service provided by our hosting provider, 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

a) Description and scope of data processing

Data is collected either through a tracking pixel or directly through server log files. To protect personal data, 1&1 WebAnalytics does not use cookies. Collection is entirely pseudonymised or anonymised, so you cannot be identified from the data.

The following data is collected and analysed:

  • Referrer: the website you previously visited from which you reached our website.
  • Content accessed: the specific webpage or file requested from our shop.
  • Browser type and version: information about the web browser you use.
  • Operating system: the operating system and device type you use.
  • Access time: the exact date and time of access.
  • IP address in anonymised form: the IP address is truncated and anonymised as soon as it is transmitted. It is used solely to determine the approximate geographical location of access (e.g. country/city).
b) Legal basis and purpose of data processing
  • Article 6(1)(f) GDPR: legitimate interest in designing our website to meet users' needs, continuously optimising it and ensuring its technical security and stability. We have entered into a data processing agreement (DPA) with 1&1 IONOS SE. Statistical analysis of visitor behaviour, detection of system errors, defence against cyberattacks, and technical and commercial optimisation of the website.
c) Storage period and right to object

As the IP address is immediately anonymised, the data collected by 1&1 WebAnalytics no longer relates to an identifiable person. IONOS stores it for statistical purposes and automatically deletes it in accordance with statutory and contractual requirements once it is no longer needed to generate analyses.

As 1&1 WebAnalytics does not store cookies on your device and processes data directly on the server in anonymised form, a conventional rejection through a cookie banner is technically neither necessary nor possible.

Further information about data protection at 1&1 IONOS can be found directly in the IONOS Privacy Policy.

6. Contacting us via our contact forms

a) Description and scope of data processing

You can send us an enquiry using the contact form provided on our website. In this case, the user's personal data transmitted when contacting us is stored.

No data is disclosed to third parties in this context.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract, where the enquiry relates to entering into or performing a contract with us.
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest, in all other cases. The data is processed exclusively to respond to your enquiry.
c) Storage period and right to object

The data is deleted immediately after your enquiry has been dealt with, unless statutory retention requirements apply.

For personal data sent by email, this is the case when the relevant conversation with the user has ended. The conversation is deemed to have ended when the circumstances indicate that the matter concerned has been conclusively resolved.

Data subject to a statutory retention requirement is retained for the period prescribed by law (6 years pursuant to Section 257(1), no. 2, and (4) of the German Commercial Code (HGB)).

7. Contacting us by email, telephone or fax

a) Description and scope of data processing

You can contact us using the contact details provided on our website (telephone number, fax number and email address). In this case, the user's personal data transmitted when contacting us is stored.

No data is disclosed to third parties in this context.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract, where the enquiry relates to entering into or

performing a contract with us.

  • Article 6(1), first sentence, point (f) GDPR: legitimate interest, in all other cases. The data is processed exclusively to respond to your enquiry.
c) Storage period and right to object

The data is deleted immediately after your enquiry has been dealt with, unless statutory retention requirements apply.

For personal data sent by email, this is the case when the relevant conversation with the user has ended. The conversation is deemed to have ended when the circumstances indicate that the matter concerned has been conclusively resolved.

Data subject to a statutory retention requirement is retained for the period prescribed by law (6 years pursuant to Section 257(1), no. 2, and (4) of the German Commercial Code (HGB)).

If a user contacts us by email, they may object to the storage of their personal data at any time. In this case, the conversation cannot continue. All personal data stored in the course of the contact is then deleted.

8. Use of Microsoft 365 (including Outlook and Teams)

a) Description and scope of data processing

We use Microsoft's cloud services for all our email communications, appointment management, internal and external office organisation, and online meetings and video conferences. All data you send us by email (e.g. in connection with enquiries, orders or supply relationships) is processed on Microsoft's servers. If you optionally participate in video conferences through Microsoft Teams, your name, email address, chat contributions and video and audio data from your microphone and camera are also processed temporarily. As a rule, we do not record meetings.

Third-party provider:

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

As Microsoft operates globally and its parent organisation is based in the USA, the transfer of telemetry and metadata to Microsoft Corporation in the USA cannot be entirely ruled out.

Further information is available in the Microsoft Privacy Statement

https://www.microsoft.com/de-de/privacy/privacystatement#:~:text=Microsoft%20verwendet%20die,zu%20erm%C3%B6glichen

and in the Microsoft Trust Center.

https://www.microsoft.com/de-de/trust-center/privacy#:~:text=Bei%20Microsoft%20respektieren%2C,entscheiden%20k%C3%B6nnen

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract and pre-contractual measures, where email communications or online meetings serve to initiate, perform or complete a contract with you.
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest, in all other cases. Our legitimate interest is in an efficient, technically secure, centrally organised office and communication structure that can be used regardless of location. We have entered into a data processing agreement (DPA) with Microsoft pursuant to Article 28 GDPR, supplemented by the EU Standard Contractual Clauses. Microsoft is also certified under the EU–U.S. Data Privacy Framework.
c) Storage period and right to object

The data remains in our active systems until the relevant conversation with you has ended or the purpose of storage no longer applies. Pure audio and video streams from Teams meetings are not stored on the servers after the conference ends. Where communications relate to business or tax-relevant transactions (e.g. quotations or invoices), they are archived for the statutory retention period (up to 10 years pursuant to Section 257 HGB and Section 147 of the German Fiscal Code (AO)) and blocked from further use. You can control and disable transmission of your camera and microphone data at any time through the settings in the Teams interface.

9. Registration for the shop

Access to our dealer shop is restricted to specialist dealers who already have a customer account with us. If you wish to order products through our dealer shop, you must first register. The data is entered into an input form, transmitted to us and stored.

a) Description and scope of data processing

The following data is processed: contact details (first and last name), address details, username, password, customer number and system data (see section 2).

Registration data and the shop database are hosted under a data processing arrangement on the servers of

integration.net GmbH
Ralf Luithle
Zachersweg 14
74376 Gemmrigheim

Telephone: +49 7143 8442 40
Email: info@integration.net

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: pre-contractual measures, performance of a contract.
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest, in all other cases.

We have entered into a data processing agreement (DPA) with integration.net GmbH pursuant to Article 28 GDPR.

c) Storage period and right to object

The data is deleted once it is no longer necessary to achieve the purpose for which it was collected.

As a user, you can cancel your registration at any time. You can amend the data stored about you at any time or have your customer account deleted entirely.

Deletion or amendment can be requested by sending an informal email to the contact details listed in the Legal Notice.

Even after a customer account has been closed, tax and commercial law retention requirements may oblige us to store contract and accounting data (e.g. relating to orders placed) for up to 10 years. Processing of this data is restricted (blocked) during this period.

10. Orders placed through the online shop

a) Description and scope of data processing

When you place an order in our online shop, we process the following data about you:

Order data:

  • Company name
  • Title, first name, last name
  • Billing address, delivery address (if different)
  • Email address, telephone number
  • Selected payment method and details of the products and quantities ordered.

Disclosure to shipping providers: to physically deliver the goods, we transmit the recipient's first and last name and delivery address to the transport provider we engage.

Disclosure to external ERP, CRM and hosting providers: we use the enVenta shop and ERP software for central inventory management, customer relationship management (CRM), invoicing and order processing.

The technical services and infrastructure are operated on our behalf by the following providers:


Software & inventory management:

Luithle + Luithle GmbH
Zachersweg 14
74376 Gemmrigheim

Telephone: +49 7143 8442 0
Email: andreas.luithle@llnet.de


Shop hosting & server infrastructure:

integration.net GmbH
Ralf Luithle
Zachersweg 14
74376 Gemmrigheim

Telephone: +49 7143 8442 40
Email: info@integration.net


b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract (purchase contract).
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (tax and commercial law requirements).
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest in efficiently, securely and centrally managing our business processes and ensuring the stable operation of our online shop. We have entered into data processing agreements (DPAs) with Luithle + Luithle GmbH and integration.net GmbH pursuant to Article 28 GDPR.
c) Storage period and right to object

Contractual data: data collected for an order is blocked from further use once the contract has been fully performed.

Statutory retention periods: tax and commercial law require invoice and accounting data to be stored for 10 years. The data is permanently deleted once these periods have expired.

Shipping providers: data transmitted to the transport company is processed in accordance with that provider's privacy policy and deleted once the periods for providing evidence and warranty claims under postal law have expired.

11. Credit checks (creditworthiness assessment)

a) Description and scope of data processing

Unless payment in advance has been agreed, we obtain a credit report to protect our legitimate interests. For this purpose, we transmit the personal data required for a credit check to the following credit reporting agency:

Euler Hermes Deutschland Niederlassung der Euler Hermes SA
Gasstraße 29
22761 Hamburg

CRIF GmbH, formerly Bürgel Wirtschaftsinformationen GmbH & Co. KG
Victor-Gollancz-Straße 5
76137 Karlsruhe

The credit reporting agency uses the above data to assess your creditworthiness using mathematical and statistical procedures (a score). The user's address data is among the information included in calculating the score.

b) Legal basis and purpose of data processing

Purpose: processing is intended to protect our company against the risk of non-payment under contracts where we, as the dealer, provide goods or services before receiving payment.

  • Article 6(1), first sentence, point (f) GDPR: legitimate interest (avoiding credit defaults and protecting against fraud).
c) Storage period and right to object

The credit check result received from the credit reporting agency is stored in our system for as long as necessary to complete the contract and protect against non-payment. Once the contract has been fully paid and completed, the score is deleted unless statutory retention requirements prevent this.

Right to object: you have the right to object at any time to the processing of your data for credit checks on grounds relating to your particular situation (Article 21 GDPR).

Consequences: if you object to a credit check, we may no longer be able to offer certain payment methods for your order where we provide goods or services before receiving payment (such as purchase on account).

12. SEPA direct debit procedure

a) Description and scope of data processing

If you select SEPA direct debit as your payment method during the order process, we process the following payment data in addition to the order data:

  • Name of the account holder
  • Name of the credit institution (bank)
  • IBAN and BIC
  • SEPA direct debit mandate granted (including mandate reference and time of granting)

To collect the invoice amount, we transmit your name and bank details (IBAN and BIC) to the credit institution handling the transaction for us.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract (processing the purchase contract using the selected payment method)
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (statutory requirements for documenting direct debit mandates and tax and commercial law retention requirements).
c) Storage period and right to object

Payment data: data collected for direct debit payments is blocked from active use once payment has been successfully completed.

Statutory retention periods: tax and commercial law require accounting records and the underlying SEPA mandate to be retained for 10 years. The data is permanently deleted once these periods have expired.

Credit institution: data transmitted to our bank is processed there in accordance with banking regulations and the institution's own privacy policy, and deleted once statutory evidence and retention periods have expired.

13. Newsletter subscription

You can subscribe to our regular newsletter to stay informed about current offers, products and news.

a) Description and scope of data processing

We require your email address for this purpose and, optionally, your first and last name to address you personally. Registration is performed manually at your request (e.g. by email or within a business relationship).

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (a) GDPR: consent. Purpose: regularly sending information about our products, services, offers and current news.
c) Storage period and right to object

Storage period: your data is stored for as long as the subscription is active. After you unsubscribe, the data is immediately deleted from the mailing list.

Objection: you can withdraw your consent at any time with effect for the future. You can unsubscribe using the unsubscribe link at the end of each newsletter or by sending an informal email.

14. Registration for RCS product training or the SAA specialist seminar

When you register for RCS product training, we collect the following data:

a) Description and scope of data processing
  • First and last name of the person making the booking
  • First and last names of the participants
  • Email address
  • Telephone number
  • Company name
  • Company address

If data is entered through the online registration form, it is transmitted directly to us.

In-house training: For training courses conducted internally, your data remains exclusively with us.

Specialist training for SAA specialists: To deliver this training, we transmit your registration data to Unternehmensberatung Wenzel.

Unternehmensberatung Wenzel
Dipl.-Ing. Stephan Wenzel
Uhlandstraße 1
89290 Buch

For registration, administration of the official examination and subsequent certification of participants, the required data is also forwarded to TÜV SÜD Akademie GmbH .

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract (training and examination contract) and pre-contractual measures. Processing on behalf of a controller: data is disclosed to Unternehmensberatung Wenzel on the basis of a data processing agreement pursuant to Article 28 GDPR. Independent controllership: TÜV SÜD Akademie GmbH processes the data for administering examinations as an independent controller. Organisation, preparation, delivery, examination administration, confirmation of training and subsequent invoicing.
c) Storage period and right to object

Storage period: deletion after completion of the training or award of the certificate, unless statutory retention requirements (e.g. 10 years for invoices) prevent this. Certificate data is subject to the examination regulations of TÜV Süd.

Objection: the data is essential for participation. An objection or request for erasure beforehand is therefore possible only by cancelling registration in an informal email to info@rcs-audio.com . In this case, your data is deleted immediately.

15. Processing data relating to complaints and RMA requests

a) Description and scope of data processing

We provide an online form on our website that customers can use to submit complaints, warranty claims or repair requests (RMA return requests) digitally. If a user makes use of this option, the data entered into the form is transmitted to us and stored in our systems.

The data routinely processed includes:

  • Master data: last name, first name, company name and customer number
  • Contact details: email address, telephone number and delivery/billing address
  • Case-related data: invoice or delivery note number, purchase date and article number/model designation
  • Fault description: detailed information about the reason for the complaint

The user's IP address and the date and time of transmission are also stored temporarily when the form is submitted, to prevent misuse.

Data is disclosed only where logistically necessary (e.g. to shipping providers for return labels) or to the manufacturer for technical assessment.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: performance of a contract
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (warranty). The purpose is to assess, process and document your complaint and replace or repair the goods.
c) Storage period and right to object

Storage period: deletion after the complaints procedure has been completed, unless statutory retention requirements (e.g. 10 years for tax-relevant transactions) prevent this.

Objection: the data is essential for processing. An objection or request for erasure beforehand is possible only by cancelling the complaint in an informal email; your data is then deleted.

16. Handling prospect and customer data (general)

We process the personal data of our prospects and customers to initiate, establish, perform and complete our contractual relationship and provide optimal customer service.

a) Description and scope of data processing

To initiate, establish, perform and complete our contractual relationship, we collect the following data from prospects and customers:

  • Name and title
  • Contact details
  • Business role
  • Contract data
  • Order history
  • Communication and invoice data

We collect this data directly during contract initiation, throughout the current order or through your enquiries by email and telephone.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: contract processing
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (tax and commercial law)
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest

Where we process the personal data of specific contact persons and employees of our customers, our legitimate interest is in efficient communication and the operational performance of the contract with our business partner.

  • Article 6(1), first sentence, point (c) GDPR: legal obligation. As part of counter-terrorism measures (EU sanctions regulations), we are legally obliged to check our customer and prospect data against official sanctions lists.

The purposes of this processing are customer service, handling quotations, orders and contracts, and proper accounting.

c) Storage period and right to object

Storage period & objection:

Data is deleted after the contract ends, unless statutory retention requirements (up to 10 years pursuant to Section 257 HGB and Section 147 AO) require longer storage. In these cases, the records are blocked from further use. As the data is essential for performing the contract, an early request for erasure is possible only where no legal obligations or outstanding contracts prevent this.

As master and invoice data is essential for performing the contract and fulfilling legal obligations, objections to this administration are excluded unless you invoke grounds relating to your particular situation as a contact person.

17. Handling supplier data

We regularly process the personal data of our suppliers and service providers to initiate, perform and complete our contractual and supply relationships.

a) Description and scope of data processing

To establish, perform and complete our contractual relationship, we collect the following data from you:

  • Names of contact persons
  • Business contact details
  • Bank details
  • Delivery terms
  • Orders and billing data

We collect this data in connection with price enquiries, orders and general maintenance of master data for service providers and suppliers.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (b) GDPR: purchasing and contract processing
  • Article 6(1), first sentence, point (c) GDPR: legal obligation (tax and commercial law)
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest. Where we process the personal data of specific contact persons and employees of our suppliers, our legitimate interest is in operational communication, procurement and smooth contract processing with our business partner.
  • Article 6(1), first sentence, point (c) GDPR: legal obligation. As part of counter-terrorism measures (EU sanctions regulations), we are legally obliged to check our supplier and service provider data against official sanctions lists. This process serves the procurement of goods and services, maintenance of supplier relationships, invoice verification and payment processing.
c) Storage period and right to object

Storage period & objection:

Data is deleted after the supply relationship ends, once all mutual claims have been fulfilled and statutory tax and commercial law retention periods (up to 10 years pursuant to Section 257 HGB and Section 147 AO) have expired. During this period, the records are blocked from further use. As processing is necessary to perform the contract and fulfil legal obligations, objections to the necessary administration of master and invoice data are excluded by law.

As processing is necessary to perform the contract and fulfil legal obligations, objections to the necessary administration of master and invoice data are generally excluded unless there are particular grounds relating to your individual situation.

18. Our social media profiles and links to them on our website

18.1. Facebook

We maintain a presence on Facebook. When you visit our Facebook fan page, a direct connection to Facebook's servers is established.

https://www.facebook.com/RCSaudio

Facebook is part of Meta Platforms Inc., One Hacker Way, Menlo Park, CA 94025, USA and processes your data in the USA. For Europe, the relevant company is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

We have no influence over Meta's collection or subsequent processing of data.

Information about data protection at Facebook is available here:

https://de-de.facebook.com/privacy/policy/

The Facebook Data Processing Terms, which refer to the Standard Contractual Clauses, are available at https://www.facebook.com/legal/terms/dataprocessing

Meta is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list

18.2. Instagram

Our website links to our Instagram profile (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA). Instagram is part of Meta Platforms Inc. in the USA. For Europe, the relevant company is c/o Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The link is identified by the Instagram logo in the footer. Clicking the Instagram logo establishes a direct connection to Instagram's servers.

https://www.instagram.com/rcsaudio

We have no influence over Meta's collection or subsequent processing of data.

Information about data protection at Instagram is available here:

https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

Meta is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list

18.3. LinkedIn

Our website links to our profile on the social network LinkedIn (LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA). For Europe, the relevant company is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The link is identified by the LinkedIn logo in the footer. Clicking the LinkedIn logo establishes a direct connection to LinkedIn's servers.

https://de.linkedin.com/company/rcs-audio

We have no influence over LinkedIn's collection or subsequent processing of data.

Information about data protection at LinkedIn is available here:

https://de.linkedin.com/legal/privacy-policy?

LinkedIn is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list

18.4. YouTube channel

We operate a YouTube channel. The video platform is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

When you visit our YouTube channel at https://www.youtube.com/@rcsaudio-systemsgmbh1924 , we process personal data exclusively to analyse user behaviour using the statistics provided by YouTube and to communicate with users who have initiated contact with us through the public comments feature. YouTube provides the following personal data about users in aggregated and anonymised form:

  • Followers
  • Reach
  • User demographics

These statistics do not allow individual users to be identified.

Other ways to contact YouTube are available here:

https://www.youtube.com/t/contact_us

YouTube's Terms of Service can be viewed using the following link:

https://www.youtube.com/static?gl=DE&template=terms&hl=de

Google is a participant in the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement confirms an adequate level of data protection for certified US companies. https://www.dataprivacyframework.gov/list

We have no influence over Google's collection or subsequent processing of data.

19. Other technologies

Encrypted transmission

We use encryption (SSL or TLS) to transmit content securely. You can identify an encrypted website connection by the padlock icon in your browser's address bar.

Truncation of IP addresses

Truncating IP addresses makes it harder to identify users. We use this measure wherever possible.

Data security

We use appropriate technical and organisational security measures to protect data against manipulation, loss, destruction and unauthorised access. Our security measures are continuously improved in line with technological developments.

Connections to other websites through links in images or text

The links we provide generally take you directly to the specified destination without additional information.

We identify external links leading to pages outside our website accordingly, unless this is already clearly apparent.

Indirect and redirected links

A link may automatically redirect to a website other than the one requested or first pass through another page instead of leading directly to the new page, without the user noticing. This is often used to process visitor data or trigger actions unnoticed.

Active content

Active content on websites is executed directly on the user's device after loading and therefore inherently presents a security risk. Commonly used active content includes Java and JavaScript.

This website uses the JavaScript library jQuery to increase the loading speed of our website.

We use active JavaScript content from external providers, known as web services, on our website. When our website is accessed, these external providers may receive personal information about your visit. Data may be processed outside the EU.

You can protect yourself by installing a browser extension such as NoScript or uBlock Origin, or by disabling JavaScript in your browser. This may limit the functionality of websites you visit.

Further information about JavaScript is available at: https://de.wikipedia.org/wiki/JavaScript#Verwendung

20. Use of AI tools (artificial intelligence)

a) Description and scope of data processing

We use free third-party AI tools in our company to improve efficiency, optimise texts, translate and carry out internal research (e.g. ChatGPT from OpenAI, DeepL and Microsoft Copilot). When these tools are used, entering text (prompts) transmits data to the servers of the respective providers. We have implemented strict internal policies to ensure that no personal data about our customers, suppliers, prospects or applicants is entered into free AI tools. If metadata (such as IP addresses or technical browser characteristics) is nevertheless unknowingly transmitted to providers during general enquiries, this occurs through the tool's technical infrastructure. As many AI providers are based in the USA (e.g. OpenAI and Microsoft), transfer of data to a third country cannot be ruled out.

b) Legal basis and purpose of data processing
  • Article 6(1), first sentence, point (f) GDPR: legitimate interest. Our legitimate interest is in economically and efficiently modernising our workflows, translating texts quickly and supporting our employees with everyday office tasks.
c) Storage period and right to object

We do not ourselves store personal data in these systems. Storage of input histories on third-party providers' servers is governed by their privacy policies. Users can disable storage and the use of their data for training AI models in the privacy settings of their respective AI accounts (e.g. through OpenAI's Data Controls) or delete the history manually.

21. Embedded fonts

We use fonts from third-party providers. These are hosted locally, and no connection to third-party servers is established. No personal data (e.g. IP addresses) is transmitted.

22. Plugins

22.1. WordPress plugins

We use various WordPress plugins for our website. When selecting plugins, we take strict care to use GDPR-compliant plugins. The plugins used do not collect personal data.

23. Handling applicant data

a) Description and scope of data processing

You can use the contact details provided on our website (address, telephone number, fax number and email address) to send us unsolicited applications or applications for advertised positions.

b) Legal basis and purpose of data processing

Providing your personal data as part of an application is voluntary.

Processing of your personal data and special categories of personal data is based on your consent.

The data is used for the following purposes:

a) Contacting you in response to your application or unsolicited application
b) Initiating and establishing an employment relationship
c) Sending you personalised information about vacancies in accordance with the consent you have given.
d) Fulfilling legal obligations or defending against asserted legal claims (burden of proof under the German General Equal Treatment Act (AGG)).

  • The legal basis for data processing is:

    Article 6(1), first sentence, point (a) GDPR: consent, through voluntary submission of application documents

  • Legal basis for conducting the recruitment process:

    Article 6(1)(b) GDPR and Section 26 of the German Federal Data Protection Act (BDSG)

  • The legal basis for temporary storage of the data is:

    Article 6(1)(f) GDPR: legitimate interest, in all other cases

c) Disclosure to third parties

Within our company, your personal data is provided only to people and organisational units (e.g. specialist divisions, departments and representatives of employees with severe disabilities) that need it to fulfil our contractual and legal obligations.

d) Storage period and right to object

Your data is stored for as long as necessary to fulfil the respective purpose or while statutory retention requirements apply, unless different information is provided for individual processing activities.

To fulfil legal obligations or defend against asserted legal claims (burden of proof under the German General Equal Treatment Act (AGG)).

Six months after the recruitment process has ended (e.g. after notification of the decision to reject an application).

If you have consented to longer storage of your personal data, it is stored in our applicant pool with your consent for a maximum of 24 months and then deleted.

Receipts/accounting data relating to any reimbursement of travel expenses or other expenses are archived in accordance with tax law requirements.

If a contractual relationship is established (employment), the necessary information is transferred to the personnel file.

You can withdraw your consent at any time.


Automated individual decision-making

We do not use exclusively automated processing to make decisions.

24. Data processing in third countries

Data is transferred to third countries (countries outside the European Economic Area – EEA) in connection with the cookies and social media profiles described here.

25. Links in images or text

The links we provide generally take you directly to the specified destination without additional information.

We identify external links leading to pages outside our website accordingly, unless this is already clearly apparent.

26. Erasure of data

Your data is stored for as long as necessary to fulfil the respective purpose or while statutory retention requirements apply, unless different information is provided for individual processing activities.

  • You withdraw the consent on which processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR.
  • You object to processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object to processing pursuant to Article 21(2) GDPR.
  • Data subject to a statutory retention requirement is retained for the period prescribed by law (10 years pursuant to Section 257, paragraph, HGB and Section 146(2) AO).
  • Log files: log files are deleted after 7 days in accordance with section 2 of this policy.

27. Your rights

As a user of our website, you have various rights under the GDPR, arising in particular from Articles 15 to 18 and 21 GDPR:

1. Right of access

You can request access to your personal data processed by us pursuant to Article 15 GDPR. In your request, please specify your concern to help us compile the necessary data. Please note that your right of access may be restricted in certain circumstances under statutory provisions (in particular Section 34 BDSG).

2. Right to rectification

If information about you is no longer accurate, you can request rectification pursuant to Article 16 GDPR. If your data is incomplete, you can request that it be completed.

3. Right to erasure

You can request erasure of your personal data under the conditions of Article 17 GDPR. Your right to erasure depends, among other things, on whether we still need your data to fulfil our statutory tasks.

4. Right to restriction of processing

Under the conditions of Article 18 GDPR, you have the right to request restriction of processing of data concerning you.

5. Right to data portability

Under Article 20 GDPR, you have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where processing is based on consent or a contract.

6. Right to object

Under Article 21 GDPR, you have the right to object at any time to processing of data concerning you on grounds relating to your particular situation. However, we cannot always comply, for example where legal provisions require us to process the data in the course of fulfilling our official duties.

7. Right not to be subject to an exclusively automated decision

Under Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

8. Right to complain

If you believe we have not complied with data protection regulations when processing your data, you can submit a complaint to us at any time.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged informs the complainant of its progress and outcome, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

The supervisory authority responsible for RCS AUDIO-SYSTEMS GmbH is the Bavarian State Office for Data Protection Supervision (BayLDA). You can contact it using the following details:

Bayerisches Landesamt für Datenschutzaufsicht, PO Box 606
91511 Ansbach
Germany

Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Email: poststelle@lda.bayern.de


Copyright notice

This Privacy Policy is protected by copyright. It was prepared by Kefer IT-Beratung, Monika Kefer-Spieleder, www.kefer-it.de

All rights reserved.