Privacy Policy

1. Introduction

Thank you for visiting our website. We take data protection very seriously and are committed to protecting your personal data within the scope of our online offering.
“Personal data” means all information relating to an identified or identifiable natural person. Personal data collected on our website is used exclusively for our own purposes.

2. Controller and Data Protection Contact

Controller within the meaning of Art. 4(7) GDPR (DS-GVO):
RAMSYS GmbH
Hervester Straße 36
46286 Dorsten
Telefon: +49 (0) 2369 / 745 93 10
E-Mail: vertrieb@ramsys.org

Our Data Protection Officer (DPO):
Sicoda GmbH
Attn. Attorney Peter Mühlemeier
Rochusstraße 198
53123 Bonn
Phone.: 0228 / 28614060
E-Mail: dsb@sicoda.de

3. Legal Bases for Processing

The legal basis for our processing of personal data under the EU General Data Protection Regulation (GDPR/DS-GVO) derives from Art. 6 GDPR. Depending on the context in which we process your data, different legal bases may apply.

Consent

Where we obtain your consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis. You may withdraw your consent at any time with effect for the future.

Contract

Where the processing of personal data is necessary for the performance of a contract to which you are a party, Art. 6(1)(b) GDPR is the legal basis. This also applies to processing necessary to take steps prior to entering into a contract.

Legal Obligation

Where processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6(1)(c) GDPR serves as the legal basis.

Vital Interests

Where processing is necessary in order to protect the vital interests of you or another natural person, Art. 6(1)(d) GDPR is the legal basis.

Legitimate Interests

Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and such interests are not overridden by your interests or fundamental rights and freedoms, Art. 6(1)(f) GDPR is the legal basis. Our legitimate interest lies in conducting our business activities.

Employment Relationship

Pursuant to Art. 88 GDPR in conjunction with § 26 of the German Federal Data Protection Act (BDSG), personal data of employees is processed for employment-related purposes where necessary for decisions regarding the establishment of an employment relationship or, after establishment, for its execution or termination, or for the exercise or fulfillment of rights and obligations arising from laws, collective agreements, or works/service agreements.

4. Data Subject Rights

As part of our processing, your personal data may be processed. You have the following rights under Chapter III GDPR with regard to our company.

You have the

• Right of access (Art. 15 GDPR): to obtain information about the personal data we process about you, within the scope defined there.
• Right to rectification (Art. 16 GDPR): to request the prompt correction of inaccurate personal data concerning you and the completion of incomplete data stored by us.
• Right to erasure (Art. 17 GDPR): to request the deletion of personal data concerning you, unless further processing is required – for exercising the right of freedom of expression and information; – for compliance with a legal obligation; – for reasons of public interest; or – for the establishment, exercise, or defense of legal claims.
• Right to restriction of processing (Art. 18 GDPR): to request restriction of processing where – you contest the accuracy of the data; – the processing is unlawful but you oppose erasure; – we no longer need the data, but you require it for legal claims; or – you have objected to processing pursuant to Art. 21 GDPR.
• Right to data portability (Art. 20 GDPR): to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission to another controller.
• Right to lodge a complaint (Art. 77 GDPR): to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or our place of establishment.

5. Hosting

Our website is hosted on a server of a hosting provider in the Federal Republic of Germany. The personal data we process and describe in detail below is stored on this server. Our systems are consistently encrypted in accordance with the state of the art. Access by the hosting provider to personal data should therefore hardly be possible. Nevertheless, as a precautionary measure, we have concluded a data processing agreement (Art. 28 GDPR) with the hosting provider.

6. Web Server Logs

When you use our online offering, connection information is stored in server log files.

This information includes:

• IP address of the requesting system
• Browser information such as operating system used and screen resolution
• Accessed webpage
• Referring webpage (source)
• Time of access

Web server logs are processed exclusively for security purposes.

We use the log data only for statistical evaluations for the purpose of operating, securing, and optimizing the offering. However, we reserve the right to subsequently review the log data if there are concrete indications giving rise to a justified suspicion of unlawful use.

7. Contact Form

Our website provides contact forms through which you can send us data. The data is forwarded by our web server via email to our company’s mailbox.

At the time the message is sent, the following data is also stored:

• Your IP address
• Date and time the message was sent

Please note that communication via the contact form is not encrypted. For confidential matters, please use a secure communication channel. Alternatively, you may contact us via one of the email addresses provided.

By submitting your message, you agree that we may process your personal data for the purpose of handling your inquiry. You may object to this processing at any time and without stating reasons. Please note, however, that in the event of your objection we may no longer be able to process your request.

The legal basis for processing your personal data is your consent pursuant to Art. 6(1)(a) GDPR, insofar as it concerns a contact inquiry.

Where the contact is made in connection with the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.

8. Applications

On our website, you have the option to apply directly via a contact form for advertised positions or to submit a speculative application.

In the context of your application, we process personal data relating to you that is necessary for the decision on establishing an employment relationship. This includes:

• First and last name
• Email address
• Contact details
• Cover letter
• Application documents such as certificates and qualifications
• Photograph (if provided by you)
• Other data you provide to us in the course of your application

We process your data exclusively for the purpose of carrying out the application process.

The legal basis for processing your personal data in the context of applications is Art. 88 GDPR in conjunction with § 26 BDSG (German Federal Data Protection Act).

If we are unable to offer you a position, your data will be deleted six months after the conclusion of the application process, unless you have given us your consent to retain your application and to contact you regarding suitable future opportunities.

9. Cookies

This website and all its subpages use cookies and comparable tracking technologies, such as tracking pixels or Local Storage Objects (LSOs).

Cookies are text files stored on your device. They can be read, transferred, and modified by the website when it is accessed.

We use both so called first party cookies, i.e. cookies controlled by the company operating the domain on which the cookies are set, and third party cookies, which are controlled by external providers. The latter help us analyze the effectiveness of our website content and the interests of our visitors, measure the performance of our website, or deliver tailored advertising and other content on our website or on other websites.

Tracking pixels are tiny graphic files used to retrieve data from your device, such as device type, operating system, IP address, or the time of your visit.

Local Storage Objects (LSOs) work in a similar way to cookies, but the information is stored locally in the browser.

Where cookies and other technologies are technically necessary for the operation of the website, the legal basis for their use and the related processing of your personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interests lie in providing you with a technically optimized, user-friendly, and needs-based website, and in ensuring the security of our systems.

The use of cookies and other technologies that are not technically necessary for the operation of the website in particular those used for analysis and marketing purposes as well as the associated processing of your personal data, takes place only with your explicit consent pursuant to Art. 6(1)(a) GDPR.

On your first visit to our website or any subpage, you will be informed via a cookie banner about the cookies and other technologies used, and you will have the opportunity to choose which optional cookies and technologies you wish to consent to.

Through the cookie banner, you may also at any time:

click the “Cookies” button to view the details of the cookies in use, or

click the “Privacy Policy” button to view this full Privacy Policy.

You may withdraw your consent at any time and change your preferences regarding optional cookies and other technologies.

10. Borlabs Cookie Consent

We use the Borlabs Consent Management tool provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

Through this consent management system, we obtain your individual cookie consents and store them in a verifiable manner.

Within the Borlabs system, your personally chosen cookie preferences are stored. You may change your preferences at any time by clicking on the widget in the lower left corner of the screen to reopen the consent management interface.

11. Google Maps

For better visualization, we integrate a map on our website via the Google Maps API provided by Google Inc.
When you view the map, a connection to Google’s servers is established, during which, among other things, your IP address is transmitted to Google. Google may analyze the use of the Google Maps function by website visitors. Google may also write and read cookies, which may be directly linked to your person if you are logged into a Google account.
The legal basis for using Google Maps is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.
Further information on Google Maps can be found in Google’s privacy policy and terms of service:
policies.google.com/privacy?hl=de

12. Youtube

Our website uses videos and plugins from YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, which is legally represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Where you have consented to the use of YouTube, a connection to YouTube’s servers is established as soon as a video is displayed on our website, even if only as a preview image. Through this connection, YouTube receives various data, including:
the IP address of your device, any cookies previously stored on your device, and information stored from prior interactions with YouTube. If no cookies are yet stored, YouTube will place cookies on your device at the first interaction. If you have a YouTube account, YouTube may associate the data with your account. Further interactions with the video (e.g., pressing play, pause, or stop) are also transmitted to YouTube. You may stop this data processing by visiting a page without a video and deleting all cookies from your device.

The legal basis for the use of YouTube videos is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.

Further information on data processing by YouTube can be found at: policies.google.com/privacy

13. Storage Period

We store your personal data only for as long as it is necessary and permissible for the purpose for which it was collected, unless statutory retention periods prevent deletion or you have expressly consented to further storage.

Where certain data is subject to statutory retention obligations, we will retain it until those obligations expire.

If you have given us explicit consent to retain certain data, we will store it until you withdraw your consent. For withdrawal, you may use the contact details provided in Section 2 above.

14. Social Media Presences

Our company also maintains a presence on social media. Below you will find information on how your personal data is processed when you visit one of our social media pages.

14.1. Facebook

As part of our social media activities, we maintain a Facebook page. For the collection of personal data on this Facebook page, we are joint controllers together with Meta Platforms Ireland Limited (“Meta”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Meta processes personal data of visitors to the Facebook page for the provision of its services. This processing is carried out solely by Meta, which is therefore the controller for such processing within the meaning of the GDPR. In this context, Meta processes, among other things, data that is collected during each use of the site. This includes user IDs, the type of content accessed, interactions with the page, and information about the content and pages used. Further descriptions of the processed personal data can be found at: www.facebook.com/privacy/policy/.

Visitors may object to certain data processing by Meta. The relevant options are available at: www.facebook.com/privacy/guide/ads.

Where we process personal data collected via our Facebook page, this is done using data provided by Meta. Meta provides us with anonymized statistics in the form of “Page Insights,” which help us understand how our Facebook offering is used. We have entered into a specific agreement with Meta for this purpose, available at: www.facebook.com/legal/terms/page_controller_addendum .

This agreement also regulates which security measures Meta has implemented and confirms that users can exercise their rights under Chapter III GDPR (e.g., access and deletion rights) directly with Meta. Data subject rights are not restricted by this agreement and may be asserted both against us and against Meta. More details can be found at: www.facebook.com/legal/terms/information_about_page_insights_data .

This processing of personal data serves our legitimate interest in communicating via Facebook and optimizing our presence there. The legal basis is our overriding legitimate interest under Art. 6(1)(f) GDPR.

Please note that, according to Facebook’s privacy policy, personal data of visitors may also be processed in the USA or other third countries outside the EU. Meta assures that such processing is carried out in compliance with the requirements for international data transfers under Art. 44 et seq. GDPR. By visiting our Facebook page, you consent to such processing.

14.2. Instagram

As part of our social media activities, we also maintain an Instagram page. For the collection of personal data on this page, we are joint controllers together with Meta Platforms Ireland Limited (“Meta”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Meta processes personal data of visitors to the Instagram page. This processing is carried out solely by Meta, which is therefore the controller for such processing. In this context, Meta processes, among other things, user IDs, the type of content accessed, interactions with the page, and information about the content and pages used. More details are available at: privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

Visitors may object to certain data processing by Meta. The relevant options can be found at: help.instagram.com/284802804971822.

Where we process personal data collected via our Instagram page, this is done using data provided by Meta. Meta provides us with anonymized statistics in the form of “Instagram Insights,” which help us understand how our Instagram offering is used. We have entered into a specific agreement with Meta for this purpose, available at: www.facebook.com/legal/terms/page_controller_addendum.

This agreement also regulates which security measures Meta has implemented and confirms that users can exercise their GDPR rights (e.g., access and deletion rights) directly with Meta. Data subject rights are not restricted by this agreement and may be asserted both against us and against Meta. More details can be found at: help.instagram.com/788388387972460.

This processing of personal data serves our legitimate interest in communicating via Instagram and optimizing our presence there.

The legal basis is our overriding legitimate interest under Art. 6(1)(f) GDPR.

Please note that, according to Instagram’s privacy policy, personal data of visitors may also be processed in the USA or other third countries outside the EU. Meta assures that such processing is carried out in compliance with the requirements for international data transfers under Art. 44 et seq. GDPR. By visiting our Instagram page, you consent to such processing.

14.3. LinkedIn

We use the services of LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Plaza, Wilton Place, Dublin 2, Ireland, to represent our company and for recruiting purposes.

When you visit our LinkedIn page and interact with our content, your personal data such as your username, published content, and reactions may be processed by us in order to respond or reference your content in our own posts.

Users may object to certain data processing by LinkedIn. Details are available at: www.linkedin.com/help/linkedin/answer/93516/widerspruch-gegen-die-datenverarbeitung-einschrankung-der-datenverarbeitung?lang=de.

For recruitment-related data, LinkedIn acts as a processor on our behalf under Art. 28 GDPR.

LinkedIn provides us with anonymized “Page Analytics,” which help us gain insights into the use and performance of our LinkedIn page. LinkedIn processes the data you share when you visit, follow, or interact with our page. We have entered into a joint controller agreement with LinkedIn, available at: https://legal.linkedin.com/pages-joint-controller-addendum.
LinkedIn has assumed responsibility for ensuring data subject rights. Further details are available at: www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de.

This processing serves our legitimate interest in communicating via LinkedIn and optimizing our presence there. The legal basis is our overriding legitimate interest under Art. 6(1)(f) GDPR.

LinkedIn also processes additional personal data, such as names, email addresses, IP addresses, browser type, device information, location data, and cookies even if you do not have a LinkedIn account. If you do have an account, you may restrict certain processing in your account settings.

Please note that LinkedIn may transfer personal data to third countries outside the EU/EAA where GDPR-level protection cannot be guaranteed.

For further details, please see LinkedIn’s privacy policy: de.linkedin.com/legal/privacy-policy.

14.4. Xing

We also use the services of Xing (New Work SE, Am Strandkai 1, 20357 Hamburg, Germany) to represent our company and for recruiting purposes.

Please note that you use Xing and its functions on your own responsibility, in particular its interactive functions (e.g., sharing or commenting).

Data collected during your use of Xing may be processed by Xing and transferred to countries outside the EU. This includes your IP address, device and app information, visited pages, location, and mobile provider. These data may be linked to your Xing account or profile.

We have no influence on the type and extent of data processed by Xing or its transfer to third parties. Information on data processing by Xing can be found in its privacy policy: privacy.xing.com/de/datenschutzerklaerung

We may also process your data if you contact us via Xing. Data you publish on Xing may also be used and made accessible by us.

Logged in users may be visible to us via click path tracking on our Xing page, including interactions with job postings. If you do not wish this, please log out before accessing our content.

You may restrict Xing’s access to data in your settings or in your mobile device’s permissions (e.g., access to contacts, photos, or location).

If you have given Xing your consent to process personal data, the legal basis is Art. 6(1)(a) GDPR.

15. Customer Survey

On our website, selected customers may take part in a survey regarding the VDI / VDE 2180 standard. Participation in the survey is voluntary. The survey is intended to improve and revise the implementation of VDI / VDE 2180.
The data collected during the survey will be processed to create anonymized statistics. Participation is possible anonymously, without providing personal data.
When accessing the survey, your IP address and accepted cookie preferences may be recorded. This data will not be linked to the anonymized statistics.
The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time.
The anonymized statistics will be forwarded to the relevant standards committee.

Ninja Firewall

We have integrated Ninja Firewall into this website. The provider is NinTechNet Limited, Unit 1603,
16th Floor, The L. Plaza 367 – 375 Queen’s Road Central Sheung Wan, Hong Kong (hereinafter referred to as Ninja Firewall).

Ninja Firewall serves to protect our website from unwanted access or malicious cyber attacks. For this purpose, Ninja Firewall collects IP addresses, requests, referrers, and the time of page access. Ninja Firewall is integrated into our own servers and does not transmit any personal data to the provider of the tool or other third parties.

We have activated IP anonymization with Ninja Firewall so that the tool only records the IP address in truncated form.

The use of Ninja Firewall is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyber attacks.