Privacy policy

1) Introduction and contact details of the controller

We inform you below about the processing of personal data when you use this website. Personal data is any information that can identify you personally.

The controller within the meaning of the General Data Protection Regulation (DSGVO) is Georg Röth Eisengießerei GmbH & Co. KG, Bahnhofstraße 6, 74821 Mosbach, Germany, tel.: 06261/6449-0, email: info@roeth-guss.de. The controller decides, alone or jointly with others, on the purposes and means of the processing.

The controller has appointed a data protection officer. You can reach him at: Odenwald Datenschutz-Beratungs GmbH, Kellereistraße 14, 74722 Buchen, tel.: 06281/90297-0, email: datenschutz@odenwald-datenschutz.de.

This website uses SSL or TLS encryption. You can recognise an encrypted connection by the lock icon and by “https://” in the browser address bar.

2) Hosting and server log files

The website is operated on servers in Germany (hosting via ISP Gateway). When you merely look at the site, without registering or sending us a form, we collect only the data your browser transmits to the server (server log files):

• page or file requested
• date and time of access
• volume of data transferred
• referrer (previously visited page, if transmitted)
• browser type and version
• operating system
• IP address

Processing is based on Art. 6 Abs. 1 lit. f DSGVO and our legitimate interest in the technical provision, stability and security of the website. We do not pass the data on unless there are concrete indications of unlawful use. Log files are usually deleted after a short time, unless longer retention is needed to investigate faults or abuse.

3) Cookies and consent management

We use cookies and similar technologies. Cookies are small text files stored on your device. We set technically necessary cookies on the basis of Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in a working service) or Art. 6 Abs. 1 lit. c DSGVO where we are legally required to obtain and document consent. We set statistics and marketing cookies only if you have given consent under Art. 6 Abs. 1 lit. a DSGVO.

We obtain consent with our own notice on this website. The program (vanilla-cookieconsent) is hosted locally. No external consent service is called and your choice is not sent to a third party. We store your choice only in the necessary cookie “rg_consent” on your device. It contains the categories you chose, the time, a random identifier and a version of the notice texts. The cookie lasts 180 days. The legal basis is § 25 Abs. 2 Nr. 2 TDDDG and Art. 6 Abs. 1 lit. c and lit. f DSGVO, insofar as we obtain and demonstrate consent.

You can change or withdraw your consent at any time with effect for the future, via the “Cookie settings” link in the footer of every page. If you reject or withdraw, the cookies of the category concerned are deleted and the related scripts are no longer loaded. A list of the cookies used is at the end of this page.

4) Language choice (localStorage)

So that the website can remember your language, we store the language code (for example “de” or “en”) locally in your browser under the key “rg-locale”. This is not a marketing cookie. Processing is based on Art. 6 Abs. 1 lit. f DSGVO and our legitimate interest in a usable, language-appropriate presentation. You can delete the entry at any time in your browser settings.

5) Google Search Console (Webmaster Tools)

We use Google Search Console from Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland, to check indexing and how our website appears in Google Search. We prove domain ownership to Google with verification files or an optional meta tag.

A visit to our website does not set analytics cookies and does not create a usage profile about you. Google retrieves the publicly available pages with its own crawling systems and processes the usual server access data. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in findability and technical monitoring of our website). Google’s information: Google privacy policy.

6) Google Analytics

If you consent, we use Google Analytics 4 from Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The service helps us understand how the website is used (pages visited, approximate origin, device type, time spent). We use the property ID G-7EMY0FS6DB. The IP address is truncated before storage (anonymize_ip). The tracking script loads only on the production domain roeth-guss.de and only after consent in the Statistics category.

The legal basis is your consent under Art. 6 Abs. 1 lit. a DSGVO. Without consent the service is not used. You can withdraw consent at any time via the “Cookie settings” link in the footer. We have concluded a data processing agreement with Google. Data may be transferred to the USA. Google relies on the EU-US Data Privacy Framework and, in addition, on standard contractual clauses. Further information: Google privacy policy and Information on Google Analytics.

7) Albacross

If you consent, we use the lead identification service Albacross from Albacross Nordic AB, Kungsgatan 26, 111 35 Stockholm, Sweden (company registration number 556942-7338). Albacross helps us recognise which companies visit our website. In particular, the IP address, technical information used to distinguish several visitors behind the same IP and, if you submit a form, the domain of your email address are processed in order to associate a visit with an employer.

The legal basis is your consent under Art. 6 Abs. 1 lit. a DSGVO. The script loads only after consent in the Marketing category. You can withdraw consent via the “Cookie settings” link in the footer or by contacting us or Albacross (contact@albacross.com). Further information: Albacross privacy policy.

8) Contact and enquiry forms

You can send us enquiries through our website (general contact, prototype, series production, supplier change). The relevant form shows which details are required. We typically process name, company, email address, telephone number, message, industry and technical details of the project (for example material, quantity, weight, date). You may optionally send files such as CAD data, drawings or photos (for example STEP, STP, IGES, PDF, DXF, DWG, JPG, PNG).

The data is used only to handle and answer your request and for technical administration. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in handling incoming enquiries). If the contact aims at a contract or its preparation, Art. 6 Abs. 1 lit. b DSGVO is an additional legal basis. The mandatory details are needed to handle the request; without them we cannot answer reliably.

After you submit, we send the details by email to our company. Uploaded files are checked locally for malware (content and signature checks; also with ClamAV if it is available on the server). The files do not leave our web server for that check. They are then sent as an attachment and may also be stored temporarily on our web server (enquiries directory). You usually receive a short confirmation at the email address you gave. We delete the data once the circumstances show that the matter is finished, and unless statutory retention duties (in particular commercial and tax periods) require otherwise.

9) Email sending via Brevo and handling in Microsoft 365 / Outlook

Sending of form messages and the confirmation email is carried out by the processor Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). Alternatively, sending may use our existing WordPress mail path. Further information: Brevo privacy policy.

The content transmitted in this way, including attachments, is then handled in Microsoft 365 / Outlook. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft may transfer data to third countries, in particular the USA, and relies on the EU-US Data Privacy Framework and standard contractual clauses. Further information: Microsoft privacy statement.

The legal basis for using these providers is Art. 6 Abs. 1 lit. b DSGVO where the processing serves the preparation or performance of a contract, and otherwise Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in reliable, traceable email traffic). The required data protection agreements are in place with the providers named.

10) Applications

You can apply through forms on the website (job adverts and apprenticeships) or by email. We process the details you send, in particular name, email address, telephone number, the job or apprenticeship sought, start date, covering letter and application documents (for example a CV as PDF, DOC or DOCX).

The legal basis is Art. 6 Abs. 1 lit. b DSGVO together with § 26 Abs. 1 BDSG (the German Federal Data Protection Act: steps towards an employment relationship). Where special categories of personal data within the meaning of Art. 9 Abs. 1 DSGVO are provided (for example health data or information on severe disability), processing takes place under Art. 9 Abs. 2 lit. b DSGVO insofar as it is necessary for obligations in employment and social security law.

The documents are received in Microsoft 365 / Outlook and assessed internally for selection. If we do not hire you or you withdraw the application, we usually delete the data at the latest six months after the procedure ends. The period serves our legitimate interest in answering follow-up questions and meeting duties of proof under the General Equal Treatment Act (AGG). If we hire you, we transfer the necessary data to the personnel file.

11) YouTube videos

On individual pages (for example apprenticeships, the blog or editorial pages) YouTube videos from Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland, may be embedded. The videos load only when you actively start them (two-click solution) and use the domain youtube-nocookie.com. Only then does your browser connect to YouTube. Cookies may be set and data may be transferred, including to the USA, in particular if you are signed in to Google.

The legal basis is your consent under Art. 6 Abs. 1 lit. a DSGVO, which you give by starting the video. Without that click no connection to YouTube is made. Further information: Google privacy policy.

12) Maps: OpenStreetMap and links to Google Maps

On the jobs and apprenticeship pages we show a map of the Mosbach site as an OpenStreetMap embed. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. When the map loads, your browser transmits at least your IP address and technical request data to OSM. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in a clear location). An adequacy decision of the European Commission exists for the United Kingdom. Information: Privacy information of the OpenStreetMap Foundation.

We also offer links to open the location in Google Maps or to calculate a route. Only when you click such a link do you leave our website, and Google’s privacy terms then apply.

13) Fonts, our own video and social media links

The fonts used on the website are delivered by us. There is no request to the Google Fonts CDN; loading a page does not connect to Google for that purpose.

We host the video in the header of the homepage ourselves. Playback does not send data to a third-party video service.

In the footer we link to profiles on Xing and LinkedIn. These are ordinary links, not embedded social plugins. The privacy terms of the network apply only after you click.

14) Whistleblower system

We receive reports under the German Whistleblower Protection Act (HinSchG) through an external system. The access link is in the legal notice. Processing there is carried out by the provider of that system and not through the forms on this website. Details are given in the notices of that system.

15) Spam protection for forms

Our forms contain technical measures against automated submissions (hidden check fields, timing between opening and sending, a limit on how often an IP address may submit). The IP address may be stored briefly. The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in protection against abuse and overload).

16) Rights of data subjects

You have the following rights against the controller, where the respective conditions are met:

• access under Art. 15 DSGVO
• rectification under Art. 16 DSGVO
• erasure under Art. 17 DSGVO
• restriction of processing under Art. 18 DSGVO
• notification of recipients under Art. 19 DSGVO
• data portability under Art. 20 DSGVO
• withdrawal of consent given under Art. 7 Abs. 3 DSGVO
• a complaint to a supervisory authority under Art. 77 DSGVO

Right to object

If we process your personal data on the basis of a legitimate interest under Art. 6 Abs. 1 lit. f DSGVO, you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

If data is processed for direct marketing, you may object to the processing at any time. We will then stop processing for that purpose.

17) Supervisory authority

The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de. You may also contact the supervisory authority at your usual place of residence, your place of work or the place of the alleged infringement.

18) Storage period and automated decisions

Unless a shorter or longer period is stated in the sections above, we store personal data only for as long as needed for the purpose or as statutory retention duties require. Data based on consent is stored until withdrawal, unless another legal basis supports further processing.

There is no automated decision-making, including profiling, within the meaning of Art. 22 DSGVO.

19) Cookie overview

The following overview lists the cookies used on this website. Statistics and marketing cookies are set only after your consent.