Manage cookie settings

PRIVACY POLICY

General information

The following privacy policy provides an overview of what type of personal data is processed when you are on this website, for what purpose and on what legal basis. Personal data is any data that enables the identification of a natural person and therefore is personally related to you, e.g., name, address, email-address, user behavior. In addition, we inform you about your rights vis-à-vis us as the controller.  

Controller and data protection officer

Controller for the processing of personal data on this website is Gebr. Reinfurt GmbH & Co. KG, Niederhoferstr. 105, 97222 Rimpar (“GRW” or "we/us").

For more information about us, please refer to our legal notice. You can contact our data protection officer, Mr. Stephan Menzemer, at  dsb@gvw.com .

Data processing when using the website

If you only use this website for informational purposes, we automatically collect and store information that your browser transmits to us in server log files. This includes, in particular:

• IP address (anonymized)
• Date and time of the request
• Time zone difference
• Content of the request
• Access status/http status code
• Website from which the request originates
• Browser, operating system and its interface
• Version of the browser software.

This data is technically necessary for us to display this website to you and to ensure its stability and security. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session.

The storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.

The legal basis for the collection and temporary storage is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the above-mentioned purposes, in particular in providing you with a functioning and secure website.

An evaluation of the data for marketing purposes does not take place in this context. We do not assign this data to specific persons and do not combine it with other data sources.

This data is stored on servers in Germany. They are deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 10 days at the latest.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation and delivery of the website. Consequently, there is no possibility for the user to object.

Contact

• Contact form

A contact form is available on our website, which can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This covers the following data:

• Salutation
• Title
• First name
• Last name
• Company
• Address
• Email address
• Phone number
• Request type
• Your message to us

The following data will also be stored at the time the message is sent:

• The anonymized IP address of the user
• Browser and system version of the user
• Time of the request

The personal data from the input mask is used solely for the purpose of processing your contact request. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Before sending your data, we will first obtain your consent and refer you to this privacy policy. The legal basis for processing in this case is Art. 6 para. 1 lit. a GDPR.

Data subjects have the right to withdraw their consent to the processing of their personal data at any time with effect for the future by sending a message to us at personal@grw.de. In this case, all personal data stored in the course of establishing contact will be deleted. The lawfulness of the data processing carried out by us prior to the withdrawal remains unaffected.

Otherwise, the data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case when the conversation has ended and the request has been answered.

• Email

Alternatively, you can contact us via the email address provided. In this case, the personal data transmitted with the email will be stored.

The legal basis for the processing of data transmitted in the course of sending an email is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in responding to your request and clarifying your concerns accordingly.

If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

The data subjects may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. You can send your objection to the following address: personal@grw.de. In this case, all personal data stored in the course of establishing contact will be deleted.

The data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The personal data collected additionally during the sending process will be deleted automatically from our web servers at after six months.

 

Data processing in the context of application procedures

Our website contains an application form that can be used for electronic applications for advertised positions or for unsolicited applications. If a person uses this option, the data entered in the input mask will be transmitted to us and stored. These data are:

• Title
• First name
• Last name
• Address
• Email address
• Phone number
• Indication of which position the application is for
• Indication of how you became aware of us
• The personal data provided by you in the cover letter
• The personal data provided by you in the resume
• Testimonials
• Your message to us

The following data will also be stored at the time the message is sent:

• The anonymized IP address of the user
• Browser and system version of the user
• Date and time of application

The above data is processed for the purpose of the application process. This includes, in particular, reviewing your suitability for the advertised position and contacting you during the selection process.

Before sending the data, your consent will be obtained and reference will be made to this privacy policy. The legal basis for processing in this case is Art. 6 para. 1 lit. a DS GVO.

Affected persons may revoke their consent to the processing of their personal data at any time with effect for the future by sending a message to us at personal@grw.de. In this case, all personal data stored in the course of establishing contact will be deleted. The legality of the data processing carried out by us prior to revocation remains unaffected.

Your data will be deleted no later than six months after the application process has been completed unless there is a legal obligation to store it for longer. If you withdraw your application, your data will be deleted immediately in accordance with Art. 17 GDPR.

For more information about the processing of your personal data in the application process (e.g. any recipients and storage period), please refer to our data protection information for applicants.

 

Data processing in the context of online seminars

We offer online seminars on an ad hoc basis to support our customers. When registering for and conducting these online seminars, we process in particular the data specified above in the input mask of the contact form (e.g. title, name, address, email address, telephone number). This data is used to organize and conduct the respective seminar.

Before you register, we will first obtain your consent and refer you to this privacy policy. The legal basis for processing in this case is Art. 6 para. 1 lit. a GDPR.

Data subjects have the right to withdraw their consent to the processing of their personal data at any time with effect for the future by sending a message to us at personal@grw.de. In this case, all personal data stored in the course of establishing contact will be deleted. The lawfulness of the data processing carried out by us prior to the withdrawal remains unaffected.

The legal basis for the processing is Art. 6 para. 1 lit. b GDPR, as the processing is carried out for the performance of a contractual relationship or for the implementation of a pre-contractual measure.  

Your data will generally be deleted six months after the end of the seminar, unless there are legal obligations to retain it.

 

Use of cookies

Furthermore, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, GRW). A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again. Cookies cannot execute programs or transfer viruses to your computer. They serve to make our website more user-friendly and effective.

Necessary Cookies

We use technically necessary cookies to make our website more user-friendly and effective overall and to ensure the security of our website. Some elements of the website require that your browser can be identified even after a page change.

Your usage data collected by technically necessary cookies will not be used to create profiles.

Technically necessary cookies also include so-called session cookies. We use these to operate the website. They store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to the website. Session cookies are deleted when you close your browser.

The legal basis for the use of these technically necessary cookies is sec. 25 para. 2 no. 2 TDD D G in conjunction with Art. 6 para. 1 lit. f GDPR.

Performance and statistics cookies

We also use cookies on our website that are not technically necessary. These are, for example, cookies that enable an analysis of the surfing behavior of users. The use of these cookies is for the purpose of improving the quality of the website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize the offer.

The legal basis for the use of these cookies on our website is your consent pursuant to sec. 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect of the future at any time.

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software. In this case, however, we would like to point out that you may not be able to use this website to its full extent.

Google services (Google Analytics 4)

These technically unnecessary cookies also include Google Analytics 4 from the third-party provider Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 ("Google").

Google's privacy policy can be found at: https://policies.google.com/privacy?hl=de&gl=en. You will also find further information about your rights in this regard and settings options for protecting your privacy.

Further information on the use of Google Analytics 4 can be found below.

Google Analytics 4 is a web analytics service provided by the US company Google LLC, which is used to analyze traffic on our website.

If you have given your consent, we use Google Analytics to regularly analyze your user interactions on websites and apps. The statistics and reports obtained enable us to improve our offering and make it more interesting for you as a user.

Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity.

The data, we collect using cookies, includes interactions between you as a user of the website and our website, device/browser data, IP addresses and website or app activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about the country, region, or location from which the respective user originates (so-called "IP location determination").

The cookie will only be set and your data will only be transmitted if you have given us your prior consent in accordance with sec. 25 para. 1 sentence 1 TDDDG and Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future in our cookie banner by deactivating the corresponding service.

In addition, you can prevent the storage of cookies by adjusting your browser software settings accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

User and event data linked to cookies or unique IDs are stored for 14 months. Aggregated data sets may also be stored for a longer period. However, these aggregated data do not allow any conclusions to be drawn about individual users.

As Google is a US company, your personal data may be transferred to the US. The US is currently considered by the European Commission to be a country without an adequate level of data protection.

Since the EU-US Privacy Shield has been declared invalid by the European Court of Justice, Google relies on the EU standard contractual clauses as adequate safeguards for the protection of your personal data within the meaning of Art. 46 para. 2 lit. c GDPR when processing your personal data in the USA.
However, there is still a risk that personal data transferred to the US that it may be processed by US authorities for control and monitoring purposes, possibly without the data subjects having any legal remedies against this.

Click here to withdraw your consent on all domains of the processing company:
https://tools.google.com/dlpage/gaoptout?hl=de

If you have any questions about data protection, you can contact Google at the following link:
https://support.google.com/policies/contact/general_privacy_form

Use of Vimeo

We also use videos on our website from the global company Vimeo, a video platform that enables the streaming of high-resolution videos. The video portal is operated by Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA.

With the help of a plug-in, we can display interesting video material directly on our website. Certain data may be transferred from you to Vimeo. Vimeo offers us the opportunity to present high-quality content directly on our website. Instead of just giving you a link to an interesting video, you can watch the video right there on our website. This expands our services and makes it easier for you to access interesting video content in addition to our text and images.

When you visit a web page on our website that has a Vimeo video embedded in it and you actively click on an existing video, your browser connects to Vimeo's servers. In the process, data is collected, stored, and processed on Vimeo servers, regardless of whether you have a Vimeo account or not. This data includes:

• Your IP address,
• technical info about your browser type,
• Your operating system or very basic device information,
• through which website you use the Vimeo service,
• what actions (web activities) you perform on our website.

These web activities include, for example

• Session Duration,
• Bounce rate,
• which buttons you clicked on our website with built-in Vimeo functionality.

Vimeo can track and store these actions using cookies and similar technologies. As a registered and logged-in Vimeo member, additional data may be collected and your actions on our website may be directly linked to your Vimeo account. To prevent this, you must log out of Vimeo while “surfing” our website. Data is stored on Vimeo for as long as Vimeo has a commercial reason for doing so. Afterwards, the data is deleted or anonymized.

The legal basis for the use of Vimeo is your consent in accordance with sec. 25 para. 1 TDDDG, Art. 6 para. 1 lit a GDPR.

You can withdraw your consent at any time with effect of the future. In addition, you always have the option to manage cookies in your browser according to your preferences. You can change the collection and storage of your data and the setting of Vimeo cookies in your browser settings and delete or deactivate cookies at any time. Please note that various features may not be available to the full extent after disabling/deleting cookies. If you are a registered Vimeo member, you can also manage the cookies used in the Vimeo settings.

You can find out more about the use of cookies at Vimeo at https://vimeo.com/cookie_policy. Information on data protection at Vimeo can be found at https://vimeo.com/privacy.

By consenting to the use of Vimeo, your data will be processed in the USA. The US is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedy. If you have not consented to the use of Vimeo, the transfer described above will not take place.

GRW on social media

In addition to this website, we are also present on various social media platforms. We are currently represented on Xing, LinkedIn, and Instagram. Our profiles can be reached via the links inserted on the website.

On the pages of the respective service providers, your personal data may be processed by them, over which, however, we have no influence.

The purpose and scope of data collection and the provisions on the use of personal data by the respective platform can be found in the privacy policy of the respective operator.

• Xing: https://privacy.xing.com/en
• Instagram: https://de-de.facebook.com/help/instagram/519522125107875
• LinkedIn: https://www.linkedin.com/legal/privacy-policy

Your rights

As a data subject within the meaning of the GDPR, you have the following rights vis-à-vis us as the controller with regard to the personal data concerning you:


Right to information
You have the right to request information about the categories of data processed, the purposes of processing, any recipients of the data and the planned storage period for your data (Art. 15 GDPR).

Right to rectification and completion
You have the right to request of the rectification of inaccurate data and, taking into account the purposes of the processing, the completion of incomplete data (Art. 16 GDPR).


Right to erasure
You have the right to request the erasure of data in certain cases within the scope of Art. 17 GDPR, in particular if the data is no longer required for the intended purpose or is being processed unlawfully, or if you have withdrawn your consent or declared to the processing.

If we have made the personal data concerning you public and are obliged to delete it in pursuant to Art. 17 para. 1 GDPR, we shall take reasonable steps, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process the personal data that you, as the data subject, have requested the erasure of all links to this personal data or of copies or replications of this personal data.


Right to restriction of processing
Under certain conditions, you have the right to demand the restriction of your data if erasure is not possible or the erasure obligation is disputed (Art. 18 GDPR).


Right to data portability
In cases prescribed by law, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format (Art. 20 GDPR).

Right to object
You have the right to object, on grounds relating to your particular situation, at any time to data processing, which is based on a legitimate interest (Art. 21 GDPR).

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

Right to withdraw your consent
You have the right to withdraw your consent at any time with effect for the future (Art. 7 para. 3 GDPR).


Right to lodge a complaint
If you believe that the processing of personal data violates data protection law or your data protection claims have been violated in any other way, you can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

No automated decision-making
We do not use fully automated decision-making in accordance with Art. 22 GDPR and generally do not use “profiling”. Should we use this in individual cases, we will inform you separately if this is required by law and, if necessary, we will obtain your prior consent.

 

The authority responsible for us is:

The Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach

Telephone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de
Homepage: https://www.lda.bayern.de

The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Status: July 2025

 

Information according to Art. 13 GDPR for Applicants

 

Information according to Article13 GDPR Business Partners

 

Information according to Article13 GDPR Visitors