Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Their contact details can be found in the website’s legal notice (Impressum).

The responsible entity for data processing is:

Risto Metallverarbeitung GmbH
Zum Schlahn 12,
51709 Marienheide, Germany

Phone: +49 (0) 22 64-200 9950
Fax: +49 (0) 22 64-200 9959

How do we collect your data?

Your data is collected in two ways:

  1. Data you provide us with – for example, when you enter information into a contact form.
  2. Data collected automatically – when you visit our website, our IT systems automatically collect data such as your internet browser, operating system, or the time of your page visit. This happens automatically as soon as you enter our website.

Why do we use your data?

Part of the data is collected to ensure the error-free provision of our website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive free information at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, restriction, or deletion of this data. You can contact us at any time using the address provided in the legal notice for more information. You also have the right to file a complaint with the relevant supervisory authority.

Legal Basis for Processing Personal Data

  • If we obtain consent from the data subject for processing operations, Art. 6 (1) (a) GDPR serves as the legal basis.
  • If the processing of personal data is necessary for the performance of a contract, Art. 6 (1) (b) GDPR serves as the legal basis.
  • If the processing is necessary for compliance with a legal obligation, Art. 6 (1) (c) GDPR applies.
  • If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override this interest, Art. 6 (1) (f) GDPR serves as the legal basis.

Routine Deletion and Storage of Personal Data

We process and store personal data only for the period necessary to fulfill the storage purpose or as required by law.

Once the purpose for storage ceases to apply, or if a legally prescribed storage period expires, personal data is routinely deleted or blocked in accordance with legal regulations.

  • In the case of website visits, data is stored only for the duration of the session.
  • If you subscribe to a newsletter, your data is stored as long as the subscription is active.

2. Your Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights:

Right to Access

You may request confirmation as to whether we process personal data concerning you. If so, you can request information on:

  • The purposes for which the personal data is processed.
  • The categories of personal data processed.
  • The recipients or categories of recipients to whom the personal data has been or will be disclosed.
  • The planned duration of storage or, if not possible, the criteria for determining this period.
  • The right to rectification, deletion, restriction of processing, or objection.
  • The right to lodge a complaint with a supervisory authority.
  • The source of the data if it was not collected from you.
  • The existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and, if applicable, meaningful information about the logic involved.

Right to Rectification

You have the right to request correction or completion of inaccurate or incomplete personal data. The responsible party must correct it immediately.

Right to Restriction of Processing

You may request the restriction of the processing of your personal data under the following conditions:

  • If you dispute the accuracy of the personal data, for a period that allows the controller to verify the accuracy.
  • If the processing is unlawful, but you oppose deletion and request restriction instead.
  • If the controller no longer needs the data, but you require it to establish, exercise, or defend legal claims.
  • If you have objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller override your reasons.

Right to Erasure („Right to Be Forgotten“)

You may request the deletion of your personal data if one of the following applies:

  • The data is no longer needed for the purposes for which it was collected.
  • You withdraw your consent, and there is no other legal basis for processing.
  • You object to processing under Art. 21 GDPR, and there are no overriding legitimate grounds.
  • Your data was processed unlawfully.
  • Deletion is required to comply with a legal obligation.
  • The data was collected in relation to information society services offered to a child under Art. 8 (1) GDPR.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit this data to another controller without hindrance.

Right to Object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

If your data is processed for direct marketing purposes, you may object at any time, and we will no longer process your data for such purposes.

Right to Withdraw Consent

You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in the country where you reside, work, or where the alleged violation occurred.