Data Protection

1. Data Controller

ROOS Service Group GmbH
Südliche Ringstraße 66
85053 Ingolstadt
Germany

Email: info@ro-os.de
Phone: +49 841 959 140 41

Represented by: [Insert Managing Director]

2. General Information On Data Processing

We process the personal data of visitors to our website only to the extent necessary to provide a functional website, deliver our services, or communicate with users. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Server Log Files

When you visit our website, our hosting provider automatically collects the following information:

IP address
Date and time of access
Accessed page/file
Referrer URL
Browser type and browser version
Operating system

Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring the stability and security of the website)

Storage period: Generally 7–14 days.

4. Contacting Us

If you contact us by email, telephone, or via our contact form, we process the personal data you provide solely for the purpose of handling your inquiry.

Legal basis:

Article 6(1)(b) GDPR (pre-contractual or contractual inquiries)
Article 6(1)(f) GDPR (legitimate interest in communication)

Your data will be deleted as soon as it is no longer required for processing your request.

5. Cookies

Our website uses technically necessary cookies and, where you have given your consent, additional cookies for analytics or marketing purposes.

Technically necessary cookies: Required for the basic functionality of the website (Article 6(1)(f) GDPR)
Optional cookies: Used only with your consent (Article 6(1)(a) GDPR)

You may withdraw your consent at any time via the cookie banner.

6. Integration of External Services (To Be Finalized)

Depending on the tools used on the website, the following third-party services may process personal data:

Analytics tools (e.g., Google Analytics, Matomo)
Marketing tools (e.g., Meta Pixel)
Map and video services (Google Maps, YouTube, Vimeo)
Social media plugins (LinkedIn, Instagram, etc.)

These services are only activated after you have provided your consent (Article 6(1)(a) GDPR).

7. Data Processing by Service Providers

Where we engage external service providers (e.g., hosting providers, newsletter services, or IT service providers), this is carried out on the basis of a Data Processing Agreement (DPA) in accordance with Article 28 GDPR.

8. Data Retention

We store personal data only for as long as necessary to fulfill the respective purpose or where statutory retention obligations apply.

9. Your Rights

You have the following rights at any time:

Right of access to your personal data (Article 15 GDPR)
Right to rectification of inaccurate data (Article 16 GDPR)
Right to erasure ("right to be forgotten") (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to certain processing activities (Article 21 GDPR)
Right to withdraw consent at any time (Article 7(3) GDPR)

If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with the competent data protection supervisory authority.

10. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in legal requirements or technical developments.

✔️ To Finalize This Privacy Policy

Please provide the following information:

1. Hosting Provider

Examples:

IONOS
Strato
ALL-INKL
AWS
Other

2. Analytics Tools

Google Analytics
Matomo
No tracking

3. Marketing Tools

Meta Pixel
Google Ads
None

4. Embedded Services

YouTube
Vimeo
Google Maps
Social media feeds (which platforms?)

5. Contact Form

6. Job Application Form or File Upload Feature

7. Cookie Consent Tool