Data Privacy
We take data protection seriously.
Controller / Responsible Party
RENNER Gebäudetechnik GmbH
Theatinerstr. 14
80333 Munich
Tel.: 089 – 55 922 684
Mail: info@renner-gt.de
Personal Data
Contact
When you contact us (e.g., via contact form, email, phone, or social media), the information provided by the inquiring person is processed as necessary to respond to the inquiry and any requested actions.
The response to contact inquiries within the scope of contractual or pre-contractual relationships is carried out to fulfill our contractual obligations or to respond to (pre-)contractual inquiries. Otherwise, it is based on our legitimate interest in responding to such inquiries.
- Processed types of data: Inventory data (e.g., first name, last name, addresses), contact data (e.g., email, phone numbers).
- Affected persons: Communication partners.
- Purposes of processing: Contact inquiries and communication.
- Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR), consent (Art. 6(1)(a) GDPR).
Handling of Applicant Data
Scope and Purpose of Data Collection
If you send us an application, we process the associated personal data (e.g., contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation) and – if you have given consent – Art. 6(1)(a) GDPR. Consent can be revoked at any time. Within our company, your personal data will only be passed on to persons involved in processing your application.
If your application is successful, the data you submitted will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.
Retention Period
If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and physical application documents destroyed. Retention serves in particular as evidence in the event of a legal dispute.
If it is apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), deletion will only take place once the purpose of further retention no longer applies.
Longer retention may also take place if you have given your consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the Applicant Pool
If we do not make you a job offer, it may be possible to include you in our applicant pool. In this case, all documents and information from your application will be transferred to the applicant pool so that we can contact you if suitable vacancies arise.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no bearing on the current application process. You may withdraw your consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless statutory retention requirements apply. Data in the applicant pool will be irrevocably deleted no later than two years after consent was given. In this case, the data will be irrevocably deleted from the applicant pool, unless statutory retention requirements apply.
Data in the applicant pool will be irrevocably deleted no later than two years after consent was given.
Job Advertisements of Renner Group Companies
On our careers page, we embed job advertisements of other Renner Group companies via so-called iFrames.
When you visit our careers page, technically necessary data, in particular your IP address, is transmitted to the server of the respective website. By clicking on one of these job advertisements, you leave our website. We do not collect any application data ourselves in connection with these job advertisements.
If you apply for one of these positions, your data is processed exclusively by the respective company as the controller. This currently applies to Andreas Renner GmbH & Co. KG (Lauingen) and Alexander Renner GmbH & Co. KG (Rain am Lech), embedded via renner-jobs.de.
For information on data protection, please refer to their privacy policy: https://renner-jobs.de/datenschutzerklaerung/
AUTOMATICALLY STORED DATA: Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Used web browser and operating system
- Full IP address of the requesting computer
- Transferred data volume
These data are not merged with other data sources. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. For technical security reasons, particularly to prevent attacks on our web server, these data are temporarily stored. It is not possible for us to identify individual persons based on this data. After a maximum of seven days, the data are anonymized by shortening the IP address to the domain level, making it impossible to associate them with individual users. In anonymized form, the data are also processed for statistical purposes; no comparison with other data sets or sharing with third parties, even in part, takes place.
Cookies
Borlabs Cookie
Our website uses the Borlabs Cookie consent technology to obtain your consent for storing certain cookies in your browser and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH – Benjamin A. Bornschein, Hamburger Str. 11, 22083 Hamburg (hereinafter referred to as Borlabs).
When you visit our website, a Borlabs cookie is stored in your browser, recording your granted consents or the withdrawal of such consents. These data are not shared with the provider of Borlabs Cookie. The collected data are stored until you request their deletion, delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. For details on Borlabs Cookie data processing, please visit: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/ The use of the Borlabs Cookie consent technology is necessary to obtain the legally required consents for the use of cookies.
The legal basis for this is Art. 6(1)(c) GDPR. We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with the provider mentioned above. This is a legally required contract that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR: https://de.borlabs.io/datenschutz/
Brevo (formerly Sendinblue)
Google reCAPTCHA
We use Google reCAPTCHA (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to determine whether data input on this website (e.g., in a contact form) is made by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as the visitor enters the website. For the analysis, reCAPTCHA evaluates different types of information (e.g., IP address, the visitor’s time spent on the website, or mouse movements performed by the user). The data collected during this analysis is transmitted to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of data are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated surveillance and spam. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent can be revoked at any time.
The information generated by cookies about the use of our website (e.g., the IP address of the accessing computer, time of access, referrer URL, as well as information about the browser and operating system used) is transmitted to and processed on Google servers in the USA. Google relies on the Transatlantic Data Privacy Framework (TADPF) of July 10, 2023, for the transfer of data to recipients based in the USA. In cases where data is transferred to other third countries, Google uses EU Commission-approved Standard Contractual Clauses (SCCs) as a guarantee to ensure a level of data protection comparable to that of the EU. You can obtain a copy of the Standard Contractual Clauses here. We transmit data to Google only based on your consent. You can withdraw or adjust your consent at any time with effect for the future. For more information about Google reCAPTCHA, please refer to Google’s Privacy Policy and Terms of Use at the following links:
https://policies.google.com/privacy?hl=de
https://policies.google.com/terms?hl=de
For what purposes and on what legal basis are the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act 2018 in its applicable version:
- For the fulfillment of (pre-)contractual obligations (Art. 6(1)(b) GDPR): Your data are processed for contract execution, either online, at our business location, or at other branches. The data are particularly processed during business initiation and the execution of contracts with you.
- For the fulfillment of legal obligations (Art. 6(1)(c) GDPR):
The processing of your data is necessary to comply with various legal obligations, such as those arising from the Commercial Code or the Fiscal Code. - For the protection of legitimate interests (Art. 6(1)(f) GDPR):
Based on a balancing of interests, data processing may take place beyond the actual fulfillment of the contract to protect our or third parties’ legitimate interests.
Data processing for the protection of legitimate interests may occur in the following cases, for example:
- Advertising or marketing (see section “Processing of personal data for advertising purposes”)
- Measures for business management and the development of services
- Maintaining an internal customer database to improve customer service
- As part of legal enforcement
- Sending non-promotional information and press releases
- If you have given us consent to process your data in accordance with Art. 6(1)(a) GDPR or, in the case of special categories of personal data, in accordance with Art. 9(2)(a) GDPR.
Processing of personal data for advertising purposes
You can object to the use of your personal data for advertising purposes at any time, either entirely or for specific measures, without incurring any costs other than the transmission costs according to the basic rates.
Under the legal provisions of § 7(3) UWG, we are entitled to use the email address you provided when concluding the contract for direct advertising of our own or similar services. You will receive this information from us regardless of whether you have subscribed to a newsletter.
If you do not wish to receive such recommendations via email from us, you can object to the use of your address for this purpose at any time, without incurring any costs other than the transmission costs according to the basic rates. A simple notification in text form is sufficient. Of course, every email also contains an unsubscribe link.
Who receives my data?
If we use a service provider for data processing on our behalf, we remain responsible for protecting your data.
All data processors are contractually obligated to keep your data confidential and to process it only within the scope of their service provision. The processors we engage receive your data only to the extent necessary for the fulfillment of their respective services.
Your data are processed in our customer database. This database helps improve the quality of existing customer data (e.g., duplicate removal, marking of relocated or deceased individuals, address correction) and allows for enrichment with data from public sources.
These data are made available to affiliated companies within the group only if necessary for contract execution. Customer data are stored separately for each company.
If there is a legal obligation or in the context of legal enforcement, authorities, courts, and external auditors may be recipients of your data. Additionally, for the purposes of contract initiation and fulfillment, recipients of your data may include insurance companies, banks, credit agencies, and service providers.
Hosting / External Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website are stored on the hoster’s servers. This may include, in particular, IP addresses, contact inquiries, metadata and communication data, contract data, contact details, names, website access logs, and other data generated via the website.
The use of the hoster is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the legitimate interest of ensuring a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TDDDG. Consent can be revoked at any time.
Our hoster will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
The technical hosting services are provided by Mittwald CM Service GmbH & Co. KG. Hosting is provided via our supporting agency newsenses GmbH under a reseller model.
Data Processing Agreement (DPA)
We have concluded a data processing agreement (DPA) with the agency mentioned above. This is a legally required contract that ensures that the agency processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
How long are my data stored?
We process your data until the end of the business relationship or until the expiration of applicable legal retention periods (e.g., under the Commercial Code or Fiscal Code). Beyond that, data may be stored until the conclusion of any legal disputes where they are required as evidence.
Are personal data transferred to a third country?
As a general rule, we do not transfer data to a third country. In exceptional cases, data transfer only occurs based on an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards, or your explicit consent.
Security
We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access.
All our employees and service providers working for us are obligated to comply with applicable data protection laws.
Whenever we collect and process personal data, they are encrypted before transmission. This ensures that your data cannot be misused by third parties.
Our security measures are subject to a continuous improvement process, and our privacy policies are regularly updated. Please make sure you have access to the latest version.
Rights of Data Subjects
You have the right to access, rectification, deletion, or restriction of processing of your stored data at any time. Additionally, you have the right to object to processing, the right to data portability, and the right to lodge a complaint, in accordance with the requirements of data protection law.
Right of Access
You can request information from us about whether and to what extent we process your data.
Right to Rectification
If we process your data that is incomplete or incorrect, you can request its correction or completion at any time.
Right to Erasure
You can request the deletion of your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests in protection.
Please note that there may be reasons preventing immediate deletion, such as legally mandated retention obligations.
Regardless of your right to erasure, we will promptly and completely delete your data, provided there are no contractual or legal retention obligations preventing this.
Right to Restriction of Processing
You can request the restriction of processing of your data if:
- You dispute the accuracy of the data, for a period that allows us to verify its accuracy.
- The processing of your data is unlawful, but you oppose deletion and instead request a restriction on data usage.
- We no longer need the data for the intended purpose, but you still require them to assert or defend legal claims.
- You have objected to the processing of your data.
Right to Data Portability
You can request that we provide you with your data, which you have provided to us, in a structured, commonly used, and machine-readable format and that you can transfer these data to another controller without hindrance from us, provided that:
- We process these data based on your given and revocable consent or for the fulfillment of a contract between us.
- This processing is carried out using automated procedures.
If technically feasible, you can request that we directly transfer your data to another controller.
Right to Object
If we process your data based on legitimate interest, you can object to this processing at any time; this also applies to profiling based on these provisions. In such a case, we will no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.
You can object to the processing of your data for direct marketing purposes at any time without providing reasons.
Right to Lodge a Complaint
If you believe that our processing of your data violates German or European data protection laws, we encourage you to contact us so that we can clarify any concerns.
You also have the right to lodge a complaint with the relevant supervisory authority, which is the respective State Data Protection Office.
If you wish to exercise any of the rights mentioned above, please contact our Data Protection Officer. In case of doubt, we may require additional information to confirm your identity.
Changes to This Privacy Policy
We reserve the right to modify our privacy policy if required due to new technologies. Please ensure that you have access to the latest version.
If fundamental changes are made to this privacy policy, we will announce them on our website.
All interested parties and visitors to our website can reach us regarding data protection inquiries at:
Mr. Fabian Fromm
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel.: 0941 2986930
Fax: 0941 29869316
E-Mail: anfragen@projekt29.de
Internet: www.projekt29.de
Version 2026.1