Personal data may only be "processed" if there is a valid legal basis for this. The processing is linked to a specific purpose. We process personal data that we may collect from you via this website on the basis of the following legal bases:

1.1.1 Balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR

If tools are used with the aim of making our website more customer-friendly, efficient and secure, this can be done as part of a balancing of interests, as user behaviour is not profiled and the visitor's IP address is only stored non-anonymised for a short period of time.

We also process information that you provide to us for the purpose of a potential or existing business relationship (B2B relationship) as part of a balancing of interests.

1.1.2 Contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR

If you provide us with your personal information as a private individual (e.g. as part of an application or product enquiry), we process this data as part of the initiation of a contract or to process the contractual relationship with you.

1.1.3 Legal requirement pursuant to Art. 6 para. 1 lit. c GDPR

Insofar as we are subject to legal requirements that require us to use your personal data, this is done within the scope of this legal basis.

1.1.4 Consent pursuant to Art. 6 para. 1 lit. a GDPR

In rare cases, it may be possible that we wish to use the personal data you have provided for a purpose other than that for which it was intended. If this should occur and there is no other legal basis, we require your voluntary consent - which can be revoked at any time for the future - which we will then ask you for separately.

When you visit our website, your IP address and other information is automatically transmitted. We do not store this data ourselves, but our service provider requires this information for the technical provision of the website. It automatically logs every access to our homepage and every possible retrieval of a file stored on the homepage.

The following are logged

• Name of the retrieved file,
• Date and time of access,
• Amount of data transferred,
• Notification of successful retrieval and web browser.
• IP address

For reasons of security and availability of the website and in accordance with § 12 TDDDG (disruption of telecommunications systems and misuse of telecommunications services), the IP address is also logged for a short period of up to 7 days. Storage for up to a maximum of 7 days is permitted according to the BGH judgement. This log is accessed for the above reasons, in particular to clarify security incidents and on the basis of existing legal bases for forwarding to law enforcement authorities for criminal prosecution. It is not possible for us to assign the data to a specific person. We do not merge this data with other data sources.

The basis for this processing is Art. 6 para. 1 lit. f GDPR ("balancing of interests").

If we wish to use the transmitted IP address anonymised for other purposes, this is explained in more detail below.

Under the General Data Protection Regulation, we are obliged to provide appropriate information whenever personal data is collected directly from the data subject. We collect personal data from you as part of our website and would therefore like to inform you accordingly. This collection takes place, for example, when we

• collect your IP address for the technical provision of the website
• use a tracking tool that utilises the IP address
• accept your entries in a contact module for communication with us.

Basic procedure:

If you have provided us with personal data, we will only use it to respond to your enquiries and for technical administration. As an exception, the anonymised IP address can be used for statistical analysis. If the IP address is used for other purposes, this will be listed below.

Your personal data will only be passed on or otherwise transferred to third parties if this is necessary for the purpose of contract processing - in particular the transfer of order data to suppliers - or if this is necessary for billing purposes, if we are legally obliged to do so in the context of order processing by subcontractors or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future.

Stored personal data will be erased if you withdraw your consent to storage, if knowledge of the data is no longer required to fulfil the purpose for which it was stored, i.e. the process has been completed and there are no statutory erasure periods to the contrary, or if storage of the data is not permitted for other legal reasons. In addition, your objection to processing may result in the erasure of the stored data.

If the data cannot be deleted for technical reasons, we will anonymise it so that a personal reference can no longer be established in the future.

All data collection and processing on this website is the responsibility of our company.

Additional detailed information can be found in the following points.

When you contact us via our website, we collect various personal data from you using the contact form. Mandatory fields marked with an asterisk are required for us to process your enquiry properly - other information is voluntary. We send your enquiry by e-mail to our internal system without intermediate storage. Please ensure that you do not provide any confidential data or information in this way.

We will only use this information to process your enquiry. The process described above is necessary for us to do this. If necessary for processing, we will involve other parties to process your enquiry, taking into account the applicable legal regulations (e.g. as part of order processing). If your details were provided for the purpose of or as part of a business relationship with us, we will store your contact details in our internal systems. Your actual request may also be stored in internal systems (e.g. ticket system, email system, CRM) in order to enable the process of internal processing.

As we assume an open-ended business relationship, we will only delete or anonymise your data on request (see your right to deletion later) or if the purpose for data storage no longer applies, provided there are no legal retention periods or deletion periods to the contrary.

The legal basis for the processing of the information provided by you for the purpose of use in the context of a possible initiation or fulfilment of a business relationship with you or your employer is Art. 6 para. 1 lit. b GDPR (business relationship with you) or Art. 6 para. 1 lit. f GDPR (processing of interests in order to process your request). If we require your consent for the desired processing, we will obtain this explicitly (e.g. by clicking on a corresponding option).

Users can create a user account. As part of the registration process, the required mandatory information is communicated to the users and processed on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of providing the user account. The processed data includes in particular the login information (name, password and an email address). The data entered during registration is used for the purposes of using the user account and its purpose.

In the event of important changes, for example to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration - if you have activated this - to inform you in this way. If users have cancelled their user account, the user account data will be blocked and deleted after any obligations to provide evidence have expired. It is the responsibility of users to back up their data before the end of the contract in the event of cancellation. We are authorised to irretrievably delete all user data stored during the term of the contract.

As part of the use of our registration and login functions and the use of the user account, we store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests as well as those of the user in protection against misuse and other unauthorised use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR. The IP addresses are anonymised or deleted after 7 days at the latest.

If you are interested in receiving a newsletter from our company for information purposes about our company, our products and services, we require your e-mail address and may ask you to provide further voluntary information. After your registration, our system will send you an e-mail with an activation link, which you must use to confirm your registration. This is to ensure that you are actually the owner of the e-mail address provided and that you agree to receive the newsletter. Without confirmation, your details will be deleted after one week. Once you have successfully registered, you will receive the newsletter.

We store your registration and the date in a database. You can unsubscribe from the newsletter at any time with effect for the future. You will find a corresponding note with a link in the newsletter.

The double opt-in procedure is used to ensure that you consent to the registration. A confirmation e-mail is sent to the recipient. Only after confirmation by using the activation link is the sending of the newsletter authorised.

Your e-mail address will only be used to process the newsletter subscription. We may use service providers to fulfil the service in accordance with legal requirements (e.g. CleverReach as a processor). If you unsubscribe from the newsletter (revocation of consent for the future), the newsletter subscription will be blocked immediately and the data anonymised, which we no longer need for verification purposes. We retain the original consent itself for a maximum of 3 years as proof of legally compliant newsletter dispatch.

The processing of the data entered in the newsletter registration form for sending the newsletter is based on your consent (Art. 6 para. 1 lit. a GDPR).

By subscribing to the newsletter, you also consent to us measuring your click and opening behaviour in order to provide you with an optimised newsletter mailing. You can withdraw your consent at any time without this affecting the lawfulness of the processing carried out to date. If consent is withdrawn, we will cease the corresponding data processing. Sending our newsletter is not technically possible without consent to the collection of this information. On request, we will be happy to send you the requested information outside of a newsletter subscription.

Cookies are small text files that can be stored on your computer for various purposes. Cookies can have various functions. For example, some cookies enable the user to use the website more conveniently, others log user behaviour or help to identify users when they visit a website again.

If cookies are not technically necessary (e.g. shopping basket cookies as part of a purchasing process in a web shop are regarded as "technically necessary"), they require the user's consent.

Cookies are primarily used in the area of online marketing when personalised advertising is to be placed. The term "targeting" is used to summarise the activities that enable the target group-oriented display of advertising on websites. A continuation of this advertising strategy is so-called retargeting, in which a provider/advertiser marks the customer by means of a tracking cookie when they visit the company's own homepage and then follows them as they browse the Internet and regularly displays their own adverts as banners on third-party sites in order to remind them specifically of their own products.

Cookies that are required to carry out the electronic communication process or to provide certain functions desired by you do not require consent in accordance with § 25 TDDDG.

If we wish to install cookies that are not required to provide the services requested by you as a user (e.g. to recognise you in the context of "tracking"), these cookies always require your prior consent. If we wish to make use of this, we will ask you in advance to give us this voluntary consent.

We use a tool to obtain consent ("consent manager"). This tool provides you with detailed information about the cookies used. You can access the tool at any time via the checkbox (default: bottom left) on the screen or via the following link in the privacy policy.

Our website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, we will remove such links immediately. Please note the privacy policy of the third party to whose site the link leads.

Please note that when you access a link, in some cases the third party (e.g. Facebook, Instagram, YouTube) analyses the route you took to reach it. They can determine the address from which you accessed the link (our website), your IP address and other data. For example, if you have a Facebook account and are currently logged in there, Facebook is then able to assign this information to your account.

If you do not wish this to happen, please do not use the link on our website. Please note the data protection declarations of the third parties to whose site the link leads.

1.8.1 Special links to Facebook, Instagram and others

You can access our presentations on Facebook, Instagram and YouTube via our website. We use corresponding icons for this purpose. If you position the cursor over one of the icons, you will see the link at the bottom left of the screen, which can be accessed by clicking on it. As soon as you click on the icon, you will be redirected to this page. Please note that by doing so you are leaving our company website and are subject to the terms and conditions of use there. In principle, these providers collect personal data about you, e.g. which website you came from, etc. It is also possible that the provider will install cookies on your computer. If you want to find out more about this or exercise your rights vis-à-vis these providers, you can do so directly with the specific providers.

1.9.1 Special link: YouTube

You have the option of watching video sequences. We have implemented this on our website in such a way that you will see an image symbol for this. By clicking on this image, you will be redirected to the YouTube website via the link set up for this purpose. The image symbol shows an arrow in a circle, which symbolises the playing of a video:

Please note that by clicking on the link / clicking on the image, you are leaving our website.

YouTube belongs to "Google". If you use this link to YouTube, Google Ireland Limited and presumably Google Inc. in the USA will receive, among other things, information about where you have accessed their site from. Details can be found in the YouTube terms of use under YouTube terms of use or in Google's privacy policy at https://policies.google.com/privacy?hl=deentnehmen.Please note that by clicking on these links, Google also receives information about your web visit, which it can use for its own purposes in accordance with its terms and conditions.

You can enter a dealer search via the "Find dealer" area. There may be several dealers in the search area. We use Google Maps to display the locations of these dealers. Google Maps has been integrated into our website for this purpose. Since this procedure transmits your personal data (e.g. IP address etc.) to Google and Google can use this for its own purposes, we require your voluntary consent for this use of Google Maps. If you have not given this consent via the Consent Manager, this display function cannot be used.

Below are links from Google for the use of the tool:

Details can be found in the terms of use for Google Maps under Terms of Use for Google Maps or in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/. Please note that by clicking on these links, Google also receives information about your web visit, which it can use for its own purposes in accordance with its terms and conditions. If you do not wish this to happen, you should execute these links in a separate window - in private mode if necessary

Art. 12 - 23 GDPR regulate the rights of the data subject, i.e. your rights regarding the handling of your personal data. These are essentially vis-à-vis us:

• Right to information at the latest at the time of collection in accordance with Art. 13 GDPR, which we fulfil through this privacy policy.
• Right to information in accordance with Art. 15 GDPR
• Right to erasure in accordance with Art. 17 GDPR
• Right to restriction of processing in accordance with Art. 18 GDPR
• Right to object in accordance with Art. 21 GDPR
• Where applicable: Right to data portability in accordance with Art. 20 GDPR

We will support you in asserting your rights in accordance with the GDPR and other legal provisions.

For enquiries regarding the exercise of your rights, please contact the above-mentioned office of our company. Please understand that, in the interests of the rights of other persons, we can only provide personal information if you can identify yourself appropriately.

You also have the right to lodge a complaint with a supervisory authority of your choice. As a rule, the competent authority is the state data protection officer of the federal state in which our company is based - in our case, this is the state data protection officer of Baden-Württemberg. A list of data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Social plugins are usually icons (small images) behind which there is a link to another provider. However, the special feature of such plugins is often that personal data of the visitor is already transmitted to these providers when a website visitor calls up a page on which such a plugin is placed.

We do not use social plugins. Instead, we use buttons with a link to the respective providers. Details can be found above under "Links to other websites".

We use fonts from external providers (e.g. Adobe). We have already installed these on our web server so that there is no connection with the provider of these fonts at runtime and therefore no data exchange takes place.

However, in the event that we integrate tools (e.g. Google Maps) on the basis of your consent, these often reload the fonts from the provider. Your consent also includes this procedure, as we cannot technically prevent this.

Web analysis programs are generally not used to identify website visitors, but rather for statistical purposes in order to optimise our own website. Among other things, it is important to know how anonymised visitors move around our website. The IP address should always be shortened in such a way that it is no longer possible to identify the person concerned. The legal basis for this is usually Art. 6 para. 1 lit. f GDPR ("balancing of interests") or consent in accordance with Art. 6 para. 1 lit. a GDPR. In addition, such programmes often also use cookies (see above), which require consent.

1.14.1Matomo Analytics with cookies

We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. This is an open source tool for web analysis. Matomo does not transmit any data to servers that are outside the control of RAUCH. Matomo does not collect any session data without your consent (via the consent tool).

Matomo uses cookies. These text files are stored on your computer and enable RAUCH to analyse the use of the website. For this purpose, the usage information obtained by the cookie is transmitted to the RAUCH server and stored so that usage behaviour can be evaluated. The IP address is anonymised by truncating the last two blocks of the IP4 address. This takes place on our servers. Third parties do not receive any personal data relating to this process.

Due to the setting of cookies for our analyses, we require voluntary consent for this, which we ask for using our consent tool. We would like to ask you to give this consent, as despite this procedure you are considered "anonymous" to us and we do not carry out any user-specific analyses.

RAUCH Landmaschinenfabrik GmbH sees this analysis as part of its Internet service. The aim is to further improve the website and customise it even more to the needs of users.

If you consent to web analysis using Matomo, the following data will be collected when you access individual pages of our website

• IP address of the user's accessing system with shortening to 2 bytes for anonymisation
• The website accessed
• The website from which the user accessed the website (referrer)
• The subpages that are accessed from the accessed website
• The time spent on the website
• The frequency with which the website is accessed

The software runs exclusively on the servers of our website. The user's personal data is only stored there. The data is not passed on to third parties.

1.14.2 Google Tag Manager

Google Tag Manager is used on this website. Google Tag Manager is a solution from Google Inc. that allows companies to manage website tags via an interface. Google Tag Manager is a cookie-less domain that does not collect any personal data. Google Tag Manager triggers other tags, which in turn may collect data and may require your consent. We hereby point this out separately.

The Google Tag Manager does not access this data. If deactivation has been carried out by the user at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Further information on Google Tag Manager can be obtained directly from Google via the following link. Please note that Google can track how you came to Google.

https://policies.google.com/privacy?hl=de

1.14.3 Order processing in the online shop and customer account

We process our customers' data as part of the ordering process in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery or fulfilment.

The processed data includes contact data, contract data, payment data, service information, communication data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping basket and permanent cookies to store the login status.

The use of cookies does not require separate consent in accordance with Section 25 (2) No. 2 TDDDG because it is necessary to fulfil the customer's request.

The processing of the actual order process is based either on a contractual relationship (initiation or execution) with the data subject himself (Art. 6 para. 1 lit. b GDPR) or in the B2B environment on the basis of a balancing of interests (Art. 6 para. 1 lit. f GDPR) with the aim of operating the joint business relationship. Legal obligations (e.g. archiving obligations) must also be observed (Art. 6 para. 1 lit. c GDPR).

The information marked as necessary is required to establish and fulfil the contract. We only disclose the data to third parties in the context of delivery, payment or within the scope of legal authorisations and obligations towards legal advisors and authorities. The data is only processed in third countries if this is necessary for the fulfilment of the contract (e.g. at the customer's request for delivery or payment).

Users can optionally create a user account in which they can view their orders in particular. As part of the registration process, users are provided with the required mandatory information. The user accounts are not public and cannot be indexed by search engines. If users have cancelled their user account, their data will be deleted with regard to the user account, subject to their retention is necessary for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account remains until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of users to back up their data before the end of the contract in the event of cancellation.

We store the IP address and the time of the respective user action as part of the registration and renewed logins and utilisation of our online services. This data is stored on the basis of our legitimate interests and those of the user in protection against misuse and other unauthorised use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.

The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of storing the data is checked annually (note: not only every 3 years!!!); in the case of legal archiving obligations, the deletion takes place after their expiry (usually after 6, 8 or 10 years).

We make every effort to take all technical and organisational measures to store your personal data in such a way that it is not accessible to third parties. In the case of communication via an unencrypted e-mail, we cannot guarantee complete data security, so we recommend that you send confidential information via an encrypted channel or by post.

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in the browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Facebook:

We have a presence on Facebook. The provider of this social network is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as "Meta").

Information on the processing of personal data by the provider can be found in the provider's privacy policy at the following link https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.

In connection with the operation of our Facebook fan pages, Facebook provides us with so-called Page Insights data. This data is anonymous statistics that we use to analyse the quality of our Facebook page and its content. These statistics are compiled on the basis of the usage data collected by Facebook about your interaction with our Facebook page; we have no access to this usage data. You can find more information about the use of your data in this context at the following link https://de-de.facebook.com/legal/terms/information_about_page_insights_data.

With regard to Page Insights data, we have a joint responsibility agreement with Meta in accordance with Art. 26 GDPR(https://de-de.facebook.com/legal/terms/page_controller_addendum).

Instagram:

We have a presence on Instagram. The provider of this social network is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as "Meta").

Information on the processing of personal data by the provider can be found in the provider's privacy policy at the following link https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

In connection with the operation of our Instagram profile, Meta provides us with so-called Page Insights data. This data is anonymous statistics that we use to evaluate the quality of our Instagram profile and our content. These statistics are compiled on the basis of the usage data collected by Meta about your interaction with our Instagram profile; we do not have access to this usage data. You can find more information about the use of your data in this context at the following link de-de.facebook.com/legal/terms/information_about_page_insights_data. With regard to Page Insights data, we have a joint responsibility agreement with Meta in accordance with Art. 26 GDPR(https://de-de.facebook.com/legal/terms/page_controller_addendum).

LinkedIn:

We have a presence on LinkedIn. The provider of this social network is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Information on the processing of personal data by the provider can be found in the provider's privacy policy at the following link https://www.linkedin.com/legal/privacy-policy.

In connection with the operation of our LinkedIn profile, LinkedIn provides us with so-called Page Insights data. This data is anonymous statistics that we use to analyse the quality of our Instagram profile and our content. These statistics are compiled on the basis of the usage data collected by LinkedIn about your interaction with our LinkedIn profile; we do not have access to this usage data. You can find more information about the use of your data in this context at the following link https://www.linkedin.com/help/linkedin/answer/a1338708?lang=en-US.Bezüglich of the Page Insights data, we have a joint responsibility agreement with LinkedIn in accordance with Art. 26 GDPR(https://legal.linkedin.com/pages-joint-controller-addendum).

YouTube:

We have a channel on YouTube. The provider of this social network is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Information on the processing of personal data by the provider can be found in the provider's privacy policy at the following link https://policies.google.com/privacy