Data Protection Disclaimer

We as GROHE appreciate your interest in our company, our products and our services.

We take the protection of your privacy when using our websites very seriously. In the following we are pleased to inform you about the collection of personal data.

The person responsible for processing of personal data in the context in accordance with the regulations of the European General Data Protection Regulation (GDPR) is

Grohe AG,
P.O. Box: 1361,
58653 Hemer
Germany.

You can reach our Corporate Data Protection Officer at "dataprotection(a)grohe.com".

With this privacy statement we inform you about the extent of the processing of your personal data (hereinafter only "data") within using this portal.

In the context of using this portal, our services offered therein, but also in the context of industrial fairs, exhibitions or events, you may provide us with your personal data.

The data, processing purposes, legal bases, recipients and transfers to non-EEA countries concerned (if applicable) are listed below:

a) Exchange of information and contacting

We provide you with the opportunity to request information. Information can be provided digital, written or in face-to-face meetings. You can choose randomly from the available information.

We process your personal data for the following purposes:

• sending you the requested information,
• to be allowed to contact you for further support as well as
• to ask you for feedback on our services and events.

Furthermore, we use your data for statistical purposes to measure success and further improve our services. We transmit relevant data to affiliated companies only in the context of hosting and logistics services. In the event of a personal appointment, we will pass on relevant data to the GROHE subsidiary responsible for you. Your data will not be forwarded to third parties.

If you order information material from our employees, we will transfer your address data to the company commissioned with the delivery. If it is necessary for processing, e.g. due to a high order volume, we will transmit additional contact information (e.g. your e-mail address or your telephone number) to the company commissioned with the delivery in order to coordinate a delivery date.

b) Registration in the portal

Registration may be required to use our portal. The entry of your personal data constitutes a registration request.

In order to protect your personal data, we will verify your e-mail address using a so-called "double opt-in" procedure. To prevent abuse, we will send you an e-mail after your registration, asking you to confirm your registration. In order to prove the registration process according to the legal requirements, your application will be logged. Affected are the storage of the registration and the confirmation time and your IP address. To send these e-mails, we use service providers to whom we provide the above data.

Your registration is completed by clicking on the link that we send you to verify your request.

The verification link is valid for 48 hours. If you do not complete your registration during this time, the link loses its validity and you will have to submit a new registration request in our portal.

We will obtain the following consent with your registration request:

"I would like to register in the GROHE Event Portal and use the services offered by GROHE. This includes that GROHE may send information selected by me via the communication channels I have released. I agree that GROHE may process my information for the purpose of providing information, arranging appointments, conducting surveys and for statistical purposes, and may transfer my data within the GROHE Group to the GROHE regional entity responsible for me for further support. I can revoke my consent at any time by sending an e-mail to " Gdpr-hospitality (a) grohe.com" with effect for the future".

In the event of a revocation, it may take up to 96 hours for us to process your request.

Your data will be processed on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

c) Registration for specific events

To participate in our events, it is necessary to register as a participant.

It is necessary that you provide us with the personal data required for a specific registration. Required information is marked, without which a registration cannot take place.

An automated decision making process will not be carried out.

With your registration for a specific event we obtain the following consent:

"I would like to register for a specific GROHE event. I agree that GROHE, as well as the GROHE regional entity responsible for me, may use my data for this purpose, as well as for purposes of planning, voting and communication, conducting and following up this event with surveys, and for statistical purposes. I can revoke my consent at any time by sending an e-mail to "Gdpr-hospitality (a) grohe.com" with effect for the future".

If you enter data on behalf of individual participants, and register for a specific event only on behalf of others, you ensure that you have received the same consent from the respective participant, and that you have informed the participant of his or her right to withdraw.

In the event of a revocation, it may take up to 96 hours for us to process your request.

Your data will be processed on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

d) Consent by handing over a business card within the framework of an event

As it is customary in the industry, the exchange of business cards means that you wish to be contacted by us for a specific purpose, such as further personal consultation.

In terms of data protection law, however, the handing over of a business card does not have this effect.

In order to support you during a visit to our trade fair stand or one of our events, we offer you the opportunity to give us your consent to store the data of your business card for you and to subsequently contact you in order to agree on a specific support requirement. Our staff will be happy to support you in this process.

If you only register at an event and give GROHE your business card to complete your data, but without making a further selection of specific consulting or information offers, we will obtain the following consent when you register:

"I would like to be contacted by GROHE AG and the GROHE regional entity responsible for me to arrange an appointment and to coordinate further activities. I agree that GROHE may process the data provided by my business card for this purpose, as well as for conducting surveys and for statistical purposes, and may transfer my data within the GROHE Group to the GROHE regional entity responsible for me for further support. I can revoke my consent at any time by sending an e-mail to "Gdpr-hospitality (a) grohe.com" with effect for the future".

In the event of a revocation, it may take up to 96 hours for us to process your request.

Your data will be processed on the basis of your consent in accordance with Art. 6 Par. 1 a) GDPR.

e) Photo and video recordings

In the context of trade fairs, exhibitions and events, we may take photographs and / or video recordings ("media") without your prior written consent.

Instead of written consent, we will inform you as early as possible about a recording activity. By participating in our event, for example by entering our booth, you give your implied consent by conclusive action.

Our recording activities will be open and visible, and in the case of individual recordings we will ask you, verbally or by gesture, whether you are available for recording, alone or in a group of individuals. You will always have the opportunity to object to a single shot with the respective film team.

Overall shots in which the focus is on the presentation of the event and not on the presentation of a single person / group of individuals (portrait shot) are excluded from this. Video recordings always represent an overall recording. If an overall recording is made in which persons are merely "accessories" to a scene in the sense of the law, this recording is made on the basis of our legitimate interests in accordance with Art. 6 Para. 1 f) GDPR.

We use media in the form of complete or portrait photographs, also in parts, for publications within the scope of our business activities and for the presentation of the company on intranet and internet sites, social media, print brochures, catalogues or via other forms of publication such as customer events and trade fairs, in digital and/or analogue form, worldwide.

By entering our booth, you give the following consent:

"I agree that GROHE AG may produce media from me and that I may transfer my rights to these media royalty-free, without retention of my own rights, to GROHE AG and its national subsidiaries for use within the scope of the stated purposes.
I can exercise my right of withdrawal directly towards the film team, either by implied conduct or verbal communication. I understand that in order to exercise my right of revocation, I can always signal to the film team that I do not wish to have a portrait shot of myself and can therefore revoke my consent to the film team for the respective individual case. In each individual case, my revocation has the consequence that a picture will not be taken or, if the picture has already been taken, I can have it deleted by the film team immediately after taking it.”

We will process the data accordingly on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

We also process data in the course of operating this portal.

The processing of data also includes disclosure by transmission.

The data concerned in detail, processing purposes, legal basis, recipients and transmissions to third countries are listed below:

a) Log file

We log your visit to our website. The following data is processed: The name of the retrieved web page accessed, the date and time of retrieval, time zone difference to Greenwich Mean Time, access status, the amount of data transferred, the type of browser and version, the operating system you are using, the referrer URL (previously visited Website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR. The log file will be deleted after seven days, unless it is required to clarify or to prove concrete infringements that have become known within the retention period.

b) Hosting

Hosting will store all data to be processed in connection with the operation of this website. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR. To provide our online presence, we use the services of web hosting providers to whom we provide the above data.

c) Newsletter

n order to provide you with regular information about our company and our range of service and products, we offer the dispatch of a newsletter on our website. By registering for the newsletter, we process the data entered by you (e-mail address and other voluntary information). In doing so we receive your consent as follows:

"I would like to order the Grohe AG newsletter as per my configuration of interest. I can revoke my consent at any time by using the unsubscribe link in the newsletter. "

The transmission of the newsletter by means of registration takes place on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

d) Website analysis and marketing

To enable the use of certain functions we use so-called cookies. These are short data packets that are stored on your end device and exchanged with other providers. Some of the cookies we use are deleted immediately after closing your browser (so-called session cookies). Other cookies remain on your terminal device and make it possible to recognize your browser the next time you visit us (persistent cookies).

You can delete all cookies stored on your terminal device and set the common browsers to prevent cookies from being stored. In this case you may have to change some settings each time you visit this website and accept the impairment of some functions.

We only store data for as long as it is necessary for the purposes for which it is processed or if your consent has been revoked. As far as statutory storage requirements are concerned, these requirements can regulate the retention period of certain data regardless of the purposes of processing.

a) Information

Upon request, you will receive information about all personal data that we have stored about you free of charge at any time.

For your own protection, we reserve the right to obtain further information upon request to confirm your identity in order to prevent unauthorized persons from gaining access to personal data that we undertake to protect. If identification is not possible, we reserve the right to refuse to process the request.

b) Correction, cancellation, limitation of processing (blocking), opposition

If you no longer consent to the storage of your personal data or if these have become incorrect, we will, upon appropriate instructions, arrange for the deletion or blocking of your data or make the necessary corrections (to the extent permitted by applicable law). The same applies if we are to process data in the future only in a restrictive way.

c) Data Portability

Upon request, we will provide you with your data in a standard, structured and machine-readable format so that you can, if you wish, submit the data to another person in charge.

d) Right to complain

There is a right of appeal to the competent supervisory authority:
( https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html ).

e) Right of revocation in the case of consent with effect for the future

Any given consent can be revoked at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.

f) Limitation

Data where we are unable to identify the data subject, for example, if they have been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with respect to such information if you provide us with additional information that allows us to identify it.

g) Exercising your Rights

If you have any questions regarding the processing of your personal data, information, correction, blocking, opposition or deletion of data or the desire to transfer the data to another company, please contact "Gdpr-hospitality (a) grohe.com".

Consent to process personal data can only be given by a person of full age.

To ensure the security of the data transmitted to us, we use a TLS encryption with 128 bit. You recognize such encrypted connections with the prefix "https://" in the page link in the address bar of your browser. Unencrypted pages are identified by "http://".

All data that you submit to our website - such as inquiries or logins - cannot be read by third parties thanks to SSL encryption.

In order to ensure that our data protection guidelines always comply with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information must be adjusted due to new or revised offers or services.