The norelem Normelemente GmbH & Co. KG, Volmarstrasse 1, 71706 Markgröningen, Germany, wish to inform you about the data protection considerations that apply when using the website "www.norelem.de":
1. Name and address of the responsible party
norelem Normelemente GmbH & Co. KG
Volmarstraße 1
71706 Markgröningen
Telephone: +49 7145 206-0
Fax: +49 7145 206-66
Internet: http://www.norelem.de
2. Contact details of the data protection officer
norelem Normelemente GmbH & Co. KG
Volmarstraße 1
71706 Markgröningen
E-Mail: datenschutz@norelem.de
3. Deletion and restriction of personal data
Unless otherwise stipulated in this data protection declaration for individual cases, personal data will be deleted if it is no longer required for the purposes for which it was collected or otherwise processed and for which there are no longer any statutory retention obligations.
Upon request, we will delete the personal data processed by us under the conditions of Art. 17 of the GDPR. Personal data required for other and legally permissible purposes will not be deleted. This applies e.g. to personal data that is required for the pursuit of any claims to which we are entitled or that must be retained by us for reasons of commercial or tax law. Thus, documents pursuant to § 257 para. 1 No. 2 and 3 HGB as well as § 147 para. 1 No. 2, 3, 5 AO are kept for 6 years, documents pursuant to § 257 para. 1 No. 1 and 4 HGB as well as § 147 para. 1 No. 1, 4, 4a AO are kept for 10 years.
Processing of this data is restricted in accordance with Art. 18 of the GDPR, and the data are not processed for other purposes.
4. Your rights
As the person concerned, you have the following rights:
- In accordance with Art. 15 of the GDPR, you can demand information about your personal data that we process; further, you can demand information regarding the purposes of processing, categories of processed personal data, recipients or categories of recipients to which your data have been disclosed or will still be disclosed, the planned storage duration or the criteria for determination of the storage duration, the origin of your data if not collected from you, the existence of an automated decision methodology, including profiling and any meaningful information on the details, such as logic, extent, and effects, the existence of a right of correction or deletion of the data regarding yourself, the right to limitation of processing or objection to this processing, the existence of a right to complain to the supervisory authority; finally, you have the right to information on whether personal data have been transmitted to a third country or an international organisation and – if this is the case – about appropriate guarantees in connection with the transmission;
- In accordance with Art. 16 of the GDPR, you may request the immediate correction of inaccurate or the completion of your personal data stored by us;
- Pursuant to Art. 17 of the GDPR, you may request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Pursuant to Art. 18 of the GDPR, you may request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you object to its erasure and we no longer require the data, you need the data we no longer require to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR but it is not yet clear whether our legitimate grounds for processing the data override your interest;
- Pursuant to Art. 20 of the GDPR, you may request the transfer of the personal data that you provided to us, in a structured, commonly used and machine-readable format, or you can request the transfer to another responsible party;
- Pursuant to Art. 21 of the GDPR, you may object to the processing of your personal data if there are grounds for doing so that arise from your particular situation or if the objection is directed against direct advertising and the legal basis for the processing of the personal data is of legitimate interest pursuant to Art. 6 (1) S. 1 lit. f GDPR;
- Pursuant to Art. 7 Sec. 3 GDPR, you may revoke your previously given consent to us at any time. This has the consequence that in the future we may no longer continue the data processing that was based on this consent;
- Pursuant to Article 77 of the GDPR, you may lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, your place of work or the place of the alleged infringement.
If you would like to assert the aforementioned rights, you can contact us or our data protection officer at the above contact addresses in this regard at any time.
5. Login
You have the option of registering for our services and creating login details (also: customer access). For this, you must provide the following data:
- Name,
- Title,
- Address,
- Company,
- Email address,
- Telephone number,
- Password.
Registration is voluntary and is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a of the GDPR. Your data are used for the purpose of sending you our quotation and contacting you for information relevant to the quote and registration. You can view and alter your data through a personal user access. Your data are stored until you instruct us to delete them.
If we have to save your personal data to meet legal requirements, in particular under commercial and tax law, processing of your personal data is restricted correspondingly until the retention periods have passed. After this period the data will be deleted.If you register for our services or use the user account, we save your IP address and the time of the respective usage action. Storage occurs based on our and your legitimate interests in accordance with Art. 6 par. 1 sentence 1 lit. f of the GDPR for provision of our services and for protection against misuse and other unauthorised use. The user account and the data stored in this context are used to enable you to order from us and also serve to simplify the purchasing process and to access your order history. Provision of this data to third parties does not occur unless required to fulfil contractual obligations in accordance with Art. 6 par. 1 lit. b of the GDPR, or to pursue any claims that we might have, or if there is a legal requirement to do so in accordance with Art. 6 par. 1 lit. c of the GDPR. The IP addresses are deleted or made anonymous after no more than 7 days.
6. CAD data
To display CAD data relating to our products, our website uses services provided by CADENAS Konstruktions-, Softwareentwicklungs- und Vertriebs GmbH, Schernecker Str. 5, 86167 Augsburg, Germany (hereinafter "CADENAS"). In this context, your IP address and, if applicable, additional data are recorded, which CADENAS can determine in the context of the connection. In this way, CADENAS obtains knowledge of which page from our website was called up from which IP address.
We use a data-protection-friendly solution to integrate CADENAS. The described data transmission therefore first occurs when you click on the symbol for CAD data associated with our products and not when the page is loaded. With the activation click, you consent to our transmission of your personal data, as described, to CADENAS or its operator. Only its operator is responsible for the processing of your personal data after transmission to CADENAS. The legal basis for transfer of your personal data is your consent in accordance with Art. 6 par. 1 lit. a of the GDPR.
To be able to download CAD models through CADENAS, you must have a user account with us.
If you are logged in to our website or to CADENAS at the same time, CADENAS can assign the visit to the page of our website directly to your respective user account. If you use CADENAS to download CAD data, the corresponding information is transmitted to CADENAS and processed there. If you do not want CADENAS to connect the data collected from our internet services with your respective user account at CADENAS, you must log out from CADENAS and from us beforehand. We use CADENAS to improve our internet service and enable you as a user of our services to quickly and easily view and call up important information on our products. Our legitimate interest lies in the purpose of improving our services. The legal basis for use the of CADENAS are our legitimate interests according to Art. 6 par. 1 lit. f of the GDPR.
The recorded personal data may be stored on servers in third countries outside the EU or the EEA. CADENAS has established standard contracting clauses and taken other measures to fulfil the requirements of the EU for legitimisation of transfer of personal data to third countries outside the EU or EEA. Data protection information from CADENAS and information on the use of standard contractual clauses by CADENAS can be found at https://b2b.partcommunity.com/community/help/privacy.
7. Order
In the context of, and for the purpose of fulfilling pre-contractual measures and contractual obligations for our internet offer that take place on your request, and especially to fulfil your order, we use the data from your login that is required for contract fulfillment (see No. 5) as well as the following data:
- deviating delivery or invoice addresses or recipients, if applicable;
- contractual data, e.g. products ordered, shipping method, customer category;
- payment data, e.g. bank details, credit card details, payment history.
This data is collected, processed and used by us to send you the ordered goods and to send you the necessary information by email or other means. The legal basis for the processing of information is Art. 6 par. 1 s. 1 lit. b of the GDPR. If you have not set up a login and do not specify this data, we cannot process your request. If you use other means of communication to place an order with us, we will also require your aforementioned data.
The data will only be passed on to third parties insofar as this is necessary for the fulfilment of pre-contractual measures and contractual obligations according to Art. 6 para. 1 lit. b GDPR, e.g. to banks, payment service providers, credit card companies for the processing of payments and to shipping service providers for the dispatch of goods.
8. Contact form / other contacting means
If you use our contact form, you must specify your name and email address and specify your question so we can investigate your request and contact you. In addition, you can voluntarily specify your address, the company you work for, and your telephone number, as well as other data. If you use another means of communication to submit an enquiry to us, we will also need your name and contact details where we can reach you (i.e. email address, post address, telephone and/or fax number). If you do not specify this data, we cannot process your request.
Data processing for the purpose of contacting us and responding to your enquiry is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of the consent you have voluntarily provided. Without this consent, we cannot make contact with you. All personal data collected in connection with contacting us will be deleted after your enquiry has been dealt with, unless storage it is essential for other reasons (e.g. subsequent conclusion of a contract).
9. Ordering catalogues
If you use our catalogue order form, you must enter your name and email address and select which catalogue you would like to receive so that we can send you the correct catalogue. In addition, you can voluntarily specify your customer number, your title, your department and company, and your telephone number. If you use another means of communication for a request to us, we also require your name, email address and postal address. If you do not specify this data, we cannot send you a catalogue.
Data processing for the purpose of the catalogue order occurs in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided. Without this consent, we cannot send you a catalogue. All personal data collected in connection with contacting us will be deleted after your enquiry has been dealt with, unless storage is essential for other reasons (e.g. subsequent conclusion of a contract).
10. Cookies
We use cookies in the framework of our services. Cookies are small text files that are automatically created by your browser and saved on your end device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do not cause any damage to your end device and do not contain viruses or other malware. In a cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure. Cookies provide us, among other things, with information on which pages of our website are visited, in which order and how much time is spent on the respective pages. Please be aware that you can completely disable the use of cookies by making the appropriate settings in your browser
We use Cookiebot within the scope of our internet services. The provider is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, Tel: + 45 50 333 777, email: mail@cookiebot.com, company reg. No: DK34624607.
With Cookiebot we create a cookie banner with an overview of the cookies we use for our services. If necessary, we also obtain your consent through Cookiebot. The individual cookies specify the name of the cookie, the purpose the cookie is supposed to fulfil, any possible access to the cookie by third parties, and its duration of function or the time period after which the cookie is deleted. Session cookies are deleted after the end of their respective use of our services or after the end of the browser session.
Cookiebot collects the following information about your use of this website: host name of the accessing computer (IP address), browser type/version, operating system/device used and data and time of consent. After your IP address has been transmitted to Cookiebot, it is made anonymous at the earliest technically possible time through deletion of the last 8 bits of an IPv4 address or the last 80 bits of an IPv6 address. At no time is your IP address permanently stored by Cookiebot. Consequently, Cookiebot is no longer able to personally connect the processed data to you.
If you agree in the form displayed by Cookiebot on our website that additional cookies may be set on your end device by our Internet services in addition to the required cookies, Cookiebot generates and stores an individual identifier. This individual identifier is assigned by Cookiebot to each declaration of consent submitted via Cookiebot on our website. The individual identifier is saved together with the enumeration of the consent declaration in a cookie. If through Cookiebot you permit us to set all cookies, a special individual identifier for this across-the-board consent is stored in the cookie in your browser. The service life of the cookie is one year. From this cookie, our website can read out which cookies we may set on subsequent visits.
You can use the corresponding link in our data protection declaration to see what your individual identification is and when you have given any declarations of consent for our Internet services. This information is read out of the cookie that Cookiebot set in your browser. You can amend or withdraw the declarations of consent you have made at any time.
The use of Cookiebot helps us to obtain the necessary consent to be able to use cookies legally in a manner appropriate for our internet services. With the activation click, you consent to our transmission of your personal data, as described, to Cookiebot and/or its operator. Without this data transmission, use of non-required cookies in our internet services is not possible. Only its operator is responsible for the processing of your personal data after transmission to Cookiebot. The legal basis for transfer of your personal data is your consent in accordance with Art. 6 par. 1 lit. a of the GDPR.
The details on how Cookiebot processes the data obtained, as well as general information on Cookiebot, can be found in Cookiebot's privacy policy available at https://www.cookiebot.com/de/privacy-policy/.
Cookiebot uses Microsoft as a service provider, which may also process data on servers in the USA. Microsoft has established standard contracting clauses to fulfil the requirements of the EU for legitimisation of transfer of personal data to third countries outside the EU or EEA. For information on Microsoft's use of standard contractual clauses, see https://www.microsoftvolumelicensing.com/Downloader.aspx?DocumentId=17871.
11. Usage data
We use services from hosting providers such as web servers, memory space, database services, security services and maintenance services to provide our services. We, or our hosting provider, process personal data of users on our behalf in order to provide our services efficiently and securely.
When you access our website or the individual pages, information is automatically sent to the server of our website by the browser on your end device. The following information is stored in log files:
- IP address of the requesting computer,
- Date and time of the access,
- Name and URL of the retrieved file,
- Website from which the access is made (referrer-URL),
- Browser used and, if applicable, the operating system of your computer,
- Status codes and amount of data transmitted,
- Type of terminal used,
- Name of your access provider.
These data are processed for the following purposes:
- Provision of the internet services including all functions and contents,
- Ensuring a smooth connection to the website,
- Ensuring comfortable use of our website,
- Ensuring system security and stability,
- Anonymised statistical evaluation of accesses,
- Website optimisation,
- Forwarding to law enforcement authorities if there has been an unlawful interference/attack on our systems,
- Other administrative purposes.
This data is deleted after six months if it is no longer required for other purposes ( e.g. for the defence or assertion of claims).
The legal basis for the processing of information is Art. 6 par. 1 sentence 1 lit. f of the GDPR. Our legitimate interest follows from the purposes for data collection described above.
12. Services from Google
Provider of the following services from Google is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereafter “Google”).
The legal basis for the use of the following Google services are our legitimate interests according to Art. 6 para. 1 lit. f GDPR.
The personal data collected may be stored and processed on servers in third countries outside the EU or the EEA, in particular in the USA. Google uses standard data protection clauses to comply with EU requirements for legitimacy and data transfer of personal data to third countries outside the EU or EEA.
For more information on how Google handles your personal data, please see Google's privacy policy:
https://policies.google.com/privacy?hl=de.
You can find information on the use of data for advertising purposes by Google and your setting and objection options on these web pages:
https://www.google.de/policies/privacy/partners/
https://www.google.de/policies/technologies/ads/
http://www.google.de/settings/ads
http://www.google.com/ads/preferences/
a. Google Analytics
This internet service uses Google Analytics from Google. Google Analytics uses cookies. Google collects data about the visits of users to our internet service and their usage behaviour. This data is used to ensure a demand-appropriate design and continuing optimisation of our internet service, to measure the success of marketing measures, and to create statistical evaluations. Pseudonymous usage profiles are created for these purposes. The information about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request are transmitted to a Google server in the USA and saved there. The IP addresses are previously made anonymous through deletion of the last three positions. User and event data are deleted after 26 months. This information may also be transmitted to third parties where required to do so by law or where such third parties are assigned by us or by Google to process the information. Under no circumstances will your IP address be merged with other Google data.
You can object to the storage of cookies in our cookie banner. Likewise, you can prevent storage of the cookies through a corresponding setting of your browser or device. It is possible that you can then no longer use all functions of our service to the fullest extent. You can also prevent Google from collecting the data generated by the cookie relating to your website usage (including your IP address) and processing this data by downloading and installing the browser add-on available from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
b. Google Maps
This internet service uses Google Maps from Google to depict site plans, map material, terrain data, or geographic maps. Google records your IP address, which of our internet pages you have visited, as well as search terms and location data. The generated information is stored on a server in the USA. This information may also be transmitted to third parties where required to do so by law or where such third parties are assigned by us or by Google to process the information. If you use Google Maps, the additional conditions of use for Google Maps apply, which you can call up at https://www.google.com/intl/de_de/help/terms_maps.html.
13. Social media
We have set links to our appearances in social networks as part of our internet presence. No data are transmitted to the respective providers when you use our internet service. Data are transmitted only when you use one of the links to visit our web pages.
14. Advertising
If you are a customer of ours and we have received your data in connection with the sale of goods or services, we may use your data (first and last name, address and, if you work for a company, your company affiliation) for direct mail advertising for goods or services offered by us or by third parties and for customer satisfaction surveys. We can add additional data about you that we have legally obtained to this data for the above advertising purposes. For example, we can include your order history or the type of goods that you bought from us.
In order to send our direct mail advertising, we pass on your first and last name as well as the name and address of your company and, if applicable, your department to a processing service.
The purpose of this data processing is to target you as precisely as possible with advertising that matches your interests and to avoid advertising that does not appeal to you. The legal basis for the processing is our legitimate interest in direct marketing according to Art. 6 par. 1 lit. f of the GDPR.
If we conduct a customer satisfaction survey, the contracting processor sends the customer satisfaction questionnaire by post or email and evaluates the questionnaire. The processor provides us with the results of the customer satisfaction survey in an anonymous way only. It is not possible for us to connect the answers to individual customers. Participation in the survey is voluntary The legal basis for processing of the data collected through a customer satisfaction survey, to the extent it is personal data, is your consent in accordance with Art. 6 par. 1 sentence 1 lit. a) of the GDPR, which you grant us by returning the questionnaire.
Direct mail advertising requires a certain advance time before shipping in order to print and make the shipments ready for mailing. If you object to direct mail advertising, it can happen in exceptional cases that you still receive advertising from us by mail. This can occur when the production process for the corresponding mailing is already in progress when you object. That does not mean that we disregard your objection.
15. Email direct marketing to customers
If you are a customer of ours and we have received your email address in connection with your use of our services, we may use your email address for direct marketing of our own similar goods or services. This applies only if you have not objected and we inform you clearly of your option to object when we ask for your email address and with each application. For direct advertising by email, we process your email address, your name, your company if you have used our offers as an employee of a company, the data we recorded about your use of our offers, and the type of goods or services that you procured from us in order to adapt our offers to you individually. The legal basis for the processing is § 7 par. 3 of the German Fair Trade Practices Act (UWG) as well as our legitimate interest in direct marketing in accordance with Art. 6 par. 1 lit. f of the GDPR.
Direct email advertising is sent autonomously and not via a service provider. Your data are therefore not passed on to external partners.
16. Newsletter
If you would like to receive our newsletter, we need your email address. Your data are processed in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided in the so-called double opt-in procedure. Your data are used and saved for this purpose until you cancel your consent or unsubscribe from receipt of the newsletter. Unsubscribing is possible at any time through a link at the end of each newsletter, for example. Alternatively, you can also send your revocation/unsubscribe request at any time to the email address stated under points 1 and 2.
To make it possible to subscribe and unsubscribe to our newsletter and to send the newsletter, we transmit your data to a service provider for processing on our behalf.
17. Credit and solvency information
Creditreform Boniversum GmbH
Our company checks your credit rating where we have a justifiable interest in doing so. To do this, we work together with Creditreform Boniversum GmbH (hereinafter referred to as "Creditreform"), which supplies us with the necessary data. On behalf of Creditreform, we provide you in advance with the following information as required by Art. 14 of the GDPR:
Creditreform is a consumer credit agency. They operate a database which stores people's credit ratings. It is on this basis that Creditreform supplies us, as their customers, with credit rating information. Their customers include, for example, credit institutions, insurers, telecommunications companies, debt collection agencies, and mail-order companies. Within the legal regulations, some of the data stored in the information database is also supplied to other company databases, for example, for the purpose of address trading. In particular, the database at Creditreform stores the name, address, date of birth, and possibly the email address and payment history of people, for the purpose of providing information about the creditworthiness of a particular person when requested. The person requesting this information must demonstrate convincingly that they have a legitimate interest in acquiring it. The legal basis for the processing of information is Art. 6 par. 1f of the GDPR. If data are passed on to countries outside of the EU, this occurs in accordance with the “standard contract conditions”, which you can read or have sent to you from the following link:
https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE
The data are usually stored initially for three years. After this period, whether the data need to be stored for a further period is tested; otherwise, the data are deleted after three years to the day. If a case is settled, the data are deleted after three years, to the day, from the date of settlement. As required by § 882 e of the German Code of Civil Procedure (ZPO), entries in the debtors’ register are deleted after a period of three years, to the day, from the date of entry in the register. For the purpose of Art. 6 par. 1f of the GDPR, a legitimate interest in the stored information may be for the purpose of: credit decisions, claims, credit rating checks, insurance agreements, enforcement information. You have the right to obtain information from Creditreform regarding the data which they have stored about you. If the data are found to be incorrect or incomplete, you have the right to ask for them to be corrected or deleted. If it is not possible to establish whether the data are correct or not, you are entitled to ask for the data concerned to be blocked until this has been clarified. If you have given your consent for the data stored at Creditreform to be processed, you have the right to cancel this consent at any time. Cancellation of consent does not affect the legitimacy of any processing of your data that has already occurred with your consent up until the time that consent is withdrawn. If you have any objections, requests, or complaints related to data protection, you can contact the data protection officer at Creditreform at any time. This person will be able to help you quickly and reliably with any questions you may have about data protection. You can also lodge a complaint about the way your data are processed by Creditreform with the state representative responsible for data protection in the Free State of Saxony. The data stored about you by Creditreform are obtained from publicly accessible sources, from debt collection agencies and their customers. To decide your credit rating, Creditreform uses a score value based on age, gender, address, and payment history, if applicable. Customers of Creditreform use this value when making their credit decisions. Right of cancellation: Stored data are processed for essential, legitimate reasons of creditor and credit protection, which usually outweigh your interests, rights, and freedoms, or are used in order to assert, exercise, or defend against legal claims. You can contest the processing of your data only for reasons arising from special situations which are affecting you, and for which evidence must be provided. If such reasons are demonstrably present, your data are no longer processed. The body responsible for the purposes of Art. 4 No. 7 of the GDPR is Creditreform Boniversum GmbH, Hellersbergstrasse 11, 41460 Neuss, Germany. Your contact partner at the company is Consumer Service, Tel: +49 (0)2131 36845560, Fax: +49 (0)2131 36845570, email: selbstauskunft@boniversum.de. You can contact the data protection officer using the following contact details: Creditreform Boniversum GmbH, Datenschutzbeauftragter, Hellersbergstrasse 11, 41460 Neuss, Germany; email: datenschutz@boniversum.de.
18. Payment service provider
We work together with the payment service provider Adyen. Payments are processed by Adyen N.V. German Branch, Friedrichstrasse 63, 10117 Berlin, to whom we pass on the information you provided during the ordering process, together with information about your order. If you place an order for yourself personally, the data is transferred in accordance with Art. 6 par. 1 lit. b of the GDPR for fulfillment of the completed contract. If you order from us on behalf of and in the name of a company or another organisation, the transfer occurs in accordance with Art. 6 par. 1 lit. f of the GDPR due to our legitimate interest and the legitimate interest of the company for which you work to perform the contract made with us. Your data will only be passed on for the purpose of payment processing with the payment service provider Adyen and only insofar as it is necessary for this purpose.
For more information on how Adyen handles your personal data, please see Adyen's privacy policy: https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy.
Status: 31.08.2021
|
