Data protection

1. Privacy statement

Thank you for visiting our website. Below, we would like to inform you about the handling of your data in accordance with Art. 13 General Data Protection Regulation (GDPR).

2. Responsible person

Responsible for the data processing described below is imprint named body.

3. Usage data

When you visit our websites, so-called usage data is temporarily evaluated as a log on our web server for statistical purposes in order to improve the quality of our websites. This data set consists of

  • the name and address of the requested content,
  • the date and time of the query,
  • the amount of data transferred,
  • the access status (content transferred, content not found),
  • the description of the web browser and operating system used,
  • the referral link, which indicates from which page you came to ours,
  • the IP address of the requesting computer, which is abbreviated so that a personal reference can no longer be established.

The log data mentioned above is only evaluated anonymously.

4. Data security

We take technical and organizational measures to protect your data from unwanted access as comprehensively as possible. We use an encryption method on our websites. Your information is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock icon in the status bar of your browser is closed and the address line starts with https://.

5. Required cookies

We use cookies on our websites, which are necessary to use our websites.

Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analytics, tracking, or advertising purposes.

In some cases, these cookies only contain information about certain settings and are not personally identifiable. They may also be necessary to enable user navigation, security and implementation of the site.

We use these cookies on the basis of Art. 6 (1) (f) GDPR.

You can set your browser so that it informs you when cookies are placed. This makes the use of cookies transparent to you. You can also delete cookies at any time using the appropriate browser settings and prevent new cookies from being set. Please note that our websites may then not be able to be displayed and that some functions may no longer be technically available.

Integration of other third-party technical content and functions

We use the technical functions and content from third parties mentioned below to display our websites.

When you visit our pages, content from the third-party provider that provides these functions and content is reloaded. As a result, the third-party provider receives information that you have accessed our site and the usage data that is technically required in this context.

We have no influence on further data processing by the third party provider.

Data processing is based on your consent, provided that you have given your consent beforehand via our banner solution.

Please note that the use of third-party content and features may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being notified or being able to seek legal redress. If we use providers in uncertain third countries and you consent, the transfer to an uncertain third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

Anbieter Technische Funktion oder Inhalt Angemessenes Datenschutzniveau Widerruf der Einwilligung
Google jQuery (Java Script Bibliothek), YouTube-Videos (Einbettung) Für Übermittlungen in die USA ist ein angemessenes Datenschutzniveau aufgrund der Zertifizierung des Anbieters unter dem Angemessenheitsbeschluss (EU-U.S. Data Privacy Framework) gewährleistet. Wenn Sie Ihre Einwilligung widerrufen möchten, klicken Sie bitte hier und treffen die entsprechende Einstellung über unser Banner.
Hubspot CRM-System, Kontaktformulare, Marketing-Tracking Für Übermittlungen in die USA ist ein angemessenes Datenschutzniveau aufgrund der Zertifizierung des Anbieters unter dem Angemessenheitsbeschluss (EU-U.S. Data Privacy Framework) gewährleistet. Wenn Sie Ihre Einwilligung widerrufen möchten, klicken Sie bitte hier und treffen die entsprechende Einstellung über unser Banner.
Webflow Hosting- und CMS-Dienst, Darstellung und Auslieferung der Seite Für Übermittlungen in die USA ist ein angemessenes Datenschutzniveau aufgrund der Zertifizierung des Anbieters unter dem Angemessenheitsbeschluss (EU-U.S. Data Privacy Framework) gewährleistet. Wenn Sie Ihre Einwilligung widerrufen möchten, klicken Sie bitte hier und treffen die entsprechende Einstellung über unser Banner.

6. Google Analytics

We use the web analysis tool “Google Analytics” to design our websites in line with your needs. Google Analytics creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your device and read by us. In this way, we are able to recognize returning visitors and count them as such.

As part of Google Analytics, Google Ireland Limited and Google LLC support us. (USA) as a contract processor in accordance with Art. 28 GDPR. Data processing can therefore also take place outside the EU or the EEA. With regard to Google LLC, an adequate level of data protection cannot be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being notified or being able to appeal. Please keep this in mind if you decide to give your consent to our use of Google Analytics.

Data processing is based on your consent in accordance with Article 6 (1) (a) GDPR or Section 15 (3) (1) TMG, provided that you have given your consent via our banner. The transfer to a third country is based on Article 49 (1) (a) GDPR.

You can withdraw your consent at any time. Please follow this link and make the appropriate settings via our banner.

7. Tracking technologies from third parties for advertising purposes

We use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and we can see how effective our advertising measures have been.

Data processing is based on your consent in accordance with Article 6 (1) (a) GDPR or Section 15 (3) (1) TMG, provided that you have given your consent via our banner. Your consent is voluntary and can be withdrawn at any time.

How does tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below retrieve recognition features for your browser or device (e.g. a so-called browser fingerprint), evaluate your IP address, save or read recognition features on your device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by third parties to recognize your device on other websites. We can commission the relevant third parties to place advertising based on the pages we visit.

What does cross-device tracking mean?

If you log in to the third-party provider using your own user data, the respective recognition features of different browsers and devices can be linked together. For example, if the third-party provider has created its own feature for the laptop, desktop PC, or smartphone or tablet you use, these individual features can be linked to each other as soon as you use a third-party service with your login details. In this way, the third-party provider can also target our advertising campaigns across various devices.

Which third parties do we use in this context?

Below, we will list the third party providers with whom we work for advertising purposes. If the data is processed outside the EU or the EEA in this context, please note that there is a risk that public authorities may access the data for security and monitoring purposes without you being informed or being able to file an appeal. If we use providers in uncertain third countries and you consent, the transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

ProviderMaximum storage periodAppropriate data protection levelWithdrawal of consentMicrosoft Corporation (USA) Not an adequate level of data protection. The transfer is based on Article 49 (1) (a) GDPR.

Google LLC (USA) Not an adequate level of data protection. The transfer is based on Article 49 (1) (a) GDPR.

LinkedIn Coprporation (USA) Not an adequate level of data protection. The transfer is based on Article 49 (1) (a) GDPR. and make the appropriate settings via our banner.Facebook Inc. (USA An adequate level of data protection. The transfer is based on Article 49 (1) (a) GDPR.

8. Contact form

You can contact us via our contact form or directly via email.

We will first use the personal data you provide to answer your request (Art. 6 (1) (f) GDPR).

In the event that it is a contract request, your data will also be stored in our CRM system. Your data will then be processed on the basis of Article 6 (1) (b) GDPR.

We delete your data if it is no longer required and there are no legal storage requirements.

With regard to processing in accordance with Article 6 (1) (f) GDPR, you have the right to object at any time. To do so, please contact the imprint mentioned email address.

Captcha

To protect our web forms from automated inquiries, we use the reCAPTCHA tool from Google LLC (USA). As part of the captcha function, all user inputs and mouse movements that you make on our website are automatically recorded (regardless of whether you access pages that contain web forms or not). The data collected in this way is used to estimate whether the input comes from a human or an automated program.

Since the feature is provided by a third-party provider, displaying the captcha results in content from the third-party provider being reloaded. As a result, the third-party provider receives information that you have accessed our site and the usage data that is technically required in this context. In this respect, the third-party provider also receives your IP address, which is technically required to retrieve the content. In principle, we have no influence on further data processing by the third-party provider.

Data processing is based on your consent in accordance with Article 6 (1) (a) GDPR or Section 15 (3) (1) TMG, provided that you have given your consent beforehand via our banner solution.

Please note that the use of captchas may result in your data being processed outside the EU or the EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being notified or being able to seek legal redress. If we use providers in uncertain third countries and you consent, the transfer to an uncertain third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

ProviderMaximum storage periodAppropriate data protection levelWithdrawal of consentGoogle LLC (USA) Not an adequate level of data protection. The transfer is based on Art. 49 para. 1 lit. a GDPR. If you would like to withdraw your consent, please click here and make the appropriate settings via our banner. However, you will then no longer be able to use our web forms.

9. Embedded videos

On our websites, we embed videos that are not stored on our servers. To ensure that accessing our websites with embedded videos does not automatically result in content from the third-party provider being reloaded, we only display locally saved preview images of the videos as a first step. As a result, the third party provider does not receive any information.

Content from the third-party provider is only reloaded after a click on the preview image. As a result, the third-party provider receives information that you have accessed our site and the usage data that is technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third party provider. By clicking on the preview image, you give us consent to upload content from the third-party provider.

The embedding is based on your consent in accordance with Art. 6 (1) (a) GDPR, provided that you have given your consent by clicking on the preview image. Please note that embedding many videos will result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being notified or being able to seek legal redress. If we use providers in uncertain third countries and you consent, the transfer to an uncertain third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

ProviderMaximum storage periodAppropriate data protection levelWithdrawal of consentYoutube/ Google (USA) No adequate consent revoked Data protection level. The transmission is made here and is based on Art. 49 para. 1 lit. a GDPR. If you have clicked on a preview image, the content of the third-party provider will be reloaded immediately. If you do not want this reload on other pages, please stop clicking on the preview images.

10. Newsletter subscription and dispatch

You can order a newsletter on our website. Please note that we need certain data (at least your email address) to subscribe to the newsletter.

The newsletter will only be sent if you have given us express consent in accordance with Article 6 (1) (a) GDPR. After placing an order on our websites, you will receive a confirmation email to the email address you provided (so-called double opt-in). You can withdraw your consent at any time. An easy way to unsubscribe is, for example, via the unsubscribe link in every newsletter.

As part of the newsletter subscription, we store further data in addition to the data already mentioned, insofar as this is necessary so that we can prove that you have ordered our newsletter. This may include saving the full IP address at the time of ordering or confirming the newsletter, as well as a copy of the confirmation email sent by us. The corresponding data processing is carried out on the basis of Article 6 (1) (f) GDPR and is carried out in the interest of being able to account for the legality of sending the newsletter.

11. Storage period

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the above-mentioned processing purposes and there are no legal storage obligations to prevent deletion.

12. Your rights as a data subject

When processing your personal data, the GDPR grants you, as a data subject, certain rights:

Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information detailed in Article 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to immediately request the correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

Right to deletion (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted immediately, provided that one of the reasons set out in detail in Article 17 GDPR applies.

Right to restrict processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Article 18 GDPR is met, e.g. if you have filed an objection to processing, for the duration of the audit by the person responsible.

Right to data portability (Art. 20 GDPR)

In certain cases, which are detailed in Article 20 GDPR, you have the right to receive personal data concerning you in a structured, common and machine-readable format or to request that this data be transmitted to a third party.

Right of withdrawal (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled under Article 7 (3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the withdrawal is not affected.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Article 6 (1) (f) GDPR (data processing to protect legitimate interests) or on the basis of Article 6 (1) (e) GDPR (data processing to protect public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. In particular, the right of appeal can be exercised with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

Asserting your rights

Unless otherwise described above, to assert your rights as a data subject, please contact the imprint named body.

13. Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information on data protection using the following contact details:

Data protection nord GmbH Konsul-Smidt-Strasse 88
28217 Bremen
Website: www.datenschutz-nord-gruppe.de
Email: office@datenschutz-nord.de

When you contact our data protection officer, please also indicate the responsible body, which is in imprint is called.