Here we inform you about your rights under the General Data Protection Regulation (GDPR):
The following information explains how we collect personal data when you use our website. Personal data is any information that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
Controller for data processing
Nordmann GmbH & Co. KG
Management
Kalscheurener Str. 8
50354 Hürth
Legal representatives:
Dr.-Ing. Klaus Nordmann
Data Protection Officer of the controller
Nordmann GmbH & Co. KG
Data Protection
Kalscheurener Str. 8
50354 Hürth
Data Protection Officer:
[email protected]
When you use our website purely for information purposes, i.e. without providing us with any other information, we only collect the personal data that your browser transmits to our server.
Our server is managed by Strato AG, Pascalstr. 10, 10587 Berlin, within the framework of a data processing agreement.
When you view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security (legal basis: legitimate interest pursuant to Art. 6(1)(f) GDPR):
| Data | Purpose of processing | Retention period |
|---|---|---|
| Operating system used | Analysis by device type to ensure optimised display of the website | Deleted when the respective session ends |
| Browser type and version used | Analysis of browsers used to optimise our website accordingly | Deleted when the respective session ends |
| Internet service provider | Analysis of internet service providers | Deleted when the respective session ends |
| IP address | Display of the website on the respective device | Deleted when the respective session ends |
| Date and time of access | Ensuring the proper operation of the website | Deleted when the respective session ends |
| Device manufacturer / terminal type | Analysis of device manufacturers and types of mobile devices for statistical purposes | Deleted when the respective session ends |
| Log files | Ensuring the proper operation of the website | Deleted when the respective session ends |
The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no option for the user to object.
Our website offers our customers the option to download additional files (installable software, updates and PDF documents). No data is collected in this process, as registration is carried out by telephone and is intended only for existing customers.
You have the option of contacting us via our contact form. The personal data transmitted to us in this way will be used exclusively for the purpose for which you provide it when making contact.
| Data | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|
| IP address at login | Transmission of form content to the web server | Consent / initiation / performance of a contractual relationship | Until end of connection |
| Date and time of registration | Transmission of form content to the web server | Consent / initiation / performance of a contractual relationship | Until end of connection |
| * Company | Direct address | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| Name | Direct address | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| * Position / Department | Improved handling of the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| Country | Processing the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| E-mail address | Processing the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| * Telephone | Improved handling of the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| * Subject | Processing the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| * Message | Processing the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
| * File attachment | Improved handling of the enquiry | Consent / initiation / performance of a contractual relationship | Until purpose achieved / end of retention obligation |
* optional field
Your consent to the processing of data is obtained during the submission process and reference is made to this Privacy Policy. Alternatively, you may contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail will be stored. No data will be passed on to third parties in this context. The data will be used exclusively for processing the conversation.
We use Google Analytics. Google evaluates the use of the website in order to compile reports on website activity for us.
| Provider | Service provider type | Data transfer to third country | Third country | Guarantees pursuant to Art. 44 et seq. GDPR |
|---|---|---|---|---|
| Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) |
Data processor | YES | United States of America | Privacy Shield |
| Data category affected | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|
| IP address (stored anonymised) | Creation and modification of cookie information | Legitimate interest | Max. 24 months |
| Device-related data (device type, model, operating system, browser type and version) | Website optimisation and aggregated usage analysis | Legitimate interest | Max. 24 months |
| Usage-related information (time of use, duration, place of origin) | Website optimisation and aggregated usage analysis | Legitimate interest | Max. 24 months |
If you do not agree to the processing for the stated purposes, you can object with a mouse click.
In the interest of transparency, we would like to point out that we use the Google Tag Manager. The Google Tag Manager itself does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements used, among other things, to measure traffic and visitor behaviour, capture the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimise websites. More information on the Google Tag Manager can be found here.
You can apply to our company electronically. We will use your details exclusively to process your application and will not pass them on to third parties. Please note that unencrypted e-mails are not transmitted with access protection.
Your personal data will not be transferred to third parties for purposes other than those listed. We will only pass on your personal data to third parties if:
In the case of data transfers outside the European Union, the high level of European data protection does not generally apply. In the case of a transfer, there may currently be no adequacy decision by the EU Commission within the meaning of Art. 45(1), (3) GDPR. Potential risks that may not be entirely excluded in connection with the data transfer include in particular:
Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR, and the right to data portability pursuant to Art. 20 GDPR. The restrictions in §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access and the right to erasure.
You also have the right to lodge a complaint with the competent data protection supervisory authority regarding the processing of your personal data by us.
You can revoke any consent you have given to the processing of personal data at any time. This also applies to the revocation of declarations of consent given before the General Data Protection Regulation came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by this.
Pursuant to Art. 21(2) GDPR, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection only takes effect for the future.
Where we base the processing of your personal data on a balancing of interests, you may object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as described. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or explain our compelling legitimate reasons to you.
Our website may contain links to websites of other providers. We would like to point out that this Privacy Policy applies exclusively to the websites of Nordmann GmbH & Co. KG. We have no influence over and do not monitor whether other providers comply with the applicable data protection regulations.
We reserve the right to change or adapt this Privacy Policy at any time in compliance with the applicable data protection regulations.
Contact us – we will be happy to advise you.