DATA PRIVACY STATEMENT OF NOVOTRONIK GMBH

We very much appreciate your interest in our company. Use of the Internet pages of novotronik GmbH is generally possible without any indication of personal data. However, if a person wishes to make use of particular services of our company through our website, the processing of personal data may be necessary. The processing of personal data, for example name, address, e-mail address or telephone number of a data subject, will always be carried out in accordance with the basic data privacy regulations and in accordance with the state-specific data protection regulations valid for novotronik GmbH. By means of this data privacy policy, our company would like to inform the public about type, scope and purpose of the personal data collected, used and processed by us. In addition, persons concerned with this data privacy statement are provided with information on their rights

Our data privacy statement should be easy to read and understand by both the public as well as our customers and business partners. To ensure this, we would like to explain in advance the following terms that are used in this data privacy statement: “Personal data” refers to any information concerning the personal or circumstantial situation of an identified or identifiable natural person. “Data subject” is any specific natural person, whose personal data are processed by the person responsible for the processing. “Collection” is any acquisition of data concerning a natural person, e.g. via a contact form. “Processing” is the storage, modification, transfer and deletion of personal data. “Use” is the further use of personal data that goes beyond the mere processing of the same. “Consent” refers to any form of voluntary statement of intent in the form of a declaration or other unique confirmation by the data subject for the particular case with which the data subject indicates that he or she consents to the processing of personal data concerning him or her.

We have appointed a data protection representative for our company.
The contact address is:

novotronik

Signalverarbeitung und Systemtechnik GmbH
DSB
Bäumenheimer Strasse 3
D – 86690 Mertingen
E-Mail: datenschutz(at)novotronik.com

 

Every time the website is accessed by a data subject or an automated system, the website of novotronik GmbH collects a range of general data and information. These general data and information are stored in the log files of the server. The following may be collected: (1) the used browser types and versions, (2) the operating system used by the accessing system, (3) the website from which an accessing system came to our website (so-called referrer), (4) the sub-websites on our website called up by an accessing system, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that are used for security in the case of attacks on our information technology systems.

When using this general data and information, novotronik GmbH does not draw any conclusions about the data subject. Rather, such information is required to (1) correctly deliver the contents of our website, (2) to optimize the content of and advertising for our website, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack. novotronik GmbH evaluates such anonymously collected data and information statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by any data subject.

The data subject has the opportunity to register on the website of novotronik GmbH by providing personal data. The actual personal data transmitted to novotronik GmbH arises from the respective input mask used for the registration. The personal data entered by the data subject are collected and stored solely for internal use and for the own purposes of novotronik GmbH. novotronik GmbH may arrange for the disclosure to one or more processors, for example a parcel service provider, who shall also use the personal data exclusively for internal use attributable to novotronik GmbH.

By registering on the novotronik GmbH website, the IP address assigned by the Internet service provider (ISP) of the data subject, the date and time of registration will also be stored. The storage of such data takes place against the background of it being the only way in which to prevent the misuse of our services, and these data making it possible, if necessary, to clarify past offenses. It is thus that the storage of such data is required to safeguard novotronik GmbH. The disclosure of such data to third parties shall generally not take place, unless there is a legal obligation to pass on such data or the disclosure serves the enforcement of the law.

The registration of the data subject via the voluntary provision of personal data enables novotronik GmbH to provide content or services to the data subject that, due to the nature of the case, can only be offered to registered users. Registered persons are free to change the personal data provided at registration at any time or to have them deleted completely from the database of novotronik GmbH.

On request, novotronik GmbH will provide each data subject with information about which personal data about the data subject is stored. Furthermore, novotronik GmbH shall correct or delete personal data at the request or notice of the data subject, insofar as this does not conflict with statutory retention requirements.

Due to legal regulations, the website of novotronik GmbH contains information that enables a fast electronic contact to our company as well as a direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts novotronik GmbH by e-mail or via a contact form, the personal data transmitted by the data subject will be automatically stored. Such personal data transmitted to novotronik GmbH by a data subject on a voluntary basis will be stored for the purpose of processing or contacting the data subject. There shall be no disclosure of this personal data to third parties.

Novotronik GmbH processes and stores personal data of the data subject only for the period required to achieve the purpose of the storage or as provided by the European directives and regulations or any other legislature in laws or regulations to which novotronik GmbH is subject.

If the storage purpose no longer applies or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

a) Right to confirmation

Each data subject has the right, as granted by the European directive and regulatory authority, to ask novotronik GmbH for confirmation of the processing of personal data in question. If a data subject wishes to make use of this confirmation right, it can contact an employee of novotronik GmbH at any time.

 

b) Right to disclosure

Any person affected by the processing of personal data has the right, granted by the European directive and regulatory body, to obtain free information from novotronik GmbH at any time about the personal data stored about him/her as well as a copy of this information. Furthermore, the European directive and regulatory body has stipulated that the data subject has the right to the following information:

• the processing purposes
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been disclosed or are yet to be disclosed, in particular regarding recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
• the existence of a right to rectification or erasure of the personal data concerning him/her or of a limitation of the processing by the person responsible or of a right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: all available information about the origin of the data
• the existence of automated decision-making including profiling under Article 22 (1) and (4) of the GDPR and – at least in such cases – meaningful information about the logic involved and the scope and intended impact of such processing on the data subject

In addition, the data subject has a right of information as to whether personal data have been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If a data subject wishes to make use of this right of information, it can contact an employee of novotronik GmbH at any time.

 

c) Right to rectification

Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him or her. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If a data subject wishes to make use of this right of information, it can contact an employee of novotronik GmbH at any time.

 

d) Right to cancellation (right to be forgotten)

Any person affected by the processing of personal data shall have the right granted by the European directive and regulatory body to require the responsible party to immediately delete the personal data concerning him or her, provided that one of the following reasons is satisfied and the processing is not required:

• The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary.
• The data subject revokes the consent on which the processing was based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and any other legal basis for the processing is not at hand.
• The data subject submits an objection to the processing in accordance with Article 21 (1) GDPR, and there are no legitimate reasons for the processing, or the data subject submits an objection to the processing pursuant to Article 21 (2) GDPR.
• The personal data were processed unlawfully.
• The erasure of personal data is necessary to fulfill a legal obligation under Union or national law to which the responsible party is subject.
• The personal data were collected in relation to services offered by the information society pursuant to Art. 8 para. 1 GDPR.

Insofar as one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored at novotronik GmbH, they may at any time contact an employee of novotronik GmbH, who will arrange that the request for deletion be fulfilled without delay.

If the personal data have been made public by novotronik GmbH and our company is responsible for deleting personal data as the party responsible pursuant to Art. 17 para. 1 GDPR, novotronik GmbH will take appropriate measures, taking into account the available technology and the implementation costs of a technical nature, to inform other parties responsible for data processing of the published personal data that the data subject has deleted from all other data controllers any links to such personal data or copies or replications of such personal data as far as the processing is not required.

 

e) Right to restriction of processing

Any person affected by the processing of personal data has the right, granted by the European directive and regulatory body, to require the responsible party to restrict the processing if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject for a period of time that enables the party responsible to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
• The party responsible no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims.
• The data subject has objected to the processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the party responsible outweigh those of the data subject.

Insofar as one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored at novotronik GmbH, they may at any time contact an employee of novotronik GmbH, who will initiate the restriction of processing.

 

f) Right to data transferability

Any person affected by the processing of personal data shall have the right conferred by the European directive and regulatory body to obtain the personal data concerning him/her provided to a responsible party by the data subject in a structured, common and machine-readable format. It also has the right to transfer this data to another person without hindrance by the party concerned to whom the personal data have been provided, provided that processing is carried out in accordance with Art. 6 para. 1 (a) of the GDPR or Art. 9 para. 2 (a) of the GDPR or of a contract pursuant to Art. 6 para. 1 (b) of the GDPR and processing is by automated means, unless the processing is necessary for the performance of a task in the public interest or in the exercise of a public authority delegated to the party responsible.

Furthermore, in exercising its right to data transferability under Art. 20 para. 1 of the GDPR, the data subject has the right to effect that the personal data are transmitted directly from one party responsible to another, insofar as this is technically feasible and if so this does not affect the rights and freedoms of others.

In order to assert the right of data transferability, the data subject can contact an employee of novotronik GmbH at any time.

 

g) Right to objection

Any person concerned by the processing of personal data shall have the right conferred by the European directive and regulatory body at any time, for reasons arising from its particular situation, to object to the processing of personal data relating to it under Art. 6 para. 1 (e) or (f) GDPR. This also applies to profiling based on these provisions

novotronik GmbH will no longer process the personal data in the event of an objection, unless we can prove that there are compelling legitimate reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.

If novotronik GmbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling, in so far as it is associated with such direct mail. If the data subject objects to novotronik GmbH to the processing for the purposes of direct advertising, novotronik GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising from its particular situation, to submit an objection to the processing of personal data relating to it, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR unless such processing is necessary to fulfil a task of public interest.

In order to exercise the right to object, the data subject can directly contact an employee of novotronik GmbH. Furthermore, in the context of the use of information society services, notwithstanding Directive 2002/58/EC, the data subject is also at liberty to exercise its right of objection by means of automated procedures using technical specifications.

 

h) Automated decisions in individual cases including profiling

Any subject concerned by the processing of personal data shall have the right, as granted by the European directive and regulatory authority, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the party concerned, or (2) is permitted by Union or Member State legislation to which the party concerned is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) with the express consent of the data subject.

If the decision (1) is required for the conclusion or performance of a contract between the data subject and the party concerned or (2) it is done with the express consent of the data subject, novotronik GmbH shall take reasonable measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to effect the intervention of a person of the party concerned, to express his/her own position and to challenge the decision.

If the data subject wishes to assert rights with regard to automated decisions, it can contact an employee of novotronik GmbH at any time.

 

i) Right to revoke data protection consent

Any data subject affected by the processing of personal data has the right, granted by the European directive and regulatory body, to revoke consent to the processing of personal data at any time.

If the data subject wishes to assert rights with regard to automated decisions, it can contact an employee of novotronik GmbH at any time.

 

novotronik GmbH has integrated the component Google Analytics (with anonymization function) on this website. Google Analytics is a web analytics service. Web Analytics refers to the investigation, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analytics service collects data regarding the website from which a data subject came to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of time a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

For the web analysis via Google Analytics novotronik GmbH uses the addendum "_gat._anonymizeIp". By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymized by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is the analysis of visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie on the information technology system of the data subject. By using this cookie, Google is enabled to analyze the usage of our website. Each time one of the pages of this website, which is run by the party concerned and on which a Google Analytics component has been integrated, is visited, the Internet browser on the information technology system of the data subject is automatically requested by the respective Google Analytics component to submit data to Google for online analysis purposes. As part of this technical process, Google will become aware of personal data, such as the IP address of the data subject, which enable Google, among other things, to track the origin of visitors and clicks, and subsequently to enable commission billing.

The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser would also prevent Google from setting a cookie on the information technology system of the data subject. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Moreover, the data subject has the possibility of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do so, the data subject must download and install a browser add-on under the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the data subject's information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.

For further information and Google's applicable privacy policy please see www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail here: www.google.com/intl/de_de/analytics/.

Art. 6 I (a) GDPR serves as our company’s legal basis for processing procedures, where we acquire consent for a certain processing purpose. If the processing of personal data is required for the fulfilment of a contract, of which the contracting party is the respective person, as may be the case for processing procedures that are required for a supply of goods or the provision of some other service or service in return, then the processing is based on Art. 6 I (b) GDPR. The same applies to such processing operations that are required for the implementation of pre-contractual measures in cases of inquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data is necessary, for example for the fulfilment of fiscal obligations, then such processing is based on Art. 6 I (c) GDPR. In rare cases, the processing of personal data may be necessary to protect vital interests of the data subject or another natural person. This would be the case if a visitor to our company became injured, which would require the provision of his name, his age, his health insurance data or other vital information to a doctor, hospital or other third parties. Then the processing would be based on Art. 6 I (d) GDPR. Ultimately, processing operations could be based on Art. 6 I (f) GDPR. Processing operations are based on this legal basis if not covered by any of the above-mentioned legal bases if the processing to maintain a legitimate interest of our company or a third party is required, as long as the interests, basic rights and fundamental freedoms of the data subject do not outweigh this. Such processing operations are particularly allowed as they were specifically referred to by European legislature. It argued that a legitimate interest can be assumed if the person is a customer of the responsible party (recital 47 clause 2 GDPR).

If the processing of personal data is based on Article 6 I (f) GDPR, our legitimate interest is the implementation of our business activities for the benefit of the well-being of all our employees and our shareholders.

The criterion for the duration of the storage of personal data is the respective legal period for safekeeping. After expiration of this deadline, the corresponding data will be routinely deleted in so far as it is no longer required for the fulfilment of contract or contract initiation.

We inform you that the provision of personal data may be required by law (e.g. tax regulations) or arise from contractual arrangements (e.g. information on the contractual partner). In certain cases, it may be necessary for a contract conclusion that a data subject makes available personal data to us, which subsequently have to be processed by us. The data subject may be obliged to make available to us personal data, if our company concludes a contract with said person. A failure to provide the personal data would result in the contract not being concluded with the data subject.

As a responsible company we do not use any automatic decision-making or profiling.

 

 

NOTE: The English version of the Data Privacy Statement of novotronik GmbH is provided for information purposes only. As the sole place of jurisdiction is the Federal Republic of Germany, only the German version of the Data Privacy Statement (“Datenschutzerklärung”) shall be legally binding.