Privacy policy

Status: 02/2023

NOVOFERM GmbH appreciates your interest in our group of companies and its products. As a global company, NOVOFERM GmbH and its group companies operate a range of websites and digital services. When using our websites and digital services, we want you to feel comfortable and secure and see our implementation of data protection as a customer-orientated quality feature.

You can find more detailed information on the following points below:

This privacy policy informs you about the type and scope of the processing of your personal data by NOVOFERM GmbH, Schüttensteiner Straße 26, 46419 Isselburg and its affiliated companies ("NOVOFERM", "we" or "us") as the controller within the meaning of the General Data Protection Regulation ("GDPR").

It applies to:
 

and

Personal data means any information relating to an identified or identifiable natural person that you provide to us, that is generated by us or that is otherwise collected by us.

The processing we carry out concerns the following data:

Registration data
In order to use the online services, you must register and open the required user account. As part of your registration, you may have to enter personal data such as name, address, contact details such as telephone number and e-mail address and set a password. We may collect further personal data in order to check your authorisation to register.

Login data
In order to use the online services, you must log in with your respective user account. As part of your registration, we process your authentication data such as user name and password.

Order data
If you order goods via the online services, the data you enter and the content data about you (in particular contact details and delivery addresses) as well as the information provided to you by us will be processed.

Applicant data
If you apply to us via our websites, we process the data you provide in this context, in particular your contact details, CV, cover letter and references. We do not collect and process any special types of personal data, such as health data, unless you provide us with this information voluntarily, e.g. because you want us to be able to take special legal requirements into account (e.g. severe disability).

Content data when using the online services and websites
If you provide content data when using the online services and websites, e.g. (i) use an opportunity to contact NOVOFERM, (ii) contact other users or third parties, (iii) register for a newsletter or (iv) create a process-related enquiry to third parties by using our contract initiation tools (v) or create an enquiry to us by using third-party contract initiation tools, the data you enter will be processed.

Contact details
When using our websites and online services, you have the option of contacting third parties. In this case, we process the contact details you provide to us, such as your name, email address and telephone number.

Usage data
When you use the online services and websites, we process the usage data generated, e.g. the time spent on the website. Details can be found in our information on cookies in section 4. We store this data under a pseudonym, which enables us to track how our websites and online services are used. Insofar as we use cookies or similar technologies on the basis of legal authorisation or with your consent, we process the information collected with the help of these technologies about your use of our services via your end device, including the date and time.

Server log data
When you use the online services or websites, we process data about this on our servers (e.g. the URL, the browser used, the operating system and the requesting domain, the date and time of access, search engines used, names of downloaded files and your IP address).

Your user account
When you register and access a user account, we process your registration data and login data to set up and manage your user account and to control access to the online services. You have access to your user account by means of a user name and the password you have chosen yourself, in which you can view your order history and enquiries, manage your orders and save and change your personal settings, among other things.
The legal basis for the processing is the existing user relationship with you (Art. 6 (1) lit. b GDPR), for the fulfilment of which the processing of registration and login data is necessary, or - if a user relationship does not exist with you (but with your employer, for example) - our legitimate interest in providing you with access to the online services (Art. 6 (1) lit. f GDPR).

For information on the processing period, please refer to section 3.

Your orders
We process your order data to process the order via the Online Services and to deliver the ordered goods.
The legal basis for the processing is the contract concluded with you (Art. 6 (1) lit. b GDPR), for the performance of which the processing of the order data is necessary, or - if the contract was not concluded with you/us (but with your employer/the respective NOVOFERM sales company, for example) - our legitimate interest in processing your order (Art. 6 (1) lit. f GDPR).

For information on the processing period, please refer to section 3.

Processing of an online application
If you contact us via our websites with the domain extension .de for application purposes, we process the applicant data you submit, information from public sources such as the Internet or information provided by previous employers in order to record and review your applications for a job with us, to conduct interviews, to discuss our internal decisions about your application if necessary and to issue an acceptance or rejection.

The legal basis for the processing is Art. 88 GDPR in conjunction with Section 26 (1) BDSG and Section 26 (3) BDSG (data processing for the decision on the establishment of an employment relationship).

We store your data for as long as it is required for the aforementioned purposes and delete the data of rejected applications within 6 months of notification of our decision. In the case of accepted applications, the data will be included in your personnel file. If your application is rejected and you have not previously consented to the data being stored in our applicant pool, you can voluntarily give us your consent to store your data for longer in case we have another vacancy for you at a later date.

Processing of general enquiries
If you contact us via a contact form, by email or by telephone, we will process the information you provide (content data) in order to respond to your enquiry. If you contact us using the online services, we will also process your login data so that we can allocate the enquiry to your user account.

To prevent misuse, we also process your log data when you use a contact form, in particular the IP address and date/time of the enquiry.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to answer your enquiries or - if your enquiry is aimed at the initiation or execution of a contractual relationship with you or serves the execution of such a relationship - Art. 6 (1) lit. b GDPR.

For further information on the processing period, please refer to section 3.

Processing of your enquiry addressed to third parties
If you make enquiries to third parties or respond to such enquiries when using our websites and online services, we process your content data in order to ensure the processing of enquiries. The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to process your enquiries or - if your enquiry is aimed at the initiation or execution of a contractual relationship with you or serves the execution of such a relationship - Art. 6 (1) lit. b GDPR. For further information on the transfer of data to third parties, please refer to section 4.2

For information on the processing period, please refer to section 3.

Newsletter
When using our websites and online services, you can subscribe to our newsletter, which we use to inform you about our current interesting offers, provided you give your consent. The advertised goods and services are named in the declaration of consent. If you register for the newsletter via our website, you must provide an e-mail address for dispatch. If you register via our online services, we will also use your registration e-mail address to send you newsletter e-mails.

We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you are the owner of the e-mail address provided and that you wish to receive the notifications. If you do not confirm your registration within a reasonable period of time, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

After your confirmation, we store the fact that the e-mail address or registration e-mail address you have provided can be used for the purpose of sending the newsletter. The legal basis is Art. 6 (1) lit. a GDPR.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe at any time directly in our online services by clicking on the "Unsubscribe from newsletter" field or by informing us of your request via the contact option specified in section 10. Your newsletter-related data will then be deleted. This has no effect on the storage of your other personal data on the Online Services and websites.

Your participation in competitions
If you take part in one of our competitions on the websites and in the online services, we will use your details to organise the competition, in particular to inform you and, if applicable, to send you a prize.

The legal basis for the processing is your consent given when participating in the competition (Art. 6 (1) lit. a GDPR).

Your data will be deleted when the respective competition has ended and the prizes have been distributed.

Information about our services and analysis of user behaviour.
When you use our online services and websites, we also use your data to inform you about our offers and services, to improve them and to advertise them. We use the anonymised or aggregated data obtained with the help of analysis tools to track the surfing behaviour of all visitors and thus improve the design of our website and our product range in general. For details, in particular the legal basis for the analysis tools, see section 4 below.

Provision of online services and websites
The processing of log data is necessary for technical reasons and to ensure system security in order to provide the websites and online services and to provide the services.

The legal basis for the processing is our legitimate interest in providing the websites and online services (Art. 6 (1) lit. f GDPR). If there is a user contract with you for the use of the online services, the legal basis for the processing of the data when using the online services is (Art. 6 (1) lit. b GDPR).

The log data will be deleted no later than 30 days after the end of the usage process and then analysed anonymously for statistical purposes and to improve the quality of our website.

For the processing operations carried out by us, we have indicated in section 2 how long the data will be stored by us and when it will be deleted or blocked. If no explicit storage period is specified, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. Your data will only be stored on our servers in Germany, subject to any disclosure in accordance with section 4.

However, data may be stored beyond the specified period in the event of an (impending) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the controller (e.g. Section 257 HGB, Section 147 AO). If the storage period expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

In some cases, we use service providers in compliance with the legal requirements by way of commissioned processing, i.e. on the basis of a contract on our behalf, in accordance with our instructions and under our control.
Processors are in particular

• technical service providers that we use to provide the websites and online services, e.g. service providers for software maintenance, app programming, data centre operation and hosting
• technical service providers that we use to provide functionalities, e.g. technically necessary cookies
• Service providers that we use to provide the applicant pool and applicant management.
• Service providers for the practical realisation of advertising and marketing, e.g. service providers for sending emails and analysis cookies.

In these cases, we remain responsible for data processing; the transfer and processing of personal data to or by our processors is based on the legal basis that allows us to process the data in each case. A separate legal basis is not required.

A list of our processors is available on request at datenschutz@novoferm.com.

In some cases, we also transfer your data to third parties, i.e. partners with whom we work outside the scope of commissioned processing.

Such partners provide their services as their own controllers; only their data protection notices apply to the processing of your data by partners.

If you send enquiries to third parties, e.g. other NOVOFERM companies or NOVOFERM partners, via the communication tools provided on the websites, we will transmit your enquiry and your contact details to them.

The legal basis for the transmission is our legitimate interest in transmitting your enquiry (Art. 6 (1) lit. f GDPR).

When using the online services, we transmit your data to the following third parties:

NOVOFERM sales companies/distribution partners
When placing orders within the online services, NOVOFERM often does not become your contractual partner. In these cases, you conclude a contract with the NOVOFERM sales company responsible for processing your order or the relevant NOVOFERM sales partner. In order to process your order, we transmit your enquiry to the NOVOFERM sales partner or the NOVOFERM sales company, including the order data required for order processing. The legal basis for the processing is the existing user relationship with you (Art. 6 (1) lit. b GDPR) or, if you are not our contractual partner for the use of the online services, our legitimate interest in processing your order (Art. 6 (1) lit. f GDPR).

Other NOVOFERM partners
For other enquiries, e.g. for installation support, within the online services, we transmit your personal data to NOVOFERM companies or NOVOFERM partners who can help you with your enquiry.
The legal basis for the processing is the existing user relationship with you (Art. 6 (1) lit. b GDPR) or, if you are not our contractual partner for the use of the online services, our legitimate interest in processing your enquiry (Art. 6 (1) lit. f GDPR).

Enquirer
If you have received an enquiry from NOVOFERM as described in Section 4.2.1 and Section 4.2.2 and respond to it, we will transmit your personal data to the enquirer.
The legal basis for the processing is the existing user relationship with you (Art. 6 (1) lit. b GDPR), or, if you are not our contractual partner for the use of the online services, our legitimate interest in transmitting your response (Art. 6 (1) lit. f GDPR).

Logistics companies
To transport goods and send marketing materials, we transmit your address and contact data to parcel delivery companies, postal service providers and freight forwarders where necessary.
The legal basis for the transmission is our legitimate interest in processing your order (Art. 6 (1) lit. f GDPR) or, if you yourself are a contractual partner for the use of the online services, the performance of the contract with you (Art. 6 (1) lit. b GDPR).

The above-mentioned processors (section 4.1) or third parties (section 4.2) may also include entities abroad. If these are entities in countries outside the European Economic Area that are not covered by an adequacy decision of the EU Commission ("third countries"), we will either ensure that we implement sufficient guarantees for your personal data or that one of the legal exceptions applies. As guarantees in accordance with Art. 46 (2) lit. c GDPR, we regularly use EU standard contractual clauses adopted by the EU Commission with recipients in third countries not recognised as safe. Nevertheless, in some countries there is a risk that your data may be demanded by national authorities for control and monitoring purposes without the conditions being clearly regulated or corresponding legal remedies being available. Insofar as such risks exist, which are considered unreasonable by the jurisdiction of the European courts (for example, as in some constellations in the case of the USA), we will take additional protective measures and agreements as far as possible. Please contact us (see section 10) if you would like more information or a copy of the guarantees. In some cases, we also obtain your express consent in accordance with Art. 49 (1) sentence 1 lit. a GDPR for this data transfer to recipients in unsafe third countries. This is the case, for example, if our partners use cookies or comparable technologies on our website. If you give your consent, you accept that the risks described above, in particular access to your data by foreign authorities, will occur without further guarantees being agreed or additional protective measures being taken.

When you use our websites and online services, technical aids are used for various functions, in particular cookies, which can be stored on your end device. Cookies are text files or information in a database that are stored in the device memory of your end device and assigned to the web platform or websites you use. Cookies can be used to provide certain information to the organisation that sets the cookie. Another technical tool is so-called tracking pixels, which are not stored on the user's hard drive but can help identify the computer in the same way as a cookie. In the following, the term "cookie" covers both cookies in the technical sense and tracking pixels and similar technical methods. Cookies cannot execute programmes or transfer viruses to your end device, but are primarily used to make the website faster and more user-friendly.

The online services and websites use the following types of cookies, whose function and legal basis are explained below. Further details can be found in the cookie banner or in the cookie settings of the respective websites and online services.

We use different categories of cookies in our online services and on our websites. Necessary cookies, without which the functionality of our websites and online services would be limited, and optional cookies (e.g. statistics), which generally originate from third-party providers. The type and number of optional cookies may differ depending on which of our websites or online services you use. You can call up an overview of the cookies we use on the websites and the providers that receive personal data from you with the help of the cookies, as well as the duration of the cookies via the cookie banner or the cookie settings of the respective websites and online services. There you will find further information on the individual providers and cookies that goes beyond the following.

These cookies are essential to enable you to move around our websites or online services and use their features. They store, for example, which products you have placed in your shopping basket or the progress of your order process, or they store whether you agree to the use of cookies and your selection in the cookie settings.

These cookies do not collect information about you to be used for marketing purposes or where you have been on the internet. These cookies are usually session-specific and expire after your visit to the websites or online services (session), unless the respective functionality requires storage beyond this (e.g. saving the cookie setting).

Deactivating this category of cookies would restrict the functions of the websites or online services as a whole or parts thereof. It is therefore not possible.

The legal basis for the use of technically necessary cookies and the processing of your data by these cookies is our legitimate interest in displaying the functions of our websites or online services to you and making them available for use (Art. 6 (1) lit. f GDPR) or, if you yourself are a contractual partner for the use of the online services, the execution of the user contract with you (Art. 6 (1) lit. b GDPR).

We use functional cookies to improve and simplify the use and performance of our websites and online services and to offer you additional optional functions.

The legal basis for the use of functional cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time in the cookie settings, which you can access via the link at the bottom of the websites or online services.

We use marketing cookies to better target adverts to you and your interests. They are also used to limit how often you see the same ad, to measure the effectiveness of an advertising campaign and to understand people's behaviour after viewing an ad. These cookies are usually placed on websites by advertising networks with the consent of the website operator (i.e. us in this case). They recognise that a user has visited a website and pass this information on to other companies, e.g. advertising companies, or adapt advertising themselves accordingly. They are often linked to a website functionality provided by this company. We therefore use these cookies to establish a link with social networks, which can then use the information about your visit to tailor the advertising on other websites to you, and to provide the advertising networks we use with information about your visit so that you can later be presented with exactly the advertising that you are potentially really interested in based on your browsing behaviour. Even in these cases, we do not combine the data collected with these cookies with other information about our users.

The legal basis for the use of marketing cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time in the cookie settings, which you can access via the link at the bottom of the websites or online services.

Google AdWords
Some websites and online services use Google Conversion Tracking, for example. If you have reached our websites via an advert placed by Google, Google AdWords will place a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our websites and online services and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

Further information on data processing by Google can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

Google Remarketing
Individual websites and online services use the remarketing function of Google Inc. This function is used to present interest-based adverts to website visitors within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with adverts that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

Further information on data processing by Google can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

Facebook Pixel
Furthermore, some of the websites and online services use advertising measures of Facebook Inc ("Facebook"). By integrating the so-called "Facebook Pixel" on our website, we can display our advertising measures ("Facebook Ads") to users of our website and the social network Facebook and measure and evaluate their success ("Conversion Tracking"). This connection between Facebook and our website takes place technically via the "Facebook Pixel". Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server when you visit our website. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore present you with the processes known to us: By integrating the Facebook pixel, Facebook receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advert from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will find out your IP address and other identifying features and use them to create a profile.

Further information on data processing by Facebook can be found at Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; privacy policy: www.facebook.com/about/privacy.

Statistics cookies collect information about how you use a website or web platform overall, for example, which pages you visit most often and whether you receive error messages from online services or websites.
The data collected with these cookies is not merged with other information about our visitors. All information collected with the help of these cookies is used exclusively to understand and improve the functionality and service of the websites and online services.
The legal basis for the use of statistics cookies and the processing of your data by the providers of these cookies is your prior consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time in the cookie settings, which you can access via the link at the bottom of the websites or online services.

Google Analytics
To analyse our websites and online services, we use Google Analytics, a web analysis service provided by Google Inc. The information generated by the use of Google Analytics about your use of the websites and online services is transmitted to a Google server in the USA and stored there. However, by activating IP anonymisation on the websites and online services, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
In particular, Google will use this information to analyse the use of our online services by users, to compile reports on the activities within this online service and to provide us with further services associated with the use of this online service and the use of the Internet. Pseudonymised user profiles can be created from the processed data. Google may also process the information for its own purposes.

We only use Google Analytics with your consent.

Further information on data processing by Google can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

Hotjar
On our websites and online services, for example, we use the web analysis service Hotjar from Hotjar Ltd, a European company based in Malta.
We use Hotjar to analyse and regularly improve the use of our websites and online services. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. Hotjar will use this information on our behalf to analyse the use of the websites and online services, to compile reports on website activity and to provide other services relating to website activity and internet usage. The information generated by the cookie about your use of this website or online services is generally transmitted to a Hotjar server and stored there.
We use Hotjar's anonymisation function on the websites and online services. This shortens your IP address and ensures that the analysis data is not personally identifiable. We do not merge the data with other personal data.
We only use the tool with your consent. You can revoke your consent at any time in the cookie settings, which you can access via the link at the bottom of the websites. You can also opt out of the analysis function by simply activating the standard "Do not track" function in your browser. In this case, we will not process your personal data in the manner described here. An explanation of how you can activate the "Do not Track" function can be found at this link: www.hotjar.com/legal/compliance/opt-out/.

LogRocket
Websites and online services use functions of the web analysis service LogRocket. The provider is LogRocket Inc, B6201, One Kendall Square, Cambridge, MA 02139, USA. LogRocket is a JavaScript-based service that records user behaviour anonymously and makes it available for analysis. The data is stored anonymously on the servers of LogRocket Inc in the USA. You can find more information on the handling of user data in LogRocket's privacy policy: https://logrocket.com/privacy/.

reCAPTCHA
We use the "reCAPTCHA" service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google", to protect input forms on pages of our group website. By using this service, it is possible to distinguish whether the corresponding input is of human origin or is abusive due to automated machine processing.

To our knowledge, the referrer URL, the IP address, the behaviour of the website visitor, information about the operating system, browser and length of visit, cookies, display instructions and scripts, the user's input behaviour and mouse movements in the "reCAPTCHA" checkbox area are transmitted to "Google".

The IP address transmitted as part of "reCAPTCHA" will not be merged with other Google data unless you are logged into your Google account at the time you use the "reCAPTCHA" plug-in. If you want to prevent this transmission and storage of data about you and your behaviour on our websites or in our online services by "Google", you must log out of "Google" before you visit our site or online services or use the re-CAPTCHA plug-in.

The legal basis for the processing is our legitimate interest in ensuring the availability of our websites (Art. 6 (1) lit. f GDPR).
Further information on data processing by Google can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

Social plug-ins
We offer you the option of using so-called "social media buttons" on our websites. To protect your data, we use the "Shariff" solution for implementation. This means that these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you will be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons.

If you are visiting our websites or online services for the first time, you will be shown the data protection notice with the consent text for optional cookies on your homepage. By clicking on the individual categories (statistics, marketing and functional cookies) and then confirming by clicking on "Accept", you consent to the setting of these cookies. You can adjust and change these settings at any time in the cookie settings, which you can access via the link at the bottom of the website or in the online services.

Your consent to cookies also includes your consent to the transfer of data to third countries and the risks that may arise, in particular from access to your information by foreign authorities (see section 4.3 for details).

We use the YouTube.com platform to post our own videos and make them publicly accessible. YouTube is a service provided by a third party not affiliated with us, namely YouTube LLC.

We also integrate videos stored on YouTube directly into our websites and online services. During this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos are only called up by clicking on them separately. This technique is also known as "framing".

Further information on data processing by YouTube can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

We sometimes use Google Maps on our websites and in our online services. Google Maps is a service provided by a third party not affiliated with us, namely Google LLC.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. NOVOFERM has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the websites and in the online services.

Further information on data processing by Google can be found in the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, at: https://policies.google.com/privacy.

We protect your personal data with technical and organisational security measures in order to minimise risks in connection with its loss, misuse, unauthorised access and unauthorised disclosure and modification.

To this end, we use firewalls and data encryption, for example, as well as physical access restrictions for our data centres and authorisation controls for data access.

Our employees and our contracted service providers are naturally bound to confidentiality.

Regardless of whether you use the websites or the online services, you have the following rights with regard to the processing of your personal data:

• If you have any questions about the processing of your personal data by us, we will be happy to provide you with information about the data stored about you free of charge at any time (Art. 15 GDPR).
• You have the right to have incorrect data corrected and incomplete data completed (Art. 16 GDPR).
• You have the right to block/restrict the processing or erasure of your personal data that is no longer required or stored due to legal obligations (Art. 17, 18 GDPR).
• You have the right to receive the data in a structured, commonly used and machine-readable format if you have provided us with the data on the basis of consent or a contract between you and us (Art. 20 GDPR).
• You have the right to object at any time to the processing of your data for direct marketing purposes (Art. 21 (2) and (3) GDPR).
• You have the right to object to processing on the basis of a legitimate interest, whereby we can then demonstrate our compelling reasons (Art. 21 (1) GDPR). We have indicated above when your personal data is processed on the basis of our legitimate interests (see sections 2 and 4.2).
• If you have given your consent to data processing, you can revoke this at any time with effect for the future, i.e. the legality of the data processing up to the time of revocation remains unaffected. You may no longer be able to use our services once you have withdrawn your consent.

Please address your request in writing (keyword: data protection) or by e-mail to the contact details given in section 10.

We reserve the right to check your identity so that your personal data does not become known to unauthorised persons.

You also have the right to lodge a complaint with the competent data protection supervisory authority at any time.

You can contact the data protection supervisory authority of the federal state in which you reside or the authority in North Rhine-Westphalia as the federal state in which NOVOFERM is based.

You can contact our data protection officer at datenschutz@novoferm.com.

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services or functions.

As a registered user, you will receive the new privacy policy in due course.

Status: 02/2024