Privacy Statement of Novoferm GmbH
For the Novoferm GmbH Group Site
Consisting of
www.novoferm.com
including Extranet (www.novoferm-händler.de, www.novoferm-handwerker.de and www.novoferm-architekten.de, www.novoferm-erfolgsportal.de and www.novoferm-extranet.de), online shop and trading platform NOVOSALES
www.novoferm.de
including Extranet (www.novoferm-händler.de, www.novoferm-handwerker.de and www.novoferm-architekten.de, online shop and trading platform NOVOSALES
and the sites of the Novoferm representative offices in the countries
www.novoferm.at - Austria
including the trading platform NOVOSALES Austria
www.novofermalsal.com - Spain
www.novofermgarageporte.dk and www.novoferm.dk - Denmark
www.novoferm.cz - Czech Republic
www.novoferm.gr - Greece
www.novofermindustrie.be and www.novoferm.be - Belgium
www.novoferm.it - Italy
www.novoferm.pl - Poland
www.novoferm.bg - Bulgaria
www.novoferm.fr - France
www.novoferm.ch - Switzerland
www.novoferm-romania.ro - Romania
www.novoferm.nl - The Netherlands
www.novoferm.co.uk - United Kingdom
www.novoferm.hu - Hungary
Last revised: 24/01/2023
General Information About Privacy
(1 ) Novoferm GmbH is happy to see your interest in our corporate group and its products. As Novoferm is a global company, we operate a number of different websites around the globe. Novoferm GmbH is responsible for operation of the group site of the European corporate group (controller) on the basis of the EU General Data Protection Regulation (hereinafter: GDPR). Since the company headquarters are located in Germany, German data protection authorities have jurisdiction pursuant to the German Federal Data Protection Act (hereinafter: BDSG).
This is the controller:
Novoferm GmbH
Venue: Coesfeld Local Court, HRB 7771
Value-added tax identification number: DE811152143
Represented by the managing directors
Rainer Schackmann, Dipl.-Ing., CEO
Thomas Hage, Dipl.-Kfm.
Dr. René Schmitz
Data protection officer: Thorsten Werbeck
Isselburger Strasse 31
D-46459 Rees
Phone: (+49 ) 02850-910-0
Fax: (+49) 02850-910-646
Internet:
www.novoferm.com(Novoferm Group)
www.novoferm.de (Novoferm Germany)
(2) Our representative offices in the countries shown above are responsible for compliance with local data protection laws. All representative offices are obligated to compliance with the GDPR and the following privacy statement. You will find the party responsible for data protection or the data protection officer of each of the representative offices in the records of processing activities following the statement or in the legal information on each of the representative office sites.
Privacy on the Extranet for Registered Users
The Extranet in German has been designed as a B2B platform for our commercial customers in Germany. You can access the Extranet pages from our online portals for dealers (www.novoferm-händler.de), tradespeople (www.novoferm-handwerker.de) and architects (www.novoferm-architekten.de). We use these sites for the presentation of Novoferm products in Germany exclusively to registered customers whose company offices are in Germany. Novoferm Vertriebs GmbH is in charge of sales in Germany; any queries you submit from Germany will be transferred to this company. For this reason, your registration and your access to the Extranet is contingent on your giving your consent to the transfer of your data to Novoferm Vertriebs GmbH. Novoferm Vertriebs GmbH complies fully with the content of the following rules of Novoferm GmbH. Mr Thorsten Werbeck, our data protection officer, is the group officer pursuant to Art. 37 (2) GDPR as well and in charge of data protection at Novoferm Vertriebs GmbH.
Privacy on the Trading Platforms NOVOSALES, NOVOSALES AUSTRIA and the online shop of Novoferm GmbH for Registered Users
All of the trading platforms have also been designed as B2B-only platforms.
Novoferm Vertriebs GmbH is in charge of sales in Germany; any orders you submit on the trading platform NOVOSALES will be transferred to this company. Your registration and access are therefore contingent on your giving your consent to the transfer of your data to Novoferm Vertriebs GmbH. Novoferm Vertriebs GmbH complies fully with the content of the following rules of Novoferm GmbH. Mr Thorsten Werbeck, our data protection officer, is the group officer pursuant to Art. 37 (2) GDPR as well and in charge of data protection at Novoferm Vertriebs GmbH.
This is the controller:
Novoferm Vertriebs GmbH
Venue: Coesfeld Local Court, HRB 12057
VAT identification number: DE 815126260
Represented by the managing director
Rainer Schackmann, Dipl.-Ing., CEO
Norbert Dyx, Dipl.-Ing., Dipl.-Kfm.
Thomas Hage, Dipl.-Kfm.
Data protection officer: Thorsten Werbeck
Schüttensteiner Str. 26
D-46419 Isselburg
Phone: (+49 ) 02850-910-700
Fax: (+49) 02850-910-646
Email vertrieb@novoferm.de
Novoferm Austria GmbH is in charge of sales in Austria; any orders you submit on the trading platform NOVOSALES AUSTRIA will be transferred to this company. Your registration and access are therefore contingent on your giving your consent to the transfer of your data to Novoferm Austria GmbH. Novoferm Austria GmbH complies fully with the content of the following rules of Novoferm GmbH.
This is the controller:
Novoferm Austria GmbH
Represented by the managing director
Herrn Thomas Hage
Herrn Monther Khatib
Roter Hof 1/1
A-2000 Stockerau
Korneuburg Regional Court FN 235042a
VAT identification number: ATU 56947228
Data protection officer: Thorsten Werbeck
Phone: (+43)02266/98224
Fax: (+43)02266/9822499
Email: office@novoferm.at
The online shop for international orders and internal orders in the corporate group NOVOFERM is operated by Novoferm GmbH, which is responsible for compliance of the site with data protection law.
Our Processers Pursuant to Art. 28 GDPR and Section 62 BDSG [German Federal Data Protection Act]
(1) The company arvato systems GmbH, An der Autobahn 200, D-33333 Gütersloh, operates the website servers at the Gütersloh location and the commissioned data processing (storage and transfer to Novoferm and its distribution partners) on our behalf.
(2) The company Beyond Media GmbH, Mercedesstrasse 3, 74366 Kirchheim am Neckar (HRB 731659, Stuttgart Local Court), represented by its managing director Sven Heib, operates the website server at the Strasbourg location and the commissioned data processing (storage and transfer to Novoferm and its distribution partners) on our behalf. Our host service provider is also subject to German data protection laws.
(3) The support (including advertising), technical security monitoring and analysis of the group site is also provided by Beyond Media GmbH, Mercedesstrasse 3, 74366 Kirchheim am Neckar (HRB 731659, Stuttgart Local Court), represented by its managing director Sven Heib. The anonymous or pseudonymised data of our users are analysed on the basis of a contract for commissioned data processing pursuant to Art. 28 GDPR and Section 62 BDSG. Beyond Media GmbH, our service provider, is also subject to the Germany data protection provisions and is contractually obligated to confidentiality as well.
(4) The company AlloTools S.A., 2 Rue Kellermann, F-59100 Roubaix, France, at the location 140, Quai Du Sartel, F-59100 Roubaix, operates the “Configurator” service (with which visitors to some of our internet sites can configure their garage doors and transfer the data from the configuration to their local Novoferm distributor) and the commissioned data processing (storage and transfer to Novoferm and its distribution partners). The data security level in the EU member state France, just as German data protection law, is in conformity with the General Data Protection Regulation.
(5) The “Cookiebot” service described in Section 12 is a service offered by Cybot A/S, Havnegade 39, DK-1058 Copenhagen, Denmark. The data security level in the EU member state Denmark, just as German data protection law, is in conformity with the General Data Protection Regulation. Furthermore, all Novoferm contract partners are contractually obligated to confidentiality and are permitted to process the user data that are collected and stored for us in accordance with their contracts solely and exclusively for the purposes described in this privacy statement.
(6) We describe below in detail the advertising for our group site and how we monitor and optimise the group site in response to user interests.
(7) Please note as well the Terms and Conditions of Use found on the internet site of our group site that you visit and the supplementary information of our representative offices concerning the special regulations specific to the country where your Novoferm representative office is located.
(8) We operate the online shop Tormaticsales for registered users of the internet site www.tormatic.de on behalf of Novoferm tormatic GmbH on the basis of the Terms and Conditions of Use made public there and of the privacy statement of Novoferm tormatic GmbH; as the processor pursuant to Art. 28 GDPR and Section 62 BDSG, we are also legally and contractually subject to the provisions of these documents. User data are accessed solely and exclusively by the client. Any transfer of the data to which users have given their consent also takes place on the basis of the privacy policy of Novoferm tormatic GmbH that has been made public on the internet site www.tormatic.de.
Our Privacy Policy and Information
Section 1 Anonymous Use, Security, Analysis and Statistics
(1) Novoferm is very conscientious about the protection of the data provided by its website visitors and complies with the regulations of data protection laws. We would like to describe to you in the remarks below what personal data we ask for and store and how we work with these data. Personal data are any information that make it possible to identify a specific person. This includes in particular your name, address and telephone number, but extends as well to the IP address assigned by your provider or your email address.
(2) We seek to make most of the functions of our websites and our services available for anonymous use. Since internet sites must constantly be monitored and protected from attacks by hackers, bots and all types of malware, it is necessary to be able to identify users temporarily, as a minimum on the basis of the so-called metadata of their use of the sites. During your visits to our websites, the following data are recorded, whereby they are stored solely and exclusively for internal system-related and statistical purposes: names of the accessed pages, the browser used, the operating system and the referring domain, data and time of the access, search engines used, names of downloaded files and your IP address. All of the data related to your use of the site, especially your IP address, are erased as early as possible — no later, however, then immediately after the conclusion of your use of the site.
(3) The analysis of anonymous user data, which cannot be traced back during analysis to you personally as the user of the internet sites, helps us to determine the habits of our users so that we can design our services to be more user friendly and adapt them to the wishes and needs of our users. Our processor uses the analysis program Google Analytics for the anonymised analysis of the data. We will describe the functions of this program and the precautions taken to anonymise the user data below.
Section 2 Web Analysis Service “Google Analytics”, Opt-Out Procedure v. Cookiebot Statement
(1) This website uses Google Analytics, a web analysis service provided by Google, Inc. (“Google”). Google Analytics uses cookies (small text files, cf. also Section 12 below) that are stored on your computer and make it possible to analyse your use of the website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. The data protection laws in the USA do not at this time meet in all respects the standards of the legal requirements of European data protection laws.
(2) We have enabled the function IP anonymisation on our website. Google consequently truncates your IP address within member states of the European Union or other party states to the treaty regarding the European Economic Area before transmitting it to the USA. The full IP address is transferred to a Google server in the USA and truncated there only in exceptional cases. Google, acting on behalf of the operator of this website, uses the collected information to evaluate your activities on the website, to compile reports about the website activities and to perform further services related to the use of the website and the internet for the website operator. The IP address communicated by your browser for Google Analytics is not associated with any other data of Google.
(3) Our processor uses the latest operating standard of Google Analytics, modified to meet the data security level required by the GDPR, namely, Universal Analytics, on the basis of a contract for commissioned data processing pursuant to Art. 28 GDPR and Section 62 BDSG. Universal Analytics makes possible cross-device tracking by means of a user ID, for example, and permits user-defined measurement values/standards. In accordance with the Terms and Conditions of Use of Universal Analytics, which apply to all users, no personal data may be sent to Analytics. We have obligated our processor and our employees to comply strictly with these Terms and Conditions of Use.
(4) The direct identification of an individual user from the user ID is supposed to be excluded. Nevertheless, the program functions (see above) mean that the Universal Analytics ID is presumably to be classified as an online identifier within the sense of Art. 4 (1) GDPR and consequently as personal data.
(5) We have therefore instructed our processor and our employees not even to enable the user ID and not to send any personal data to Google. (“Best Practices: support.google.com/analytics/answer/6366371)
(6) Google continues to place a cookie, of course. It is used to process the information type of browser, operating system used, referrer URL, IP address (truncated/anonymised) and the time of the server query. You can prevent the storage of cookies by making the appropriate settings in your browser software; however, we expressly point out to you that doing so may possibly prevent you from being able to use all of the functions on this site in their full scope. If you do not wish to accept any restrictions in the possible use of the site, you should instead utilise the provided function for disabling the analysis cookies the first time you visit our website (Cookiebot procedure in Section 12) or exercise your right to object , which is possible at any time.
(7) Furthermore, you can prevent the recording of the data generated by the cookie related to your use of the website (including your IP address) at Google and the processing of these data by Google by downloading and installing the browser plugin available at this link (https://tools.google.com/dlpage/gaoptout?hl=en). When using disabling functions (so-called opt-out solutions), however, you must in general make sure that your browser or the “cleaning program” with access to your browsing history is not set so that the opt-out cookies from the third-party provider are erased. Your decision in the Cookiebot procedure (cf. Section 12) is stored for one year; at the end of this period, you will be asked again for a decision. That is why we believe this is the better procedure.
(8) You will find additional information about the handling of user data with Google Analytics in the Google privacy statement support.google.com/analytics/answer/6004245 or at http://www.google.com/intl/en/analytics/privacyoverview.html (general information about Google Analytics and privacy).
(9) Here you can deactivate Google Analytics: