DATA PROTECTION INFORMATION FOR USERS OF THE WEBSITE
OF NAECO BLUE GMBH
This data protection notice explains the processing of your personal data in the context of the provision of the website by NAECO Blue GmbH, Amselweg 5, 23611 Bad Schwartau, Germany (“we” or “NAECO Blue”) as the controller (Art. 4 No. 7 GDPR) and your rights under the GDPR.
1. PURPOSES OF PROCESSING, DATA CATEGORIES
1.1 Provision of our website
When you visit our website, we automatically collect and process data from you in order to provide our website, namely the following data
- Date and time of your access
- your IP address
- the address of the website from which you came to us (if transmitted by your device)
- the websites that you visit on our website
- information about your internet browser (e.g. browser type and version)
- the operating system of the device you use to access our website and services
The legal basis for this processing of your personal data is Art. 6 para. 1 lit. f GDPR in conjunction with our interest in making our website available to you.
1.2 Processing of the personal data provided by you
We process personal data that you provide when using certain content and functions on our website. For example, if you use the contact form, we process your personal data in order to respond to your inquiry. The same applies to contact via other channels, such as email or telephone. The legal basis for this processing of your personal data is Art. 6 para. 1 lit. f GDPR in conjunction with our interest in answering your inquiry in the best possible way and offering you a pleasant customer experience.
1.3 Use of our newsletter
You can subscribe to a free newsletter on our website if you have expressly consented to receiving it. To prevent fraudulent registrations, you will first receive an email with a confirmation link, which you must click on in order to consent to receiving the actual newsletter (so-called double opt-in procedure).
When you register for the newsletter, your e-mail address, your IP address and the date and time of your registration are transmitted to us and stored and processed by us. Your data will only be used to verify your consent to receive and send the newsletter.
The legal basis for the processing of your data in the context of sending our newsletter is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).
Your data will be stored for as long as we regularly send you the newsletter, after which your data will be deleted.
You can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. To do so, please use the unsubscribe link included in every newsletter.
1.4 Log data
When using the website, certain personal data, including the information sent by the browser (e.g. IP addresses, types of cookies, referring website, time and date, content displayed) are temporarily stored. We use this log data to enable you to use our website and, if necessary, to check and enforce our rights and the rights of third parties in the event of damage or violations of legal regulations, our terms of use and the rights of third parties. The legal basis is Art. 6 para. 1 lit. f GDPR. The log files are stored for as long as is necessary for the respective purpose, usually no longer than 14 days. Longer storage only takes place in individual cases (e.g. suspected misuse or fraud) and only to the extent necessary. The respective log files are stored until the facts of the case have been clarified and subsequent, necessary measures (in particular legal prosecution) have been completed.
1.5 Google Ads
With your consent (Art. 6 para. 1 lit. a GDPR), we use various Google services for marketing measures.
We use Google Ads to place ads in the Google search engine or on third-party websites. The provider is Google Ireland Limited, Gor-don House, Barrow Street, Dublin 4, Ireland (“Google”). Google Ads can be used to place targeted ads based on the user data available at Google. As a website operator, we can evaluate this data by analyzing, for example, which search terms led to the placement of our ads. This enables us to optimize our offer and our ads.
DoubleClick is used to show you interest-based advertising in the Google advertising network. For example, our advertising can be displayed in Google search results or in the advertising banners associated with DoubleClick. To do this, DoubleClick must be able to recognize the respective viewer and assign the websites visited to them, among other things. For this purpose, DoubleClick uses cookies or other recognition technologies.
1.6 Google Web Fonts
Our pages use Google Fonts, i.e. fonts from the third-party provider Google. These web fonts can be retrieved either locally from our server or from Google's server. In the latter case, your IP address and other data sent by the browser will be transmitted to Google. The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.
1.7 YouTube
We use the video sharing platform YouTube. YouTube is a Google service that enables the playback of audio and video files.
When you visit a page on the NAECO Blue website that has a YouTube plugin embedded, the YouTube partner player connects to YouTube to transfer the video or audio data to your device. We have embedded the videos hosted by YouTube in such a way that data is only transferred to YouTube when you click on the video to watch it. When you connect to YouTube, data is transmitted to YouTube. This also includes information about the individual pages you have visited on our website.
If you are logged in to Google, this information will be assigned to your personal account. You can prevent this assignment to your personal account by logging out of your personal Google account and other personal accounts of Google companies. NAECO Blue uses YouTube's enhanced privacy mode for embedded videos, which prevents YouTube from evaluating user behavior for personalization purposes.
If you access the video on the YouTube website by clicking on the “Watch on YouTube” link, YouTube cookies will be stored in your browser in accordance with YouTube's privacy policy. When you click on the “Watch on YouTube” link, YouTube will display corresponding data protection information and ask for your consent, unless you have been informed in another context and have given your consent. We have no influence on the duration of data storage by Google.
The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as the related rights and setting options to protect the privacy of customers can be found in Google's data protection information, which also applies to YouTube: https://policies.google.com/privacy.
1.8 Other purposes for which we process your personal data
We process your personal data:
- to fulfill contracts and in the context of existing or new business relationships. We retain this personal data for at least the duration of our business relationship. During our business relationship, we may collect contact information and professional qualification data (publications, etc.). Some data is obtained from public sources and websites. Legal basis: Art. 6 para. 1 lit. b GDPR.
- to safeguard our legitimate interests (Art. 6 para. 1 lit. f GDPR), including the following:
- Completion of corporate transactions (e.g. restructuring, asset deals, merger)
- Protection of our rights or property, enforcement of our terms of use and legal notices, and establishment, exercise and defense of legal claims
- to fulfill our legal obligations, court orders or other binding decisions. The legal basis is Art. 6 para. 1 lit. c GDPR.
- with your consent (Art. 6 para. 1 lit. a GDPR) for other purposes, such as subscribing to a newsletter; in this case, you have the option of withdrawing your consent at any time.
1.9 Use of Google Analytics
We use Google Analytics to analyze website usage. The data obtained from this is used to optimize our website and advertising measures.
Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.
During your visit to the website, the following data, among others, is transmitted to Google
- Pages viewed
- The achievement of “website goals” e.g. contact requests
- Your behavior on the pages, e.g. length of stay, clicks, etc.
- Your approximate location (country and city)
- Your internet address (IP address)
- Technical information such as browser, internet provider, end device and screen resolution
- Source of origin of your visit (i.e. which website or advertising medium you used to reach us)
- A randomly generated user ID
No personal data such as name, address or contact details are transmitted to Google Analytics.
This data is transferred to Google servers in the USA. We would like to point out that the same level of protection under data protection law cannot be guaranteed in the USA as within the EU.
Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future visits to the website.
The recorded data is stored together with the randomly generated user ID, which makes it possible to analyze pseudonymous user profiles. This user-related data is automatically deleted by Google Analytics after 14 months. Other data remains stored in aggregated form indefinitely.
If you do not agree with the collection, you can prevent this by installing the browser add-on once to deactivate Google Analytics or by rejecting the cookies via our cookie settings dialog.
2. RECIPIENTS OF PERSONAL DATA
In addition to the recipients of personal data mentioned above, we also use other companies that process personal data on our behalf, for example for hosting, technical support for our website, sending newsletters or for analysis and advertising purposes. These service providers only process the data on our behalf as processors (Art. 28 GDPR). We currently use the following service providers as processors:
- via Microsoft Forms
- 1&1 IONOS SE, Montabaur (Germany), web hosting
- Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland)
- Microsoft Cooperation, Redmond, Washington, (United States), service request via MS Forms
In addition, we transfer personal data to third parties if this is required by law, if this is necessary for the assertion and defense of legal claims or if third parties provide certain services for us (e.g. lawyers, tax consultants).
If we transfer personal data to third countries outside the EU, we ensure an adequate level of data protection by taking measures in accordance with the GDPR requirements. You have the right to receive copies of the documentation on these measures.
3. COOKIES
In addition to the processing purposes mentioned above, we also use cookies if this is technically necessary in order to be able to offer our website or certain content or if we are obliged to do so. The legal basis for the use of necessary cookies is § 25 para. 2 no. 2 TTDSG.
Cookies that are not technically necessary (e.g. for analysis purposes) are only processed with your consent. The legal basis for this is § 25 para. 1 sentence 1 TTDSG.
Unless otherwise stated in this privacy policy, cookies remain stored for as long as is necessary to fulfill the respective processing purposes. You can object to the storage of cookies through browser settings and delete them manually in your browser settings. Please note, however, that some cookies may be absolutely necessary for the use of our website or individual functions.
We use the Google Analytics service to manage cookies.
Further information about the cookies used on this website and how you can revoke or give your consent can be found here: https://analytics.google.com].
4. regular deletion of personal data
Unless a specific duration of data storage is specified in this privacy policy, we will only process your data for as long as is necessary for the respective purposes or as long as there are statutory retention obligations. Your data will be routinely deleted after the respective processing purpose has ceased to apply and the retention obligations have ended.
5. YOUR RIGHTS
As a data subject within the meaning of the GDPR (Art. 4 No. 1 GDPR), you have numerous rights vis-à-vis us, about which we would like to inform you below. Details can also be found in Articles 15 to 21 of the GDPR and Sections 32 to 37 BDSG.
To assert your rights, please contact us - informally if you wish - using the contact details provided in the first paragraph of this data protection notice.
5.1 Right to information
You can obtain information from us as to whether and what data we process about you. As the data subject, you can also obtain a copy of this data from us.
5.2 Right to rectification
You can request that we correct any inaccurate or no longer accurate information about you without delay. You also have the right to request the completion of your incomplete personal data. If this is required by law, we will also inform third parties of this correction if we have passed on your data to them.
5.3 Right to erasure
You may request that we erase your personal data without undue delay if one of the following grounds applies:
- Your data is no longer necessary for the purposes for which it was collected or otherwise processed, or the purpose has been achieved;
- You withdraw your consent and there is no other legal basis for the processing;
- you object to the processing and there are no overriding legitimate grounds for the processing
- You object to the processing;
- Your personal data has been processed unlawfully;
- the deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
Please note that your right to erasure may be restricted by legal provisions. These include in particular the restrictions listed in Art. 17 GDPR and Section 35 BDSG.
5.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if one of the following conditions is met:
- You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
- we no longer need your personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims, or
- you have objected to processing pending the verification whether our legitimate grounds override yours.
If you have obtained a restriction of processing in accordance with the above list, we will inform you before the restriction is lifted.
5.5 Right to object
If we process your data on the basis of the legitimate interests of NAECO Blue Protect GmbH or third parties or in the public interest, you as the data subject have the right to object to the processing of your data.
1. individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
2. right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising;
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made informally and should be addressed directly to us using the contact details given above under no. 1.
5.6 Right to withdraw consent
You can withdraw any consent you have given at any time with effect for the future. If you withdraw your consent, this will not affect the lawfulness of the data processing carried out up to that point. Please refer to the separate information in the respective declaration of consent for the consequences of revocation for data processing or contract performance in individual cases.
5.7 Right to data portability
You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to others. Details and restrictions can be found in Art. 20 GDPR. The exercise of this right does not affect your right to erasure.
5.8 Rights to lodge a complaint with the supervisory authority
If you believe that the processing of your data by us violates applicable data protection law, you have the right to lodge a complaint with one of the competent supervisory authorities, i.e. in particular the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover or the respective supervisory authority in the member state of your place of residence, your place of work or the place of the alleged data protection violation.
6. NO OBLIGATION TO PROVIDE DATA
The provision of personal data by you is neither legally nor contractually required. You are not obliged to provide us with personal data. However, certain data - such as the IP address - is technically necessary for us to be able to provide you with our website. You cannot use our website without providing this technically necessary data.
7. NO AUTOMATED DECISION-MAKING OR PROFILING
We do not use automated decision-making in accordance with Art. 22 GDPR when operating our website, nor do we carry out profiling/scoring.
Should we introduce these procedures in individual cases in the future, we will inform you of this separately if this is required by law.
