Data protection


General information


The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.
Analysis tools and tools from third-party providers

When you visit our website, your surfing behaviour may be statistically analysed. This is primarily done using cookies and so-called analysis programmes. Your surfing behaviour is generally analysed anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

You can object to this analysis. We will inform you about the objection options in this privacy policy.

2 General notes and mandatory information

Data protection


The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Note on the responsible body

The controller responsible for data processing on this website is

Nivona Apparate GmbH
Südwestpark 49
90449 Nürnberg

Telephone: +49 (0)911 2526630
E-mail: info@nivona.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority


In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.
Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

3 Data protection officer

Data protection officer required by law


We have appointed a data protection officer for our company.

Marc Fuchs (DATEV eG)
Sigmundstraße 172
90329 Nürnberg

E-mail: marc.fuchs@datev.de


4 Data collection on our website

Cookies


Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.

5 Analysis tools and advertising

Google Analytics


This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation


We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin


You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection


You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Order data processing


We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6 Plugins and tools

YouTube


Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy

Google Maps


This website uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/

 

Mandatory information according to Art. 12 ff. GDPR

Contact details of the controller

Surname: Wildner
First name: Peter

Contact details (business)
Company name: NIVONA Apparate GmbH
Address: Südwestpark 49
                     90449 Nürnberg

Phone: +49 911 2526630
E-mail: peter.wildner@nivona.com

Surname: Fritsch
First name: Christian

Contact details (business)
Company: NIVONA Apparate GmbH
Address: Südwestpark 49
                     90449 Nürnberg

Phone: +49 911 2526630
E-mail: 
christian.fritsch@nivona.com


Contact details of the data protection officer

Contact details (business)
Company: Marc Fuchs (DATEV eG)
Address: Sigmundstraße 172; 90329 Nürnberg

E-mail: marc.fuchs@datev.de

Where do we obtain your personal data from?

Your data is generally collected from you. The processing of the personal data provided by you is necessary to fulfil the contractual obligations arising from the contract concluded with us. Due to your obligation to co-operate, it is essential to provide the personal data requested by us, as otherwise we will not be able to fulfil our contractual obligations.

The provision of your personal data is necessary as part of pre-contractual measures (e.g. master data collection in the prospective customer process). If you do not provide the requested data, a contract cannot be concluded.

In order to provide our services, it may be necessary to process personal data that we have received from other companies or other third parties, e.g. tax offices, your business partners or similar, in a permissible manner and for the respective purpose.

Furthermore, we may process personal data from publicly accessible sources, e.g. websites, which we use legitimately and only for the respective contractual purpose.

Purposes and legal bases of processing

On the basis of consent (pursuant to Art. 6 para. 1 lit. a GDPR)

On the basis of consent (pursuant to Art. 6 para. 1 lit. a GDPR)

The purposes of the processing of personal data result from the granting of consent. You can revoke your consent at any time with effect for the future. Consent given before the GDPR came into force (25 May 2018) can also be withdrawn. Processing that took place before the revocation remains unaffected by the revocation. Example: Sending of a newsletter, consent to the transfer of data provided by you to third parties (e.g. banks, insurance companies, shareholders, etc.) at your request.

For the fulfilment of contractual obligations (pursuant to Art. 6 para. 1 lit. b GDPR)


The purposes of data processing arise on the one hand from the initiation of pre-contractual measures that precede a contractually regulated business relationship and on the other hand to fulfil the obligations arising from the contract concluded with you.

Due to legal requirements (pursuant to Art. 6 para. 1 lit. c GDPR) or in the public interest (pursuant to Art. 6 para. 1 lit. e GDPR)

The purposes of data processing result from legal requirements or are in the public interest (e.g. compliance with retention obligations, proof of compliance with the tax advisor's notification and information obligations).

In the context of the balancing of interests (pursuant to Art. 6 para. 1 lit. f GDPR)

The purposes of the processing result from the protection of our legitimate interests. It may be necessary to process the data provided by you beyond the actual fulfilment of the contract. Our legitimate interest may be used to justify the further processing of the data provided by you, provided that your interests or fundamental rights and freedoms do not prevail. Our legitimate interest may be in individual cases: Assertion of legal claims, defence against liability claims, prevention of criminal offences.
Who receives the personal data you provide?

Within our company, access to the personal data provided by you is granted to those departments that require it to fulfil contractual and legal obligations and that are authorised to process this data.

In fulfilment of the contract concluded with you, only those departments that require the data provided by you for legal reasons, e.g. tax authorities, social security institutions, competent authorities and courts, will receive the data provided by you.

Other recipients will only receive the data provided by you at your request if you give us the necessary consent.

As part of our service provision, we commission processors who contribute to the fulfilment of contractual obligations, e.g. IT partners, document shredders, specialist dealers, etc. These processors are contractually obliged by us to comply with the provisions of the GDPR and the BDSG.

Will the data you provide be transferred to third countries or international organisations?

The data you provide will never be transferred to a third country or an international organisation. If, in individual cases, you wish the data you have provided to be transferred to a third country or an international organisation, we will only do so with your written consent.

Does automated decision-making including profiling take place?

No fully automated decision-making (including profiling) pursuant to Art. 22 GDPR is used to process the data provided by you.

Duration of processing (criteria for erasure)

The data provided by you will be processed for as long as it is necessary to fulfil the contractually agreed purpose, in principle as long as the contractual relationship with you exists. After termination of the contractual relationship, the data provided by you will be processed to comply with statutory retention obligations or on the basis of our legitimate interests. Once the statutory retention periods have expired and/or our legitimate interests no longer apply, the data you have provided will be deleted.

Expected periods of the retention obligations that apply to us and our legitimate interests:
• Fulfilment of retention periods under commercial and tax law. The retention and documentation periods specified there are two to ten years.
• Preservation of evidence within the framework of the statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.
Information about your rights

• Right to information in accordance with Art. 15 GDPR:
You have the right to receive information free of charge upon request as to whether and what data about you is stored and for what purpose it is stored.

• Right to rectification pursuant to Art. 16 GDPR:
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

• Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR:
You have the right to demand that the controller erase your data without undue delay. The controller is obliged to erase personal data without undue delay where one of the following grounds applies
(a) the purposes for which the personal data was collected no longer apply
b) You withdraw your consent to the processing. There is no other legal basis for the processing.
c) You object to the processing. There is no other legal basis for the processing.
d) The personal data was processed unlawfully.
e) The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
f) The personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

• Right to restriction of processing pursuant to Art. 18 GDPR &. § 35 BDSG:
You have the right to demand the restriction of processing if one of the following conditions is met:
a) The accuracy of the personal data is contested by you.
b) The processing is unlawful, but you oppose the erasure.
c) Personal data are no longer required for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims.
d) You have lodged an objection to the processing pursuant to Art. 21 para. 1 GDPR. As long as it has not yet been established whether the legitimate reasons of the controller outweigh your reasons, processing will be restricted.

• Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the data you have provided to the controller in a structured, commonly used and machine-readable format. We must not prevent the data from being forwarded to another controller.

• Right to object pursuant to Art. 21 GDPR:
Please contact the controller responsible for processing (see above).

• Right to lodge a complaint with the supervisory authority pursuant to Art. 13 para. 2 lit. d, 77 GDPR
i. V. m § 19 BDSG:
If you are of the opinion that the processing of your data violates the GDPR, you have the right to lodge a complaint with the supervisory authority. To do so, please contact the competent supervisory authority

• Withdrawal of consent pursuant to Art. 7 para. 3 GDPR:
If the processing is based on your consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a (processing of special categories of personal data), you are entitled to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.