Source: https://www.nora.com/sweden/en/data-protection
Timestamp: 2019-04-20 06:33:15+00:00

Document:
The protection of your personal data is important to us. According to the EU General Data Protection Regulation (Article 13 GDPR), we are obliged to inform you about the purpose for which we collect, store or disclose data and what rights you have with regard to data protection. The content and scope of the data processing depends largely on the data provided by you or the data required for the business relationship or communication.
nora systems GmbH – Höhnerweg 2-4, 69469 Weinheim, Germany, Telephone: (+49) 6201 - 80 5666, email: info-de@nora.com – is responsible for the data processing.
Data protection supervisory authority: The State Commissioner for Data Protection and Freedom of Information (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit) Baden-Württemberg, Königstrasse 10 a, 70173 Stuttgart, Germany.
Which data is processed and where does this data come from?
We process personal data provided by you, by a partner commissioned by you or by one of our business partners during the course of our business relationships. In addition, we process data that we have legitimately obtained from publicly available sources (e.g. commercial register, address directory, media, trade fair participants). Personal data includes your personal details (e.g. title, name, country, address, email address and telephone number, delivery addresses, order and billing information, credit reports, documentation data, trade fair minutes, etc.).
For what purposes and on what legal basis is the data processed?
We process personal data only in the context of our business activities. In addition, data processing takes place on the basis of legal requirements, on the basis of a contractual relationship or a pre-contractual relationship of trust, on the basis of your consent or if you contact us (e.g. at trade fairs, by email, by post, by telephone or via this website).
As part of the business relationship, you must provide the personal data that is necessary for entering into and carrying out the business relationship and that we are required to collect by law. If you do not provide us with this data, we will generally have to decline your request or decline to respond to your contact request, decline to conclude a contract or to execute the contract, or we will terminate an existing contractual relationship.
If you have given us consent to process your personal data, processing will only take place in accordance with the purposes stipulated in the declaration of consent and only to the extent agreed to therein. You may revoke your consent at any time without stating reasons with effect for the future, as far as this is legally permissible.
In addition, we reserve the right to store your first and last name, mailing address and, as far as we have received this additional information from you as part of the contractual relationship, your title, academic degree and your professional, industry or business name, in compiled lists and to use said information for our own advertising purposes, for example, to send interesting offers and information about our products, or to process applications by post. You can object to such storage and use of your data for these purposes at any time by sending a message to the address specified in the postal item.
If we pay in advance, for example in the case of a purchase on account, we reserve the right to obtain identification-related and credit information from specialised service companies (credit reporting agencies) in order to safeguard our legitimate interests.
Who is the recipient of my data?
We only transfer your data to third parties if this is permitted by law, if you have given your consent, or if the transmission is necessary to fulfil our business purposes.
If possible, the data will be anonymised or pseudonymised.
Within our group of companies, your data shall only be provided to those bodies or employees that require this data to fulfil our contractual, statutory and regulatory obligations or to safeguard legitimate interests.
•	Agencies for surveys, marketing activities and the organisation of events.
Furthermore, data is transmitted to public authorities and institutions (tax offices, authorities, customs offices), provided that there is a legal or regulatory obligation to do so.
All processors and distributors and trade partners are contractually bound to process your data only as part of the provision of services and in accordance with the applicable data protection regulations.
If we process data in a third country (i.e. outside of the European Union [EU] or the European Economic Area [EEA]) or in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only be done in order to fulfil our (pre-)contractual obligations and on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permission, we process data, or have said data processed, in a third country only if the special conditions of Art. 44 et seq. GDPR are applicable. That is, the processing is carried out, for example, on the basis of specific guarantees, such as a level of data protection that is officially recognised in the EU (e.g. for the US the ‘Privacy Shield’) or in compliance with officially recognised special contractual obligations (so-called ‘standard contractual clauses’).
We only store your data in accordance with Articles 17 and 18 GDPR as long as it is necessary for processing the business transaction or for complying with documentation requirements. Legal requirements require that commercial letters be kept for at least 6 years, and if it contains tax-relevant content, then for at least 10 years. Our IT systems also have extensive data protection concepts that do not allow premature deletion. In this case, access to data will be restricted after expiry of the permitted storage period. Application documents will be stored or kept 24 months after completion of the recruitment. If the application is made through a recruiting agency, the master data must be kept longer.
Which data protection rights do I have?
You have the right to free information on the data stored by us concerning you as well as a right to correct, block or delete this data. If you have given your consent for the processing of the data, you can revoke such consent for future processing.
In the first instance, please contact the person who last had contact with you. In addition, you can contact our Data Protection Officer.
If you believe that we have violated European data protection laws when processing your data, we ask you to contact us to clarify your concerns. You also have the right to complain to the relevant data protection supervisory authority if you believe that the processing of your personal data is unlawful.
We use state-of-the-art security measures to protect your information appropriately. Our employees, subcontractors and trading partners are required to comply with our information security policies. To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.
You can visit our websites without having to provide any personal information. During your visit to our website, technical data such as your IP address, date, time and time zone, the status of the data requested by you, as well as information about the website from which you visit us, your browser, and the version of the operating system on your computer will be collected for a limited period of time. The data collected during your visit to our website is used solely for the technical administration of the website, for statistical purposes and to improve our online presence.Data usage when subscribing for the email newsletterPersonal data is stored if you provide it voluntarily for a specific purpose, such as via the contact form or subscribing to our newsletter, or consenting to receive electronic information, etc. This data is used solely for the stated purpose by our employees or trusted service partners.
The following information is intended to inform you about the contents of our newsletter as well as the subscription, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to receive it and to the described procedures.Contents of the newsletter: We send newsletters, emails and other electronic notifications with and without promotional information (hereinafter ‘newsletter’) only with the consent of the recipient or with legal permission. If, as part of subscribing to the newsletter, the contents of said newsletter are concretely described, it is decisive for the consent of the users. Otherwise, our newsletter contains information about our services and us.
Subscribing to our newsletter is carried out electronically using a so-called opt-in procedure (or double opt-in). This means that you will receive an email after subscribing requesting you to confirm your subscription. This confirmation is necessary so that no one can subscribe using external email addresses and serves as proof of your consent. Newsletter subscriptions will be logged/recorded in order to prove the subscription process took place in accordance with legal requirements. This includes the storage of the subscription and confirmation time, as well as the IP address. Similarly, changes to your data stored by the delivery service provider will be logged/recorded.Subscription details: To subscribe to the newsletter, all you have to do is enter your email address. Optionally, we ask that you provide a name so that we can personally address you in the newsletter.The dispatch of the Newsletter and the related performance measurement is based on the consent of the recipient pursuant to Art. 6 Para 1 lit. a, Art. 7 of the GDPR in connection with Section 7 Para. 2 No. 3 of the Law Against Unfair Competition or on the basis of the legal permission pursuant to Section 7 Para. 3 of the Law Against Unfair Competition.The logging/recording of the subscription process is based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f of the GDPR. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of our users and which also allows us to prove consent.Unsubscribing/Revocation – you may unsubscribe from receiving our newsletter at any time, i.e. by revoking your consent. A link to unsubscribe from the newsletter can be found at the end of each newsletter. On the basis of our legitimate interests, we may save the submitted email addresses before we delete them for the purpose of dispatching our newsletter, in order to be able to provide evidence of previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for revocation is possible at any time, provided that the existence of previous consent is simultaneously confirmed.
The newsletter contains a so-called ‘web beacon’ – a file the size of a pixel that is retrieved by our server or, where we use a delivery service provider, by that service provider’s server when the newsletter is opened. During this process, initially technical information, such as information on the browser and your system, as well as your IP address and the date and time of retrieval, is collected.
This information is used to improve the technical performance of the services based on the technical data or target groups and their reading habits based on their locations (which can be determined using the IP address) or access times. The statistical data collected includes the determination of whether the newsletter is opened, when it is opened and which links are clicked on. The analyses enable us to determine the reading habits of our users and to adapt our content accordingly or to send different content that corresponds with the interests of our users.
If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to email you offers relating to products from our range that are similar to those purchased previously on a regular basis. You may object to this use of your email address at any time using a link provided for this purpose in the email.
This website may contain web beacons, also known as pixel tags or tracking pixels. A web beacon is a graphic element that is usually transparent and is normally no larger than 1 x 1 pixel which is placed on the website or in an email in order to obtain further information about the user’s online behaviour. Web beacons are used by third-party technologies to monitor the activity of users on our website. They allow us to track which computer has accessed a specific website, when this happened and from where (at country/city level). nora uses the analytics software ‘Google Analytics’, among others, to continuously optimise its marketing communications. This enables us to track online usage behaviour with regard to time, geographical origin and use of the website. Any information that is required for the analysis is stored on Google servers.
We use retargeting cookies to design our website so that it is more interesting for users. Retargeting cookies are stored on the online user’s computer or device during browser sessions and enable us to appeal to users who have already shown an interest in nora products or services through ads on partner or social media websites.
These ads are displayed using cookie technology in a completely anonymous manner. No personal data (e.g. IP address or similar) whatsoever is stored and no usage profiles are combined with your personal data. Furthermore, no user-related data relating to you is sent to partner and social media websites. The display of advertising is completely anonymous.
This website uses Google (Universal) Analytics, a web analytics service provided by Google Inc. (www.google.de). Google (Universal) Analytics uses methods that enable your use of the website to be analysed, such as cookies – text files placed on your computer. The information generated about your use of this website is usually transmitted to and stored on a Google server in the USA. By enabling IP anonymisation on this website, the IP address is truncated within Member States of the European Union or other contracting parties to the Agreement on the European Economic Area before being sent. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. The anonymised IP address sent by your browser in the context of Google Analytics is not combined with other data held by Google.
As an alternative to the browser plug-in, you can click on this link to prevent any future data collection by Google Analytics on this website. Doing this activates an opt-out cookie on your end device. If you delete your cookies, you will need to click on the link again.
This website uses GTM (Google Tag Manager) to initiate and control the connection to Google Analytics. It is used primarily to minimise administrative work and analyse reporting problems.
The information generated by these cookies about your use of our website, including your IP address, is transmitted to and stored by a Marketo server in the USA.
Further information about data protection is available at https://documents.marketo.com/legal/privacy/.
The ‘Facebook Share button’ is used on this website. When you click on this link, your browser connects to the Facebook servers and transmits the URL of our website. If you are logged into Facebook, Facebook can link your visit to your account. If you do not want social networks to collect data about you or to link the visit to our website with your member data, you will need to log out before clicking on the social network link. Information about the purpose and scope of the collection and processing of data by Facebook and your related rights, as well as the configuration options for protecting your privacy is available at http://www.facebook.com/policy.php.
Please note that we may make, or may need to make, changes to this information in accordance with Art. 13/14 GDPR on data processing where required. The current version of this information in accordance with Art. 13/14 GDPR can always be found on our website.

References: Art. 44
 Art. 6
 Art. 7
 Art. 6
 Art. 13
 Art. 13