Source: https://www.nanonic.de/index.php/contact-us/data-protection
Timestamp: 2019-04-22 08:42:19+00:00

Document:
nanonic takes the protection of personal data very seriously. We want you to know when we store which data and how we use it. This general data protection declaration applies to all online offers of nanonic.
If you have any questions, suggestions or comments on data protection and the enforcement of your rights, please contact us.
In our data protection declaration we use terms that are used and defined in the GDPR (General Data Protection Regulation) which is also available in German as DSGVO (Datenschutz-Grundverordnung). So that you know what this means, we would like to explain the most important terms.
Personal data are all information relating to an identified or identifiable natural person (hereinafter "data subject"). Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identification such as a name, an identification number, location data, an online identification (e.g. IP address or cookies) or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
Processing means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. This basically includes any handling of personal data such as the collection, storage, modification, use, transmission, dissemination, deletion or destruction, etc. The data will not be passed on to third parties without your consent.
The natural or legal person, authority, institution or other body which alone or together with others decides on the purposes and means of processing personal data shall be deemed to be the person responsible. The responsible person must ensure the permissibility of data processing through the use of technical and organisational measures to be regularly checked.
A recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities which may receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.
A contractor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller.
A third party is a natural or legal person, authority, institution or other body other than the data subject, te data processor, the data processor and the persons authorised to process the personal data under the direct responsibility of the data processor or the data processor.
Consent is an expression of data protection self-determination. It is the voluntary declaration of intent in the specific case, in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, with which the data subject indicates his or her consent to the processing of personal data concerning him or her. A given consent can be revoked at any time.
In principle, we only process your personal data to the extent necessary to provide our online offers, content and services. Your personal data will only be collected and used with your consent or if the processing of the data is permitted by law.
In the field of data protection, the so-called prohibition with reservation of permission applies. Accordingly, the processing of personal data is fundamentally illegal, unless the data subject has given his or her consent or it is legitimized by a legally regulated reason for permission. We are obliged to inform you about the legal basis of data processing.
If we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR (DSGVO) serves as the legal basis.
In the case of processing procedures that are necessary to fulfil a contract concluded between you and us or to carry out pre-contractual measures, Art. 6 (1) (b) GDPR (DSGVO) serves as the legal basis.
If the processing of personal data is necessary to fulfil a legal obligation to which we are subject, such as statutory retention and storage obligations, Art. 6 para. 1 lit. c GDPR (DSGVO) serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR (DSGVO) is the legal basis.
If the processing is necessary to protect our or the legitimate interests of a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, the processing of personal data is legitimised by Art. 6 para. 1 lit. f GDPR (DSGVO).
In principle, we do not pass on any personal data to third parties without your express consent. If, in the course of processing, we nevertheless disclose your data to third parties, transfer it to them or otherwise grant them access to the data, this is also done exclusively on the basis of one of the legal bases mentioned. We transmit data to payment service providers, for example, if this is necessary to fulfil the contract. If we are legally or by court order obliged to do so, we must transfer your data to the authorities entitled to receive information.
In some cases we use carefully selected external service providers to process your data. Should data be passed on to service providers in the context of so-called order processing, this is done on the basis of Art. 28 GDPR (DSGVO). Our contractors are carefully selected, are bound by our instructions and are regularly checked by us. We only commission contractors who offer sufficient guarantees that suitable technical and organisational measures are taken in such a way that processing is carried out in accordance with the requirements of the GDPR (DSGVO) and guarantees the protection of your rights.
The GDPR (DSGVO) guarantees the same high level of data protection within the European Union. When selecting our service providers and cooperation partners, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union or the European Economic Area as part of the use of third-party services.
We will only permit the processing of your data in a third country if the special requirements of Art. 44 ff. GDPR (DSGVO) are fulfilled. This means that your data may only be processed on the basis of special guarantees, such as the official recognition by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognised special contractual obligations, the so-called "standard contractual clauses". We require US service providers to use these standard clauses or to submit to the privacy shield, the data protection agreement negotiated between the European Union and the United States (privacyshield.gov).
As soon as the purpose for storage ceases to apply, we will delete or block your personal data. In addition, however, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. This applies, for example, to data that must be retained for commercial or tax reasons, such as billing data for subscriptions. Your data will be blocked or deleted when a storage period prescribed by these regulations expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
If the processing of personal data is based on a given consent, you have the right to revoke this consent at any time. The revocation shall not affect the legality of the processing carried out on the basis of the consent until revocation.
the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR (DSGVO) and, at least in these cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.
Within one month of receiving your request for information, we will provide you with a copy of the personal data that is the subject of the processing. We may charge an appropriate fee based on administrative costs for any additional copies you request. If you submit the application electronically, we will provide you with the information in a common electronic format, unless you specify otherwise.
You have the right to request us to correct your personal data immediately if it is incorrect. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
They withdraw their consent on which processing was based and there is no other legal basis for processing.
You object to the processing and there are no overriding legitimate grounds for processing or you object to the processing.
The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the member states.
The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR (DSGVO).
If we have made the personal data concerning you public and we are obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that they have requested the deletion of all links to this personal data or of copies or replications of this personal data.
You have filed an objection against the processing as long as it is not yet clear whether our justified reasons outweigh your reasons.
Where processing has been restricted in accordance with the above conditions, personal data will only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the restriction on processing has been restricted under the above conditions, we will inform you before the restriction is lifted.
You have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person in charge without our interference, provided that the processing is based on consent or on a contract and is carried out by means of automated procedures.
In exercising your right to data transferability, you can request that the personal data be transferred directly from us to another person responsible, insofar as this is technically feasible. The exercise of the right to data transferability does not affect the right to deletion ("right to be forgotten"). This right shall not apply to processing necessary for the performance of a task entrusted to us, which is in the public interest or which is carried out in the exercise of official authority.
You have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. e or f GDPR (DSGVO) for reasons arising from your particular situation. This also applies to profiling based on these provisions. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
As regards the use of Information Society services, notwithstanding the ePrivacy Directive, you can exercise your right of opposition by means of automated procedures using technical specifications.
We will take reasonable measures to protect your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his or her own position and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State of your place of residence, of work or of the place of suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR (DSGVO).
You can use our online offer without disclosing your identity. In this section we explain when and in which context we process data when using our online services, which offers from service providers and cooperation partners we have implemented, how these work and what happens to your data.
If you use our websites for information purposes only, i.e. you do not register, conclude a contract with us or otherwise disclose information to us, we only collect the personal data that your browser transmits to our servers. When you visit our websites, we collect the following data, which is technically necessary for us to be able to display our websites to you and to guarantee stability and security.
This data is temporarily stored in the log files of our system for a maximum of seven days. Further storage is possible, but in this case the IP addresses are partially deleted or distorted, so that an assignment of the calling client is no longer possible. In this context, the log files are not stored together with other personal data relating to you. The legal basis for these processing operations is Art. 6 para. 1 lit. f GDPR (DSGVO).
Since the collection of data for the display of the websites and the storage of data in log files is absolutely necessary for the operation of our websites and the maintenance of IT security, you have no possibility of objection in this respect.
In addition to the aforementioned data, cookies are stored on your terminal device when you use our websites during or after your visit to our online offers. These are small text packages that can be sent from a website to the browser, which saves them and sends them back. Various data can be stored in cookies, which can be read out by the location that sets the cookie. They usually contain a characteristic character string (ID) that allows the browser to be uniquely identified when the website is reopened or a page break occurs. Their primary purpose is to make our online offerings more user-friendly and effective overall. The user data collected in cookies is pseudonymised by technical precautions, as a result of which it is generally no longer possible to assign the data to the calling user. If it is identifiable, such as a login cookie, whose session ID is necessarily linked to the user's account, we will point this out to you at the appropriate point.
Transient cookies, also known as temporary or session cookies, are cookies that are deleted when you leave our website and close your browser. Such cookies are used, for example, to store language settings or the contents of a shopping basket.
Persistent or permanent cookies remain stored even after closing the browser. For example, the login status or search terms entered can be saved. We use such cookies, among other things, for for hiding the cookie banner after the usage got accepted. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. However, you can delete these cookies at any time in the security settings of your browser.
In addition to so-called "first-party cookies", which are set by us as those responsible for data processing, "third party cookies", which are offered by other providers, are also used. We will inform you about the use of "third party cookies" and about cooperation with external service providers who provide services such as web tracking or range measurement for us within the individual data protection information of the respective online offers. There you will also be informed about the possibility of objecting to individual cookies.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR (DSGVO).
You can optionally create user accounts for our online offers in order to use certain contents and services of our online offers.
Which personal data is transmitted to us and stored results from the respective input mask and the information provided during registration. The data entered during registration will be used for the purpose of using our offers. Information relevant to offers or registration, such as changes to the scope of offers or technical circumstances, will be sent to you by e-mail. You have the possibility to cancel your user account at any time. In this case your data will be deleted, unless we are obliged to store it for commercial or tax law reasons.
If you have given your consent, the legal basis for processing the data is Art. 6 para. 1 lit. a DSGVO (GDPR). If the registration serves the fulfilment of a contract to which you are a contracting party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR (DSGVO).
In connection with the use of our registration and login functions as well as the use of the user account, we may save the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests and serves to protect against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation. The legal basis for this recording and storage is Art. 6 para. 1 lit. c GDPR (DSGVO). The IP addresses are anonymized or deleted after 7 days at the latest.
On our online offers you will find contact forms and e-mail links (mailto) which can be used for electronic contact. This enables us, among other things, to fulfil the legal requirement to enable rapid electronic contact with us. If you use this option, your data will be processed and automatically stored for the purpose of responding to the request in accordance with Art. 6 para. 1 lit. c GDPR (DSGVO). We delete the requests if they are no longer necessary and no legal archiving obligations apply.
Our offer is basically aimed at adults. Persons under 16 years of age may not transmit any personal data to us without the consent of their parents or legal guardians.
The rapid development of the Internet makes adjustments to our data protection declaration necessary from time to time. You will be informed about the new features at this point.
nanonic nimmt den Schutz personenbezogener Daten sehr ernst. Wir möchten, dass Sie wissen, wann wir welche Daten speichern und wie wir sie verwenden. Diese allgemeine Datenschutzerklärung gilt für alle Online-Angebote von nanonic.
Wenn Sie Fragen, Anregungen oder Kommentare zum Thema Datenschutz und zur Durchsetzung Ihrer Rechte haben, wenden Sie sich bitte an uns.
"Profiling" ist jede automatisierte Verarbeitung personenbezogener Daten, die in der Verwendung dieser personenbezogenen Daten zur Bewertung bestimmter personenbezogener Aspekte einer natürlichen Person besteht, insbesondere zur Analyse oder Vorhersage von Aspekten der Arbeitsleistung, der wirtschaftlichen Lage, der Gesundheit, der persönlichen Präferenzen, der Interessen, der Zuverlässigkeit, des Verhaltens, des Standorts oder der Verlegung dieser natürlichen Person.
Persistente oder permanente Cookies, bleiben auch nach dem Schließen des Browsers gespeichert. So können z. B. der Login-Status oder eingegebene Suchbegriffe gespeichert werden. Wir verwenden solche Cookies unter anderem, um das Cookie-Banner zu verstecken, nachdem die Verwendung akzeptiert wurde. Persistente Cookies werden automatisiert nach einer vorgegebenen Dauer gelöscht, die sich je nach Cookie unterscheiden kann. Sie können diese Cookies jedoch in den Sicherheitseinstellungen Ihres Browsers jederzeit löschen.
Ein genereller Widerspruch gegen den Einsatz der zu Werbezwecken eingesetzten Cookies kann für eine Vielzahl von Diensten über die EU-Website https://www.youronlinechoices.com/ oder die US-Website http://www.aboutads.info/choices/ erklärt werden. Des Weiteren können Sie in Ihren Browser-Einstellungen entsprechende Konfigurationen vornehmen und z. B. die Annahme von „Third-Party-Cookies“ oder allen Cookies ablehnen. Allerdings stehen Ihnen dadurch eventuell nicht mehr alle Funktionen unserer Online-Angebote zur Verfügung.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 44
 Art. 8
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6