Source: https://www.nynomic.com/en/data-protection-notice/
Timestamp: 2019-04-25 04:50:00+00:00

Document:
We collect and use our users’ personal data only to the extent that is necessary to provide a functional website, and our content and services. The collection and use of our users’ personal data is carried out regularly only after the consent of the user. An exception applies in cases where prior consent cannot be obtained for real and actual reasons and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing of personal data, Article 6 (1) (a) of the EU’s General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to data processing operations that are necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that any vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
The personal data of the data subject shall be erased or blocked once the purpose of the storage has ceased to exist. Data may also be stored if this is provided for by European or national legislators in EU regulations, laws or other legal provisions to which the data controller is subject. The data will also be blocked or erased when a storage period prescribed by the above standards expires, unless the data needs to be stored further for the purpose of concluding or performing a contract.
The data are also stored in the log files of our system. These data are not stored in combination with any other personal data of the user.
The legal basis for the temporary storage of the data and log files is Article 6 (1) (f) GDPR.
The temporary storage of the IP address by the system is necessary to allow the website to be delivered to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The data are stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data are not analysed for marketing purposes in this context.
The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection. In the event that the data are collected for the purpose of providing the website, they are erased once that particular session comes to an end.
If the data are stored in log files, they will be erased after 90 days at the latest. Data may also be stored for a longer period. In such a case, the IP addresses of the users will be deleted or anonymised so that it is no longer possible to attribute them to the accessing client.
The collection of the data for the purpose of providing the website and the storage of the data in log files is absolutely necessary for operating the website. Consequently, there is no possibility for the user to object.
The legal basis for processing personal data using cookies is Article 6 (1) (f) GDPR.
The legal basis for processing personal data using technically necessary cookies is Article 6 (1) (f) GDPR.
The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies enable us to learn how the website is being used and to thus constantly optimise our offering.
This website uses the services of etracker GmbH, Hamburg, Germany https://www.etracker.com for the analysis of usage data. Cookies are used to enable the statistical analysis of the use of this website by those who visit it, as well as the display of usage-related content or advertising. Cookies are small text files that are stored on the user’s terminal device by the internet browser. etracker cookies do not contain any information that allows a user to be identified.
The data generated by etracker are processed and stored by etracker on behalf of the provider of this website exclusively in Germany, and are thus subject to the strict German and European data protection laws and standards. etracker has been independently tested, certified and awarded the Data Protection Quality Seal https://www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/.
Data processing is carried out on the legal basis of Article 6 (1) (f) (legitimate interest) of the EU’s General Data Protection Regulation (GDPR). Our legitimate interest is to optimise our online offering and our website. As the privacy of our visitors is especially important to us, the IP address is anonymised at etracker as soon as possible and log-in data or device recognitions at etracker are converted to a unique code, that cannot however be assigned to a specific person. Etracker does not use the data for any other purposes, nor combine them with other data, nor transfer them to third parties.
You can at any time object to the above-described data processing, if it is being done in a personally identifiable way. Your objection will not entail any adverse consequences for you.
Alternatively, you can also insert the following button at a suitable place on your website.
Replace yourdomain.com with your Top Level Domain, to which count exclusion will apply. It will then apply to all associated subdomains too.
If you select this option, visitors will be shown a dialogue box for consenting to data collection when they enter your website. Here, the visitor has the option of consenting to data collection for their current visit, granting permanent consent, or refusing data collection for the current visit. If the visitor declines, no data will be collected concerning the user’s current visit.
As a rule, it is not possible to assign these data to specific persons. These data will not be combined with other data, and in addition, the data will be erased after a statistical analysis.
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
On our website you have the option of subscribing to a free newsletter. When registering for the newsletter, the data from the online form will be forwarded to us.
In the course of the registration process, your consent to the data processing will be obtained and you will be referred to this Data Protection Notice.
The data processed for the purpose of sending you newsletters will not be transferred to third parties. The data will be used for the sole purpose of sending you the newsletter.
The legal basis for processing the user’s data after they have registered for the newsletter and given their explicit consent is Art. 6 (1) (a) GDPR.
The purpose of collecting the user’s e-mail address is to deliver the newsletter.
The collection of other personal data in the course of the registration process serves to prevent any misuse of the services or the e-mail address used.
The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection. The user’s e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
As a rule, the other personal data collected in the course of the registration process are deleted after a period of 14 days.
The subscription to the newsletter can be cancelled at any time by the user concerned. Each newsletter contains an appropriate link for this purpose.
This also enables a revocation of consent to the storage of personal data collected during the registration process.
The user’s consent to the processing of these data is obtained in the course of the registration process.
The legal basis for processing the data is Article 6 (1) (a) GDPR.
The user is required to register for the provision of certain content and services on our website.
The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection.
This applies to the data collected during the registration process, if the registration on our website is cancelled or changed. At present, your registration can only be deleted by us. To do this, please get in touch with one of the above contacts.
As a user, you have the option to cancel your registration at any time. You can at any time have the data stored about you modified.
In the course of sending us the data, your consent to the processing of the data will be obtained and you will be referred to this Data Protection Notice.
Alternatively, you can contact us via the e-mail addresses provided. In this case, the personal data of the user sent with the e-mail will be stored.
The data will not be transferred to third parties in this context. The data will be used exclusively for processing the two-way dialogue.
The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the purpose of the e-mail is to conclude a contract, Art. 6 (1) (b) GDPR constitutes an additional legal basis for the processing.
The sole purpose of our processing of personal data gathered from the online form is to process the contact. If we are contacted by e-mail, we likewise have the required legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This applies to the personal data gathered from the input mask of the contact form and to data sent by e-mail once that particular dialogue with the user comes to an end. The dialogue is deemed to have come to an end when the circumstances show that the relevant facts have been finally clarified.
The personal data additionally collected during the sending process will be deleted after a period of 14 days at the latest.
The user has the option of at any time revoking their consent to the processing of their personal data. If the user contacts us via e-mail, they may at any time object to the storage of their personal data. In such a case, the dialogue cannot be continued.
To do this, please contact one of the aforementioned contacts using any form of communication you prefer (phone, e-mail or post).
In this case, all personal data stored in the course of contacting us will be deleted.
You can obtain confirmation from the data controller as to whether any personal data concerning you will be processed by us.
(8) the existence of automated decision-making, including profiling, in accordance with Art: 22 (1) and (4) GDPR, and – in these cases, at least – meaningful information on the logic involved, as well as the ramifications and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or an international organisation. In this context, you can request information on the appropriate guarantees, in accordance with Art. 46 GDPR, in connection with the transfer of the data.
With regard to the data controller, you have the right to the rectification and/or completion of your personal data, provided that the personal data processed concerning you are incorrect or incomplete. The data controller shall carry out the rectification without delay.
(4) if you have lodged an objection to the processing, pursuant to Art. 21 (1) GDPR, and it has not yet been determined whether the legitimate reasons of the data controller override your reasons.
If the processing of personal data concerning you has been restricted, these data – apart from their storage – may only be processed with your consent, or for the purpose of asserting, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons relating to an important public interest of the European Union or of a member state.
If the restriction of processing has been carried out in accordance with the above-cited conditions, you will be informed by the data controller before the restriction is lifted.
(1) The personal data concerning you are no longer needed for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based, in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
(3) You file an objection to the processing pursuant to Art. 21 (1) GDPR, and there are no overriding legitimate grounds for the processing, or you file an objection to the processing pursuant to Art. 21 (2) GDPR.
(5) The purpose of erasing the personal data concerning you is to fulfil a legal obligation under EU law or the law of the member states, to which the data controller is subject.
(6) The personal data concerning you have been collected in relation to information society services, pursuant to Article 8 (1) GDPR.
If the data controller has made the personal data concerning you public and if the data controller is obliged to erase them, pursuant to Art. 17 (1) GDPR, they shall, taking into account the available technology and implementation costs, take appropriate measures, including technical measures, to inform other data controllers who are processing the personal data that you, as the data subject, have requested the erasure of all links to that personal data or of copies or replications of that personal data.
If you have asserted the right to rectification, erasure or restriction of processing to the data controller, they are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of data or restriction of processing, unless this proves to be impossible or involves a disproportionate expenditure of time, effort or money.
In exercising this right, you also have the right to have the personal data concerning you directly forwarded by one data controller to another data controller, provided this is technically feasible. This process must not adversely affect the freedoms and rights of other persons.
The right to data portability does not apply to a processing of personal data that is necessary for performing a task that is in the public interest, or that is carried out in the exercise of public authority delegated to the data controller.
You have the right to at any time object to a processing of personal data concerning you that is carried out on the basis of von Art. 6 (1) (e) or (f) GDPR, for reasons arising from your particular situation; this also applies to profiling based on these provisions.
The data controller will no longer process the personal data concerning you, unless they can provide evidence of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is needed for asserting, exercising or defending legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to at any time object to the processing of the personal data concerning you for the purpose of inserting such an advertisement; this also applies to the profiling, insofar as it is connected with such direct advertising.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent shall not affect the legality of the processing carried out on the basis of the consent up to the time of the revocation.
However, these decisions must not be based on specific categories of personal data referred to in Art. 9 (1) GDPR, insofar as Art. 9 (2) (a) or (g) do not apply and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
As regards the cases referred to in (1) and (3) above, the data controller shall take appropriate measures to safeguard your rights and freedoms, as well as your legitimate interests, which at least includes your right to effect an intervention by a person at the data controller’s company, in order to define your own position and contest the decision.
Irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state where your residence or your workplace are located, or where the alleged infringement took place, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority where the complaint was filed shall inform the complainant on the status and outcome of the complaint, including the option of a judicial remedy pursuant to Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78