Source: https://www.nici.de/en/privacy-policy
Timestamp: 2020-08-08 21:09:56
Document Index: 546066360

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

NICI GmbH | Privacy Policy | NICI Online Shop
NICI GmbH | Privacy Policy
Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws, which provide comprehensive information about the processing of your personal data by NICI GmbH and your rights.
D-96264 Altenkundstadt
Homepage: www.nici.de
Phone: +49 9572 / 7220-100
Email: info@nici.de
Contact data protection: kommunikation@nici.de
To exercise these rights, please contact: kommunikation@nici.de. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.
If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: kommunikation@nici.de
We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing. Your consent may also constitute a legal basis for data processing. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent in advance.
In our organization, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorized to handle personal data.
In certain cases, service providers assist our specialist departments to fulfil their tasks, including hosting, shop-programming, payment-processing, credit-check, newsletter and shipping. The necessary data protection contract has been concluded with all service providers.
We don’t transfer your personal data to recipients outside the European Economic Area.
The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols. It is also possible to use alternative communication channels (e.g. surface mail).
Access-status/ http status-code
For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR. Anonymization takes place no later than after seven days by abbreviating the IP address so that no reference is made to the user.
Information on wishes and interests
Data that may be legitimately processed from other / external sources
Name, first name and salutation may be provided optionally
We collect and process the following data as a part of the ordering of the NICI catalog / brochure:
We collect and process the following data for lotteries:
Email (depending on the communication channel)
We collect the followig data as a part of the registration / opening of a user account:
Address, deviating delivery address (if applicable)
Cookies enable us to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user's interests. Legal basis is Art. 6 para. 1 lit. f, if consent is given Art. 6 para. 1 lit. a EU-DS-GVO.
Those cookies are being operated directly by NICI GmbH. Depending on the purpose, these remain permanently - even after the end of the session (so-called persistent cookies, e.g.: implementation of opt-out) or are deleted when the browser is closed (so-called session cookies; they have only one Browser session validity).
This type of cookies is controlled by third parties. Third-party providers are providers who display advertising banners on other websites, in particular for NICI GmbH. These use cookies to e.g. to transmit the information that an advertising banner you have shown has led to a purchase. (e.g. conversion tracking).
So-called temporary / permanent cookies are used, which are automatically deleted after the specified time (usually 6 months). These temporary or permanent cookies are stored on your end device and delete themselves after the specified time. The cookies of our partner companies also only contain pseudonymous, usually even anonymous, data. They enable our partners to retrace which products you viewed, whether something was bought, which products were searched for, etc.
Some of our advertising partners also collect information beyond the website about which pages you have previously visited or which products you have been interested in, for example. This makes it possible to display individual advertising. This pseudonymous data is never combined with your personal data.
Most web browsers automatically accept cookies. Of course, you can also deactivate, restrict or delete cookies on your end device manually via the settings of your browser or using software.
Please note: If you deactivate the setting of cookies, you may not be able to use all functions of our website to their full extent.
Google Analytics cookies are saved and this analysis tool is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html
This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of the website visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the point “Objection against data collection”.
Our websites use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC).
You can permanently object to cross-device remarketing / targeting by deactivating personalized advertising in your Google account; follow this link. (Link)
Further information and the data protection regulations can be found in Google's data protection privacy.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
You can find more information on Google AdWords and Google Conversion Tracking in Google's data protection privacy.
On our website we use Google Maps from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. The legal basis is Article 6 (1) (f) GDPR Our legitimate interest lies in optimizing the functionality of our website.
As soon as you call up the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be assigned to Google, you must log out before activating the button.
Google LLC, based in the USA, is certified for the US-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
The terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/
We integrate the videos of the “YouTube” platform from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, into our online offer. The videos were embedded in the extended data protection mode.
By embedding the video in the extended data protection mode, no cookies are set that record usage behavior in order to personalize the video playback. However, the extended data protection mode only refers to the recording of user behavior, not to the provision of ads.
When you visit our site, a device ID is generated in the local storage of the web browser and saved beyond the session. In addition, calling up the site leads to a connection to the Google DoubleClick network. If you start the video, this could trigger further data processing operations. We have no influence on that.
If you are logged in to Google, your data will be assigned directly to your account. If you do not want your YouTube profile to be assigned, you must log out before activating the button.
YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and / or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise it.
Opposition option: https://adssettings.google.com/authenticated
Further information on the purpose and scope of data collection and processing by YouTube can be found in Google's data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framewok
This website uses the web analysis service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel .: +1 (855) 464-6788)
With this tool, movements on the websites on which Hotjar is used can be tracked (so-called heat maps). For example, you can see how far users scroll and which buttons users click and how often. It is also possible to use the tool to obtain feedback directly from the website users. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. The above analysis is based on your consent in accordance with Art. 6 Para. 1 lit. a EU GDPR. When using this tool, we pay particular attention to the protection of your personal data. So we can only retrace which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties are displayed are automatically hidden by Hotjar, and are therefore at no time traceable.
Personal data is stored for 6 months and then deleted by us.
Facebook Custom Audiences („User-activity-pixel“)
This website uses the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. The data processing is based on the legal basis of your consent in accordance with Art. 6 Para. 1 lit. a EU-GDPR.
Facebook Inc. may transfer personal data to the United States. However, Facebook is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). Facebook is thus committed to complying with EU data protection standards.
You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can be stored on your computer for these purposes. We use the Facebook pixel to only display the advertisements placed by us to those users who have also visited our website or have certain features that we transmit to Facebook. With the help of the Facebook pixel, Facebook is able to determine our website visitors as a target group for the display of advertisements.
We collect and process the following data from your use of our service
Pixelspecific data
Facebook-user-ID
Viewed advertisements
Interactions with advertising, services and products
With the help of the Facebook pixel, your behavior can be tracked over several pages after you have seen or clicked on a Facebook advertisement. This procedure serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help to optimize future advertising measures. Facebook processes the data in accordance with the Facebook data usage guidelines: https://www.facebook.com/policy. You can find specific information about the Facebook pixel and how it works here:
On our website you will find links to social media services. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you can reach the corporate identity of NICI GmbH at the respective social media service. When clicking on a link to a social media service, a connection to the servers of the social media service is established. This means that the servers of the social media service are informed that you have visited our website. In addition, further data is transmitted to the provider of the social media service. For example:
• Address of the website on which the activated link is located
• Date and time of accessing the website or activating the link
• Information about the browser and operating system used
If you are already logged into the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and, if applicable, your real name from the transmitted data and this information to your personal Assign user account to the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.
The social media service servers are located in the United States and other countries outside the European Union. The data can therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to a data protection law that generally does not protect personal data to the same extent as is the case in the member states of the European Union.
Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. You can find more information on the use of your data by the social media services integrated on our website in the data protection guideline of the respective social media service.
Plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our website. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE
When you visit our website, the plugin creates a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by Facebook. You can find further information on this in Facebook's data protection declaration at: https://de-de.facebook.com/privacy/explanation
The Facebook plug-ins are used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the greatest possible visibility in social media.
Functions of the Twitter service are integrated on our sites. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. This data is also transmitted to Twitter. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or of their use by Twitter. Further information can be found in Twitter's data protection declaration at: https://twitter.com/privacy.
The Twitter plug-in is used on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the greatest possible visibility in social media.
In so doing, we respect the principle of data minimization and data avoidance, such that you only have to provide the information we require to contact you, which is your email address and the message field itself and (if applicable) further information required to address your request. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).
In order to best protect the security and confidentiality of your data, we implement appropriate security measures. Your request will be transmitted to us using https encryption.
If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request. If you do not use the forms offered to contact us, no additional data will be collected.
You can subscribe to a free newsletter on our website. The email address and name you provided when you subscribed to the newsletter will be used to send the personalized newsletter. If you provide us with an optional salutation, first and last name, the newsletter will be sent in a personalized form.
The principle of data minimization and data avoidance is observed here, as only the email address is mandatory. Your IP address will also be processed when you subscribe to the newsletter for technical reasons and legal protection.
We use the so-called double opt-in procedure to send newsletters by email. This means that you will only receive advertising by email if you have expressly confirmed beforehand that we should activate the newsletter service. We do this by sending you a notification email and asking you to confirm by clicking on a link contained in this email that you would like to receive our newsletter at this email address.
This also applies to any newsletter tracking pixels used.
Competition / advertising consent (Article 6 (1) lit a, b GDPR)
You can participate in various lotteries we offer on our website. If you complete the competition form, we process the relevant data you provided for the sole purpose of operating the competition.
The principle of data minimization and data avoidance is observed here, as we only request data that is required to operate the competition itself, as well as the notification of the winner.
The mandatory fields are marked with an asterisk (*). Your IP address will also be processed for technical reasons and legal protection. The additional fields are optional and can be completed on a voluntary basis. We cannot operate the competition without the mandatory fields, as users will not be able to participate.
We will only forward your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, it will not be forwarded to third parties, unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement authorities).
As part of the competition mask, you also have the option of giving us your consent to send a newsletter. Of course, it is also possible to take part in the competition without giving your advertising consent.
If you give us your consent by ticking the newsletter checkbox, we will process your data as described in the newsletter section. You can revoke this consent at any time, as described in the newsletter section.
Ordering through the web shop (Article 6 (1) lit b GDPR)
We process the data provided by you within the scope of the order form solely to execute and fulfil the underlying contractual relationship, unless you agree to further use. The principle of data minimization and data avoidance is observed here, as we only request data that is required to perform the contract or fulfil our contractual obligations or to collect data that is mandatory under the law. Your IP address will also be processed for technical reasons and legal protection.
If this data is not provided, we will have to decline the conclusion of the contract, as we cannot then perform the contract or will be obliged to terminate an existing contract, where appropriate. You can of course provide additional data on a voluntary basis
On our website, we offer users the opportunity to register by providing personal information. The advantage is that you can see the order history in particular and the data you enter will be saved for the order form. If you order again, you do not have to enter it again.
Registration is therefore possible either to fulfill a contract with you (via our online shop) or to carry out pre-contractual measures. An order can also be placed without opening a customer account.
The principle of data minimization and data avoidance is observed, since only the data required for registration are marked with an asterisk (*) as a mandatory field.
By registering on our website, the user's IP address, the date and time of registration are also saved (technical background data). By clicking the "Register now" button, you give your consent to the processing of your data.
Please note: The password you assign will be saved in encrypted form. Employees from our company cannot read this password. They can therefore not give you any information should you have forgotten your password.
In this case, use the "Forgot password" function, which will send you an automatically generated new password by email. No employee is authorized to ask for your password by phone or in writing. Therefore, please never give your password if you receive such requests.
With the completion of the registration process, your data is stored with us for the use of the protected customer area. As soon as you log on to our website with your email address as your user name and password, this customer data will be made available on our website for actions you have carried out (e.g. for orders in our online shop). Executed orders can be tracked in the order history. You can specify changes to the billing or delivery address here.
Registered persons are free to make changes / corrections to the billing or delivery address in the order history independently. Of course, you can also cancel or delete the registration or your customer account.
In our online shop you can select to pay by credit card, PayPal or direct debit. In order to proceed accordingly, the relevant payment data is collected to perform and process your order. Your IP address will also be processed for technical reasons and legal protection.
The principle of data minimization and data avoidance is observed in a manner that you only submit the data we need to process the payment and therefore fulfil the contract or to collect the payment or for which we are under a legal obligation.
We cannot fulfil the contract without this data, and we will therefore have to decline it.
The payment system we use implements SSL encryption to protect your data.
Note on PayPal: PayPal is a PayPal (Europe) S.à.r.l. et Cie, S.C.A company, 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as an option during the order process in our online shop, the data subject’s information will be automatically sent to “PayPal”.
By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is generally a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.
Personal data associated with the relevant order is also necessary to execute the purchase contract. Details on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev (legal position from May 25, 2018).
NICI GmbH is keen to nurture the customer relationship with you and to send you information and offers about our products / services. We therefore process your data to send you the relevant information and offers via email.
Die NICI GmbH ist daran interessiert, die Kundenbeziehung mit Ihnen zu pflegen und Ihnen Informationen und Angebote über unsere Produkte / Dienstleistungen zukommen zu lassen. Daher verarbeiten wir Ihre Daten, um Ihnen entsprechende Informationen und Angebote per E-Mail zuzusenden.
You can withdraw your consent at any time free of charge and informally without stating the reasons for such. Withdrawal should be sent via email to kommunikation@nici.de or via surface mail to NICI GmbH, Datenschutz, Langheimer Strasse 94, D-96264 Altenkunstadt.
Persons under the age of 16 may not submit personal data to us or give a declaration of consent without the authorization of their legal guardian. We encourage parents and guardians to actively participate in the online activities and interests of their children.