Data Privacy Policy

|Data Privacy Policy
Data Privacy Policy 2020-04-01T10:06:39+00:00

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The purpose of this data protection declaration is to inform you as a website user about the type, extent and intention of the personal data processing and the existing rights for you as far as you are the person concerned within the meaning of Art. 4 No. 1 of the General Data Protection Regulation.

1. Responsible body
This website and the range of services are operated by:

Novo Klinik-Service GmbH
Technologiepark West – Haus 15
Zum Frenser Feld 1
50127 Bergheim

Tel. +49 2271 99404-0
Fax +49 2271 99404-100
E-Mail: info@its-novo.de
Internet: its-novo.de

The development of the website has been designed to collect as little data as possible from you. In principle, it is possible to visit our website without providing personal data. Only when you decide to use certain services (e.g. use the contact form or request a sample) the personal data processing will become necessary. We particularly pay attention to process your personal data only in accordance with a legal basis or with your consent. We adhere to the provisions of the General Data Protection Regulation (GDPR) and the applicable national regulations, such as the Federal Data Protection Act, the Telemedia Act or other more specific data protection laws.

2. Purpose and legal basis for processing personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

a) In order to be able to deal with your concerns when making contact inquiries
b) In order to be able to send you a sample according to your sample request
c) In order to be able to deliver the product to you (delivery by logistics company)
d) In order to be able to send you an offer after your request for quotation
e) For the technical implementation of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information)
f) In order to be able to conclude and process contracts with you for our services.
g) Fulfillment of obligations resulting from the contractual agreements in the context of the delivery of goods and services by the supplier
h) For sending interesting information about products and activities
i) Transmission of your contact details to our sales representative for the purpose of individual customer care
j) To fulfill tax control and reporting obligations
k) In order to receive and process your application for one of our job offers.

Regarding the legal basis for the processing of your personal data the following applies:We process personal data that is necessary for the establishment, implementation or processing of our range of services (contract processing) on ​​the legal basis of Art. 6 Para. 1 lit. b GDPR. As far as we obtain your consent for the processing of your personal data, the consent according to Art. 6 Para. 1 lit. a GDPR is the legal basis for data processing. Data processing is also permitted if we process your data to safeguard our legitimate interests and thereby do not outweigh your interests or fundamental rights and freedoms with regard to the processing of personal data. As far as we use external service providers as part of the order data processing, the processing will be carried out on the legal basis of Art. 28 GDPR.

3. Collected and processed personal data

As part of our website, we collect and process certain personal data from you. You can see on the one hand which data are concretely being processed by the data you have to provide when filling out forms on the website (e.g. contact form or order form for samples) and on the other, we inform you about the processed data for the processing operations described here.

In summary, we collect and process the following data from you via our website:

General contact details:

  • Company, department
  • Name, first name
  • E-mail address, telephone number
  • Message content

We will only collect and process your data for the purposes stated in this data protection declaration. Any use beyond the stated purpose requires your explicit consent. The same applies to the transfer and transmission of your data to third parties.

4. Collection of personal data when visiting our website

If you just use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data that are technically necessary for us to display our website and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Website from which the request is coming
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

In addition to the previously mentioned data, cookies are stored on your computer when using our website. Please find more information on this under the point “Cookies” in this data protection declaration.

5. Cookies

By the use of so-called browser cookies information is collected and stored on our website. Cookies are small text files that are stored on your data carrier saving the specific settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognize the user’s device and to make any default settings immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard disk of the user’s computer. Cookies help us to improve our website and to be able to offer you a better and more customised service. We use both purely technical cookies necessary for the proper provision of our company appearance as well as analysis cookies.

However, we only use the latter with your consent.

As part of the obligation to inform, the cookies are listed below:

Cookie name Deletion Provider Purpose
Cookie_notice_accepted

Woocommerce_cart:hash

at the end of the session its-novo.de Purely technical cookie that activates the analysis tools with your consent to use them.
_ga

_gid

_gat

Session Cookie Google Analytics These cookies are used to throttle the query rate and to remember visitor decisions.

 

6. Google Analytics

Our website uses functions of the web analytics service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

 

Google Analytics uses “cookies”. These are small text files that your web browser saves on your device and that enable an analysis of website use. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. As a rule, the server is located in the USA.

Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and possibly advertising.We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. When transmitting the IP address Google does not merge it with other Google data.

The setting of cookies by your web browser is preventable. However, some functions of our website could be restricted. You can also prevent the collection of data relating to your website usage including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plug-in via following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find details on the handling of user data at Google Analytics in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.

In order to fully comply with the legal data protection requirements, we have concluded a contract with Google for order processing.

Please find Google’s data protection declaration here: https://policies.google.com/privacy/partners?hl=de

7. Contacting (contact forms, quotation forms etc.)

You can contact us by email or our contact form (quotation form and sample order for business customers). In this case, we store the personal data you have transmitted in order to process your request and to contact you to settle the issue. As far as we request information by our contact form, the required fields for contacting us are accordingly marked (asterisk). The voluntary information helps us to clarify your request and to improve its handling. You will submit the requested data to us on a purely voluntary basis.

Depending on the type of request, the legal basis for this processing is Art. 6 Para. 1 lit. b GDPR for inquiries that you make yourself as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f GDPR if your request is of a different nature. If personal data is requested that we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transmission to us is based on the consent you have given in accordance with Art. 6 Para. 1 lit. a GDPR.

8. Rights of the data subject

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to appeal, to request the origin of your data, unless it was collected from us;
  • to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
  • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, provided that the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or need to defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
  • to demand the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal rights is required;
  • in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible (data portability);
  • to revoke your consent given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we may no longer continue the data processing based on this consent in the future and
  • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
  • If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR provided that there are reasons arising from your particular situation.

9. Passing on your personal data

Your personal data will be passed on as described below.
An external service provider in Germany hosts the website. We ensure that data processing takes place in Germany alone. This is necessary for the operation of the website as well as for the establishment, implementation and processing of the existing license agreement and possible without your consent. Moreover, we will pass on the data if we are entitled or obliged to pass on data due to legal regulations and / or official or judicial orders. This can be, in particular, the exchange of information for purposes of law enforcement, security or enforcement of intellectual property rights. If we pass on your data to service providers to the extent necessary, they will only have access to your personal data insofar as it is necessary to fulfil their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR. In addition to the aforementioned circumstances, we generally do not transmit your data to third parties without your consent. In particular, we do not pass on any personal data to a location in a third country or an international organization.

10. Data security

Unfortunately, the transmission of information via the Internet is never 100% secure. This is the reason why we cannot guarantee the security of the data transmitted to our website via the Internet.
However, we secure our website by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons.
We particularly transfer your personal data in encrypted form. We use the coding system SSL / TLS (Secure Sockets Layer / Transport Layer Security). We continuously improve our security measures in line with technological developments.

11. Storage period for personal data

Regarding the storage period, we will delete personal data as soon as it is no longer required to fulfill the original purpose and there are no longer any legal retention periods. The legal retention periods ultimately form the criterion for the final duration of the storage of personal data. We will routinely delete the relevant data after the expiry of the deadline. In case of retention periods, processing is restricted by blocking the data.

12. Storage period for personal data (business partners/suppliers)

Business documents are kept for a maximum of 6 and 10 years in accordance with the provisions of § 257 of the Commercial Code and § 147 of the Tax Code.
As long as you do not object, we will use your data to maintain and intensify our trusting business relationship for mutual benefit. If you request the deletion of your data, we will comply with it and delete the data immediately, insofar as there are no legal storage obligations to prevent the deletion.

13. References and links

When calling up websites to which reference is made on our website, information such as name, address, email address, browser properties, etc. can be requested again. This data protection declaration does not regulate the collection, transfer or handling of personal data by third parties.

Third-party service providers may have different and separate provisions when dealing with the collection, processing and use of personal data. It is therefore advisable to catch up on the practice of handling personal data on third-party websites before entering personal data.

14. Changes of the data protection declaration

We are constantly developing our website in order to provide you with an ever better service. We will always keep this data protection declaration current and adapt it accordingly if and to the extent that this should become necessary.

15. Data protection officer

We have appointed a data protection officer.

Philipp Herold
Rudolf-Diesel-Straße 10
23617 Stockelsdorf
Tel: +49 451 49 880 23
Fax: +49 451 49 880 24
philipp.herold@hub24.de

state: February 2020