nordiska GmbH & Co. KG

Privacy policy

DATA PROTECTION DECLARATION

PRIVACY POLICY

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information on the subject of data protection in our data protection declaration listed under this text.

Data collection on our website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

How do we collect your information?

On the one hand, your data is collected when you communicate it to us. This may be data that you enter in a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected in order to ensure error-free provision of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection. You also have the right of appeal to the responsible supervisory authority.

Analysis tools and third-party modules

When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Details can be found in our data protection declaration under the heading "Third-party modules and analysis tools". You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

General notes and mandatory information

Data privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. When you use this website, various personal data is collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

nordiska GmbH & Co. KG
Victoria Höhe 1
51645 Gummersbach
Germany

Phone: +49 (0)2261 9891-0
E-Mail: info[AT]nordiska.de

Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to data processing

Many data processing processes are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing up to the revocation remains unaffected by the revocation.

Right of appeal to the responsible supervisory authority

In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to data transferability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

Encrypted payment transactions on this website

If after the conclusion of a chargeable contract there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization), this data is required for payment processing. Payment transactions via the usual means of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Information, blocking, deletion

You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the scope of the applicable legal provisions. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data.

Objection to advertising mails

We herewith object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.

DATA PROTECTION OFFICER

Statutory data protection officer

We have appointed a data protection officer for our company.

Datenschutz Achenbach GmbH
Kölner Straße 75
51702 Bergneustadt
Germany

Phone: +49 2261 / 815 831 20
E-Mail: info[AT]datenschutz-achenbach.de

DATA COLLECTION ON OUR WEBSITE

Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser the next time you visit our website. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.

Cookies, which are necessary to carry out the electronic communication process or to provide certain functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 Para. 1 Lit. F GDPR. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimized provision of his services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these will be treated separately in this data protection declaration.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• Referrer URL
• host name of the accessing computer
• Time of the server request
• IP address

These data are not combined with other data sources. The basis for data processing is Art. 6 Para. 1 Lit. B GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Contact form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 Para. 1 Lit. A GDPR). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation. The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Registration on this website

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.

In the event of important changes, such as the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data entered during registration will be processed on the basis of your consent (Art. 6 Para. 1 Lit. A GDPR). You can revoke your consent at any time. All you need to do is send us an e-mail. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration is stored by us as long as you are registered on our website and is subsequently deleted. Legal retention periods remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent necessary for the establishment, content design or change of the legal relationship (inventory data). This is done on the basis of Art. 6 Para. 1 Lit. B GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our internet pages (usage data) only to the extent necessary to enable, or invoice the user for, the use of the service. The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transfer upon conclusion of contract for online shops, dealers and dispatch of goods

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the company entrusted with the delivery of the goods or the bank entrusted with the payment processing. A further transmission of the data will not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 Para. 1 Lit. B GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

ANALYSIS TOOLS AND ADVERTISING

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 Par. 1 Lit. F GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both his website and his advertising.

IP Anonymisation

We have activated the IP anonymisation function on this website. This will cause your IP address to be shortened by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to this website: Disable Google Analytics. More information on how Google Analytics handles user data can be found in the privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=en

Contract Data Processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities for the use of Google Analytics.

Clicky Web Analytics

This website uses Clicky, a web analysis service of Roxr Software, Ltd. Clicky uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by these cookies about your use of this website is transferred to a server of Roxr Software, Ltd. in the USA and stored there. Please note that Clicky is used on our site with the option "Anonymize IP addresses", which replaces the last octet of your IP address with a 0. Your IP address is thus stored anonymously and cannot be viewed by us. Clicky will use information generated by cookies to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services relating to the website and internet use. Clicky may also transfer this information to third parties where required to do so by law or where such third parties process the information on Clicky's behalf. Roxr Software, Ltd. will never associate your IP address with any other data held by Roxr Software, Ltd. You can prevent the installation of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Clicky in the manner and for the purposes set out above. A detailed explanation of how Clicky Web Analytics works and all cookies used can be found here: http://clicky.com/terms

Heatmap.me

This website uses heatmap.me, a web analysis tool from HeatMap, Inc. 6724 Monroe Ave, Eldersburg, MD 21784, USA. This records interactions with the website by randomly selected individual visitors anonymously. This creates a log of e.g. mouse clicks and use of individual page elements (no keyboard activity) with the aim of showing optimization possibilities for this website. In addition, information about the operating system and browser, as well as the resolution and type of device, references to domains, the geographical location, pages visited and the date and time at which the website was accessed, are recorded for statistical purposes. This information is not personal and will not be passed on to third parties by heatmap.me. The sole purpose of collecting your navigation information is to improve your experience using our websites and web services. If you do not want a recording, you can deactivate it by setting the Do-Not-Track header in your browser. You can find more information on the following page: https://heatmap.me/privacy

Google reCAPTCHA

This website uses Google reCAPTCHA (following reCAPTCHA), a captcha service of Google Inc. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google reCAPTCHA serves to ensure that entries made on our website are actually made by real people and not automatically, e.g. by software (so-called robots). For this purpose reCAPTCHA (No CAPTCHA reCAPTCHA) displays a clickable checkbox "I am not a robot". reCAPTCHA analyzes the behavior of the user as soon as he visits the website. If necessary, after clicking the checkbox, various images are also displayed, which you must assign to a predefined image motif by clicking on the relevant images (e.g. selection of all images with cars).

The integration of reCAPTCHA takes place via an interface ("API") to the Google services. By integrating reCAPTCHA, Google may collect and process information (including personal data). It cannot be excluded that Google also transfers the information to a server in a third country. reCAPTCHA may use so-called "cookies", text files which are stored on your device and which enable an analysis of the use of the websites you have visited. In addition, reCAPTCHA also uses so-called WebBeacons, i.e. small pixels or graphics. The information generated by the cookie in connection with the WebBeacon about your use of this website (including your IP address) will be transmitted to and stored by Google on servers, possibly in the United States or other third countries.

For more information on how reCAPTCHA works, see:
https://developers.google.com/recaptcha/

Through the integration of reCAPTCHA we pursue the purpose of determining whether entries on our website are made by a real person or by a bot. The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our justified interest required for this lies in the great benefit that the function described above has for our offer. Automated checking to see whether a real person or a bot is making the entries speeds up and simplifies our workload and increases the degree of reliability of the entries made. It also prevents misuse.  Google also has a legitimate interest in the (personal) data collected in order to improve its own services. The processed information is only stored for as long as it is necessary or legally required for the intended purpose. The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

Use of YouTube

We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service provided by YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube is integrated by embedding the service on our website using an "iFrame". When loading this iFrame, YouTube or Google may collect and process information (including personal data). It cannot be ruled out that YouTube or Google may also transfer the information to a server in a third country. Information on Google's existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this data protection declaration under "6) Information on Google services".

The integration of YouTube enables us to present you various videos on our website so that you can watch them directly on our website. The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this lies in the great benefit that YouTube offers. By integrating external videos we relieve our servers and can use corresponding resources for other purposes. Among other things, this can increase the stability of our servers. YouTube or Google also has a legitimate interest in the (personal) data collected in order to improve its own services. The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full. For more information, please see YouTube's and Google's privacy policy, which you can access here: www.google.com/policies/privacy/

To learn more about Google's privacy settings, visit https://privacy.google.com/take-control.html?categories_activeEl=sign-in

Social Networks & External Links

In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network. In addition to storing the data you have entered in this social medium, other information may also be processed by the social network provider.

In addition, the social networking provider may process the most important data of the computer system from which you visit it - such as your IP address, processor type and browser version used, including plug-ins. If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account. The purpose and scope of the data collection by the respective medium as well as the further processing of your data there and your rights in this regard can be found in the respective regulations of the respective responsible person, e.g. under:

Facebook: https://de-de.facebook.com/about/privacy/
Twitter: https://twitter.com/de/privacy
Instagram: https://help.instagram.com/155833707900388
Google: https://policies.google.com/privacy?hl=en

We also point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of data on these third-party websites.

PAYMENT PROVIDERS

PayPal

On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you choose to pay via PayPal, your payment details will be sent to PayPal. Your data will be transmitted to PayPal on the basis of Art. 6 Para. 1 Lit. A GDPR (consent) and Art. 6 Para. 1 Lit. B GDPR (processing to fulfil a contract). You have the possibility to revoke your consent to data processing at any time. A revocation has no effect on the effectiveness of data processing operations in the past.

Paydirekt

On our website we offer among other things the payment by Paydirekt. The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter "Paydirekt"). If you make the payment via Paydirekt, Paydirekt collects various transaction data and forwards them to the bank with which you are registered with Paydirekt. In addition to the data required for payment, Paydirekt may collect further data such as delivery address or individual items in the shopping cart as part of transaction processing. Paydirekt then authenticates the transaction using the authentication procedure stored for this purpose at the bank. The payment amount will then be transferred from your account to our account. Neither we nor third parties have access to your account details. Details on payment with Paydirekt can be found in Paydirekt's general terms and conditions and data protection regulations at: https://www.paydirekt.de/agb/index.html.

USE OF QUOTATIONS

You grant nordiska and all affiliated subsidiaries and affiliates and their employees (hereinafter "Nordiska") the unrestricted right to use, translate, edit, copy, distribute, reproduce and make available to other providers your quotation or parts of your quotation including your first name, surname, place of residence, city, company name and Internet address in connection with any conceivable marketing, advertising and/or promotional activities for Nordiska's products or services. Your quotation may be used by or on behalf of Nordiska for any purpose and in any legally permissible manner, including marketing, promotion and advertising, worldwide and at any time via any current or future written, electronic or other medium or format, such as inserts, television, catalogues, Internet, and may also be used on websites linked to Nordiska as well as in publications, broadcasts, offers, advertisements, events and other printed or electronic materials (collectively "marketing use"). The personal information we collect as described above will be processed by Nordiska internal employees who are responsible for the design and distribution of the material for marketing purposes. You allow Nordiska to edit your quote for reasons of clarity, length, spelling and grammar and you agree that you have no right to be informed of, review or agree to the marketing use of your quote. You may not use your employer's or company's name in a quotation without their consent. Nordiska has no control over whether you have obtained this consent. Therefore, you are solely responsible for any damages that may occur as a result of using your employer's name without their consent. You further agree that you will not receive any payments, or any other monetary or material contributions to your quote, whether published or otherwise used at any time. You release Nordiska and all other persons or institutions for all time from any liability for any violation of personal rights or property rights in connection with your quotation. You confirm that you are of legal age and have the right to conclude a contract in your name. You further confirm that you have read and understood the above authorization and consent. You can withdraw your consent at any time and access and modify your personal information by sending a written message to Customer Service. Upon receipt of your message, Nordiska will remove your quote from all marketing content within 60 days. You agree to the continued use of the quote even after your withdrawal until all activities have been completed for which we have already entered into a payable performance agreement prior to receipt of your withdrawal and where it is necessary to use up the existing inventory at the time of receipt of the withdrawal of your consent.

SECURITY OF THE HOMEPAGE

We have physical, electronic and procedural safeguards that help us protect your non-public information. For example, we use Secure Socket Layer (SSL) technology to encrypt your bank details when you purchase products from our website. When you set up an account with nordiska, you can choose a password to protect your customer data. Remember that a password is only as good as you make it: Therefore, you should choose a unique password and keep it in a safe place. You can change your password as often as you like under "My account". Nordiska only allows authorized persons who need personal information to manage your account, to offer you information about products and services or to improve, maintain or maintain our homepage. With regard to homepage hosting and other products and services offered by us, we may gain access to your end customers' or clients' data. We normally process this data on your behalf and according to your wishes, in accordance with the function you have described as a consumer or transmitter of this information.

Changes to this privacy policy: This privacy policy was last updated on 23 May 2018. Nordiska revises this privacy policy from time to time and publishes these changes on its homepage. We reserve the right to change this privacy policy at any time and therefore ask you to review it regularly.

LOGIN PROBLEMS

Our registration procedure has been created to ensure your privacy. If you have problems logging in, please make sure you are using the correct email address and/or password. If you still have problems logging in to our homepage despite the correct e-mail address and password, please contact us.

ORDER CONFIRMATION

Nordiska sends a notification by e-mail to the e-mail address you provided when registering in order to confirm orders. If you receive an e-mail confirmation for an order that you have not placed, please contact our customer centre immediately.


What does this mean?

We, nordiska GmbH & Co KG, or third parties on our behalf, may contact you with information about nordiska products, events and promotions or ask for your opinion in order to conduct surveys. In order to offer you the best personalized experience and identify which of our products may be of interest to you, we will create a profile of you based on the information we have about you. In order to create this profile, we store and analyse the personal data we collect, including:

We will keep the profiles we create secure and only provide them to third parties engaged by us to provide services on our behalf. You are fully in control, which means we may only contact you through the channels you choose, such as email, phone, apps, SMS or mail. If you wish to unsubscribe or no longer use a specific channel, please follow the steps in the message provided or contact our customer service. For more information, including how you exercise your rights regarding the personal information we hold about you, please read our Privacy Policy.