Skip to main content

data protection declaration

Data protection declaration

----------------------

This data protection declaration explains how we process your personal data when you use our website. The applicable definitions here are as per Art. 4, GDPR.

The company responsible for the processing of data on this website is:

Nivell GmbH, Oberholzstrasse 20, D-72351 Geislingen, Germany

 

Processing of data when visiting the website

----------------------

Each time you visit our website your Web browser sends us the IP address of the device you are using at that time and other technical data.

From that we collect the following data:

•             Which of our websites you visited

•             Date and time that you accessed it

•             Volume of data sent in bytes

•             Source/link from which you came to the site

•             The browser you used

•             The operating system you used

•             The IP address you used (where applicable in anonymised form)

The data is processed in accordance with Art. 6.1.f of the GDPR. Our legitimate interest lies in improving the stability and functionality of our website and in recognising any unlawful use. The data is not passed on nor used in any other way.

Cookies

In order to technically facilitate certain functions and to make it easier to use our website, we utilise so-called 'cookies' on our site.

These are small text files that get placed by your browser on your device when you visit our site. They contain information such as browser data and location data.

You can set up your browser so that you are informed about the placement of cookies and are able to decide on a case-by-case basis whether to accept them or can decline to accept them in specific cases or as a blanket rule. You will find information on how to do this in your browser's instructions.

Please note that the functionality of our website may be impaired if the use of cookies is not allowed.

Insofar as the data processed by any such cookies used by us includes personal data, the processing occurs as per Art. 6.1.b of the GDPR either through execution of the contract or as per Art. 6.1.f of the GDPR for the protection of our legitimate interest in the best possible functionality of the website.

Many cookies are automatically deleted when you close your browser ('session cookies'). Other cookies remain on your device and enable us or our partner companies (cookies from third-party providers) to recognise your browser again when you next visit. These are automatically deleted after a predefined time, the length of which can vary from cookie to cookie.

In addition to the cookies used by us, cookies from other companies are also saved on your device (cookies from third-party providers) and processed from there. The paragraphs below provide you with specific, separate information on how such cookies are used and what data they collect.

Making contact

If you use any of the options on our website to make contact with us, then in each instance data asked for there is captured. This data is used exclusively for the purpose of answering your enquiry and/or saved and used for making contact with you.  The legal basis for processing the data is your previously issued consent (Art. 6.1.a, GDPR) and/or our legitimate interest (Art. 6.1.f, GDPR) in responding to your enquiry and/or for contract execution / prospecting for business (Art. 6.1.b, GDPR).

Your data is deleted if the legal basis for processing it no longer exists and deletion is not prohibited by any statutory obligations to retain it.

 

Use of external providers' tools and services

----------------------

1. Google Maps

We use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) in order to visually display interactive maps and/or geographical information.

Google LLC, which is based in the USA, is certified pursuant to the US/European 'Privacy Shield' data protection agreement, which ensures adherence to the level of data protection applicable in the EU.

When you access a page on which a map from Google Maps is embedded, the information (including IP address) relayed to us by your Web browser gets sent to Google servers in the USA, where it is saved and evaluated as part of building up usage profiles. This data processing occurs in particular pursuant to Art. 6.1.f of the GDPR on the basis of Google's legitimate interest in designing the map service in line with users' needs. You have a right of appeal against the building up of these usage profiles, to exercise which you need to contact Google.

If you do not agree with the future sending of your data to Google as part of your use of Google Maps, you can prevent this by deactivating 'javascript' in your browser. However, the maps provided on our website can then not be used.

You will find Google's conditions of use at www.google.de/intl/de/policies/terms/regional.html

The additional conditions of use also apply for Google Maps: www.google.com/intl/de_US/help/terms_maps.html

 

Further information relating to the use of Google Maps is available from Google at: www.google.de/intl/de/policies/privacy/

 

2. Google reCAPTCHA

On this website we also use the reCAPTCHA function from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The principle purpose of this function is to differentiate between entries made by human beings and any being made improperly through automated processing by a machine.  The service requires that the IP address and, where applicable, other data needed by Google for the reCAPTCHA function are sent to Google. This is done in accordance with Art. 6.1.f of the GDPR on the basis of our legitimate interest in establishing that online actions are individually intended and in avoiding abuse and spam.

Google LLC, which is based in the USA, is certified pursuant to the US/European 'Privacy Shield' data protection agreement, which ensures adherence to the level of data protection applicable in the EU.

You can view further information on Google reCAPTCHA and Google's data protection declaration at: www.google.com/intl/de/policies/privacy/

 

3. Google Webfonts

In order to display fonts consistently this site uses Web Fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When you open a page, your browser loads the necessary Web Fonts into your browser cache in order to display text and fonts correctly.

For this to be done the browser you are using has to connect to the Google servers. Google becomes aware as a result of this that our website has been accessed via your IP address. We use Google Web Fonts in the interest of presenting our online content in a consistent, appealing way. This represents a legitimate interest pursuant to Art. 6.1.f of the GDPR. If your browser does not support Web Fonts, your computer uses a standard font.

Google LLC, which is based in the USA, is certified pursuant to the US/European 'Privacy Shield' data protection agreement, which ensures adherence to the level of data protection applicable in the EU.

You will find further information on Google Web Fonts at developers.google.com/fonts/faq and in Google's data protection declaration: www.google.com/policies/privacy/

 

4. Google Analytics

This website uses Google Analytics, a Web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses what are known as ‘cookies’, text files that are saved on your computer to facilitate analysis of your usage of the website. The information produced via the cookie about your use of this website (including the shortened IP address) generally gets relayed to a Google server in the USA, where it is stored.

All use of Google Analytics by this website is with the "_anonymizeIp()" extension. It ensures that the IP address is anonymised through shortening and makes it impossible to establish any direct connection to a specific individual. Through use of the extension your IP address is first shortened by Google within a European Union Member State or a state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address get relayed to a Google server in the USA and shortened there. In such exceptional cases this processing occurs in accordance with Art. 6.1.f of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

On our behalf, Google will use this information to analyse your usage of the website, to compile reports on website activity and to perform other services for us connected to website and Internet usage. The IP address relayed from your browser as part of Google Analytics does not get combined with any other Google data.

You can prevent cookies being saved by setting your browser software accordingly. Please note, however, that if you do so, you will not be able to make full use of all of this website’s functions. You can also prevent Google from collecting and processing the data (including your IP address) created by the cookie and relating to your use of this website by downloading and installing the browser plug-in available via the following link:

tools.google.com/dlpage/gaoptout

As an alternative to the browser plug-in or within your browsers on mobile devices please click on the following link in order to place on your device an opt-out cookie that prevents any future collection of data by Google Analytics within this website (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click on this link again): Deactivate Google Analytics

Google LLC, which is based in the USA, is certified pursuant to the US/European 'Privacy Shield' data protection agreement, which ensures adherence to the level of data protection applicable in the EU.

You will find more details on how Google Analytics handles user data in Google's data protection declaration: support.google.com/analytics/answer/6004245

 

5. Google Tag Manager

On our website we use Google Tag Manager. Google Tag Manager is a solution from Google Inc. that allows us to manage our website tags from one interface. Google Tag Manager is a cookie-less domain that does not collect or store personally identifiable information. Google Tag Manager only triggers other tags, which may collect data. Google Tag Manager can not access this data. If you've opted out at the domain or cookie level, this opt-out will apply to all tracking tags that have been implemented through Google Tag Manager.

Your rights as an affected party

----------------------

Pursuant to Art. 15 of the GDPR you have a right to know about personal data of yours that is processed by us and to the following information: the purposes of the processing, the categories of the personal data, the recipients or categories of recipients to whom your data is or has been disclosed, the planned length of storage and/or the criteria for determining this, the existence of your right to correction, to deletion, to restricting the processing, to objecting to the processing and to lodging a complaint with a supervisory authority, the origin of your data if it was not collected by us from you, the existence of any automated decision-making inclusive of profiling and, where applicable, meaningful information about the logic involved, the consequences as they affect you and the intended effects of any such processing, plus your right to be informed of what guarantees exist as per Art. 46 of the GDPR in the event of your data being forwarded into other countries;

Pursuant to Art. 16 of the GDPR you have the right to prompt correction of any incorrect data relating to you and/or to additions being made to fill in any gaps in your data stored on our servers;

Pursuant to Art. 17 of the GDPR you have the right to demand deletion of your personal data if the prerequisites of Art. 17.1 of the GDPR are met. However, this right does not exist in certain situations, especially in situations where the processing of the data is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Pursuant to Art. 18 of the GDPR you have the right to demand that the processing of your personal data be restricted, while the errors that you claim there to be in your data are checked, if you decline to have your data deleted due to prohibited data processing and instead demand that the processing of your data be restricted, if you need your data for asserting, exercising or defending legal claims, after we no longer need this data following achievement of our purpose, or if you have raised an objection due to your particular situation, for as long as it has not yet been determined whether our legitimate grounds carry more weight;

If pursuant to Art. 19 of the GDPR you have asserted with the responsible individual your right to correction, deletion or restriction of the processing, the latter must inform all recipients to whom the personal data relating to you has been disclosed of this correction or deletion of the data or of the restriction of the processing unless to do so proves impossible or involves a disproportionate outlay. You have the right to be informed about these recipients.

Pursuant to Art. 20 of the GDPR you have the right to obtain your personal data that you have provided to us in a structured, standard, machine-readable format or to demand that it be sent to another responsible individual if this is technically feasible;

Pursuant to Art. 7.3 of the GDPR you have the right to revoke at any time, with immediate future effect, any previously given consent to the processing of data. In the event of revocation, we shall immediately delete the data concerned unless further processing can be legally supported on the basis of processing without consent. Revoking consent does not affect the legitimacy of the processing done on the basis of the consent up until the point that it was revoked;

Pursuant to Art. 77 of the GDPR you have - regardless of any other regulatory or judicial remedy - the right to lodge a complaint with a supervisory authority, especially in the Member State in which your place of residence, your place of work or the place where the supposed breach occurred is located, if you are of the view that the processing of the personal data relating to you is in breach of the GDPR,

 

RIGHT TO OBJECT pursuant to Art. 21, GDPR

----------------------

IF HAVING WEIGHED UP THE DIFFERING INTERESTS WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT, LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME FOR ANY REASONS ARISING FROM YOUR PARTICULAR SITUATION TO RAISE AN OBJECTION TO THIS PROCESSING EFFECTIVE FROM THAT POINT FORTH.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN SHOW COMPELLING, LEGITIMATE GROUNDS FOR SAID PROCESSING THAT OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

 

The length of time for which personal data is stored

----------------------

The length of time for which personal data is stored is determined by the prevailing statutory period of data retention (e.g. as per commercial and fiscal legislation). At the end of the period the relevant data is routinely deleted if there is no longer any legal basis for retaining it.