Effective: December 22, 2022
In extension to the following privacy policy, you will find additions referring to our Falcon software here.
We, Nordantech Solutions GmbH (subsequently "we" or "Nordantech"), take the protection of your personal data and its confidential treatment very seriously. Your personal data is processed exclusively within the framework of the legal provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter "DSGVO") and the other applicable regulations.
With this privacy policy, we inform you about the processing of your personal data on our website and about your data protection rights.
I. We are the responsible party in terms of data protection. Contact details of the responsible for data processing and the data protection representative:
Responsible:
Nordantech Solutions GmbH
Kehrwieder 9
20457 Hamburg, GERMANY
Email: info@nordantech.com
Phone: +49 40 67559001
Data protection officer
Dr. Nils Christian Haag
intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg, GERMANY
Email: privacy@nordantech.com
Telefon: +49 40 790 235 402
II. Our data processing is always based on a legal foundation, such as on the basis of your consent, of contractual purposes, of legal obligation or of our legitimate corporate interests.
The processing of personal data requires a legal basis, which we would like to present to you in the following.
For processing personal data for which we obtain the consent of the affected person, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the affected person is the contracting party, Article 6 (1) lit. b DSGVO serves as the legal basis. This also includes processing operations that are necessary for the performance of pre-contractual measures.
If processing personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Article 6(1)(c) DSGVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) DSGVO serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.
III. We use personal data from you within the framework of our website. This is done with regard to the analysis, optimization and economic operation of the online offer. In some cases, we also use external service providers for this purpose. Further processing also takes place at your specific request.
We use the following subject areas for the website, where we process personal data:
1. Cookies
This website uses cookies. Cookies are small text files that are stored on your computer and through which the entity that sets the cookie receives certain information. They are used in our legitimate interest to make the website more user-friendly and effective or/and to ease your navigation on our website.
Of course, you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies, or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our offer may not work properly.
You can check which function on our website uses cookies by clicking on the individual functions.
2. Logfiles and Hosting
The datat transmitted by your browser is automatically stored in the server statistics as part of our legitimate interest in analysis and for security reasons (so-called "log files").
In detail, this includes the following data:
- language and version of the browser software
- Operating system in use and its interface
- Referrer URL (the previously visited page)
- host name of the accessing computer (IP address)
- date and time of the server request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request ( specific page)
- Amount of data transferred
- Access status/ HTTP status code
We are generally unable to assign this data to specific persons. We do not combine this data with other data sources. The data is also deleted after a statistical evaluation within 7 days. Any data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
We use hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offer.
In this context, we (respectively our hosting provider) process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.
3. Newsletter
After providing the email address, we will send you a confirmation email to the address provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe.
We send newsletters only with your consent or a legal permission.
We work together with a service provider. According to its own information, the service provider may use this data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the distribution and presentation of the newsletter or for statistical purposes to determine which countries the recipients come from. However, the service provider does not use the data of our newsletter recipients to address them itself or to pass them onto third parties.
The newsletter is sent using "MailChimp", a newsletter delivery platform operated by the US provider Rocket Science Group LLC (675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA). You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy.
Your personal data will otherwise not be passed onto third parties and we process the data you provide on first name, last name, email address and industry only for the purpose of sending, creating and optimizing the newsletter.
You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled this subscription, their personal data will be deleted.
4. Content integration and website optimization
In some cases, we utilize as part of our legitimate interests with regard to the analysis, optimization and economic operation of the online offering of external service providers. This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is therefore necessary for the display of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may further be stored in cookies on the users' device and contain, among other things, technical information similar to log files. We list our service providers below.
If your data is to be used for other purposes, we will inform you in advance and only use the data if you have given your explicit consent in advance.
a. Service provider Google
Within the scope of our legitimate interests in analyzing, optimizing and economically operating our online offer, we use services of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").
aa) Google Analytics for web analysis
This website uses Google Analytics as a web analytics service. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
We would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses are shortened by Google in member states within the European Union or in other contracting states to the Agreement on the European Economic Area before transmission in order to exclude a direct reference to individuals. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
On behalf of the provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's data protection information at http://www.google.de/intl/de/policies/privacy/?hl=de and specifically for Google Analytics at https://www.google.com/policies/privacy/partners/?hl=de and at https://support.google.com/analytics/answer/6004245?hl=de and for Universal Analytics at https://support.google.com/analytics/answer/2838718?hl=de.
By using this website, you consent to the processing of data about you by Google in the above-mentioned form and for the above-mentioned purpose.
You can object to the collection and storage of data by Google for the respective terminal at any time with effect for the future in connection with the use of this link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection by Google Analytics by clicking on the following link. An Opt-Out-Cookie will be set, which prevents the future collection of your data when visiting this website with this terminal:
Prevent collection by Google Analytics.
If you delete their cookies, this will result in the deactivation cookie also being deleted and you will have to place it again.
bb) Google Webfonts
Google web fonts are used to improve the visual presentation of various information on this website. The web fonts are transferred to the browser's cache when the page is accessed so that they can be used for the display. If the browser does not support Google web fonts or prevents access, the text is displayed in a standard font. When the page is accessed, no cookies are placed on the website visitor. Data transmitted in connection with a page visit is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. This transmits which of our web pages you have visited. The IP address of the visitor's browser is also stored by Google. It is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can set your browser to prevent the fonts from being loaded by Google servers. Information on the privacy terms of Google Web Fonts is available at: https://developers.google.com/fonts/faq#Privacy.
General information on data protection is available at the Google Privacy Center at: http://www.google.com/intl/de-DE/privacy
b. Facebook Pixel for web analysis
Within the scope of our legitimate interests in analyzing, optimizing and economically operating our online offer, we use services of the social network facebook.com, which is operated by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) ("Facebook").
Our website uses the advertising tools Custom Audiences and Website Custom Audiences of Facebook. Here, a non-reversible and non-personal checksum is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes on its social platform and stored in the USA.
The Facebook pixel is directly integrated by Facebook when you call up our websites and can save a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our online offering will be noted in your profile. The data collected about you is anonymous for us, so it does not offer us any conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes.If we should transmit data to Facebook for matching purposes, this data is encrypted locally by the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of creating a comparison with the data encrypted in the same way by Facebook.
Furthermore, when using Facebook Pixel, we use the additional function "extended matching" (in this case, data such as phone numbers, email addresses or Facebook IDs of the users) to create target groups ("Custom Audiences" or "Look Alike Audiences") are transmitted to Facebook (encrypted). Further information on "advanced matching": https://www.facebook.com/business/help/611774685654668).
Also based on our legitimate interests, we use the "Custom Audiences from File" procedure of the social network Facebook, Inc. In this case, the email addresses of newsletter recipients are uploaded to Facebook. The upload process takes place in encrypted form. The upload is used solely to determine recipients of our Facebook ads. In this way, we want to ensure that the ads are only displayed to users who have an interest in our information and services.
For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, please refer to Facebook's privacy policy at http://www.facebook.com/about/privacy, and specifically for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences.
If you wish to object to the use of Facebook Website Custom Audiences, you can do so at https://www.facebook.com/ads/website_custom_audiences. To do this, you must log in to your Facebook account.
To prevent the collection of your data using the Facebook pixel on our website, please click the following link:
Prevent collection by Facebook.
When you click the link, an "opt-out" cookie will be stored on your device. If you delete the cookies in this browser, you must click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain where the link was clicked.
c. LinkedIn Pixel for web analysis
Plug-ins of the social network LinkedIn of LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA) ("LinkedIn") are integrated in our website.
You can recognize the "LinkedIn" plug-ins by the LinkedIn logo or the "Recommend" button on our site. When you visit our pages, a direct connection is established between your browser and the LinkedIn server via the plug-in. LinkedIn thereby receives the information that you have visited our site with your IP address. LinkedIn stores this information in the USA. For LinkedIn members, LinkedIn places cookies when you visit our site unless you opt out of this feature in your LinkedIn settings. If you visit our site and are logged in as a LinkedIn member, LinkedIn will use this information to recommend content that is specifically relevant to you. Using this information, the features LinkedIn makes available to you are personalized on third-party websites. If you click the LinkedIn "Recommend Button" while logged into your LinkedIn account, you can link the content of our pages on your LinkedIn profile. This allows LinkedIn to associate the visit to our pages with your user account. If you do not want this, you must log out of your LinkedIn account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. Details on data collection (purpose, scope, further processing, use) as well as your rights and setting options can be found in LinkedIn's privacy notices. LinkedIn provides this information at http://www.linkedin.com/legal/privacy-policy. Further information on the cookies used by LinkedIn can be found at https://www.linkedin.com/legal/cookie-policy.
To prevent the collection of your data by means of the LinkedIn pixel on our website, please click the following link:
Prevent collection by LinkedIn.
When you click the link, an "opt-out" cookie will be stored on your device. If you delete the cookies in this browser, you must click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain where the link was clicked.
d. Calendly for making an appointment
We use the online calendar Calendly to make an appointment. Calendly is an offering of Calendly LLC (3423 Piedmont Road NE, Atlanta, GA 30305-1754, USA). Calendly claims it has incorporated the standard contractual clauses into its data processing agreements as its transfer mechanism, as a safeguard to provide a validated alternative to the Privacy Shield.
In addition, Calendly claims its sub-processors of data are either Privacy Shield certified or have signed a data processing addendum with Calendly. For example, Calendly stores data in Amazon Web Services (AWS) and Google (select back-ups), both of which are Privacy Shield certified.
When you request an appointment, you are automatically connected to our appointment account at Calendly. After selecting your appointment, confirming it, and entering your contact information and concerns, you will receive an email from Calendly confirming your appointment. You can view more information about Calendly and Calendly's privacy policy here: https://calendly.com/pages/privacy.
The information you provide in the Calendly form, including the data you enter there, will be stored by us for the purpose of processing your request and in case of follow-up questions. This data remains with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g. appointment made). Mandatory legal provisions - in particular retention periods - and any further legal basis for storage remain unaffected.
e. Vimeo to display our videos
Plug-ins of the video portal Vimeo of Vimeo LLC (555 West 18th Street, New York 10011, USA) are integrated on our website. Each time you visit a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. In the process, information about your visit and your IP address are stored there. By interacting with the Vimeo plug-ins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there.
If you have a Vimeo user account and do not want Vimeo to collect data about you via this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website.
The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at: http://vimeo.com/privacy.
In addition, Vimeo calls up the Google Analytics tracker via an iFrame in which the video is called up. This is Vimeo's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. Users can also prevent the collection of data generated by Google Analytics and related to their use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in as described in the section "Google Analytics".
IV. If you contact us or send us an application, we store and use the personal data you provide to us in order to respond to your inquiry.
1. Contractual request
When you contact us via email or the website tool Calendly, your information will be stored by us in order to answer your inquiries.
A transfer to third parties does not take place in principle, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to apply and there are no other legal exceptions to the contrary.
2. Application
You can also apply to us via our contact channels. The data entered will be processed and used exclusively for the purpose of applicant selection. With your application, you agree to be contacted and informed in writing and / or by phone as part of the application process. Please note that your data will not be stored anonymously, but will be accessible to our human resources department and to the departments relevant to the position to be filled. We wish to evaluate all applicants only on the basis of their qualifications, regardless of race, ethnic origin, gender, religion or belief, disability, age or sexual identity. We therefore ask that you refrain from including such information in your application if possible. You can have your application changed or deleted at any time and revoke your consent. To do so, please contact our team.
V. You can find us among online presences within social networks and platforms. There, personal data may also be collected and processed from you as part of your use of the social media platform, which we or the platform provider uses for communication or analysis of user behavior (market research purpose, advertising purpose).
1. Our online presences are with:
Facebook (Pages, Groups)
Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Base is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
Privacy policy: https://www.facebook.com/about/privacy
Opt-out: https://www.facebook.com/settings?tab=ads
Instagram Inc. (1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy policy: / Opt-Out: http://instagram.com/about/legal/privacy
Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy policy: : https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization
LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Irland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
XING AG (Dammtorstraße 29-32, 20354 Hamburg, Deutschland)
Privacy policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung
2. Use of data and shared responsibility
We would like to use these presences to communicate with our customers, interested parties and users who are active there and to inform them in this way about our services and our company.
The processing of the personal data of the users active there is based on our legitimate interests in communicating and providing information to and with the users. If consent to data processing has been given by users within the framework of the respective social platform, processing is carried out on the basis of this consent.
If you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform.
We would like to point out that despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and, if necessary, forward the rights request to the respective operator for better processing of the data subject rights. Our options are basically based on the company policy of the respective provider.
You can find our storage details below. We have no influence on the storage period of your data, which is stored by the operator of the social platform for its own purposes. For details on this, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Depending on the following named social platform, user data processing may also occur outside the area of the European Union. The U.S. providers certified under the Privacy Shield have committed to comply with EU data protection standards.
User data is usually processed by the platforms for market research and advertising purposes. For example, user profiles can be created from the users' behaviors and resulting interests. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users' computers, in which the users' behaviors and interests are stored. Data can also be stored in the users profiles regardless of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in.
For a detailed description of the respective processing and the objection options, we refer to the linked information of the providers.
VI. If we process your personal data, you as a data subject have the right to information, to correction, to blocking or deletion, to data portability, to complain to a data protection supervisory authority and the right to revoke a given consent at any time with effect for the future. To do so, send us an email with the subject "Data protection".
You have the right
- to request information about your personal data processed by us in accordance to Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
- pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;
- pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
- pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
- in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
- complain to a supervisory authority according to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
You have a right to object:
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
In accordance with Art.7 (3) DSGVO, you have the right to revoke a given consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
VII. We retain your personal data until the purpose of their storage has ceased to exist and no further legal storage requirements exist.
We store personal data for the duration of the respective statutory retention period or as long as the purpose of collecting the data exists. After expiry of the retention period, the data is routinely deleted, unless it is necessary for the initiation or performance of a contract. If user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted as far as possible. Accordingly, the data will be blocked if possible and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
VIII. We make every effort to update the privacy information for you as changes occur.
This privacy policy is currently valid and has the state of December 2022.
Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current data protection declaration at any time on the website at https://www.nordantech.com/de/datenschutz.
This translation is for information purposes only. In the event of any discrepancies between this version and the German version, the German version shall prevail.