Home / Privacy

Privacy Policy

1. Data protection at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information about data protection can be found in our Privacy Policy given below this text.

Analysis tools and tools from third-party providers

When you visit our website, your surfing behaviour can be statistically evaluated. This happens mainly with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following Privacy Policy.

You can object to this analysis. We will inform you about the possibilities of objection in this Privacy Policy.

2. General information and compulsory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and handle the data in accordance with statutory data protection regulations as well as this Privacy Policy.

If you use this website, various personal data will be collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g., when communicating via e-mail) may have security flaws. Complete protection of the data from access by third parties is not possible.

Information about the data controller

The data controller responsible for data processing on this website is:

Nivona Apparte GmbH
Südwestpark 49
90449 Nürnberg

Telephone: 0911 2526630
E-mail: info(at)nivona.com

The data controller is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revoking your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an existing consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing performed up until the date of the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the case of violations of data protection law, the data subject has the right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of the data protection officers as well as their contact data can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to data portability

You have the right to have data that we automatically process on the basis of your consent or in fulfilment of a contract delivered to you or to a third party in a commonly used, machine-readable format. If you require the direct transfer of data to another controller, this will only be done to a technically feasible extent.

Information, blocking, deletion

You have the right at any time, within the scope of the applicable statutory provisions, to obtain information free-of-charge about your stored personal data, its origins and recipients and the purpose of the data processing and, if necessary, a right to the rectification, blocking or deletion of this data. For further information on this and other issues around personal data, you can contact us at any time at the address given in the site notice below.

3. Data protection officer

Statutory data protection officer

We have appointed a data protection officer for our company.

Marc Fuchs (DATEV eG)
Sigmundstraße 172
90329 Nürnberg
Germany

E-Mail: marc.fuchs@datev.de

4. Data collection on our website

Cookies

Web pages use so-called cookies in some instances. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our content more user-friendly, effective and secure. Cookies are small text files that are filed on your computer and stored by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies in certain cases or generally exclude them, as well as enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies required to perform the electronic communication process or to provide certain functions you desire (e.g., shopping basket function) will be stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they will be discussed separately in this Privacy Policy.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP Anonymisation

We have activated the IP-anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other signatories to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted from your browser in the context of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the storage of cookies in the corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website fully. In addition, you may prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as from processing this data by downloading and installing the browser plugin available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information on Google Analytics’ handling of user data, please refer to Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en

Contract data processing

We have entered into a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. Plugins and tools

Our website uses plugins from the Google-operated site YouTube. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our YouTube plugin-enabled sites, you will be connected to YouTube’s servers. The YouTube server is told which of our pages you have visited.

When you are logged into your YouTube account, you permit YouTube to link your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an attractive presentation of our online content. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

For more information about how user data is handled, please refer to YouTube’s Privacy Policy at https://www.google.com/intl/en/policies/privacy

Google Maps

This site uses the mapping service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your IP address must be stored to use Google Maps’ features. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an attractive presentation of our online content and to make the places we have indicated on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

For more information on how user data is handled, please refer to Google's Privacy Policy: https://www.google.com/intl/en/policies/privacy/

Compulsory information according to Art. 12 ff. GDPR

Contact details of the controller

Name: Peter
Surname: Wildner

Contact details (business)
Company: NIVONA Apparate GmbH
Address: Südwestpark 49
Telephone: 90449 Nürnberg
Email: peter.wildner@nivona.com

Contact details of the data protection officer

Contact details (business)
Company: Marc Fuchs (DATEV eG)
Address: Sigmundstraße 172; 90329 Nürnberg

Email: marc.fuchs@datev.de

Where do we get your personal information from?

In principle the collection of your data occurs through you. The processing of the personal data provided by you is necessary for the fulfilment of the contractual obligations resulting from the contract concluded with us. Due to your duty of cooperation, it is essential to provide the personal data requested by us, otherwise we cannot fulfil our contractual obligations.

In the context of pre-contractual measures (e.g. master data acquisition in the prospective buyer process), the provision of your personal data is necessary. If the requested data is not provided by you, a contract cannot be concluded.

To provide our services, it may be necessary to process personal information that we have collected from other companies or other third parties,e.g., tax authorities, your business partner or the like, with authorisation and for the respective purpose.

Furthermore, we may process personal data from publicly available sources, e.g. websites, which we use with authorisation and only for the purpose of the respective contract.

Purposes and legal bases of the processing

The personal data provided by you will be processed in accordance with the provisions of the European Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

On the basis of a consent (according to Art. 6 (1) lit. a GDPR)

The purposes of the processing of personal data arise from the granting of consent. You can revoke a given consent at any time with effect for the future. Consents granted prior to the application of the GDPR (25 May 2018) can also be revoked. Processing that took place before the revocation remains unaffected by the revocation. Example: Sending a newsletter, consent to the transfer of the data provided by you at your request to third parties (e.g. banks, insurance companies, shareholders, etc.).

For the fulfilment of contractual obligations (according to Art. 6 (1) lit. b GDPR)

The purposes of the data processing arise on the one hand from the initiation of pre-contractual measures, which precede a contractually regulated business relationship and, on the other hand, to the fulfilment of the obligations arising from the contract concluded with you.

Due to legal requirements (according to Art. 6 (1) lit. c GDPR) or in the public interest (according to Art. 6 (1) lit. e GDPR)

The purposes of data processing arise from legal requirements or are in the public interest (e.g. compliance with retention requirements, proof of compliance with tax consultants’ obligations to notify and inform).

In the context of a weighing of interests (according to Art. 6 (1) lit. f GDPR)

The purposes of processing arise from the protection of our legitimate interests. It may be necessary to process the data provided by you beyond the actual performance of the contract. Our legitimate interest may be used to justify the further processing of the data you have provided, unless your interests or fundamental rights and freedoms prevail. In individual cases our legitimate interest can be: assertion of legal claims, defence against liability claims, prevention of criminal offences.

Who receives the personal data provided by you?

The departments within our company that have access to personal data provided by you need it to fulfil their contractual and legal obligations and are authorised to process this data.

In fulfilment of the contract concluded with you, the data provided by you will only be received by those offices who need it for legal reasons, e.g. financial authorities, social security institutions, competent authorities and courts.

Other recipients receive the data provided by you only at your request, if you give us the necessary consent.

As part of our service delivery, we hire contract processors who contribute towards the fulfilment of contractual obligations, e.g. IT partners, document shredders, specialist retailers, etc. These contract processors are contractually obliged by us to comply with the requirements of the GDPR and the BDSG.

Is the data provided by you transmitted to third countries or international organisations?

The data provided by you will under no circumstances be transferred to a third country or an international organisation. Should you wish the data provided by you to be transferred to a third country or an international organisation in individual cases, we will only do so after you have given your written consent.

Does automated decision-making including profiling take place?

Fully automated decision-making (including profiling) is not used to process the data provided by you, in accordance with Art. 22 GDPR.

Duration of processing (deletion criteria)

The processing of the data provided by you takes place as long as it is necessary to achieve the contractually agreed purpose, in general as long as the contractual relationship with you exists. After the termination of the contractual relationship, the data provided by you will be processed to comply with statutory retention requirements or our legitimate interests. After the expiry of the statutory retention periods and/or the lapse of our legitimate interests, the data provided by you will be deleted.

Expected time limits of retention requirements relevant to us and of our legitimate interests:
• Compliance with retention periods imposed under commercial and tax legislation. The time limits for retention and/or documentation specified in such legislation are two to ten years.
• Preservation of evidence under the statute of limitations. According to §§195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.

Information about your rights

Right to information according to Art. 15 GDPR
You have the right, upon request, to obtain information free-of-charge on whether and what data is stored about you and for what purpose it is stored.

Right to rectification according to Art. 16 GDPR
You have the right to request immediate correction of your incorrect personal data from the controller. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to deletion ("right to be forgotten") according to Art. 17 GDPR
You have the right to ask the controller to arrange for your data to be immediately deleted. The controller is obliged to delete personal data immediately if one of the following reasons applies:
a) The purposes for which the personal data have been collected cease to apply
b) You revoke your consent to processing. There is no other legal basis for the processing.
c) You object to the processing. There is no other legal basis for the processing.
d) The personal data was processed unlawfully.
e) The personal data must be deleted to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
(f) The personal data has been collected in relation to services offered by an information society in accordance with Article 8 (1).

Right to restriction of processing according to Art. 18 GDPR & § 35 BDSG
You have the right to request the restriction of processing if one of the following conditions is met:
a) You question the accuracy of your personal data.
b) The processing is unlawful, but you refuse a deletion.
c) Personal data is no longer needed for the purposes of processing, but you need the data to assert, exercise or defend your rights.
d) You have objected to the processing in accordance with Art. 21 (1) GDPR. Processing will be restricted so long as it is not clear whether the controller’s legitimate reasons outweigh yours.

Right to data portability according to Art. 20 GDPR
You have the right to receive the data provided by you in a structured, commonly used and machine-readable format from the controller. We must not prevent the data from being forwarded to another controller.

Right to object in accordance with Art. 21 GDPR
Please contact the data processor (see above).

Right to appeal to the supervisory authority according to Art. 13 (2) lit. d, 77 GDPR in conjunction with § 19 BDSG
If you believe that the processing of your data violates the GDPR, you have the right to lodge an appeal with the supervisory authority. Please contact the competent supervisory authority

Withdrawal of consent according to Art. 7 (3) GDPR
If the processing is based on your consent in accordance with Art. 6 (1) lit. a or Art. 9 (2) lit. a (processing of special categories of personal data), you are entitled to withdraw the appropriately bound consent at any time without affecting the lawfulness of the processing performed on the basis of the consent up until the date of revocation.