DATA PROTECTION & PRIVACY STATEMENT NORMA GROUP The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.




RESPONSIBLE ACC. ART. 4 ABS. 7 BASIC EU DATA PROTECTION REGULATION (GDPR)

NORMA Group SE

Edisonstr. 4

63477 Maintal

Phone: +49 (6181) 6102-740

E-Mail: info@normagroup.com


Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).




DATA PROTECTION OFFICER OF THE RESPONSIBLE

We have appointed a data protection officer for our company.

Data Protection Officer

Phone: +49 (6181) 61027-611

E-Mail: dataprotection@normagroup.com




1. Data protection at a glance



General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information on the subject of data protection in our data protection declaration listed under this text.




Data collection on our website



Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.



How do we collect your information?

On the one hand, your data is collected when you communicate it to us. This may be data that you enter in a contact form, for example.
On the other hand data is automatically collected by our IT systems when you visit our website. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). This data is collected automatically as soon as you enter our website.



What do we use your data for?

Data collection is necessary to ensure the error-free usage of the website. Other data can be used to analyze your user behavior.



What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time without charging You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection. You also have the right of appeal to the competent supervisory authority.
Further information on rights as data subjects can be found under § 5 Rights of the data subject person.



Third-party analysis and tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.
Further information on the subject of web analytics can be found under § 8 Web Analytics.



Right of appeal to the competent supervisory authority

In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found on the following link: Die Kontaktdaten der Datenschutzbeauftragten in den Bundesländern (site in German).



Opposition to advertising mails

We herewith object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.



SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "https://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.



§ 1 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

(1) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis.

(2) Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

(3) Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

(4) If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

(5) If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.



§ 2 DATA ERASURE AND STORAGE DURATION

(1) The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply.

(2) Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subjected.

(3) The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.



§ 3 INFORMATION ON THE PROCESSING OF PERSONAL DATA

(1) In the following we inform about the collection of personal data when using our website. Personal data are all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.

(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or limit the processing if statutory retention obligations exist.

(3) If we make use of contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We also specify the defined criteria for the storage period.



Collection of personal data when you visit our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to guarantee stability and security (legal basis for this is Art. 6 Para. 1 S. 1 lit. f GDPR):




• IP-Adress

• Hostname

• Date and Time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access Status/HTTP Status Code

• the amount of data transferred in each case

• Website from which the request comes (Referrer)

• The specific pages of our website you have visited

• Browser: Type, Version und used language

• Operation Systems: Type and Version

• If JavaScript is also activated:

• Display resolution

• color depth

• Size of the browser windows

• Installed browser-plugins



Use of cookies

(1) When you use our website, cookies are stored on your computer in addition to the aforementioned data. Cookies are small text files that can be used by websites to make a user's experience more efficient. They cannot run programs or transmit viruses to your computer.

(2) The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types, we need your permission.

(3) To meet these requirements, we use the 'Cookiebot' solution provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. This allows you to choose whether you wish to allow other cookies from the categories of preferences, statistics and marketing in addition to those required for the operation of our website. You can obtain a detailed overview of the cookies used by clicking on the 'Details' button in the cookie banner when you visit our website. Further information can be found on the website Cookiebot.

(4) This website uses the following types of cookies, the scope and functioning of which are explained below:

• Transient cookies (see b)

• Persistent cookies (see c)

• Flash cookies (see f)


b) Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and refuse the acceptance of third party cookies or all cookies, for example. Third Party Cookies" are cookies that have been set by a third party and therefore not by the actual website you are currently visiting. Please note that you may not be able to use all functions of this website without cookies.

e) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you will have to log in again for each visit.

f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your mobile device. These objects store the required data independently of your browser and do not have an automatic expiry date. You can configure the setting and deletion of Flash cookies using the Adobe Flash Player Website Storage Settings Panel .Alternatively, if you do not wish the Flash cookies to be processed, you can install an appropriate add-on, e.g. for Mozilla Firefox from Privacy & Security - Firefox Extensions or the Adobe Flash Cookie Killer extension for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and your browser history manually.




§ 4 FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE

(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. As a rule, you must provide further personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory fields are marked with an asterisk. Information in fields not marked in this way is purely voluntary.

(2) When you contact the Service Provider by e-mail or via the contact form, your e-mail address and, if you specify this, your name, your telephone number and [...] are saved by us to answer your questions.

(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

(4) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. For more information, please provide your personal data or see the description of the offer below.

(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.



§ 5 RIGHTS OF THE DATA SUBJECT PERSON

Below you will find information on your rights as a person concerned in accordance with Art. 15 GDPR. You can exercise these rights at any time and therefore contact us directly. If you demand these rights from us, we will examine them in detail, taking into account the related legal requirements. We may ask you for further information. We will explain in detail the results of our audit and our procedure for fulfilling your request. It is possible that we may not be able to fully meet your wishes in the manner you request. This should not prevent you from claiming your rights from us or asking us about them. It would be a pleasure for us to answer all your questions.

(1) Right to information

You have the right to request information from us at any time as to whether and which of your personal data is processed by us. This also includes information on the purposes of processing, if applicable on recipients to whom we have disclosed data about you, the planned storage period and, if applicable, information on the origin of this data, unless we have collected this data directly from you. In addition, you have the right to a one-time free copy of your personal data stored by us.

(2) Right to correction

You have the right to request us to correct any inaccurate information we hold about you. This also includes the right to complete incomplete personal data.

(3) Right to cancellation

You have the right to request the deletion of data that we have stored about you. If we have published data about you, this also includes our obligation to forward all links to this data as well as copies or replications of this data concerning to other persons responsible for the processing of this published personal data within the framework of the "right to be forgotten" pursuant to Art. 17 para. 2 GDPR, considering available technology and the implementation costs.

(4) Right to limitation of processing

You have the right to request us to restrict the processing of data that we have stored about you. Thereafter, processing of these data is only possible with your consent or for a few, legally defined purposes.

(5) Right of opposition to processing

If we base the processing of your personal data on the weighing of interests, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the following description of the functions. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your advertising contradiction using the contact channels listed above.

(6) Right to revoke consent under data protection law

If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.

(7) Right to data transferability

You have the right to receive information about yourself that you have provided to us from us in a structured, common and machine-readable format for the purpose of transfer to another person responsible. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other person responsible.

(8) Right of appeal to a supervisory authority

You have the right to complain at any time to a data protection supervisory authority about our processing of your personal data.

(9) Automated decision making including profiling

They have the right to obtain information on the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.



§ 6 SPECIAL FORMS OF USE OF WEBSITES

1. Use of blog functions

(1) In our blog, where we publish various articles on topics related to our activities, you can make public comments. Your comment will be published with your username. We recommend that you use a pseudonym instead of your clear name. User name and e-mail address are required, all other information is voluntary. If you make a comment, we continue to store your IP address, which we delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to contact you if a third party should object to your comment as unlawful. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Comments will not be reviewed before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.



§ 7 MAIL-BASED INFORMATION SERVICES

1. Newsletter / Press Distribution List

(1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the double opt-in procedure to subscribe to our newsletter. This means that after your registration we will send you an e-mail to your given e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. The indication of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter e-mail without incurring any costs other than the transmission costs according to the basic rates.