Privacy Policy
I. Name and address of the body responsible
The body responsible in terms of the General Data Protection Regulation (GDPR) and other national data protection legislation in the member states as well as other data protection regulations is:
NERAK GmbH Fördertechnik
Brigitta 5
29313 Hambühren, Germany
Phone: +49 (0) 50 84-944-0
E-Mail: info@nerak.com
II. Name and address of the Data Protection Officer
The Data Protection Officer appointed by the responsible body is:
Rainer Kohlberg
Brigitta 5
29313 Hambühren, Germany
Phone: +49 (0)5084 / 944-130
E-Mail: Datenschutz@nerak.com
III. General information on data processing
1. Scope of the processing of personal data
We only collect and use our users’ personal data as far as this is necessary to provide a functional website as well as our content and services. The collection and use of our users’ personal data is regularly only done on receipt of the user’s consent. An exception applies in cases where prior obtention of consent is impossible for specific reasons and legal regulations permit the processing of the data.
2. Legal basis for the processing of personal data
If we obtain your consent for the processing of personal data, Art. 6 para. 1(a) of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.
Art. 6 para. 1(b) GDPR shall serve as the legal basis for the processing of personal data required for the performance of a contract to which you are a contractual party. This also applies to processing operations that are necessary to perform pre-contractual measures.
Art. 6 para. 1(c) GDPR shall serve as the legal basis where the processing of personal data is necessary for the fulfilment of a legal obligation to which we are subject.
If processing is necessary to protect a legitimate interest on the part of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, then Art. 6 para. 1(f) GDPR shall serve as the legal basis for processing.
3. Data deletion and retention period
Your personal data will be deleted or blocked as soon as the purpose of its retention no longer applies. Retention can also take place if this has been provided for by the European or national legislator in regulations, laws or other regulations under EU law by which we are governed. The data shall also be blocked or deleted if a retention period prescribed by the aforementioned standards expires, unless there is a requirement for further retention of the data for the conclusion of a contract or fulfilment of a contract.
IV. Provision of the website and generation of log files
1. Description and scope of data processing
Every time our website is visited, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Operating system used
(2) Browser type / version
(3) Host name of the accessing computer (IP address)
(4) Name of the file retrieved
(5) Date and time of your visit
(6) Volume of data transmitted
(7) A message indicating whether the visit was successful
(8) Requesting domain
Personal data other than this, such as your name, address, telephone number or e-mail addresses, shall not be collected unless you provide this information voluntarily, for instance by registering for our newsletter or requesting information.
The data shall also be retained in the log files on our system. This data shall not be retained together with other personal data pertaining to the user. The IP address shall be automatically anonymised, i.e. the last two triplets shall be randomised.
2. Legal basis for data processing
The legal basis for the temporary retention of data and log files is Art. 6 para. 1(f) GDPR.
3. Purpose of data processing
The temporary retention of the IP address by the system is necessary to enable the website to be delivered to the user's computer. The user's IP address must be retained for the duration of the session for this purpose.
It is retained in log files to ensure the full functionality of the website. The data is also used to optimise the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes within this context.
We also have a legitimate interest in data processing pursuant to Art. 6 para. 1(f) GDPR for these purposes.
4. Retention period
The data shall be deleted as soon as it is no longer needed for the purpose for which it was collected. In relation to the collection of data for the provision of the website, this is the case when the respective session has ended.
IP addresses are automatically randomised in the log files by swapping the last two number triplets. The data is retained for 6 months for statistical evaluation.
5. Right to object and possibility of removal
The collection of the data for the provision of the website and the retention of the data in log files is essential for the operation of the website. You therefore have no possibility of objecting to this.
V. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the user visits the website again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can also be identified even after a page change.
The following data is stored and transmitted in the cookies:
(1) Language settings
(2) Login information
We also use cookies on our website that enable the user’s browsing behaviour to be analysed.
When accessing areas of our website (e.g. map display), the user is informed about the use of cookies for analysis purposes and the user’s consent is obtained for the processing of the personal data used in this context. A reference to this Privacy Statement is also made in this context.
b) Legal basis for data processing
The legal basis for the processing of personal data using technically essential cookies is Art. 6 para. 1(f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes where the user’s consent has been obtained for this purpose is Art. 6 para. 1(a) GDPR.
c) Purpose of data processing
The purpose of using technically essential cookies is to simplify your use of websites. Certain functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognised again even after a page change.
We require cookies for the following applications:
(1) To carry over language settings
(2) Note No Tracking information
The user data collected by technically essential cookies is not used to create user profiles.
We also have a legitimate interest in the processing of personal data pursuant to Art. 6 para. 1(f) GDPR for these purposes.
d) Retention period, possibility of objecting and removal
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you, as the user, also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. You can delete cookies already stored at any time. This can also be done automatically. It may not be possible to use all functions of the website in full if cookies are disabled for our website.
VI. Contact form and e-mail contact
1. Description and scope of data processing
Our website contains contact / enquiry forms which can be used to make contact with us electronically. If you make use of this option, the data entered in the input screen will be transmitted to us and retained by us. This data includes: name, e-mail address and telephone number.
The following data is also stored at the time the message is sent:
(1) The user’s pseudonymised IP address
(2) Date and time of sending the form
Your consent for the processing of the data shall be obtained as part of the sending process and you will be referred to this Privacy Statement.
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail will be stored.
No data shall be passed to third parties in this context. The data shall only be used for the processing of the conversation.
2. Legal basis for data processing
The legal basis for the processing of the data where your consent has been obtained is Art. 6 para. 1(a) GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1(f) GDPR. If the e-mail contact is for the purpose of concluding a contract, then the additional legal basis for processing is Art. 6 para. 1(b) GDPR.
3. Purpose of data processing
The processing of personal data from the input screen shall solely be used by us to process your contact. In the event that you contact us by e-mail, there is also a necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Retention period
The data shall be deleted as soon as it is no longer needed for the purpose for which it was collected. This is the case when the respective conversation with you has ended in terms of the personal data from the contact form input screen and the personal data sent by e-mail. The conversation is deemed to have ended when it can be concluded from the circumstances that the relevant situation has been finally clarified.
The personal data additionally collected during the sending process shall be deleted at the latest after a period of seven days.
5. Right to object and possibility of removal
You have the possibility of revoking your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the retention of your personal data at any time. In this case, the conversation cannot be continued. In this case, all personal data that was retained during your contact with us shall be deleted.
VII. Rights of the data subject
If your personal data is processed, then you are the data subject in the sense of the GDPR and you have the following rights with regard to the responsible body:
1. Right of access
You can ask us to confirm whether we process personal data concerning you.
In the event that your personal data is processed, you can request information from us about the following:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients and/or categories of recipients to whom the personal data concerning you has been disclosed or still shall be disclosed;
(4) the planned retention period of the personal data concerning you or, if specific details are not possible, criteria for determining the retention period;
(5) whether you have a right to rectify or delete the personal data concerning you, a right to restrict its processing by the responsible body, or a right to object to this processing;
(6) whether there is a right of appeal to a supervisory authority;
(7) all available information about the origin of the data if the personal data has not been collected from the data subject;
(8) there is an automated decision-making process, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of this processing on the data subject.
You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can ask to be informed about the appropriate guarantees relating to its transmission pursuant to Art. 46 GDPR.
2. Right of rectification
You have a right to rectify and/or complete information if the personal data concerning you that we process is incorrect or incomplete. We must rectify the information immediately.
3. Right to restrict processing
You can request the restriction of the processing of personal data concerning you, subject to the following conditions:
(1) if you dispute the accuracy of the personal data concerning you for a period that enables us to verify the accuracy of the personal data
(2) the processing is illegal and you refuse to delete the personal data and instead require the restricted use of the personal data;
(3) we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
(4) if you have submitted an objection to its processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our justified reasons outweigh your reasons.
If the processing of the personal data concerning you has been restricted – apart from its retention – this data may only be processed with your consent or for the assertion, exercise or defence of legal rights, or the protection of the rights of another natural or legal person, or on the grounds of an important public interest on the part of the European Union or a member state.
If the restriction of processing has been limited in accordance with the above conditions, we will inform you before the restriction is lifted.
4. Right of deletion
a) Obligation to delete
You can demand that the personal data concerning you is immediately deleted and we shall be obliged to delete this data immediately if any of the following reasons apply:
(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent on which the processing pursuant to Art. 6 para. 1(a) or Art. 9 para. 2(a) GDPR was based, and there is no other legal basis for processing.
(3) You submit an objection to its processing pursuant to Art. 21 para. 1 GDPR and there are no overriding justified reasons for its processing, or you submit an objection to its processing pursuant to Art. 21 para. 2 GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under European Union law or the law of the member states by which we are governed.
(6) The personal data relating to you has been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
b) Information to third parties
If we have made the personal data concerning you public and are obliged to delete it pursuant to Art. 17 para. 1 GDPR, then we shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform the persons responsible for the processing of your personal data that you, as the data subject, have demanded the deletion of all links to this personal data or copies or replicas of this personal data.
c) Exceptions
There is no right to delete personal data where its processing is essential
(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation which requires processing under the law of the European Union or of the member states by which we are governed, or to perform a task which is in the public interest, or in the exercise of the public authority entrusted to us;
(3) for reasons of public interest in the field of public health, as set out in Art. 9 para. 2(h) and (i) and Art. 9 para. 3 GDPR;
(4) for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, to the extent that the law referred to in section a) is likely to make it impossible or seriously impair the attainment of the objectives of this processing, or
(5) for the assertion, exercise or defence of legal claims.
5. Right to information
If you have claimed the right to rectify, delete or restrict the processing of your personal data by us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of its processing, unless this proves to be impossible or involves disproportionate effort.
You have the right to be informed about these recipients.
6. Right to data transmission
You have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible body without any obstruction by the responsible body to whom the personal data has been provided, so long as
(1) the personal data is processed on the basis of consent pursuant to Art. 6 para. 1(a) or Art. 9 para. 2(a) GDPR or is based on a contract pursuant to Art. 6 para. 1(b) GDPR and
(2) processing is carried out by automated processes.
In exercising this right, you also have the right to demand that the personal data concerning you is transferred directly by a responsible body to another responsible body, insofar as this is technically feasible. The freedoms and rights of other persons may not be adversely affected by this.
7. Right of objection
You have the right, for reasons that arise from your particular situation, to object at any time to the processing of the personal data concerning you, which is based on Art. 6 para. 1(e) GDPR; this also applies to profiling based on these provisions.
We shall no longer process the personal data concerning you unless we can prove compelling reasons for processing that outweigh your interests, rights and freedoms, or the processing of which serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed to generate a direct mailing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of this advertising; this also applies to the profiling, insofar as it relates to this direct mailing.
If you object to processing for direct mail purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, you have the possibility of exercising your right of objection by automated procedures using technical specifications, irrespective of Directive 2002/58/EC.
8. Right to revoke your declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of this consent does not affect the legality of the processing carried out on the basis of the consent prior to the revocation.
9. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the member state in which you reside, work or the place of the suspected infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR.
The supervisory authority to which the appeal was lodged shall inform the complainant of the state of play and the results of the appeal, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
The supervisory authority responsible for our company is:
Federal Commissioner for Data Protection in Lower Saxony
Prinzenstrasse 5
30159 Hanover
Phone +49 (0)511/120-4500
E-mail: poststelle@lfd.niedersachsen.de
VIII. Privacy Statement Plug-ins
Google Maps
We use Google Maps to display locations and create maps of how to get there. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you agree to the collection, processing and use of the data automatically collected as well as the data entered by you by Google, one of its representatives, or third parties. The Google Maps Terms of Use can be found at https://www.google.com/intl/en_en/help/terms_maps/
You will find more details in the Google.de Privacy Centre in the Transparency, Selection Options and Privacy Policy sections.
Other analysis services
Our website uses Matomo (formerly Piwik), a so-called web analytics service used to optimise our website. Your IP address is instantly anonymised during this process, which means that your identify as a user remains unknown to us.
Other analysis services (Kopie)
Our website uses Matomo (formerly Piwik), a so-called web analytics service used to optimise our website. Your IP address is instantly anonymised during this process, which means that your identify as a user remains unknown to us.
If you do not consent to this data from your visit being retained and analysed, you can revoke it at any time afterwards with a click of your mouse. In this case, an opt-out cookie will be stored in your browser which means that Matomo will not collect any session data.
Caution: If you delete your cookies, this means that the opt-out cookie will also be deleted and you may need to re-activate it.
