Data Protection Notice

Name and Address of the Data Controller

Within the meaning of the General Data Protection Regulation (GDPR), and other national data protection laws of the member states, as well as any other data protection regulations, the data controller is:

Nynomic AG

Am Marienhof 2

22880 Wedel

Deutschland

Tel.: +49 (0)4103 9308-0

E-Mail: info@nynomic.com

Website: www.nynomic.com

Name and Address of the Data Protection Officer

You can reach our Data Protection Officer at:

datenschutz@nynomic.com

Tel.: +49 171 7419961

General Information on Data processing

1.        Scape of Personal Data processing

We collect and use our users’ personal data only to the extent that is necessary to provide a functional website, and our content and services. The collection and use of our users’ personal data is carried out regularly only after the consent of the user. An exception applies in cases where prior consent cannot be obtained for real and actual reasons and the processing of the data is permitted by law.

2.        Legal Basis for processing Personal Data

Insofar as we obtain the consent of the data subject for processing of personal data, Article 6 (1) (a) of the EU’s General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to data processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

In the event that any vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, Article 6 (1) (f) GDPR serves as the legal basis for the processing

3.        Data Erasure and Storage Time

The personal data of the data subject shall be erased or blocked once the purpose of the storage has ceased to exist. Data may also be stored if this is provided for by European or national legislators in EU regulations, laws or other legal provisions to which the data controller is subject. The data will also be blocked or erased when a storage period prescribed by the above standards expires, unless the data needs to be stored further for the purpose of concluding or performing a contract.

Provision of the Website and Creation of Log Files

1.        Description and Scope of Date processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are thereby collected:

(1)   Information on the browser type and the version used

(2)   User’s operating system

(3)   User’s internet service provider

(4)   User’s IP address

(5)   Date and time of access

(6)   Websites from which the user’s system accesses our website

(7)   Websites accessed by the user’s system via our website

The data are also stored in the log files of our system. These data are not stored in combination with any other personal data of the user.

2.        Legal Basis for the Data processing

The legal basis for the temporary storage of the data and log files is Article 6 (1) (f) GDPR.

3.        The Purpose of the Data processing

The temporary storage of the IP address by the system is necessary to allow the website to be delivered to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The data are stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data are not analysed for marketing purposes in this context.

These purposes constitute our legitimate interest in the data processing, pursuant to Article 6 (1) (f) GDPR

4.        Duration of Storage

The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection. In the event that the data are collected for the purpose of providing the website, they are erased once that particular session comes to an end.

If the data are stored in log files, they will be erased after 90 days at the latest. Data may also be stored for a longer period. In such a case, the IP addresses of the users will be deleted or anonymised so that it is no longer possible to attribute them to the accessing client.

5.        Possibility of Objection and Eemoval

The collection of the data for the purpose of providing the website and the storage of the data in log files is absolutely necessary for operating the website. Consequently, there is no possibility for the user to object.

Use of Cookies

  1. a) Description and scope of Data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser, i.e. by the internet browser, on the user’s computer system. When a user visits a website, a cookie can thus be stored on the user’s operating system. This cookie contains a unique character string that allows your browser to be clearly identified when you revisit the website.

We use Cookies to make our website more user-friendly. In order to function, some elements of our website require the accessing browser to be identifiable even after a page change.

 

The following data are thereby stored and transmitted in the cookies:

(1) Log-In Information

The legal basis for processing personal data using cookies is Article 6 (1) (f) GDPR.

The legal basis for processing personal data using technically necessary cookies is Article 6 (1) (f) GDPR.

c) Purpose of the Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of the functions of our website cannot be provided without the use of cookies. These functions require the browser to be recognised even after a page change.

We need cookies for the following applications:

(1)  Saving search Terms

The user data collected by technically necessary cookies are not used to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies enable us to learn how the website is being used and to thus constantly optimise our offering.

d) Etracker

This website uses the services of etracker GmbH, Hamburg, Germany https://www.etracker.com for the analysis of usage data. Cookies are used to enable the statistical analysis of the use of this website by those who visit it, as well as the display of usage-related content or advertising. Cookies are small text files that are stored on the user’s terminal device by the internet browser. etracker cookies do not contain any information that allows a user to be identified.

The data generated by etracker are processed and stored by etracker on behalf of the provider of this website exclusively in Germany, and are thus subject to the strict German and European data protection laws and standards. etracker has been independently tested, certified and awarded the Data Protection Quality Seal https://www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/.

Data processing is carried out on the legal basis of Article 6 (1) (f) (legitimate interest) of the EU’s General Data Protection Regulation (GDPR). Our legitimate interest is to optimise our online offering and our website. As the privacy of our visitors is especially important to us, the IP address is anonymised at etracker as soon as possible and log-in data or device recognitions at etracker are converted to a unique code, that cannot however be assigned to a specific person.  Etracker does not use the data for any other purposes, nor combine them with other data, nor transfer them to third parties.

You can at any time object to the above-described data processing, if it is being done in a personally identifiable way. Your objection will not entail any adverse consequences for you.

Further information on etracker’s data protection policy can be found here:

https://www.etracker.com/datenschutz/

Alternatively, you can also insert the following button at a suitable place on your website.

Replace yourdomain.com with your Top Level Domain, to which count exclusion will apply. It will then apply to all associated subdomains too.

Show Tracking Opt-In dialogue

If you select this option, visitors will be shown a dialogue box for consenting to data collection when they enter your website. Here, the visitor has the option of consenting to data collection for their current visit, granting permanent consent, or refusing data collection for the current visit. If the visitor declines, no data will be collected concerning the user’s current visit.

e) AWStats

We also use AWStats, a web analysis software. This free (GPL) web analysis software is used to analyse log files that are created by web servers on the basis of visitor requests. AWStats generates statistical reports as HTML pages which can be viewed on a browser. The statistics reports automatically store the data transmitted by the browser. These are:

    Information on the browser type and version used

    The user’s operating system

    Referrer URL (the page previously visited)

    Host name of the accessing computer (IP address)

    Date and time of server request

    The search term with which you found the page via, for example, Google

As a rule, it is not possible to assign these data to specific persons. These data will not be combined with other data, and in addition, the data will be erased after a statistical analysis.

 

Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are thereby collected:

(1)           Information on the Browser Type and Version used

(2)            The user’s Operating System

(3)           The user’s Internet Service Provider

(4)           The user’s IP Address

(5)           Date and Time of Access

(6)            Websites from which the User’s System accesses our Website

(7)            Websites accessed by the User’s System via our Website

(8)           How many Visitors stay on our Website, and for how long

(9)           Which File types were accessed, and how often

(10)         Which Files were accessed, and how often

(11)         Which Pages were accessed most often

(f) Duration of Storage, possibility of Objection and Removal

Cookies are stored on the user’s computer and transmitted from it to our website. Therefore you, as a user, have full control over the use of cookies. By changing the settings on your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to make full use of all the functions of the website.

 

Newsletter

1.       Discription and Scope of Data processing

On our website you have the option of subscribing to a free newsletter. When registering for the newsletter, the data from the online form will be forwarded to us.

In addition, the following data are likewise collected at registration:

(1)  IP address of the accessing computer

(2)  Date and time of registration

(3)  E-mail address

(4)  First name

(5)  Surname

(6)  Sex: female / male

(7)  Company

(8)  Country

In the course of the registration process, your consent to the data processing will be obtained and you will be referred to this Data Protection Notice.

The data processed for the purpose of sending you newsletters will not be transferred to third parties. The data will be used for the sole purpose of sending you the newsletter.

2.        Legal Basis for Data processing

The legal basis for processing the user’s data after they have registered for the newsletter and given their explicit consent is Art. 6 (1) (a) GDPR.

3.        Purpose of Data processing

The purpose of collecting the user’s e-mail address is to deliver the newsletter.

The collection of other personal data in the course of the registration process serves to prevent any misuse of the services or the e-mail address used.

4.        Duration of Storage

The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection. The user’s e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

As a rule, the other personal data collected in the course of the registration process are deleted after a period of 14 days.

5.        Possibility of Objection and Removal

The subscription to the newsletter can be cancelled at any time by the user concerned. Each newsletter contains an appropriate link for this purpose.

This also enables a revocation of consent to the storage of personal data collected during the registration process.

Registration

1.        Description and Scope of Data processing

On our website, we offer users the option of registering through disclosing personal data. The data are entered into an online form, transmitted to us and stored. The data will not be transferred to third parties. At the time of registering, the following data are collected and stored:

 (1) The user’s IP address

(2) Date and time of registration

(3) Account (user name)

(4) Password

The user’s consent to the processing of these data is obtained in the course of the registration process.

2.        Legal Basis for Data processing

The legal basis for processing the data is Article 6 (1) (a) GDPR.

3.        Purpose of Data processing

The user is required to register for the provision of certain content and services on our website.

(1) Software downloads

(2) Document downloads

(3) Certificates

4.        Duration of Storage

The data will be erased as soon as they are no longer needed to achieve the original purpose of their collection.

This applies to the data collected during the registration process, if the registration on our website is cancelled or changed. At present, your registration can only be deleted by us. To do this, please get in touch with one of the above contacts.

5.        Possibility of Objection and Removal

As a user, you have the option to cancel your registration at any time. You can at any time have the data stored about you modified.

At present, your registration can only be deleted by us. To cancel or modify it, please get in touch with one of the contacts listed above

Contact Form and E-Mail Contact

1.             Description and Scope of Data processing

On our website, a contact form is available, which can be used for contacting us by e-mail. If a user makes use of this option, the data entered into the online form will be transmitted to us and stored. These data are:

(1)  E-mail address

(2)  First name

(3)  Surname

(4)  Sex: Female / Male

(5)  Company

(6)  Country

The following data will also be stored at the time of sending the message:

(1)  IP-address of the accessing computer

(2)  Date and time of registration

In the course of sending us the data, your consent to the processing of the data will be obtained and you will be referred to this Data Protection Notice.

Alternatively, you can contact us via the e-mail addresses provided. In this case, the personal data of the user sent with the e-mail will be stored.

The data will not be transferred to third parties in this context. The data will be used exclusively for processing the two-way dialogue.

2.        Legal Basis for the Data processing

The legal basis for processing the data is Article 6 (1) (a) GDPR.

The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the purpose of the e-mail is to conclude a contract, Art. 6 (1) (b) GDPR constitutes an additional legal basis for the processing.

3.        Purpose of the Data processing

The sole purpose of our processing of personal data gathered from the online form is to process the contact. If we are contacted by e-mail, we likewise have the required legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems.

4.        Duration of Storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This applies to the personal data gathered from the input mask of the contact form and to data sent by e-mail once that particular dialogue with the user comes to an end. The dialogue is deemed to have come to an end when the circumstances show that the relevant facts have been finally clarified.

The personal data additionally collected during the sending process will be deleted after a period of 14 days at the latest.

5.        Possibility of Objection and Removal

The user has the option of at any time revoking their consent to the processing of their personal data. If the user contacts us via e-mail, they may at any time object to the storage of their personal data. In such a case, the dialogue cannot be continued.

To do this, please contact one of the aforementioned contacts using any form of communication you prefer (phone, e-mail or post).

In this case, all personal data stored in the course of contacting us will be deleted.

Rights of the Data Subject

If any of your personal data are processed, you are a data subject as defined by the GDPR, and you have the following rights with regard to the data controller:

1.        Right of access to Information

You can obtain confirmation from the data controller as to whether any personal data concerning you will be processed by us.

If such a processing is taking or has taken place, you can request information from the data controller concerning the following:

(1)           The purposes for which the personal data are processed;

(2)           the categories of personal data processed;

(3)           the recipients or categories of recipients to whom the personal data have been disclosed or will be disclosed;

(4)           the planned duration of the storage of the personal data – or, if it is not possible to give specific details, the criteria for determining the duration of storage;

(5)           the existence of a right to rectification or erasure of the personal data, a right to restriction of processing by the controller or a right to object to the processing;

(6)           the existence of a right to lodge a complaint to a supervisory authority;

(7)           all available information on the origin of the data, if the personal data were not gathered directly from the data subject;

(8)           the existence of automated decision-making, including profiling, in accordance with Art: 22 (1) and (4) GDPR, and – in these cases, at least – meaningful information on the logic involved, as well as the ramifications and intended effects of such processing for the data subject.

 

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or an international organisation. In this context, you can request information on the appropriate guarantees, in accordance with Art. 46 GDPR, in connection with the transfer of the data.

2.        Right to Rectification

With regard to the data controller, you have the right to the rectification and/or completion of your personal data, provided that the personal data processed concerning you are incorrect or incomplete. The data controller shall carry out the rectification without delay.

3.        Right to the Restriction of processing

You can request the restriction of the processing of your personal data, provided that the following conditions are met:

(1)           If you dispute the accuracy of the personal data concerning you for a period which allows the data controller to verify the accuracy of the personal data;

(2)           if the processing is unlawful and you refuse to have the personal data erased and instead demand the restriction of the use of the personal data;

(3)           if the data controller no longer needs the personal data for the purposes of processing, but need it in order to assert, exercise or defend legal claims, or

(4)           if you have lodged an objection to the processing, pursuant to Art. 21 (1) GDPR, and it has not yet been determined whether the legitimate reasons of the data controller override your reasons.

If the processing of personal data concerning you has been restricted, these data – apart from their storage – may only be processed with your consent, or for the purpose of asserting, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons relating to an important public interest of the European Union or of a member state.

If the restriction of processing has been carried out in accordance with the above-cited conditions, you will be informed by the data controller before the restriction is lifted.

4.        Right to Erasure

a)       Obligation to Erase

You can request that the data controller should erase the personal data concerning you without delay and the data controller is obliged to delete such data without delay, provided that one of the following reasons applies:

(1)           The personal data concerning you are no longer needed for the purposes for which they were collected or otherwise processed.

(2)           You withdraw your consent on which the processing was based, in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.

(3)           You file an objection to the processing pursuant to Art. 21 (1) GDPR, and there are no overriding legitimate grounds for the processing, or you file an objection to the processing pursuant to Art. 21 (2) GDPR.

(4)           The personal data concerning you have been unlawfully processed.

(5)           The purpose of erasing the personal data concerning you is to fulfil a legal obligation under EU law or the law of the member states, to which the data controller is subject.

(6)           The personal data concerning you have been collected in relation to information society services, pursuant to Article 8 (1) GDPR.

b)      Informing third parties

If the data controller has made the personal data concerning you public and if the data controller is obliged to erase them, pursuant to Art. 17 (1) GDPR, they shall, taking into account the available technology and implementation costs, take appropriate measures, including technical measures, to inform other data controllers who are processing the personal data that you, as the data subject, have requested the erasure of all links to that personal data or of copies or replications of that personal data.

c)        Exceptions

The right of erasure does not apply if the processing is necessary:

(1)           to exercise of the right to freedom of expression and information;

(2)           to fulfil a legal obligation that requires the processing in accordance with the law of the EU law or of the member states to which the data controller is subject, or to perform a task that lies in the public interest or is carried out in the exercise of public authority delegated to the data controller;

(3)           for reasons of public interest in the area of public health, pursuant to Article 9 (2) (h) and (i), and to Art. 9 (3) GDPR;

(4)           for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes, pursuant to Art. 89 (1) GDPR, insofar as the law referred to in Section a) is likely to make it impossible to achieve the objectives of this processing or to seriously prejudice their achievement, or

(5)           to assert, exercise or defend legal claims.

5.        Right to Information

If you have asserted the right to rectification, erasure or restriction of processing to the data controller, they are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of data or restriction of processing, unless this proves to be impossible or involves a disproportionate expenditure of time, effort or money.

You have the right to be informed about these recipients by the data controller.

6.        Right to Data portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used and machine-readable format. You also have the right to forward that data to another data controller without hindrance by the data controller to whom the personal data were provided, on condition that:

(1)           the processing is carried out on the basis of a consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, and that

(2)           the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you directly forwarded by one data controller to another data controller, provided this is technically feasible. This process must not adversely affect the freedoms and rights of other persons.

The right to data portability does not apply to a processing of personal data that is necessary for performing a task that is in the public interest, or that is carried out in the exercise of public authority delegated to the data controller.

7.        Right to Object

You have the right to at any time object to a processing of personal data concerning you that is carried out on the basis of von Art. 6 (1) (e) or (f) GDPR, for reasons arising from your particular situation; this also applies to profiling based on these provisions.

The data controller will no longer process the personal data concerning you, unless they can provide evidence of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is needed for asserting, exercising or defending legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to at any time object to the processing of the personal data concerning you for the purpose of inserting such an advertisement; this also applies to the profiling, insofar as it is connected with such direct advertising.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option of exercising your right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications

8.        Right to revoke consent granted under to Data Protection Law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent shall not affect the legality of the processing carried out on the basis of the consent up to the time of the revocation.

9.        Rigth to Object to Automated Decisions, including profiling, in individual Cases

You have the right to not be subject to a decision that is based solely on automated processing, including profiling, that has a legal impact or similar adverse effect on you. This does not apply if the decision

(1)           is necessary for concluding or performing a contract between you and the data controller,

(2)           is permitted on the basis of EU legal regulations or the laws of member states to which the data controller is subject, and these legal regulations contain adequate measures for the protection of your rights and freedoms and your legitimate interests or

(3)           is made with your express consent.

However, these decisions must not be based on specific categories of personal data referred to in Art. 9 (1) GDPR, insofar as Art. 9 (2) (a) or (g) do not apply and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

As regards the cases referred to in (1) and (3) above, the data controller shall take appropriate measures to safeguard your rights and freedoms, as well as your legitimate interests, which at least includes your right to effect an intervention by a person at the data controller’s company, in order to define your own position and contest the decision.

10.    The Right to lodge a Complaint with a supervisory Authority

Irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state where your residence or your workplace are located, or where the alleged infringement took place, if you believe that the processing of your personal data violates the GDPR.

The supervisory authority where the complaint was filed shall inform the complainant on the status and outcome of the complaint, including the option of a judicial remedy pursuant to Art. 78 GDPR.