PRIVACY POLICY
This Privacy Policy provides information about how we handle your data. For the terms used in this Policy, such as “processing” and “data controller”, please see the definitions in Article 4 of the EU General Data Protection Regulation (GDPR). Our website is not intended for children or young people under the age of 16.
Who is the data controller responsible for processing?
The data controller within the meaning of Article 4 No. 7 GDPR is NORKA Norddeutsche Kunststoff- und Elektrogesellschaft Stäcker mbH & Co. KG, Weidestrasse 122 a, 22083 Hamburg, Germany. You can contact us using the contact details provided in our Legal notice.
How can I contact your data protection officer?
The contact details for our external data protection officer are as follows: Mauß Datenschutz GmbH, phone: +49 40 999 99 52-0, email: datenschutz@datenschutzbeauftragter-hamburg.de
Please refer to “NORKA Norddeutsche Kunststoff- und Elektrogesellschaft Stäcker mbH & Co. KG” whenever you contact our data protection officer.
Running the web server and provides our web pages
When you visit our websites, we automatically process the following data from you to provide our website and the services provided via the website:
- Time and date of access
- Your IP address
- The address of the website from which you have arrived at our website
- The web pages you visit on our site
- Information about your web browser (browser type and version)
- The operating system of the device you use to access our website and services
- Your internet service provider
We store this information in log files for security reasons and it deleted automatically after 14 days. The data in the log files is stored separately from other data about you.
Data is only stored for longer in specific justified cases (e.g. in the event of suspected misuse, fraud or attacks on our web server). In such cases, the relevant log files are stored until the matter has been clarified and the measures taken as a result have been completed.
To provide our website and the services via our website, we use a service provider (web host), which processes your data on our behalf and exclusively in accordance with our instructions:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen, Germany
The legal basis for processing your data is Article 6(1)(f) GDPR. We have a legitimate interest in processing your data so that we can provide you with our website and the services via the website without technical errors, securely and optimised to your needs. We also have a legitimate interest in detecting and preventing attempts at fraud and attacks on our websites.
Overview of the processing of your personal data
| Contact by email, contact form or phone | Job application | Ordering a catalogue | Account at norka.com | Sales | Seminars
| Newsletter | Photography at events | Talent pool | |
|---|---|---|---|---|---|---|---|---|---|
| Purpose of processing | Processing your enquiry | Selecting and recruiting new employees | Sending a product catalogue and giving advice about our products | Providing a customer portal and creating a luminaire folder | Creating quotations, accepting orders, handling orders, invoicing | Running seminars | Providing our newsletter | Documentation and public reporting on events | Keeping a list of people interested in working at NORKA for targeted approach
Selecting and recruiting new employees |
| Legal basis of processing | Article 6(1)(b) GDPR (regarding (the steps prior to entering into) a contract)
Article 6(1)(f) GDPR (other cases) | Section 26 of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) and Article 88 GDPR | Article 6(1)
(b) GDPR | Article 6(1)(b) GDPR | Article 6(1)(b) GDPR | Article 6(1)(b) GDPR (the self-employed)
Article 6(1)(f) GDPR (company managers) | Article 6(1)(a) GDPR | Article 6(1)(a) GDPR | Article 6(1)(a) GDPR |
| Recipients of the data | NORKA | NORKA | NORKA, shipment service providers if necessary | NORKA | NORKA, independent sales representatives | NORKA and its independent sales representatives, including potentially external and hotels | NORKA, newsletter service provider if applicable | NORKA, public on the internet if applicable | NORKA |
| Data transfer to a third country | Only if the request is made from a third country | No | No | Only if the request is made from a third country | No | No | No | Cannot be ruled out when publishing on the internet | No |
| Duration of data storage | As per the legal bases. The duration of storage depends on your enquiry. If there is no statutory retention period, we delete your enquiry no later than 3 months after your enquiry has been dealt with. | Subject to statutory retention obligations, your data is deleted at the end of the application process.
Your application is deleted 4 months after it has been received. | in accordance with the statutory retention obligations | Until you deactivate your customer account | in accordance with the statutory retention obligations | in accordance with the statutory retention obligations | Subject to statutory retention obligations, we only store your data for as long as you do not withdraw your consent. | Unlimited, subject to you withdrawing consent | We store your data for six months and then ask for your consent again. If you consent again, the storage period is extended by a further six months.
Otherwise, your data is deleted, subject to statutory retention obligations. |
| Consequences of not providing the data | Your request cannot be answered without your data | Your application cannot be processed without your data. | The requested information cannot be sent without the data.
We have also made plenty of product information available for download so that this information can be obtained without any need for you to provide your data. | Registration takes place on a voluntary basis. The personal section of the website does not work without login details. | A contract cannot be concluded without the data. | You cannot take part in training and any hotel cannot be booked without the data. | The newsletter cannot be delivered without an email address. | None | You cannot be added to the talent pool |
| Further information | If necessary, we also receive your data from our independent sales representatives | External trainers are normally only given the name and company of the participant to organise the seminar and to produce the certificates. |
Cookies
A cookie is a small packet of data stored on your device that contains data such as personal page settings. This packet of data is created and sent to you by the web server when your web browser establishes a connection with the server. We use technically necessary cookies and other cookies on our website. All the cookies that we use and are technically necessary and the purpose of the cookies are set out in the table below.
| Name of the cookie | Intended purpose | Duration of storage | Type of cookie |
|---|---|---|---|
| XSRF-TOKEN | Key to prevent user input being manipulated | Session | Technically necessary |
| norka_session | Stores temporary session data while using the website | 1 hour | Technically necessary |
| remember_web_* | Cookie for the user to stay logged in | 90 days | Technically necessary |
| norka-cookie-confirm | Stores the status of whether tracking cookies have been allowed/rejected | 90 days | Technically necessary |
| _pk_* | Matomo Analytics Cookie | Variable | Analytics |
Third-party resources
Embedding videos from YouTube
We have embedded YouTube video on our website. YouTube video is a component of the video platform provided by YouTube, LLC, where users can upload content, share it over the internet and get detailed statistics. YouTube video allows us to embed content from the platform into our website easily.
No data is sent to YouTube when a website with an embedded video is accessed. It is only when you click on the preview that a connection is established to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, which includes sending your IP address and, potentially, browser data, such as your user agent.We use YouTube with the NoCookie option, so that YouTube does not apply its normal tracking methods.
Using YouTube video and thereby sending personal data to Google is based on your consent (Article 6(1)(a) GDPR). Your consent also applies to any processing carried out by YouTube; you can find out more at https://policies.google.com/privacy?hl=en&gl=en.
Google Ireland is part of the US Alphabet Group. We do not know whether data is sent and which data subject to GDPR is sent by Google Ireland to its parent company in the USA. If data is sent in this case, Google Ireland Limited is solely responsible for the data being sent. Sending the IP address to the USA as a third country would also be allowed, as there is an adequacy decision for the USA under the EU-US Data Privacy Framework (DPF) in accordance with Article 45(1) GDPR and the Google companies have accepted the conditions of the DPF by self-certifying.
We do not store any data in connection with using YouTube video. You can see whether Google stores the collected data and for how long on the Google/YouTube pages.
Oxomi
To display our product catalogues in a graphically appealing way and as a flip catalogue on any browser, we use the Oxomi product provided by scireum GmbH, Eisenbahnstr. 24, 73630 Remshalden, Germany. The legal basis for processing your data is our legitimate interest within the meaning of Article 6(1)(f) GDPR in presenting our products in an appealing way.
When you open a web page with an integrated product catalogue, a connection is automatically established to Oxomi. This involves sending the standard browser data as listed above from your web browser to Oxomi.
We do not process any personal data in connection with presenting our product catalogues. You can find out more about data processing by Oxomi at https://scireum.de/scireum/datenschutz/.
Your rights
Every data subject has the right of access under Article 15 GDPR, the right to rectification and to have incomplete data completed and supplementary data included under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR and the right to data portability under Article 20 GDPR. The restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access and the right to erasure.
Data subject also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act (BDSG)).We must also inform all recipients to whom we disclose data of any rectification or erasure of data or restriction of processing that applies on the basis of Article 16, Article 17(1) and Article 18 GDPR.However, this does not apply if it is impossible to inform them or involves a disproportionate effort. Notwithstanding, you have a right to be informed of these recipients. You can assert these rights vis-à-vis NORKA free of charge by emailing datenschutz@norka.de or by using the contact details provided in the legal notice.
Under Article 7 GDPR, you have the right to withdraw your consent at any time and without giving reasons. Please note that any withdrawal of consent only applies to the future and does not affect the lawfulness of processing that has been carried out in the past.
Right to object
Under Article 21 GDPR, you have the right to object to the processing of personal data concerning you that is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Where we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling, to the extent that it is related to such direct marketing.