Data protection for www.nubert.de

You can print or save this document by using the usual functionality of your internet service program (=browser: there usually "File -> Save as"). You can also download and archive this document in PDF form by clicking here... To open the PDF file, you need the free programme Adobe Reader, comparable programmes or so-called browser plug-ins that can handle the PDF format.

Data protection is a matter of trust and your trust is important to us. We respect your privacy and personal sphere. Therefore, we observe the legal provisions when processing your personal data. We would like to inform you here about our data collection and data use.

1. What do we do with your personal data?
   1. What is personal data?
   2. Data use for contract processing
   3. Data storage, customer account
   4. Contact us
   5. Data use for advertising and market research
   6. Revocation and right to object to advertising
   7. Use of data for your application
   8. Deletion and blocking
2. Is data collected when visiting our site?
   1. Data collection and use when visiting our website, cookies
   2. Profiling of user profiles
   3. Details on web analysis and advertising
   4. Social media
   1. 1. Privacy policy for our TikTok page
      2. Privacy policy for our Facebook page
      3. Privacy policy for the Instagram account
      4. Privacy policy for our YouTube channel
      5. Privacy policy for our LinkedIn page
3. How do we protect your personal data?
   1. General protection measures
   2. Protection of your payment data
4. Identity and credit check
   1. Internal check
   2. Identity and creditworthiness information from external credit agencies
   3. Legal basis
   4. Credit agencies used
5. What rights do I have?
   1. Right to confirmation and information
   2. Right to rectification
   3. Right of object
   4. Right to erasure (right to be forgotten)
   5. Right to restriction of processing
   6. Right to data portability
   7. Enforcement of your rights
6. What consents have I given?

I. What do we do with your personal data?

1. What is personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). A name is not necessarily required for identifiability. Indirect identifiability is also sufficient, e.g. by means of assignment to an identification number, to location data, to an online identifier or to one or more special characteristics. It is therefore a question of your identity. This includes, for example, your name, but also your telephone number, your address and other data that you provide to us.

Many of the legal bases for our data processing can be found in the European General Data Protection Regulation (DSGVO), the text of which and the associated recitals can be found here, for example. In the following notes, we refer to corresponding regulations as the respective legal basis for our processing.

2. Data use for contract processing

If you make an enquiry with us or conclude a contract with us, we require and process certain data, such as the details of the intended or made order, your address, e-mail address and payment processing data for the pre-contractual examination, contract processing and possible later warranty or guarantee processing (see as a basis Art. 6 para. 1 sentence 1 lit b DSGVO). In the context of order and payment processing, the service providers we use (e.g. logistics companies, payment intermediaries) receive the necessary data about you or your order. We also carry out credit checks (see IV below). We cannot accept orders or offer you certain payment options without the corresponding accurate information. In addition, commercial and tax law obliges us to archive data from concluded transactions for the duration of the statutory retention periods. The legal basis for the corresponding data use is Art. 6 para. 1 lit. c DSGVO.

Processing in the company organisation
As part of our company organisation, we process your data in our IT systems and, where necessary, transmit data from customers, interested parties, suppliers and personnel in accordance with legal obligations to authorities such as tax administrations and to consultants (tax advisors, lawyers, auditors) in accordance with our interests in legally compliant and economic company management.
Legal basis Art. 6 para. 1 lit. c and f DSGVO
In this context, we analyse data on all corporate and business transactions for corporate management and market research purposes. Insofar as no necessity arises from the specific purpose, the data is largely anonymised or at least evaluated pseudonymously and, if necessary, made accessible to third parties in a summarised form detached from persons. Legal basis Art. 6 para. 1 lit. c and f DSGVO.

Outsourced IT and hosting
We use IT software and hosting services from service providers as part of the provision of services and the fulfilment of your requests and our contractual obligations on the basis of our interests in efficient and secure company and contract execution. In doing so, your data regarding your interests, concerns, orders and visits or perceptions of our service offers are also processed with the help of the services of these service providers. Insofar as required by law and not already secured by professional confidentiality regulations, we have contractually secured our access and the secure and confidential treatment of your data in contract processing cases Legal basis Art. 6 para. 1 lit. f DSGVO, if applicable in conjunction with Art. 28 DSGVO (conclusion of contract processing agreement).

3. Data storage, customer account

Your specific order data will be stored by us. You can register with us (e-mail address and password). Registration gives you access to the data we store about you and your orders, and allows you to manage a newsletter you have ordered.

If you would like to close your account again, please use one of the contact options below.

Please note that your data will continue to be stored by us even in the event of closure and will be used for the specified purposes (such as order processing, but also for promotional information). For your right to object to the use of data for advertising, see I. Digit 6.

4. Contacting us

If you contact us via our contact options (e.g. via e-mail or the contact form), we store your name and contact details as well as your request. The data is used to process your request and to communicate with you. We use your e-mail in order to be able to reply to you by e-mail (legal basis Art. 6 para. 1 sentence 1 lit a and b DSGVO). For questions about specific orders or if you want us to do something for you personally, we need your real name. For other questions, you can also provide a pseudonym. If your request has finally been dealt with and there are no other storage obligations, the data will be deleted again.

5. Use of data for advertising and market research

We are interested in maintaining the customer relationship with you, acquiring new customers, reactivating old customers and sending our customers information and offers. In order to safeguard these legitimate interests, we process your data on the basis of Art. 6 para. 1 lit. f of the GDPR (also with the help of service providers) in order to provide you with information and personalised offers from us and to improve our information and offers. We may also provide for your separate consent to be obtained outside of this document and in such cases base our use of data on Art. 6 (1) (a) of the GDPR.

In our advertising measures, we pursue the interest of protecting you as far as possible from unwanted advertising or advertising that is not in line with your interests. In order to be able to take your interests into account, we include such data in the selection of information of which you know that we are aware. This is, for example, orders, information you have already received or your reactions to corresponding promotional information on postal advertising or our newsletters and e-mail information. Where this makes technical and economic sense for the pursuit of the purposes, we separate corresponding data from your person in order to protect your interests, pseudonymise it and form groups (clusters) in which the individual information is merged before an evaluation.
For your right of objection and revocation against the following data use for advertising purposes, see I. digit 6.

We only make the following uses after we have asked you for your consent outside of this declaration.
Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.
(Acceptance of this notice does not constitute consent on your part to the corresponding use of your data for advertising purposes!)

Telephone contact for order enquiries
We will not call you for advertising purposes without your separate consent. If you have given us consent, we will use your name and telephone number as well as information on contact frequency and previous order history to contact you by telephone approx. 4-6 times within a period of 12 months, if necessary at the times you have indicated as your preference, and to convey relevant information on offers and promotions relating to our range of products and services (for your right of objection and revocation, see digit 6).

E-mail advertising with separate consent
If you have registered separately for our newsletter, your e-mail address and, if applicable, other personal data that you voluntarily provided to us during registration (e.g. your name for addressing purposes) will be used for our own advertising purposes and, if applicable, for advertising partner offers contained in the newsletter.

We statistically evaluate when such an e-mail is called up and, if applicable, which information offers and with what intensity these meet with interest (for example, when a link is called up). The evaluation is carried out to improve the delivery times and optimise the content of our offers and promotional information (for your right of objection and revocation, see digit 6).

Notification of availability
If you have requested notification of the availability of a product, we will only use the e-mail address you have provided for this purpose, unless you have provided us with the e-mail address for other purposes (e.g. login name or for order confirmations and contractual communication). In these cases, storage will continue even if one of the following reasons for deletion occurs. Deletion takes place when the purpose has been fulfilled, in particular when a final notification has been made and there is no reason to assume that supplementary messages on the subject will be prompted. Deletion also takes place if you have revoked your wish to be notified, which is possible at any time with effect for the future.

Rating reminder by e-mail
If you have given us your express consent to do so during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose, we will use your e-mail address to send you a reminder to rate your order via the rating system we use (for your right of objection and revocation, see digit 6).

Use of data for newsletters and other e-mail advertising
If you use our newsletter or other e-mail advertising, we statistically evaluate when such an e-mail is called up and, if applicable, which information offers and with what intensity these meet with interest (for example, when a link is called up). The evaluation is carried out to improve the delivery times and optimize the content of our offers and promotional information (for your right of objection and revocation, see digit 6).

Use of your order data for personalized marketing
If you have given us your consent, we will use your order data as well as data from interest statements, website visits and information requests according to your specifications or via cookies for our market research and for advertising information tailored to your person (for example, display of offers when visiting our websites, advertising by mail - no calls, faxes or e-mails without your separate consent - no data transfer). Without your separate consent, the data will only be statistically evaluated after prior anonymization, which also no longer allows us to draw conclusions about your person, so that we can improve our information, offers and their presentation as part of market research and advertising.

Use of your data when visiting our pages
Insofar as we collect data or have data collected with the help of web analysis tools and use web advertising tools, we will inform you in detail about this under II. Data collection when visiting our pages. There you will also learn how you can use your right to object and what technical options are available to you to counteract data collection.

7. Use of data during your application

If you apply to us, we will use and transmit the data you provide for the purpose of evaluating your application documents and, if necessary, for carrying out the further application process (legal basis Art. 88 GDPR in conjunction with Section 26 (1) sentence 1 BDSG). An automated addition of your data from other sources (e.g. from social networks, credit rating information) does not take place.

We store your data for the duration of the application process and beyond that for a maximum of three months from notification of a binding decision on your application, unless an employment contract is concluded. Longer storage will otherwise only take place with your express consent (legal basis Art. 6 para. 1 lit. a GDPR), insofar as we have to comply with a legal requirement (legal basis Art. 6 para. 1 lit. c GDPR) or if there are legitimate reasons, e.g. if claims are raised against the non-inclusion of your application (legal basis here also Art. 6 para. 1 sentence 1 lit. b GDPR). After the expiry of this period, your data will be deleted or only stored in archive systems without direct access as far as legally required for archiving purposes under commercial and tax law.

8. Deletion and blocking

Your personal data will be stored until the stated purposes have been achieved or for as long as we have a legitimate interest in storing it.

Afterwards, the data will be deleted unless other agreements have been made with them or statutory archiving obligations exist (e.g. due to commercial or tax law). If archiving is required by law, the data will be blocked from other access. These documents will be deleted and destroyed in accordance with data protection law after expiry of the statutory retention periods as part of regular campaigns.

If you have consented to the collection, processing and use of your data, we store and use your data indefinitely until revoked or the purpose for which you gave your consent no longer applies. Thereafter, the consent and processing data will be archived until the statute of limitations expires (regularly three years) for legal defense purposes (legal basis Art. 17 para. 3 lit. e GDPR).

If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, e-mail address for blocking purposes in corresponding lists with which we match our advertising measures so that you no longer receive any further advertising. Deletion in this sense therefore initially means that your data is blocked in our systems, in particular for advertising and marketing activities (legal basis Art. 6 para. 1 lit. f DSGVO). The data will - if necessary - continue to be processed for purposes other than advertising, for example in the context of contract processing and, if applicable, warranty as well as commercial and tax law documentation (legal basis Art. 6 para. 1 lit. b u. c GDPR).

If you wish deletion instead of blocking despite the possible consequence in individual cases that you may continue to receive advertising, please inform us.

At your request, we can block personal data in whole or in part. For this purpose, you inform us to what extent and, if applicable, for how long the blocking should take place. As far as technically possible, you can in this way completely or temporarily exclude the processing and use of your data for certain areas.

II. Is data collected when visiting our site?

1. Data collection and use when visiting our offer, cookies

You can visit our site without entering any personal data. When you visit our websites, even if this is done via a link in a newsletter or an advertisement, for example, certain data is nevertheless collected and stored in so-called log files. Even if the visit is made via newsletter links or advertising links on the Internet, only access data without direct personal reference is recorded, such as e.g.

• the website from which we are visited
• the page that is called up or the name of a requested file
• Type and version of your browser,
• Time and date of access
• The operating system used on which the browser is running
• the name of your internet service provider
• the Internet address of the person accessing the site (IP address)
• Products and content the visitor is interested in and the expression of interest, such as duration, frequency, interaction with forms, navigation elements and links

It is not possible for us to draw any conclusions about you on the basis of this data and we will not combine the above data with your personal data without your consent, unless it is for the purpose of prosecuting legal violations and attacks on our systems.
The IP address is made available by our hoster, but for data protection reasons it is overwritten with an "x" after 7 days and thus anonymised.

We have also tried to shorten the IP address so that it is difficult or almost impossible for certain partners who collect this IP address as part of their services to trace it back to you personally.

If we include third-party content on our pages (e.g. embedded films or other information), they receive your IP address for this purpose alone, as otherwise the content cannot be delivered to your browser.

Cookies
We use so-called cookies on our website. Cookies are small files that are stored on your end device and save certain settings and data for exchange with our system or the systems of service providers via your browser. This storage helps us to design the website accordingly for you and makes it easier for you to use, for example, by storing certain entries you make so that you do not have to keep repeating them. For this purpose, cookies usually contain identification codes. This enables users and/or the browsers (software for displaying internet content) to be identified and distinguished from other users and browsers and recognised again on visits.

Many cookies are automatically deleted from your hard drive at the end of the browser session (end of session) (therefore also session cookies). However, there are also cookies that remain stored with you permanently. The expiry time is set for your convenience to a time in the future. When you visit us again, it is then automatically recognised that you have already been with us and which entries and settings you prefer. (so-called long-term cookies). Some of these cookies are used to display information on our website that is specifically tailored to your interests.

(Consent-free cookies)
Cookies that ensure functions without which you would not be able to use this website as intended are only used by us and their contents are not made available to third parties. We use such consent-free cookies on the basis of Art. 6 para. 1 lit. b DSGVO.

The cookies are deleted again at the end of the session.

(Other cookies)
For other cookies, you will also be informed of this data protection information when you visit our website. In doing so, you may agree to the use of these cookies or you may use the option to deactivate data collection, e.g. with Google Analytics. You can adjust these settings at any time via the following link.

Change cookie consent

We use offers from third parties. These third parties may also set cookies. Third party cookies are set by the partners, who in turn are interested in informing you about offers that are in your presumed interest.

You can find out more about the use of cookies on the websites of the third-party providers. If you block the cookies, all content and functionalities can no longer be made available to you. For unrestricted use, you must again give your consent and remove corresponding blockades.

We have listed here an overview of the cookies we use. First of all, please note the following general information on your technical objection options and our supplementary information on special uses at II. digit 3.

Your technical objection options
Regardless of the duration set, you can manually delete cookies in your browser. In some browser settings, the acceptance of cookies without restrictions is preset. You can allow or prohibit temporary and stored cookies independently of each other in the security settings of your browser. In addition to browser settings that generally deactivate the automatic setting of cookies, you can also deactivate cookies by setting your browser to block cookies from a specific domain, e.g. "googleadservices.com". This setting then prevents the execution of corresponding services that set cookies from this domain.
Some web services work with opt-out cookies. A web analytics service, for example, recognises from the cookie you set (hereinafter referred to as a "blocking cookie") that you do not wish to have your data collected. We have options for setting a blocking cookie for the web services we use under II. digit 3 listed separately. Google, for example, allows corresponding settings under https://myaccount.google.com/intro. You can find options for many other networks to set advertising preferences at http://www.youronlinechoices.com/de/praferenzmanagement/ or register under http://optout.aboutads.info/ and or http://optout.networkadvertising.org inform about many advertising measures and deselect them.
If you are using a mobile device, you can activate the "No Ad Tracking" (iOS) or "Disable Personalised Advertising" (Android) setting on the device with the corresponding operating system. This is to prevent the Advertising ID (a non-personal device identifier) from being used to deliver interest-based advertising.

If you use the option in your browser to delete all cookies or set blocking cookies, remember that you may then have to make the corresponding settings or set blocking cookies again!

Accepting cookies is not a prerequisite for visiting our online offer. However, if you do not accept or deactivate cookies, certain options (e.g. services, purchase options, shopping basket storage and information) may not be available on our site and some web pages may not be displayed correctly.

If you want to conclude contracts with us, you must accept certain cookies. If you do not wish to do so, no contract can be concluded.

You can find more information about the use of cookies on http://www.meine-cookies.org, the pages of the Bundesverbandes Digitale Wirtschaft (BVDW) e.V.

2. User profiling

The law recognizes the formation of automated data collections on a person under the term profiling. According to Art. 4 No. 4 GDPR, profiling is any form of automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

We create pseudonymous user profiles, i.e. user profiles that are separated from your personal identifiers, for statistical purposes in order to be able to draw conclusions about interests in our content and offers through an evaluation and to tailor corresponding information and offers to users with corresponding interests. Furthermore, we use the information to improve data security, to counter attacks on our systems and, if necessary, to support law enforcement authorities in the event of attacks on our systems or other criminal acts.

In our advertising measures, we pursue the interest of protecting you as far as possible from unwanted advertising or advertising that is not in line with your interests, based on Art. 6 (1) lit. f DSGVO. In order to be able to take your interests into account in our advertising via data assigned to your person, we also request your express consent outside of this notice and base data uses in this regard on Art. 6 para. 1 lit. a DSGVO.
If you have given us your consent, we use data on your previous dealings with us, the value of your previous purchases, the frequency with which you shop with us, the route (online or offline) as well as the reason for the purchase (advertising, campaigns, recommendations), your requests for information, information already sent to you or around your reactions to corresponding promotional information on postal advertising or our newsletters and e-mail information (see our information also there). In addition, we use identifiable interests from your calls to our information offerings on the Internet or in apps. This data is assigned to your person.

The use is for our market research and for advertising information tailored to your person (for example, display of offers when visiting our websites, advertising by mail - no calls, faxes or e-mails without your separate consent - no data transfer).
For the deletion of data in the case of granted consent, please also note our information in I. digit 7.

Without your separate consent, the data will be evaluated in pursuit of the above-mentioned interests after extensive pseudonymization or anonymization, which also no longer allows us to draw conclusions about your person, so that we can improve our information, offers and their presentation as part of market research and advertising.

Where it makes technical and economic sense to do so in order to pursue the purposes, we separate corresponding data from your person in order to protect your interests, pseudonymize it and form groups (clusters) in which the individual information is merged prior to evaluation.

We delete profiles that we form from this after the advertising has taken place. We store the underlying data pseudonymously and check every X years whether they can still be used meaningfully for the above purposes. If this is not the case, this data is deleted or blocked for advertising purposes if there are other legal reasons for continued storage.

Furthermore, we use the information to improve data security, to counter attacks on our systems and, if necessary, to support law enforcement authorities in the event of attacks on our systems or other criminal acts.

We use appropriate web analytics tools to analyze user behavior. You can find out more below under "Details on web analytics and advertising".

3. Web analytics and advertising details

Based on our legitimate interests in the analysis, improvement and economic operation of our offers within the meaning of Art. 6 para. 1 lit. f. DSGVO, we use the following services:

Web analytics tools

(Google Analytics)
This website uses Google Analytics for web analysis. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies." The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on computers. It is not excluded that data processing takes place outside the scope of application of EU law. Google has joined thePrivacy Shield so that Google guarantees compliance with EU data protection standards.

For your protection, we have made settings whereby Google truncates the last part of the IP addresses of visitors to our website who have IP addresses from the EU or one of the contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In addition, we have concluded an order processing agreement with Google.

By means of identification, for example when logging in to Google services, the data listed above can also be collected and used across devices. This means that it can be recorded, for example, that you start your visit to us on a PC and continue it on a mobile device, and the data from both devices can be linked.

Google will use this information for the purpose of evaluating your use of the website on our behalf, compiling reports on website activity for website operators and providing us with other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The deletion of Analytics data is set to 14 months. The time is based on our interest in being able to make temporal comparisons with statistical data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website and the services we provide.

Use of demographic characteristics with Google Analytics
Google offers the function "demographic characteristics" This allows you to create compilations of page visitors with statements about age, gender and interests.

Google obtains this data from interest-based advertising and from visitor data from third-party providers. The data is not assigned to a specific person and is anonymized.

Your technical objection options
If you do not want information about your website visit to be transmitted to Google Analytics, you have the option of installing a "deactivation add-on" for your browser. You can download this add-on here: http://tools.google.com/dlpage/gaoptout?hl=de

If you do not want to receive interest-based advertising, you can disable Google's use of cookies for these purposes by visiting this page:https://myaccount.google.com/intro You can also deactivate the use of cookies by Google by downloading and installing the plug-in provided there via the following link: https://www.google.com/settings/ads/plugin?hl=de.

As an alternative, or within browsers on mobile devices, you can object to the use of Google Analytics by using the following link. By activating the link, an opt-out cookie will be set to prevent the collection by Google Analytics within this website in the future. Please note that this opt-out cookie only works in this browser and only for this domain. As soon as you delete your cookies in this browser, you must click the link again: Deactivate Google Analytics.

Google Adwords
As an AdWords customer, we use Google Conversion Tracking. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Adwords uses a cookie on your computer ("conversion cookie") if you have reached our website via a Google ad. These cookies lose their validity after 30 days. They do not serve to personally identify you. When you visit our pages, Google and also we can recognize that a link on our ad was followed. Through the data we learn the total number of users who have clicked on our ad.

Your technical objection options
In addition to browser settings that generally disable the automatic setting of cookies, you can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com".
Learn more about the Google Privacy Policy: http://www.google.de/intl/de/policies/privacy/ 

If you visit our site via a mobile device (e.g. smartphone or tablet), you can use this link to object to the use of Google Adwords for the future. By activating the link, we set a cookie in your browser, which signals us to prevent the use of Google Adwords for your end device. Please note that the objection must be carried out again by you, provided that you remove the cookies in your browser.
Learn more about the Google Privacy Policy: http://www.google.de/intl/de/policies/privacy/

4. Social media

You will find links to social media, such as Facebook, Instagram, TikTok, YouTube and other corresponding services. We have limited the possibility for you to set links to our offers there to the mere linking to these services, so that only you can determine whether these services receive data about your interests. Social plugins, i.e. programming that often already transmits data to the social services when visiting a page, we do not use!

a) Privacy policy for our TikTok site

Data usage from TikTok
When you visit our page on TikTok https://www.tiktok.com/@nubertlautsprecher, please also see the privacy policy of TikTok (TikTok is operated under the joint responsibility of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, United Kingdom, EC1A 9HP) at https://www.tiktok.com/legal/page/eea/privacy-policy/en. If you have any questions about TikTok's data processing, please contact TikTok directly using the contact options at https://www.tiktok.com/about/contact?lang=de-DE.

Each time you visit our TikTok site, especially when you use the features automatically integrated on TikTok pages (such as "Like" or bookmark), you transmit information about yourself to TikTok. This may also transfer data to third countries outside the EEA. TikTok is responsible for this transfer.

TikTok also uses your data, including the fact that you have looked around our site, for market research and advertising purposes. This means that TikTok creates extensive profiles from this data about you, which are then used to show you interest-based advertising within your timeline, for example.

Entries at TikTok
We use your personal data only in that they appear on our TikTok page (legal basis Art. 6 para. 1 lit b DSGVO; fulfillment of your user contract with TikTok). For example, under one of our posts, when you click the "Like" button, the statement, "[username] likes this" appears. So your username will be displayed. In addition, a thumbnail of your profile picture will also be displayed.

Your comments, which you can enter via the "Comment" function, will also appear on our site, as provided for by TikTok, with notification of your user name as well as the image of the profile picture you have posted. This information is also visible to people who are not connected to you on TikTok. In addition, this information is also viewable by visitors to our site who do not have a TikTok account. TikTok is not a platform to provide us with confidential information, especially about your health or similar information. You should treat postings and comments on our site as you would other public postings.

Contact us
If you contact us via our electronic contact options, your message will be stored in the messaging system of TikTok. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 para. 1 lit. f DSGVO).

If you would like specific advice or have questions about your order, we will transfer your contact details to our internal customer system so that we can process your request. This serves our legitimate interests in efficient customer communication, legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.

If you have any questions or wish to make any representations regarding a contract with us, please contact us at info@nubert.de. This ensures that you can receive a quick and personal response to your inquiry.

Technical data collections at TikTok
Furthermore, TikTok provides us with anonymized statistics.
It is about anonymized data, such as.

• Page activity
• Page views
• Number of subscribers
• "Like" statements
• Reach (also demographic reach, i.e. origin, age and gender)
• Interactions, such as clicks on specific information, elements, or links.

A reference to your person does not result from this for us. We use the statistical data presented to us based on the interest in improving the offer on our social media presences and websites and their design and maintaining security, as well as in cooperation with authorities in the event of violations (legal basis is Art. 6 para. 1 lit. c and f DSGVO).

Placement of advertising on TikTok
We place advertisements with TikTok and use statistical data that we receive from TikTok to determine a target group-specific delivery. A reference to your person does not result from this for us.

b) Privacy policy for our Facebook page

Data use from Facebook
If you visit our page on Facebook, please also note the privacy policy of Facebook (operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland); company registration number 462932 - hereinafter: "Facebook"). Information on the content and purpose of the storage and processing of your data can be found in the privacy policy of Facebook https://www.facebook.com/about/privacy/.

Every time you visit our Facebook page, especially when you use the functions automatically integrated on Facebook pages (such as the "Like" button), you transmit information about yourself to Facebook. We would like to point out that due to the data storage by Facebook, there is a risk that your personal data will also be transferred to the USA and stored and processed there, as the parent company, Meta Platforms Inc. is based in the USA. Facebook is solely responsible for this type of data processing. This data transfer is based on an adequacy decision of the EU Commission.

Facebook also uses your data, including the fact that you have looked around on our fan page, for market analysis and advertising purposes. This means that Facebook creates extensive profiles from this data about you, which are then used to show you interest-based advertising within your timeline, for example.

A detailed description of the respective data processing by Facebook and also the opt-out options can be found in the following documents from Facebook:

Facebook data policy: https://www.facebook.com/about/privacy/

Cookies
Facebook sets cookies on its site under its own responsibility. When you log in to Facebook, Facebook can read data about you and your interaction with our site, which may be stored in cookies. Cookies are small files that are stored on your terminal device and store certain settings and data for exchange with Facebook's system via your browser. The time for the duration of storage may be set to a few years. Regardless of the set duration, you can also manually delete cookies in your browser or configure your browser so that cookies are automatically deleted as soon as you close the browser.

Most browsers accept cookies by default. You can allow or disallow cookies independently in the security settings. Facebook also asks you to accept cookies in the form of a cookie banner.

Accepting cookies is generally not a prerequisite for visiting our online offer. If you deactivate Facebook cookies, certain options offered by Facebook may not be available to you on our site and content may not be displayed or may not be displayed correctly. You can find more information about Facebook cookies and possible settings for them here https://www.facebook.com/policies/cookies/.

Our use of data
The processing of data on this Facebook page takes place on the basis of a Agreement on joint processing of personal data with Facebook. Facebook and Nubert electronic GmbH are therefore joint controllers within the meaning of Art. 26 DSGVO.

Entries on Facebook
We process your personal data only in that they appear on our Facebook page (legal basis Art. 6 para. 1 lit b DSGVO). For example, under one of our posts, when you click the "Like" button, the information, "[username] likes this" appears. Your username is thus displayed. In addition, a thumbnail of your profile picture is also displayed.

Your comments, which you can enter via the "Comment" function, will also appear on our page, as provided for on Facebook, with notification of your user name as well as the image of the profile picture you have posted. This information is also visible to people who are not "friends" with you on Facebook. In addition, these notices may also be enabled for visitors to our site who are not logged into Facebook. Facebook is not a platform for sharing confidential information with us, especially about your health or similar information. You should treat entries and comments on our page in the same way as other public posts.

Contact us
If you contact us via our electronic contact options, your message will be stored in the Facebook messaging system. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 para. 1 lit. f DSGVO).

If you would like specific advice or have questions about your order, we will transfer your contact details to our internal customer system so that we can process your request. This serves our legitimate interests in efficient customer communication, legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.

If you have any questions or wish to make any representations regarding a contract with us, please contact us at info@nubert.de. This ensures that you can receive a quick and personal response to your inquiry.

Technical data collections at Facebook
Furthermore, Facebook provides anonymized statistics to operators of company pages, including us, without being asked.
It is about anonymized data, such as.

• Page activity
• Page views
• Number of subscribers
• "Like" statements
• Reach (also demographic reach, i.e. origin, age and gender)
• Interactions, such as clicks on specific information, elements, or links.

Placement of advertising on Facebook
We place advertisements on Facebook and use statistical data that we receive from Facebook to determine a target group-specific delivery. A reference to your person does not result from this for us. Facebook provides you with information on the settings you can make for advertisements on Facebook and other pages, insofar as these are controlled by Facebook (https://www.facebook.com/about/privacy/ there under "Control over Facebook ads").

Sweepstakes on Facebook
When we organize sweepstakes on Facebook, we use the participant data received only for the purpose of conducting the sweepstakes and, if necessary, for prize notification. Personal data of winners will only be published in abbreviated form with first name, abbreviated last name and city (example: "Bernd K. from Bonn"). You can also object to the use of your data during participation in a competition. The use of data prior to receipt of the objection remains unaffected. However, your participation ends upon receipt of your objection. The possibility of winning will no longer apply.

We would like to point out that Facebook is not connected with the organization of the competition and that the competition is in no way sponsored, supported or organized by Facebook. Nubert electronic GmbH is solely responsible for the implementation and the legal process. We also adhere to Facebook's guidelines for data use in promotions. According to this, personal chronicles and connections to friends may not be used for the organization of promotions.

c) Privacy policy for the Instagram account

When you visit our page on Instagram https://www.instagram.com/NubertLautsprecher/, please also note the privacy policy of Instagram (Instagram is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) at:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect We have no influence on the type, scope and purposes of the data processing carried out by Instagram. We also have no influence on the use or disclosure of personal data by Instagram. There are also no effective control options here.

By using Instagram, your personal data will be collected, transferred, stored, disclosed and used by Instagram, and in the process transferred to, stored and used in the United States of America (USA), Ireland and any other country where Instagram does business. You can find out which data is specifically affected by this in Instagram's privacy policy. The data transfer to the USA is based on an adequacy decision of the EU Commission.

Data processed by us via Instagram
The processing of data on our Instagram page is based on an agreement on joint processing of personal data with Meta. Metaand Nubert electronic GmbH are therefore joint controllers within the meaning of Art. 26 DSGVO.

Processing is carried out by us in the context of the Instagram account if you react to our posts (e.g. by a "Like" or "Share" or a reply to a post).In such a case, we are informed by Instagram about the action taken including mention of the account name. This data can be used by us to compose a response.

Contact us
If you contact us via our electronic contact options, your message will be stored in the Instagram messaging system. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 para. 1 lit. f DSGVO).

If you would like specific advice or have questions about your order, we will transfer your contact details to our internal customer system so that we can process your request. This serves our legitimate interests in efficient customer communication, legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.

If you have any questions or wish to make any representations regarding a contract with us, please contact us at info@nubert.de. This ensures that you can receive a quick and personal response to your inquiry.

When sending a direct message, please note that Instagram may scan the content of the messages. Your personal data is stored until the stated purposes are achieved or as long as we have a legitimate interest in storing it. After that, they will be deleted, unless otherwise agreed with them or if there are legal archiving obligations (e.g. due to commercial or tax law). If archiving is required by law, the data will be blocked from other access. These documents will be deleted and destroyed in accordance with data protection law after expiry of the statutory retention periods as part of regular campaigns.

d) Privacy policy for our YouTube channel

If you visit our page on YouTube at https://www.youtube.com/@Nubertelectronic/about, please also note the privacy policy of YouTube (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) at https://policies.google.com/privacy?hl=de

We have no influence on the type, scope and purpose of the data processing carried out by Google. We also have no influence on the use or disclosure of personal data by Google. There are also no effective control options here.

With the use of YouTube, your personal data is collected, transferred, stored, disclosed and used by Google and thereby transferred to the United States of America (USA), Ireland and any other country in which Google does business and stored and used there. You can find out which data is specifically affected by this in Google's privacy policy. The data transfer to the USA is based on an adequacy decision of the EU Commission.

Google also processes the content that you create, upload or receive from others when using the services. This includes, in particular, the videos that you upload here and also comments that you write on YouTube videos or when you reply to comments from other users or write something in the "Discussion" area. Furthermore, Google also evaluates both the content you share and the content you view to determine what topics you are interested in, stores and processes confidential messages that you send directly to other users, and may determine your location using GPS data, wireless network information, or your IP address in order to send or display advertisements or other content to you. For analysis, Google may use analytics techniques such as its own Google Analytics. Google will also aggregate all of your data from all Google services and create detailed user profiles about it.

We have no influence on the use of such tools by Google and have not been and will not be informed about such potential use. If tools of this type are used by Google for our YouTube channel, we have neither commissioned nor otherwise supported this in any way. We can also not prevent this. The data thus obtained by Google and their evaluations are also not made accessible to us, evaluated and also not made available. We can only see the profiles of subscribers to our channel with their personal details, if any, and their YouTube channels. In addition, we can see your profile if you like or comment on our videos.

Even if you do not have an account with Google, Google receives information about you. This is so-called log data, such as the IP address, the browser type, the operating system, information about the website you previously visited and the pages you viewed, your location, your mobile provider, the terminal device you use (including device ID, application ID and advertising ID), the search terms you used and information about cookies located on your terminal device. You have options to restrict the processing of your data in the general settings of your Google account. In addition to these general tools, Google also offers specific privacy settings for YouTube.

I. Data processed by us
We also process your data when you communicate with us via YouTube (e.g. write comments on our videos). The processing takes place for the purposes of the promotional presentation of our company and our products (Art. 6 para. 1 lit. f DSGVO). The recipient of the data is initially Google, where it may be passed on to third parties for Google's own purposes and under Google's responsibility (see above). Recipient of publications is also the public, i.e. anyone else who accesses our videos via YouTube. The data you enter on YouTube/Google, such as your username and the content published under your account, will be processed by us when we respond to your comments or other communications. When entering comments, please be careful not to publish any other personal data about yourself, as this data is visible to everyone.

II. Joint data processing
Google collects statistical usage data and makes it available to us in aggregated form for evaluation. This allows us to determine, for example, what reach our videos have in the target groups relevant to us. The basis for this is an agreement between Google and us, which you can view here: https://support.google.com/analytics/answer/9012600

In addition, we place advertisements on YouTube and are also jointly responsible for data processing in this regard with Google. We select the advertising according to target groups and presumed interests of the users. Google then decides to whom our advertising is specifically displayed. Google also provides us with statistical evaluations regarding these advertisements, so that we can also evaluate their reach in the target groups relevant to us and further optimize our advertising.

e) Privacy policy for our LinkedIn page

The account https://www.linkedin.com/company/g%C3%BCnther-nubert-electronic/ is responsibly operated by Nubert electronic GmbH (hereinafter "we"). For the service offered on LinkedIn, we use both the technical platform and the services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).

I. Data processing by LinkedIn
The detailed privacy policy of LinkedIn, in which you are informed about the data processing and the rights you are entitled to vis-à-vis LinkedIn, can be found under the following link: https://www.linkedin.com/legal/privacy-policy
We have no influence on the type, scope and purposes of the data processing carried out by LinkedIn. We also have no influence on the use or disclosure of personal data by LinkedIn. There are also no effective control options here.

II. Data processed by us via LinkedIn
The processing of data on this LinkedIn page takes place on the basis of a Agreement on joint processing of personal data with LinkedIn. LinkedIn and we are therefore joint controllers within the meaning of Art. 26 DSGVO.

Service providers used
To operate our corporate presence on LinkedIn, we use service providers who perform various tasks for us. We have also obligated them to comply with data protection rules via an agreement on data processing on our behalf in accordance with Art. 28 DSGVO.

Entries on LinkedIn
We only use your personal data by responding to posts from us (legal basis Art. 6 para. 1 lit b DSGVO). Thus, when you click the "Like" or the Share button, your name including a link to your profile as well as the type of "Like" option you have chosen will appear under one of our posts. Your username is therefore displayed. A thumbnail of your profile picture will also be displayed for this purpose. We can then also see all the data of your profile that you have shared in your settings.

Your comments, which you can enter via the "Comment" function, also appear on our page, as provided for on LinkedIn, with notification of your user name as well as the image of the profile picture you have posted. This information is also visible to people who are not "linked" to you on LinkedIn. In addition, these notices may also be enabled for visitors to our site who are not logged into LinkedIn. LinkedIn is not a platform to provide us with confidential information, especially about your health or similar information. You should treat postings and comments on our site in the same way as other public postings.

Contact us
If you contact us via our electronic contact options (e.g. by direct message via the LinkedIn system or by e-mail), we will store your message. The personal data contained therein will be used to process your request and to communicate with you (legal basis Art. 6 para. 1 lit. b DSGVO).

Technical data collections at LinkedIn
Furthermore, LinkedIn provides anonymized statistics to the operators of company pages, i.e. also to us, without being asked.

It is about anonymized data, such as

• Page activity
• Page views
• Number of subscribers
• "Like" statements
• Reach (also demographic reach, i.e. origin, age and gender)
• Interactions, such as clicks on specific information, elements, or links.

A reference to your person does not result from this for us. We use the statistical data presented to us based on the interest in improving the offer on our social media presences and websites and their design and maintaining security, as well as in cooperation with authorities in the event of violations (legal basis is Art. 6 para. 1 lit. c and f DSGVO).

Statistical analyses from LinkedIn
We receive statistical evaluations from LinkedIn on the reach of our posts. For us, these evaluations are completely anonymized.

III. How we protect your personal data?

1. General protective measures

The law requires companies to establish an appropriate level of data protection. Among other things, the respective risk to the data, the probability of occurrence, the state of the art and the costs must be reconciled. We have provided appropriate technical and organizational measures to realize the security of your data and its processing in accordance with the legal requirements. If you have any security concerns regarding data entry or any other questions or suggestions, simply contact our customer service or our data protection officer. You will find the other contact details listed again at the end of these notes.

Your personal data is transmitted securely by encryption when you place an order and when you register for your personal account. We use the SSL (Secure Socket Layer) coding system for this purpose. We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification and distribution of your data by unauthorized persons. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.

2. Protection of your payment data

Card data protection
The payment form on which our customers enter their card data is hosted in the secure computer center of our payment service provider. This not only ensures that no employee has access to your card data, but also that the data protection standards of the card organizations are met.

Protected data transmission
The TLS encryption process is used to transmit the data in the payment form (card number, expiration date, check digit, etc.) to our payment service provider in encrypted form.

Access to your card number
The card number is only stored as an encrypted character string at our payment service providers. The card number is generally never displayed or made accessible in unencrypted form. Only within the International Card Organizations network is the card number deciphered. The card number is used, among other things, for authorizations, bookings and credits.

Other payment data
If you provide us with your bank details, then we only store this data encrypted on our servers. Also, your account number or IBAN is generally not displayed in full, but only in an abbreviated form, which should allow you to identify the account connection.

When paying with PayPal, we do not receive any account or credit card information. You have deposited these with PayPal. We only receive the PayPal email address. For the rest, the data entry at Papal is done according to their security rules.

When using the payment method Sofortüberweisung, your data is transferred via an SSL-encrypted connection. With the help of your PIN and TAN you authorize your transfer, which can then be executed by your bank. PIN and TAN are not stored by us. Your account statement data is also not stored by us, but sent directly and encrypted to the bank by the provider from the transfer form.

With Amazon Payments, you can use the payment and shipping information stored in your Amazon account to shop quickly and securely. Your transactions are secure and payment information is not shared with us. Paying through Amazon gives you the same familiar payment environment as Amazon without leaving our website. All you need to pay is your Amazon credentials.

IV. Identity and credit check and scoring

1. Internal audit

If we make advance payments (purchase on account), we use our data to check your current and past payment behavior and, if applicable, atypical ordering behavior (e.g., orders placed at the same time under different customer accounts to the same address), based on our interest in protecting ourselves from payment defaults and customers from identity fraud. The creditworthiness data that is taken into account includes outstanding payments, dunning procedures, information about insolvency, debtor counseling, deferment agreements due to non-payment. Together with data from the areas of address, age, ordered assortment, order method and selected payment options, the calculation of a statistical probability of default is carried out by our partner payolution GmbH / Paysafe Group by way of order processing on the basis of recognized mathematical statistical methods, the result of which is included in the external creditworthiness information listed below.

2. Identity and creditworthiness information from external credit agencies

Also based on the interests described above, we carry out a personal and address validation with the companies mentioned under IV. Item 4, providing your address data and date of birth, and receive creditworthiness information that is calculated on the basis of recognized mathematical-statistical procedures.

We use the statistical probability values received regarding a possible payment default, which also include your address data and the results of our internal audit, for the automated decision on the desired payment and delivery options, which we restrict if necessary. You can request that we manually review the automated decision, for example, to reject the desired payment method and explain your own point of view and exercise your right of objection (see below for contact details).

In the event of payment problems, we reserve the right, within the framework of the legal requirements and possibilities, to transmit data on non-contractual behavior (e.g. non-payment) to the credit agency and, if necessary, to commission this or other companies with debt collection. The credit agencies use the data for creditworthiness information in justified cases.

3. Legal basis

The legal basis for our aforementioned checks is Art. 6 (1) lit. b and lit. f DSGVO. The rights to which you are entitled can be found in the information below under V.

4. Credit agencies used

We obtain our information from:

• CRIF GmbH, Diefenbachgasse 35, A-1150 Vienna
• CRIF AG, Hagenholzstrasse 81, CH-8050 Zurich
• Deltavista GmbH, Dessauerstraße 9, D-80992 Munich
• SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden
• KSV1870 Information GmbH, Wagenseilgasse 7, A-1120 Vienna
• Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, D-22761 Hamburg
• Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss
• infoscore Consumer Data GmbH, Rheinstraße 99, D-76532 Baden-Baden
• ProfileAddress Direktmarketing GmbH, Altmannsdorfer Strasse 311, A-1230 Vienna
• Deutsche Post Direkt GmbH, Junkersring 57, D-53844 Troisdorf
• payolution GmbH, Am Euro Platz 2, A-1120 Vienna

The payolution GmbH / Paysafe Group will transmit your bank details (especially bank code and account number) to SCHUFA Holding AG for the purpose of account number verification. SCHUFA uses this data to first check whether the bank details you have provided are plausible. The SCHUFA checks whether the data used for the check is stored in your database, if applicable, and then transmits the result of the check back to payolution GmbH. No further data exchange such as the disclosure of creditworthiness information or the transmission of different bank connection data or storage of your data in the SCHUFA database will take place as part of the account number check. For reasons of proof, only the fact of the verification of the bank connection data is stored at SCHUFA.
In addition, you agree that payolution GmbH is also entitled to store, process, use and transmit data on any non-contractual behavior (e.g. undisputed open claims) to the above-mentioned credit agencies.

In addition, payolution GmbH / Paysafe Group will forward the data mentioned in clause 11 to ThreatMetrix for the purpose of fraud prevention. The legal basis for this transmission is Article 6 (1) f DSGVO. Transfers on this basis may only take place insofar as this is necessary to safeguard the legitimate interests of the company or third parties and does not override the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. More detailed information within the meaning of Article 14 DSGVO (e.g. name and contact details of the controller, processing purposes and categories of data to be processed) can be found here https://payment.payolution.com/payolution-payment/infoport/agb?mId=TnViZXJ0IGVsZWN0cm9uaWMgR21iSA.

By accepting these GTC, you acknowledge that we are already legally obligated to check your creditworthiness in accordance with the provisions of the German Civil Code on financing assistance between entrepreneurs and consumers.

You expressly agree that in the case of a purchase on account or purchase on installments we transmit data to payolution GmbH / Paysafe Group about the commencement (about your person, purchase price, term of the installment transaction, start of installments) and agreed processing (e.g. early repayment, extension of term, repayments made) of this installment transaction. After the assignment of the purchase price claim, the bank accepting the claim will carry out the aforementioned data transmissions; you also expressly agree to this. We or the bank to which the purchase price claim is assigned will also report data to payolution GmbH due to non-contractual settlement (e.g. termination of the instalment facility, enforcement measures). According to data protection regulations, these reports may only be made insofar as this is necessary to protect the legitimate interests of contractual partners of payolution GmbH or the general public and your interests worthy of protection are not impaired thereby. payolution GmbH stores the data in order to be able to provide its contractual partners, who commercially give instalment and other credit transactions to consumers, with information to assess the creditworthiness of customers. Address data can be transmitted to companies that collect receivables on a commercial basis and are contractually affiliated with payolution GmbH for the purpose of determining debtors. The payolution GmbH only makes the data available to its contractual partners if these credibly demonstrate a legitimate interest in the data transmission. The payolution GmbH only transmits objective data without specifying the bank; subjective value judgements as well as personal income and financial circumstances are not included in information provided by the payolution GmbH.

We would like to point out that you can revoke this consent to the transfer of data at any time, even without giving reasons. However, the above-mentioned legal obligations to check your creditworthiness remain unaffected by any revocation. Finally, you undertake to provide only truthful information to us. If you wish to obtain information about the use of personal data concerning you, you can contact datenschutz@payolution.com.

V. What rights do I have?

As a person affected by data processing, you can assert certain rights under the law.

1. Right to confirmation and information

Pursuant to Art. 15 DSGVO, you have the right to request confirmation from us as to whether personal data concerning you is being processed. In the event that we process such data, you have a right to free information about your stored data. The information includes data on

• the processing purposes;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
• the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing;
• the existence of a right of appeal to a supervisory authority;
• if the personal data are not collected from the data subject: All available information about the origin of the data;
• the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer. If you have any questions regarding the collection, processing or use of personal data, or if you wish to request information or otherwise assert your rights, simply contact us using the contact details listed at the end of this notice.

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

Your objection to the identity and credit check may mean that we can generally only offer you limited payment options or refuse to conclude a contract.

4. Right to erasure (right to be forgotten)

a) Requirements for deletion

You have the right to request the deletion of personal data concerning you. Please note that a right to immediate erasure (Art. 17 DSGVO) ("right to be forgotten") only exists if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes pursuant to Article 21(2) of the GDPR.
• The personal data concerning you have been processed unlawfully.
• The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

b) Further right to be forgotten

If we have made the personal data concerning you public and we are obliged to erase it pursuant to Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, to inform data controllers processing the personal data that you, as the data subject, have requested erasure of all links to or copies or replications of such personal data, taking into account the available technology and the cost of implementation.

c) Exceptions to the deletion

In addition to the above requirements, please note that the following exceptions may justify a refusal of your request for erasure: The right to erasure does not exist insofar as the processing is necessary

• on the exercise of the right to freedom of expression and information;
• for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
• for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right to erasure is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
• for the assertion, exercise or defense of legal claims.

5. Right to restriction of processing

You have the right to restrict processing if you dispute the accuracy of the personal data for a period of time that enables us to verify the accuracy of the personal data or if you refuse erasure in the event of unlawful processing and instead request restriction of the use of personal data. You also have this right if we no longer need the data, you need this personal data to assert, exercise or defend legal claims. Finally, you may assert this right if you have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of the controller override your grounds.

If processing has been restricted, this data may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. The possibility of continued storage remains unaffected. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

6. Right to data portability

You also have the right to data portability of the data you have provided to us, which we have processed on the basis of effective consent or the processing of which was necessary to enter into or fulfill an effective contract, in a "structured, common and machine-readable format" to you. You also have the right to request direct transfer to another controller where technically feasible.

The right exists only insofar as the rights and freedoms of other persons are not affected.

7. Assertion of your rights

If you have any questions or wish to exercise your rights, please contact our customer service (see below for contact details).

You can also contact our data protection officer. He is responsible in cases of complaint. You can reach our data protection officer via the following e-mail: datenschutz@nubert.de.

You also have, if you believe that we are not addressing your concerns appropriately, among other things (without prejudice to any other administrative or judicial remedy), the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

VI. What consents have I given?

You may have given us consent for promotional contact or certain data uses (for example, for a newsletter or services as part of a customer login, etc.). If you have given us consent, the consent texts are stored with us and can be retrieved. To retrieve them, simply contact webmaster@nubert.de. We will then send you the requested information by e-mail.

This data protection notice also represents intellectual property protected by copyright. Use by third parties - even in part - for commercial purposes is not permitted. Violations will be prosecuted. WIENKE & BECKER accepts no liability towards third parties for the completeness and up-to-dateness of the above information.

©2019 WIENKE & BECKER – COLOGNE Lawyers.

Status: 30.08.2023