Privacy Policy
1. Name and address of the organisation responsible
Your point of contact and the organisation responsible for privacy as per the European General Data Protection Regulation (GDPR), as well as other national laws of Member States on data protection and any other regulations on privacy is:
Novo Sonic GmbH (Gesellschaft mit beschränkter Haftung, limited liability company)
represented by the Managing Director Thomas Huber
Augustenstr. 60
80333 Munich
Germany
Telephone +49 89 125 03 45 00
Email: info@novosonic.com
(referred to as “we”, “us” or “our” in what follows)
2. Website
a. Legal basis
The legal basis for processing your personal data when making the website available is Art. 6(1), lit f of the GDPR.
b. Purpose
We must temporarily store your personal data in order to make the website available on your computer. To this end, it is necessary for your personal data to be stored for the time you are using the website.
c. Storage duration
Your personal data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected. If your personal data were collected in order to make it possible for you to access the website, then this condition is fulfilled as soon as you close the site.
d. Option of objection and removal
It is essential for your personal data to be collected in order to make the website available, as well as to make it run. As such, the option to object does not exist.
3. The necessary use of cookiesfor technical purposes
a. Legal basis
The legal basis for processing your personal data when using cookies for technical purposes is Art. 6(1), lit f of the GDPR.
b. Purpose
Using cookies which are necessary for technical purposes makes our website easier to navigate. It would not be possible to offer some of the functions on our website without using cookies. For these functions, it is necessary for your internet browser to be recognised even after you’ve changed pages. Your personal data are not processed for any other purposes.
c. Storage duration
Your personal data are deleted as soon as they are no longer needed to achieve the purpose for which they were collected; this condition is fulfilled as soon as you close the site.
d. Option of objection and removal
If permitted, cookies are stored on your computer and then sent to our website. This means that you have full control over how cookies are used.
By changing the settings for your internet browser, you can disable or restrict cookies. Saved cookies can be deleted at any time. You can even arrange for this to be done automatically. If you disable cookies for our website, it may not be possible to use all the functions to their full extent.
4. Personal data provided freely by yourself for communication purposes
If you would like to receive personalised services, you can contact us via the email address provided. In this case, the personal data shared with us via email will be stored.
If you contact us via electronic means, via email for example, we must advise the following: By transferring data via the internet (e.g. via email), complete data protection cannot be guaranteed due to gaps in security. Therefore, we are unable to completely protect your data against third party access. In particular, it should not be ruled out that unencrypted emails may be read by unauthorised parties during the sending process. If you would like to disclose or send personal or sensitive data to us, we would advise you against sending unencrypted emails. We recommend that you send confidential information via post, or contact us via telephone. We also ask our hosting provider to observe legal regulations on data protection.
We only process personal data for conversation and contact purposes. In the event of contact via email, the necessary, legitimate interests being pursued by processing data are justified.
5. Newsletter:
On our website, users have the option of signing up to receive our company newsletter. When subscribing to the newsletter, the form provided on the site determines which personal details are sent to the person responsible for data processing. Your data are used exclusively for the purposes of sending you the newsletter you have signed up for and, if you have given your additional consent, also for the purposes of analysing how you use the newsletter and any linked content. We ask for your name so that we can address you personally in our newsletter and also so that we can identify you, if necessary, should you want to exercise your rights as an affected party.
The legal basis for processing your personal data is your consent, as well as Art. 6(1), lit a of the GDPR (European General Data Protection Regulation). You provide your personal data of your own freewill, based on your consent alone. If you do not give your consent, we regret to inform you that we are unable to send you our newsletter. You may withdraw the consent you have given for your personal data to be stored and used to receive the newsletter at any time. Just click on the link provided in each one of our newsletters. You may also withdraw your consent by using one of the other contact options provided on the website.
We use a service provider to send the newsletter and, where applicable, undertake any analyses. This service provider acts as our processor.
Data are only processed in this regard if you have given your consent.
If you have provided us with your consent to do so, we will analyse how you use our newsletter, as well as your subsequent visits to the Novo Sonic GmbH website. We do this so that we can further improve both our newsletter and website and optimise them according to users’ actual interests.
6. Google Analytics
a. Scope
This website uses Google Analytics, the website analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter referred to as “Google”).
Google Analytics uses cookies, suggested text files, which are stored on your computer and which make it possible for your website usage to be analysed. As a general rule, the information which cookies generate regarding how you use our website is sent to, and stored on, a Google server in the USA. If you choose to anonymise your IP address for this website, Google will abbreviate this address within EU Member States, or in other States party to the Agreement on the European Economic Area. Only under exceptional circumstances will your full IP address be sent to a Google server in the USA and then abbreviated. On our instructions, Google uses this information in order to analyse how you use the website, generate reports on website activity and provide us with any other services related to website and internet use. The IP address which your internet browser shares with Google Analytics is not amalgamated with any other Google data.
b. Legal basis
The legal basis for processing your personal data is Art. 6(1), lit f of the GDPR.
c. Purpose
By processing your personal data, it enables us to analyse your browsing behaviour and by analysing the data acquired, it enables us to compile information regarding how individual components on our website are used. This helps us to continually improve our website and make it more user friendly. If you choose to anonymise your IP address, due consideration will be given to your wish to protect your personal data.
d. Storage duration
Your personal data will be deleted when they are no longer required to serve the aforementioned purposes. In our case, this takes place after 14 months.
e. Option of objection and removal
If you do not want your data to be collected by Google Analytics, you can install a browser add-on to opt out. This add-on instructs the Google Analytics JavaScript used on websites (ga.js, analytics.js and dc.js) to stop information from being sent to Google Analytics.
If you would like to opt out of Google Analytics, visit the page and install the opt-out add-on for your internet browser. You can find more information regarding installing and uninstalling the add-on by accessing the relevant help resources for your internet browser.
If you update your browser or operating system, the opt-out add-on may no longer work as it should. You can find more information on how to manage add-ons for Chrome here. If you do not use Chrome, you should obtain information from the internet browser you use regarding whether add-ons will work properly for your version.
The latest versions of Internet Explorer sometimes download the Google Analytics opt-out add-on after data have been sent to Google Analytics. If you use Internet Explorer, the add-on is used to install cookies on your computer. These cookies ensure that, when any data are collected by a server, they are immediately deleted by this same server. Make sure that third-party cookies are activated for Internet Explorer. When you delete your cookies, the add-on resets them in a short space of time. This way, it ensures that your Google Analytics browser add-on keeps working without a problem.
The Google Analytics opt-out add-on does not prevent data from being sent to the website or to other web analytics services.
You can find more information on terms of use and data protection by visiting
http://www.google.com/analytic... or by visiting
https://support.google.com/analytics/answer/6004245?hl=de.
IP anonymisation has been activated on this website.
7. YouTube
We have embedded YouTube into our website. YouTube is an online video portal where video publishers can upload their video clips free of charge and other users can watch, rate and comment, also free of charge. YouTube allows any kind of videos to be uploaded, including entire films or TV programmes, as well as music videos, trailers or videos which users have made themselves.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Every time you visit one of our website pages with embedded YouTube videos, the YouTube video automatically prompts your internet browser to download an overview of that YouTube video from YouTube itself. You can find more information on YouTube by visiting https://www.youtube.com/yt/about/de/.This process enables YouTube and Google to receive information regarding which exact page you have visited on our website.
If you are logged into YouTube when visiting our site and you click on a page with an embedded YouTube video, YouTube will recognise which exact page you have visited on our website. This information is collected by YouTube and Google and then linked to the user’s YouTube account.
The embedded YouTube video always informs YouTube and Google that you have visited our website if you are logged into YouTube when visiting the site. This information is sent regardless of whether you click on the video or not. If you do not want such information to be sent to YouTube or Google, it can be prevented by logging out of your YouTube account before visiting our site.
YouTube’s privacy policy can be found on https://www.google.de/intl/de/policies/privacy/and provides information on the personal data collected, processed and used by YouTube and Google.
8. Online social media presence (Facebook/Instagram/LinkedIn)
We have an online presence on social networks and platforms so that we can communicate with business partners, interested parties and users and inform them about our services.
Please note that it is possible for data from users outside of the European Union to be processed via the platforms. As a result, risks may arise for users as it may be more difficult to enforce their rights, for example. With regard to US providers which are certified by the Privacy Shield, it should be noted that they are obliged to abide by EU data protection standards.
Furthermore, user data are generally processed for market research and advertising purposes. As a result, it is possible to generate user profiles based on user behaviour and interests, for example. User profiles may be used to show advertisements which suit the user’s presumed interests both on and off the platforms. For these purposes, the cookies which are usually saved onto users’ computers contain information about user behaviour and interests. In addition, it is also possible for data to be stored to a user profile regardless of the device used (especially if the user is a member of that particular platform and they are logged in).
Users’ personal data are processed based on our legitimate interests in effectively informing users and communicating with them, as per Art. 6(1), lit. f of the GDPR. If the providers of the respective platforms ask users for their consent to process data, as described above, the legal basis for data processing is Art. 6(1), lit. f of the GDPR.
Please visit the links provided below for more information regarding data processing and the opportunities to opt out for the different social platforms.
If you would like to request information or exercise your rights as a user, it should be noted that the most effective way to do so is to contact the relevant provider. If you still require assistance, please contact us.
- Facebook(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Facebook pages on the basis of an agreement regarding processing personal data – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=adsand http://www.youronlinechoices.com, Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
- INSTAGRAM(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Privacy Policy: https://help.instagram.com/519522125107875.
- LinkedIn(LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), Privacy Policyhttps://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
9. Google Maps
We use the Google Maps service, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC has been certified according to the US-European data protection framework Privacy Shield. This ensures that EU data protection standards are observed.
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Your IP address must be saved in order to use the Google Maps function. This information is usually sent to, and stored on, a Google server in the USA. This website provider does not have any influence over this data transmission.
Google Maps is used in order to make our online presence attractive, as well as to make it easy to find the address provided on the website. This is classed as a legitimate interest as per Art. 6(1), lit f of the GDPR.
For more information on how user data are handled, please refer to Google’s Privacy Policy by visiting: https://www.google.de/intl/de/policies/privacy/.
10. Recipient categories
Your personal data are sent to the relevant people and departments within our company which use these data in order to achieve the aforementioned purposes. On occasion, we may also work with different service providers and send your personal data to other reliable recipients. Examples of such providers are:
If, in processing data, we disclose or send data to other people or companies (data processing companies or third parties), or if we provide them with access thereto, this is permitted either by law, because you have given your consent, because a legal obligation requires us to do so or due to our legitimate interests (e.g. when using a hosting provider etc.). If we commission a third party to process personal data under a “Data processing agreement”, this is done so in accordance with Art. 28 of the GDPR.
11. Your rights
You have the following rights towards us:
a. The right to disclosure
You have the right to know whether we process your personal data and if so, which data are processed. In this case, we also inform you regarding:
(1) the reason why your data are processed;
(2) the category of data;
(3) who receives your personal data;
(4) the planned storage duration and the criteria for this duration;
(5) any other rights you may have;
(6) if we receive your personal data from someone other than yourself: any information available regarding its origins;
(7) if available: whether automated decision-making exists, as well as information regarding the logic involved, the scope and the intended outcome of the processing.
b. The right to make modifications
You have the right to modify data and/or add additional data if the personal data we processed are incorrect or incomplete.
c. The right to restrict processing
You have the right to restrict how your data are processed if:
(1) we check whether your personal data that we processed are correct;
(2) we are processing your personal data illegally;
(3) you need the personal data processed by us for prosecution purposes after they are no longer needed for their purpose;
(4) you have objected to your personal data being processed and we check that this objection has been made.
d. The right to deletion
You have the right for your data to be deleted if:
(1) we no longer need your personal data for the original purpose;
(2) you withdraw your consent and there are no longer any legal grounds for processing your personal data;
(3) you object to your personal data being processed and - provided that it does not concern direct marketing - there are no overriding reasons to keep processing your data;
(4) we are processing your personal data illegally;
(5) we are legally required to delete your personal data;
(6) if you are a minor and your personal data were collected for information society services.
e. The right to information
If you have exercised your right to make modifications, to deletion or to restrict processing, we will inform anyone who receives your personal data to modify or delete these data, or to restrict how they are processed.
f. The right to data portability
For the personal data that we process as we have received your consent to do so, or in order to execute a contract, you have the right to receive said data in a common, structured, machine-readable format and transfer this to another responsible individual. Provided that this is technically possible, you have the right to ask us to forward these data directly to the other responsible individual.
g. The right to opt out
Under special circumstances, you have the right to refuse for your personal data to be processed. In this case, we will stop processing your personal data unless we are able to prove that there are compelling, legitimate reasons for us to continue.
In the event that your personal data are processed for direct marketing purposes, you have the right to opt out at any time.
h. The right to withdraw consent
You have the right to withdraw your consent at any time. By withdrawing your consent, this does not make it illegal for data to have been processed with your consent up to the point the consent was withdrawn.
i. The right to lodge complaints with the supervisory authority
Irrespective of another administrative or judicial remedy, you have the right to lodge complaints with the competent supervisory authority if you think that, by processing your personal data, we have violated the EU GDPR.
Our supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht(BayLDA, Bavarian Supervisory Authority for Data Protection)
Promenade 27
91522 Ansbach, Germany
Telephone: +49 (0) 981 53 1300
12. Deleting data / restricting processing
Any personal data that we process are deleted or subjected to restricted processing as per Articles 17 and 18 of the GDPR. Unless expressly specified otherwise in this privacy policy, any data we stored are deleted as soon as they are no longer needed for their intended purpose and provided that deleting them does not violate any legal obligation to preserve records. This applies to data which must be stored for trade or tax reasons, for example (e.g. Section 257 of the German Commercial Code, Section 147, paragraph 1, of the German Revenue Code - storage for up to 10 years). If it is not possible to delete data as they are required for other lawful purposes, restrictions are applied to how they can be processed. In other words, data are locked and not processed for any other purposes.
We do not employ a specific data privacy officer. If you have any questions, please do not hesitate to contact us. As we are a conscientious company, we do not employ an automated decision-making process, nor do we use profiling.