Privacy Policy

I.         Name and address of the responsible body

The responsible body in accordance with the General Data Protection Regulation and other data protection laws of the Member States, as well as other data protection provisions is:

Nürnberg Gummi Babyartikel GmbH
Breitenloher Weg 6
91166 Georgensgmünd
Germany
Tel + 49 9172 69 19 0
Fax + 49 9172 69 19-45
E-Mail: info(at)nip-babyartikel.de

II. Name and address of the data protection officer

Datenschutz Prinz GmbH
Dipl. Inf.(FH) Tim Prinz
Südliche Ringstraße 26
91126 Schwabach
Germany

Tel: +49 (0) 9122 / 6 93 73 02

E-Mail: info@datenschutz-prinz.de

 

III.    General information concerning data processing

 

1.        Scope of the processing of personal data

As a rule, we process personal data of our users only if this is necessary in order to provide a functional website, as well as out contents and services. The processing of personal data of our users generally takes place only with the consent of the user. An exception applies in such cases where the prior obtaining of consent is not possible for actual reasons and the processing of the data is permitted under statutory regulations.

 

2.        Legal basis for the processing of personal data

Should we obtain the consent of the affected person for processing procedures of personal data, the legal basis is Article 6 Paragraph 1 Letter a) GDPR.
When processing personal data in order to process a contract where the contracting party is the affected person, the legal basis is Article 6 Paragraph 1 Letter b) GDPR. This also applies to processing procedures which are necessary in order to carry out pre-contractual measures.
Should processing of personal data be necessary in order to fulfil a legal obligation to which our company is subject, the legal basis is Article 6 Paragraph 1 Letter c) GDPR.
In case that essential interests of the affected person or of another natural person make the processing of personal data necessary, Article 6 Paragraph 1 Letter d) forms the legal basis.
Should the processing be necessary in order to safeguard a legitimate interest of our company or of a third party and should the interests, basic rights and basic freedoms of the affected person not override the named interest, Article 6 Paragraph 1 Letter f) GDPR forms the legal basis of the processing.


3.        Data deletion and duration of the saving

The personal data of the affected person will be deleted or blocked, once the purpose of the saving is no longer present. Saving can also take place if this was required by European or national legislators in ordinances, laws or other regulations of the EU to which the responsible body is subjected. Blocking or deletion of the data also takes place when the saving period prescribed by the named norms expires, unless it is necessary to continue saving the data in order to conclude or fulfil a contract.
 

IV.    Provisions of the website and creation of logfiles

 

1.    Description of the website and scope of the data processing

Each time our Internet site is accessed, our system automatically records data and information from the computer system of the accessing device.
In such a case, the following data is gathered:

(1)    Information concerning browser type and the version used
(2)    The operating system of the user
(3)    The Internet service provider of the user
(4)    The IP address of the user
(5)    Date and time of the access
(6)    Websites from which the system of the user accessed our Internet site

The data will also be saved in the logfiles of our system. The IP addresses of the user or other data which enable the assignment of the data to a user are not affected by the above. Saving of this data together with other personal data of the user does not take place.

V.    Usage of cookies

We use the following cookies on our website:

Necessary cookies

Necessary cookies help make a website usable by enabling basic functions such as access to secure areas of the website. The website cannot function properly without these cookies.

NameProviderPurposeExpirationType
cookieconsent_status                nuernberg-gummi.deSaves the status selected by the user for consent to tracking analysis, so that the consent window is not displayed on every page view.1 yearHTTP cookie

 

Statistic cookies

Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

NameProviderPurposeExpirationType
mtm_consent                nuernberg-gummi.deStores the user's consent to tracking analysis with Matomo.6 monthsHTTP cookie
mtm_consent_removednuernberg-gummi.deStores the user's opt-out for tracking analysis with Matomo.30 yearsHTTP cookie
_pk_id.#nuernberg-gummi.deCollects statistics about the user's visits to the website, such as the number of visits, average time spent on the website, and which pages were read.1 yearHTTP cookie
_pk_ref.#nuernberg-gummi.deIn the case of indirect access, records the last page accessed by the visitor, via which the visitor arrived at the Neobiota website (so-called referrer).6 monthsHTTP cookie
_pk_ses.#nuernberg-gummi.deUsed by Matomo to track page views of the visitor during the session.SessionHTTP cookie
MATOMO_SESSIDnuernberg-gummi.deUsed by Matomo to track page views of the visitor during the session.SessionHTTP cookie
_pk_testcookienuernberg-gummi.deUsed by Matmo to test the browser's basic compatibility with cookies.ImmediatelyHTTP cookie

 

2.    Legal basis for the data processing

The legal basis for the temporary saving of the data is Article 6 Paragraph 1 Letter f) GDPR.
 

3.    Purpose of the data processing

The temporary saving of the IP address by the system is necessary in order to enable the delivery of the website to the computer of the user. For this purpose, the IP address of the user needs to remain saved for the duration of the setting.

These purposes also represent our legitimate interest in the data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.


4.    Duration of the saving

The data will be deleted, once it is no longer necessary in order to attain the purpose for which it was gathered. In case the data is recorded in order to provide the website, this applies once the respective session comes to an end.
 

5.    Objection and correction option

The recording of the data in order to provide the website and the saving of the data in logfiles is absolutely necessary in order to operate the Internet site. As a result, the user does not have a right to raise an objection.

&nbs

VI.    Registration

1.    Description and scope of the data processing

On our website, we offer midwives the option of registering by providing personal data. Thereby the data is input into an entry mask and transferred to us and saved by us. The data is not passed on to third parties. The following data is gathered during the registration process:

At the time of the registration, the following data is also saved:
(1)    The IP address of the user
(2)    Email address
(3)    Date and time of the registration

Within the framework of the registration process, the consent of the user to the processing of this data is obtained.


2.    Legal basis for the data processing

The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR if consent of the user is present in this respect.

3.    Purpose of the data processing

Registration of the user is necessary in order for certain content and services to be provided. The registration serves the purpose of ordering of product samples and information materials.

4.    Duration of the saving

The necessary order data will be deleted, once this is no longer necessary in order to attain the purpose for which it was gathered. The registration data will be saved until the time of revocation or deletion by the affected person.

5.    Objection and correction option

The necessary order data will be deleted, once this is no longer necessary in order to attain the purpose for which it was gathered. The registration data will be saved until the time of revocation or deletion by the affected person.

&nbs

VIII.    Applications by email

 

1.    Description and scope of the data processing

There is the option of applying for jobs which are advertised on this website by email. Within the course of the application process, personal data is processed.
Data which is connected to an application is processed. This can be general data relating to a person (such as name, address and contact data), information concerning vocational qualification and education or details relating to continued professional development or other information which is transferred to us in connection with an application. We only gather the data which is transferred to us in the course of the application. If you apply via job portals such as stepstone, please note the following data protection information https://www.nip.family/en/ueber-nip/datenschutz-stellenanzeigen

 
2.    Purpose and legal basis for the data processing

Personal data relating to the affected person is gathered for the purpose of the application for employment, should this be necessary in order to make a decision concerning the outcome of the application process. Thereby the legal basis is § 26 Paragraph 1 and Paragraph 8 Sentence 2 of the German Federal Data Protection Act (BDSG).
Furthermore, we can process personal data, should this be necessary in order to defend claims which are brought against us in connection with the application process. Thereby the legal process is Article 6 Paragraph 1 Letter f) GDPR. For example, the legitimate interests is a proof obligation in a process in accordance with the German General Equal Treatment Act (AGG).
Should an employment relationship be entered into, in accordance with § 26 Paragraph 1 BDSG the personal data which has already been received may be further processed for the purpose of the employment relationship, should this be necessary in order to perform or terminate the employment relationship or in order to exercise or fulfil rights and obligations of the representation of interests of the employees under the law, a collective agreement, a company or service contract (collective bargaining).

3.    Duration of the saving

Personal data will be saved for as long as is necessary to make a decision concerning the outcome of the application. Should no employment relationship come into existence, data can continue to be saved should this be necessary to defend against possible legal claims. Thereby the application documents will be deleted two months after the notification of the rejection of the application, unless a longer period of saving is necessary due to legal disputes.


4.    Objection and correction option
At any time, the affected person can revoke his or her consent to the processing of the personal data.

IX.    Contact form, email contact and compliant

1.    Descrition and scope of the data processing

Our Internet site contains a contact form which can be used in order to get in touch with us electronically. Should a user make use of this option, the data which is entered via email is transferred to us and saved by us. This data includes:

At the time of sending of the message, the following data is also saved:
(1)    The IP address of the user
(2)    Date and time
(3)    First name and surname
(4)    Email address
(5)    Comment
(6)    Address (voluntary)

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration.

Alternatively it is possible to get in touch with us via the provided email address. In such a case, the personal data of the user which is transferred in the email will be saved.

The data will not be passed on to third parties during this process. The data will only be used for processing the conversation or processing complaints.

 

XI.    Rights of the affected person

The following lists includes all rights of the affected person under the GDPR. Rights which are not relevant to our website need not be named. To this extent, the list may be shortened.
Should personal data relating to you be processed, you are an affected person as defined under the  GDPR and you have the following rights in relation to the responsible body:


1.    Right of information

You can request confirmation from the responsible body as to whether personal data which concerns you is being processed by us.
Should such processing be present, you can request the following information from the responsible body:

(1)    the purposes for which the personal data is processed;
(2)    the categories of personal data which are processed;
(3)    the recipients or categories of recipients to whom the relevant personal data is disclosed or will be disclosed;
(4)    the planned duration of the saving of the personal data relating to you or, should concrete information not be available in this respect, the criteria for determining the length of time of the saving;
(5)    the existence of a right of correction or deletion of the personal data relating to you, a right of restriction of the processing by the responsible body or the right to raise an objection to this processing;
(6)    the existence of the right to complain to a supervisory authority;
(7)    all available information concerning the origin of the data, should the personal data no be gathered from the affected person;
(8)    the existence of automated decision making, including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and, at least in these case, detailed information concerning the involved logic and the breadth and intended effects of such processing for the affected person.

You have the right to request information as to whether the personal data relating to you is transferred to a third country or an international organisation. In such a case, you can request that you be informed of suitable guarantees in accordance with Article 46 GDPR in connection with the transfer.


2.    Right of correction

You have the right of correction and/or completion in relation to the responsible body, should the processed personal data which relates to you be incorrect or incomplete. The responsible body must carry out the correction immediately.

3.    Right to have the processing restricted

Under the conditions below, you can request that the processing of the personal data relating to you be restricted:

(1)   should you dispute the correctness of the personal data relating to you for such a length of time which enables the responsible body to check the correctness of the personal data;
(2)    the processing is unlawful and you reject the deletion of the personal data and instead request that the use of the personal data be restricted;
(3)    the responsible body no longer requires the personal data for the purposes of the processing, however you require this in order to assert, exercise or defend legal claims or
(4)    you have raised an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of the responsible body outweigh your reasons.

Should the processing of the personal data relating to you be restricted, then regardless of its saving, this data may only be processed with you consent or in order to assert, exercise or defend legal claim, in order to protect the rights of another natural or legal person or the reasons connected to an important public interest of the EU or a Member State.
Should the restriction of the processing be limited in accordance with the reasons above, you will be informed by the responsible body before the restriction is lifted.


4.    Right of deletion

a) Deletion obligation

You can request that the responsible body immediately deletes the personal data relating to you and the responsible body is obliged to immediately delete this data, should one of the following reasons be present:

(1) The personal data relating to you is no longer necessary for the purposes for which it was gathered or otherwise processed.
(2) You revoke your consent on which the processing in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR was based and no other legal basis for the processing is present.
(3) You raise an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and there are no legitimate reasons for the processing present which take priority or you raise an objection to the processing in accordance with Article 21 Paragraph 2 GDPR.
(4) The personal data relating to you has been processed unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation under EU or the laws of the Member States to which the responsible body is subject.
(6) The personal data relating to you was gathered in relation to services provided by the information company in accordance with Article 8 Paragraph 1 GDPR.

b) Provision of information to third parties

Should the responsible body have made the personal data relating to you public and should it be obliged to delete this in accordance with Article 17 Paragraph1 1 GDPR, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature, in order to inform the responsible body which is processing the personal data that you as the affected person have requested the deletion of all links to this personal data or the deletion of copies or reproductions of this personal data.

c) Exceptions

The right of deletion does not apply, should the processing be necessary:

(1)    in order to exercise the right of freedom of opinion and information;
(2)    in order to fulfil a legal obligation which requires the processing in accordance with EU law or the law of the Member States to which the responsible body is subject or in order to carry out a task which is in the public interests or which takes place in the exercising of public power which has been assigned to the responsible body;
(3)    for reasons in the public interest in the area of public health in accordance with Article 9 Paragraph 2 Letter h) and Article 9 Paragraph 3 GDPR;
(4)    for archiving purposes, scientific or historical research purposes or statistical purposes in accordance with Article 89 Paragraph 1 GDPR which are in the public interest, should the right named under section a) be expected to make the attainment of the objectives of this agreement impossible or should it be expected to significantly impair these or
(5)     in order to assert, exercise or defend legal claims.


 5.      Right of notification

Should you have claimed the right of correction, deletion or restriction of the processing in relation to the responsible body, it is obliged to provide notification of this correction or deletion of the data or restriction of the processing to all recipients to whom the personal data concerned was disclosed, unless this is shown to be impossible or would take place at disproportionately high expense.
In relation to the responsible body, you have the right to be informed of these recipients.

6.    Right of data portability

You have the right to receive the personal data relating to you which you have provided to the responsible body in a structured, current and machine readable format. In addition, you have the right to transfer this data to another responsible body without hindrance by the responsible to whom the personal data was provided, should:

(1) the processing be based on consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or Article 9 Paragraph 2 Letter a) GDPR or on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and (2) the processing take place with the assistance of automated procedures.

In addition, when exercising this right, you are entitled to ensure that the personal data relating to you is transferred directly to another responsible body by a responsible body, should this be technically possible. Freedoms and rights of other persons must not be impaired as a result.
The right of data portability does not apply to processing of personal data which is necessary to carry out a task which is in the public interest or which takes place by means of the exercising of public power which has been assigned to the responsible body.


7. Right of objection

You have the right to raise an objection to the processing of your personal data which takes place under Article 6 Paragraph 1 Letter e) or Letter f) GDPR at any time for reasons connected to your specific situation. This also applies to any profiling which is based on these provisions.
The responsible body will no longer process the personal data relating to you, unless it can provide proof of mandatory protectable reasons for the processing which take precedence over your rights and freedoms or the processing is necessary in order to assert, exercise or defend legal claims.
Should the personal data relating to you be processed in order to carry out direct advertising, you have the right at any time to raise an objection to the processing of the personal data relating to you for the purposes of such advertising; this also applies to the profiling, should this be connected to such direct advertising.
Should you object to the processing for the purposes of the direct advertising, the personal data relating to you will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the right to exercise your right of objection by means of automated procedures where technical specifications are used in connection with the use of services of the information company.

8.    Right to revoke the declaration of consent under data protection laws

You have the right to revoke your declaration of consent under data protection laws at any time. By means of the revocation of the consent, the lawfulness of the processing which took place under the declaration of consent prior to the revocation will not be affected.

9.    Automated decision making in individual cases, including profiling

You have the right not to be subjected to a decision based exclusively on automated processing, including profiling, which has legal effect in relation to you or otherwise causes you significant impairment. This does not apply if the decision:

(1)   is necessary in order to conclude or fulfil a contract between yourself and the responsible body,
(2)   is lawful under legal regulations of the EU or Member States to which the responsible body is subject and these legal regulations contain reasonable measures to safeguard your rights and freedoms and legitimate interests or
(3)   takes place with your express consent.

However, these decisions may not be based on special categories of personal data under Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letter a) or Letter g) GDPR applies and reasonable measures have been taken to protect the rights and freedoms, as well as your legitimate interests. In respect of the cases named in (1) and (3), the responsible body will take reasonable measures in order to safeguard the rights and freedoms, as well as your legitimate interests, whereas as a minimum the right to have a person on the part of the responsible body intervene, to set out one's own opinion and to contest the decision are included here.


10. Right to complain to a supervisory authority

Regardless of legal remedies elsewhere under administrative law or before a court, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, place of work or the location of the alleged breach, should you be of the opinion that the processing of the personal data relating to you breaches the GDPR.
The supervisory authority to whom the complaint was submitted will inform the complainant of the status and result of the complaint, including the option of legal remedy before a court in accordance with Article 78 GDPR.