This is a courtesy translation. The German version is binding, see Datenschutz. For questions in English, write to info@nooxl.com.
Controller: Nooxl Systems GmbH, Offenbacher Str. 23, 14197 Berlin, Germany · +49 30 86803880 · info@nooxl.com
We process personal data (hereinafter mostly referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
Pursuant to Art. 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide about the purposes and means of the processing either alone or jointly with others. We also inform you below about the third-party components we use for optimisation purposes and to improve the quality of use, insofar as third parties process data under their own responsibility as a result.
Our privacy policy is structured as follows:
The controller responsible for this website within the meaning of data protection law is:
Nooxl Systems GmbH
Offenbacher Str. 23
14197 Berlin
Germany
Phone: +49 30 86803880
Email: info@nooxl.com
Or use the contact page.
With regard to the data processing described in more detail below, users and data subjects have the right
In addition, the provider is obliged to inform all recipients to whom it has disclosed data of any correction or erasure of data or of the restriction of processing carried out pursuant to Art. 16, 17(1) and 18 GDPR. This obligation does not apply, however, insofar as such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided that the data is processed by the provider on the basis of Art. 6(1)(f) GDPR. In particular, objection to data processing for the purpose of direct marketing is permitted.
Your data processed when you use our website will be erased or blocked as soon as the purpose of storage no longer applies, no statutory retention obligations prevent erasure, and no information to the contrary is provided below in relation to individual processing operations.
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your browser to us or to our web space provider. These so-called server log files record, among other things, the type and version of your browser, the operating system, the website from which you came to our website (referrer URL), the page(s) of our website that you visit, the date and time of the respective access and the IP address of the internet connection from which our website is used.
The data collected in this way is stored temporarily, but not together with other data about you.
This storage takes place on the legal basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data is erased after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data is exempted from erasure in whole or in part until an incident has been finally clarified.
a) Session cookies
We use cookies on this website. Cookies are small text files or other storage technologies that your browser places and stores on your device. These cookies process certain information about you, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, for example by allowing the site to be displayed in different languages.
The legal basis for this processing is Art. 6(1)(b) GDPR if these cookies process data for the initiation or performance of a contract.
If the processing is not for the initiation or performance of a contract, our legitimate interest is the improvement of the website’s functionality. The legal basis is then Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your browser.
b) Third-party cookies
This website may also use cookies from partner companies with which we work for advertising, analytics or website functionality. Details, in particular the purposes and legal bases of such third-party cookies, are set out in the information below.
c) How to remove cookies
You can prevent or restrict the installation of cookies in your browser settings. You can also delete cookies that have already been stored at any time. The steps depend on the browser you use. Please use your browser’s help function or documentation, or contact the manufacturer or support.
If you prevent or restrict cookies, some functions of this website may not be fully available.
On your first visit we ask, via a cookie banner, whether you consent to analytics cookies. We store your choice in your browser’s localStorage under the key nx-consent. This is not a cookie. The storage is required so we can remember your choice and not show the banner again on every page load.
You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the page footer and choosing “Necessary only”. The legal basis for analytics is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Storing your choice itself is based on Art. 6(1)(c) GDPR in conjunction with Section 25(2) TDDDG (strictly necessary storage).
After you consent we load Google Tag Manager (container ID GTM-K4C4LWN) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This container serves Google Analytics 4 (measurement ID G-90STBLBZ47). Without consent, none of these scripts are loaded.
We use Google Consent Mode v2. Until you consent, analytics_storage, ad_storage, ad_user_data and ad_personalization are set to “denied”.
After consent, Google may set cookies, in particular _ga (typically 2 years), _ga_* (typically 2 years) and, where applicable, _gid (24 hours). These are used to collect, among other things, a truncated IP address, approximate location, device and browser data, page views, time on page and events (for example submitting the contact form).
A transfer to the United States cannot be ruled out. Google Ireland Limited / Google LLC are certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition.
Analytics data are typically retained for 14 months. You can withdraw consent via “Cookie settings”; we then delete the Google cookies named above insofar as the browser allows. Google also offers a browser add-on to disable Google Analytics. Further information: Google’s privacy policy.
If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. Providing this data is necessary in order to process and answer your enquiry; without it we cannot answer your enquiry at all or only to a limited extent.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data will be erased once your enquiry has been answered conclusively and no statutory retention obligations prevent erasure, as may be the case, for example, where a contract is subsequently performed.
The data you transmit in order to make use of our goods and/or services is processed by us for the purpose of performing the contract and is necessary for that purpose. Concluding and performing the contract is not possible without the provision of your data.
The legal basis for the processing is Art. 6(1)(b) GDPR.
We erase the data once the contract has been fully performed, but we must observe the retention periods under tax and commercial law.
If you create a customer account with us via our website, we will collect and store the data you enter during registration (for example your name, your address or your email address) exclusively for pre-contractual services, for the performance of the contract or for customer care purposes. At the same time we store the IP address and the date and time of your registration. This data is not passed on to third parties.
Insofar as you consent to this processing, Art. 6(1)(a) GDPR is the legal basis for the processing. If opening the customer account also serves pre-contractual measures or the performance of the contract, the legal basis is additionally Art. 6(1)(b) GDPR.
You can withdraw the consent you have given us at any time with effect for the future in accordance with Art. 7(3) GDPR. All you have to do is notify us of your withdrawal.
If you subscribe to our free newsletter, the data requested for this purpose, i.e. your email address and, optionally, your name and address, is transmitted to us. At the same time we store the IP address of the internet connection from which you access our website as well as the date and time of your subscription. We use the data collected in this way exclusively for sending the newsletter; in particular it is not passed on to third parties.
The legal basis for this is Art. 6(1)(a) GDPR. You can withdraw your consent to receiving the newsletter at any time with effect for the future in accordance with Art. 7(3) GDPR, either by notifying us of your withdrawal or by using the unsubscribe link contained in every newsletter.
We offer you the option of applying to us via our website. In the case of such digital applications, your applicant and application data is collected and processed by us electronically in order to conduct the application procedure. The legal basis is Section 26(1) sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 88(1) GDPR.
If an employment contract is concluded following the application procedure, we store the data you transmitted with your application in your personnel file for the purposes of the usual organisational and administrative process.
If an application is rejected, we automatically erase the data transmitted to us two months after notification of the rejection. Erasure does not take place, however, if statutory provisions — such as the burden of proof under the German General Equal Treatment Act (AGG) — require longer storage of up to four months or until legal proceedings have been concluded. In that case the legal basis is Art. 6(1)(f) GDPR and Section 24(1) no. 2 BDSG.