Privacy Policy

NV Chart Group

Table of Contents

Data protection for online offerings
Contact details of the responsible party / data protection officer
Legal basis for processing
Processing of access data and log files
Processing of personal data as part of contractual, own services, other purposes
Use of cookies
Notice regarding web analysis services / marketing tools
Third-Party Services and Content
Online presence on Facebook
Online presence in other social media
Disclosure of personal data
Routine deletion and blocking of personal data, storage duration
Rights of the affected person
Right of objection under Article 21 GDPR
Data security
Questions and Information

Data protection for online offerings

Your trust in the proper handling of your data is an important prerequisite for the success of our offerings. Your data is processed in accordance with the applicable data protection regulations. With this privacy policy, we would like to inform you about how your data is processed when using our web offerings and other offerings. This privacy policy applies regardless of the domains, systems, platforms and end devices used to offer our services.

Contact details of the responsible party / data protection officer

The responsible party for data processing is

Jeppe Scheidt
Carlshöhe 75
24340 Eckernförde
Germany

Phone: +49(0)4351 4698760
E-Mail: support[at]nvcharts.com

Legal basis for processing

If we collect consent from the data subject for processing personal data, Article 6 (1) (a) of the GDPR serves as the legal basis.

In case of processing personal data that is required to fulfill a contract of which the data subject is a party, Article 6 (1) (b) of the GDPR serves as the legal basis. This also applies to processing activities required for carrying out pre-contractual measures.

If processing personal data is required to fulfill a legal obligation that our company is subject to, Article 6 (1) (c) of the GDPR serves as the legal basis.

In case processing of personal data is necessary due to vital interests of the data subject or another natural person, Article 6 (1) (d) of the GDPR serves as the legal basis.

In case the processing is required to fulfill a task in the public interest or carried out in the exercise of public authority assigned to the controller, Article 6 (1) (e) of the GDPR serves as the legal basis.

If the processing is required for pursuing a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) of the GDPR serves as the legal basis for processing. Our company's legitimate interest lies in conducting our business activities..

Processing of access data and log files

Our website is designed such that personal data is only requested when necessary. You can end the use of our web offer at any time by closing the browser or accessing another website.

We collect and use access data/logfiles during the use of our internet offer, such as:

the page from which you visit us or the name of the requested file,
the page that was accessed,
date and time of the request,
transmitted data volume,
message on whether the retrieval was successful,
IP address,
referral URLs,
used browser,
used operating systems,
used devices.

The processing of this data is carried out for the purpose of enabling the use of the website (establishing a connection), system security, the technical administration of the network infrastructure and for optimizing the internet offering, thus based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR and for the protection of users and other unauthorized use. This data is not disclosed to third parties or otherwise evaluated. A personal user profile is not created.

Processing of personal data as part of contractual, own services, other purposes

Personal data is processed in particular if you communicate it to us in the context of your registration, order, opening a customer account, registering for our newsletter, or in response to questions via contact/email/chat, or if it is used for own advertising purposes. For this purpose, we process, among other things, contract data and payment data of our customers, prospects, and business partners for the provision of contractual services, customer service, customer care, marketing, advertising, and market research.

Based on our legitimate interests in an efficient and secure provision of our offerings according to Art. 6 para. 1 lit. f GDPR, we engage third parties on our behalf in the context of hosting services and IT services for the operation of our online offerings, email sending, and maintenance of our systems. Our service providers process, among other things, inventory, contact, usage, contract, and communication data from customers, prospects, and visitors to our offerings on our behalf.

With an order/creation of a customer account on our website, personal data such as IP address, inventory and address data such as name, gender, address, contact data (email, telephone numbers), shopping cart, order data, ratings/rating overviews, payment data, delivery and location data will be collected through your inputs for the execution of a legal transaction/performance of a contract. Which data is collected exactly can also be traced back by you based on the respective input masks. The stated data is stored by us and used for the processing of the legal transaction. We use the data provided by you without your separate consent exclusively for the necessary fulfillment and processing of the offered services, for fulfilling our contractual obligations and service provisions according to Art. 6 para. 1 lit. b GDPR. Upon full completion of the services, your data will be blocked for further use.

With an order that is not made through our website, for example by you via telephone, text or orally, your inputs will also be used to collect personal data for the purpose of a legal transaction/fulfillment of a contract, such as name, gender, address, contact information (email, phone numbers), order data, payment data, delivery and location data. The exact data collected can be traced by you in the context of the respective order. The data provided will be stored by us and used to carry out the legal transaction. We use the data you provide without your separate consent solely for the required fulfillment and processing of the services offered, for the purpose of fulfilling our contractual obligations and services according to Art. 6 para. 1 lit. b GDPR. Upon completion of the services, your data will be blocked for further use and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or there is another legal justification.

For inquiries to us via contact form, email or our privacy policy form, personal data will be processed for the processing of contact inquiries/data protection inquiries and their processing according to Art. 6 para. 1 lit. b GDPR. Which data is collected when using the contact form/privacy policy form can be seen from the contact form or depends on your message by email. These data will only be stored and used for answering your request or for contact and the associated technical administration. Your data will be deleted after processing your request if you wish and there are no legal retention obligations.

Furthermore, personal data will be processed when you subscribe to our newsletter. The data you provide for the newsletter (such as name and email address) will be used by us for our own advertising purposes as well as further electronic notifications with advertising information about our products, offers, actions and our company for our newsletter, after you have explicitly consented to this.

You can unsubscribe from the newsletter at any time via a link established in the newsletter email or by sending a corresponding message to us and thus revoke your consent. After you have unsubscribed, your email address will immediately be removed from our newsletter system.

In accordance with our legitimate interests under Art. 6 Sec. 1 lit. f GDPR, we use a service provider to facilitate the user-friendly and secure dispatch of our newsletter and to support online marketing measures, and carry out statistical surveys, analyses, and record-keeping of the sign-up process.

The dispatch of the newsletter and the evaluation is carried out by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. For more information about Sendinblue and data security at Sendinblue, please visit: https://de.sendinblue.com/datenschutz-uebersicht/.

The newsletter we send includes a so-called pixel tag, through which technical information such as IP address, browser, operating system, access, access time and clicked links are collected when the customer opens the newsletter. This information is used to improve the technical aspects and to better customize our newsletter service for the customer.

We also use the services of Sendinblue to evaluate and support our online marketing measures. This allows us to determine how our sent newsletters are opened and used (e.g. clicks on links in a newsletter), in order to track and measure the success of certain marketing measures. This information is used in the form of pseudonymous user profiles to improve our website and newsletter, and the associated marketing measures, particularly to adapt offers and information to the interests and needs of the user. Sendinblue processes data (e.g. the email address) exclusively on our instructions and will not use data for its own purposes or for third parties, will not sell or transfer data to third parties. Cookies may be stored on your computer for these purposes. You can prevent the storage of cookies by adjusting your browser software accordingly. You can also unsubscribe from our newsletter at any time.

For our own advertising purposes, based on legitimate interests in accordance with Art. 6 Sec. 1 lit. f GDPR, we reserve the right to store your first and last name and postal address and use them to send you interesting offers and information about our products or third-party offerings. You can object to the storage and use of your data for this purpose at any time by sending a message to us.

As someone who participates in the economy, we are subject to a variety of legal obligations, primarily statutory requirements (such as trade and tax laws), but also potentially supervisory or other regulatory requirements. The purposes of processing may include fulfilling tax control and reporting obligations, archiving data for data protection and data security purposes, and examination by tax and other authorities. Furthermore, the disclosure of personal data may be required in the context of official/judicial measures for the purposes of evidence collection, criminal prosecution or enforcement of civil law claims. The legal basis for the purposes of fulfilling legal requirements is Art. 6 para. 1 lit. c GDPR or in the public interest Art. 6 para. 1 lit. e GDPR.

About the scope of any consent to be granted, the user is informed transparently in connection with registration for the respective service and the consent is recorded. The content of the granted consent is kept available to the user within the service. If you do not give your consent, we ask for your understanding that you may not be able to participate in the respective service.

The personal data entered by the data subject is collected and stored exclusively for internal use by the responsible party and for its own purposes. Within our company, those internal departments or organizational units receive your data that need it to fulfill our contractual and legal obligations or in the context of processing and implementation of our legitimate interests. The responsible party for processing can engage subcontractors to provide and fulfill its services or cause the transfer to one or more processors, who will also use the personal data solely for internal use that is attributable to the responsible party for processing, e.g. in connection with contract performance; for the purpose of fulfilling legal requirements to which we are obligated to provide information, report or transfer data, or the transfer of data is in the public interest; to the extent that external service companies process data on our behalf as processors or function transferors (e.g. support/maintenance of IT applications, archiving, data destruction, procurement, customer administration, lettershops, website management, auditing services, credit institutions, printing companies or data disposal companies, courier services, logistics); based on our legitimate interest or the legitimate interest of the third party (e.g. authorities, credit bureaus, collection agencies, lawyers, courts, expert witnesses, affiliated companies and control bodies).

Use of cookies

To make visiting our websites attractive and to enable the use of certain functions, we use cookies on various pages for legitimate interests. These are small text files that are stored on your device. The cookies can be transmitted to the page when it is called and thus allow the user to be assigned. Cookies help to simplify the use of websites for users. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser. Other cookies remain on your device and allow us or our partner companies to recognize your browser during the next visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general: Change cookie settings. Non-essential cookies can be deleted. If you do not accept cookies, the functionality, especially ordering products on our website, may be restricted.

Notice regarding web analysis services / marketing tools:

Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f DSGVO, we use the following web analysis services and marketing tools for the analysis and optimization of our offerings:

1.) Google Tag Manager

We also use the "Google Tag Manager," a web service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to manage analysis and tracking tags via an interface. This works in that the tag manager detects a page loading process. According to the configuration, this loading of the website triggers a Google Analytics tag. The data from this tag is then sent back to the Google Analytics servers for pseudonymized evaluation of user behavior. The Google Tag Manager does not set cookies and does not collect personal data.

2.) Google Dynamic Remarketing

We use the "Google Remarketing feature," a web service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This function is used to present visitors to the website with interest-based advertisements within the Google advertising network. The browser of the website visitor stores so-called "cookies," text files that are stored on your computer and allow the visitor to be recognized when he or she returns to the website. The data collected with the help of cookies is used to create a pseudonymous profile of the visitor's interests. This profile is used to display advertisements that are likely to be of interest to the visitor. On these pages, ads can be presented to the visitor that are related to content the visitor previously viewed on websites that use Google's remarketing function. According to Google, no personal data is collected during this process. If you do not wish to use Google's remarketing function, you can generally disable it by making the appropriate settings at https://adssettings.google.com/anonymous. Alternatively, you can disable the use of cookies for interest-based advertising through the Network Advertising Initiative by following the instructions at http://optout.networkadvertising.org/?c=1. Further information about Google Remarketing and Google's privacy policy can be found at https://policies.google.com/technologies/ads?hl=de.

3.) Google Adwords

Google Adwords is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It is an advertising system that enables us to place targeted advertising. Google Adwords also uses cookies. If you are redirected to our website via a Google ad, a cookie is set on your PC via the system. These cookies usually expire after 30 days and do not serve for personal identification. If the user visits certain pages on our website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Adwords customer receives a different cookie. Cookies cannot be tracked across Adwords customer websites. The information obtained through the cookie is used to create statistics for Adwords customers. The customers learn the total number of users who clicked on their ad. This allows customers to determine the success of their individual advertising campaigns. However, they do not receive information that allows users to be personally identified.
Prevention of access by Google Adwords:
You can easily disable the cookie via your Internet browser under user settings. These users will not be included in the statistics. In addition, you can prevent Google from accessing and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at https://adssettings.google.com/anonymous.

4.) YouTube Videos

We use YouTube videos, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), in our online offering, which are stored on http://youtube.com and can be directly played from our website. By visiting the website, YouTube receives information that you have accessed the corresponding subpage of our website. In addition, access data and log files are transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want to associate your profile with YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customizing its website to meet your needs. Such evaluations are carried out in particular (even for non-logged-in users) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and you must exercise this right by addressing YouTube.

5.) Further information and Google's privacy policy can be found at:

https://policies.google.com/privacy?hl=de
https://google.com/analytics/terms/de.html
https://support.google.com/analytics/answer/6004245?hl=de

6.) Use of the analytics tool Matomo

We use the web analysis service Matomo to analyze the use of our website and to improve it regularly. Through the statistics we gain, we can improve our offerings and make them more interesting for you as a user.

This website uses Matomo with an extension for anonymizing IP addresses. As a result, IP addresses are shortened and processed, and a direct reference to a person can be excluded. The IP address transmitted by your browser to Matomo is not combined with other data we have collected, nor is it disclosed to third parties.

When individual pages of our website are accessed, the following data is stored:

Two bytes of the IP address of your calling system (anonymized)
Browser type and version
Operating system used
The visited website
The website from which you visit us (referrer URL) - if your browser does not prohibit this
The pages and files you access on our website
If necessary, the website you visit after ours (when clicking on an external link on our website)
Date and time of your access
Your stay on the website
The frequency of your website access
Your location (country)

In the context of our web analysis, no tracking cookies will be set on your computer. The software Matomo and the data collected by Matomo are operated, stored and processed exclusively on our own servers.

Objection to the use of the analysis tool Matomo

If you do not agree to the completely anonymous storage and evaluation of the data from your visit, you can object to the storage and use at any time by clicking below.

In this case, an so-called opt-out cookie (deactivation cookie) will be stored in your browser, which means that Matomo will no longer collect any session data. The prevention of the use of Matomo is possible by removing the following checkmark and activating the opt-out plugin:

In addition, the "Do not track" function is enabled in our Matomo installation. If your browser supports this function and you have activated it in the browser settings, Matomo will not collect any data, even if you do not use the above-mentioned deactivation cookie.

7.) Microsoft Advertising®

On our website, data is collected and stored using Microsoft Advertising® technologies, from which usage profiles are created using pseudonyms. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activities of users on our website if they have accessed it through advertisements from Microsoft Advertising®. If you access our website through such an advertisement, a cookie will be placed on your computer. Our website includes a Bing UET tag, which is a code that stores some non-personal data about the website's use in conjunction with the cookie. This includes the duration of stay on the website, which areas of the website were accessed and through which advertisement the users came to the website. Information about your identity is not collected. The information collected is transmitted to Microsoft servers in the US and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by disabling the setting of cookies. This may limit the functionality of the website. Additionally, Microsoft may track your behavior across multiple of your electronic devices through so-called cross-device tracking and display personalized advertising on or in Microsoft websites and apps. You can disable this behavior at https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings. More information about Microsoft Advertising® analytics services can be found on the Microsoft Advertising® website (https://help.bingads.microsoft.com/#apex/3/de/53056/2).More information about privacy at Microsoft and Bing can be found in the Microsoft Privacy Policy (https://privacy.microsoft.com/de-de/privacystatement).

Third-Party Services and Content

Based on our legitimate interests under Article 6(1) f of the GDPR, we use third-party services for the analysis, optimization, and economical operation of our offers. In these cases, third-party providers can detect the users' IP addresses and this is required for the third-party providers to carry out their services. Additionally, third-party providers can evaluate visitor traffic by using so-called pixel tags and use it for statistical or marketing purposes. The information can also be stored in cookies and on the users' devices. These cookies can contain technical information about the browser, operating system, visit time and other information about the use of our website and can be linked to this information from other sources. Currently, we use the following third-party services and content:

1.) Payment Providers

Currently, we use the following service providers and refer to their privacy policies, as well as further information on their data processing and user rights:

If you use the third-party payment services (Paypal, Klarna, AmazonPay, Stripe, iDEAL), the respective terms and conditions and privacy policies of these payment providers apply.

Payment Method: Paypal

We offer the possibility to complete the payment process via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), which corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Abs. 1 lit. f DSGVO). In this context, we pass on the following data to PayPal if it is necessary for fulfilling the contract (Art. 6 Abs. 1 lit b. DSGVO):

First name
Last name
Adress
Email address
Phone number

The processing of the data listed in this section is neither legally nor contractually required. Without transmitting your personal data, we cannot process a payment via PayPal. [You have the option to choose a different payment method.]

PayPal performs a credit check for various services like direct debit payments to ensure your payment readiness and ability. This is PayPal's legitimate interest (per Art. 6 Abs. 1 lit. f GDPR) and for the purpose of executing the contract (per Art. 6 Abs. 1 lit. b GDPR). Your data (name, address, birthdate, bank account details) will be shared with credit reporting agencies. We do not have control over this process and only receive the result if the payment was approved or declined or if a check is pending. Further information on objection and removal options can be found on PayPal's privacy policy https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Your data will be stored until the payment has been processed, which includes the period required for processing refunds, debt collection, and fraud prevention. For us, according to § 147 of the German Fiscal Code / § 257 of the German Commercial Code, there is a legal retention period of 10 years for the following documents: books, inventories and annual financial statements, opening balance sheets, booking documents, documents for the customs authority, order confirmations, delivery notes, reminders, trade register extracts, account plans, contracts.

Legal notice
No commissioned processing according to Art. 28 DSGVO

PayPal is not a data processor as defined by Art. 4 No. 8 GDPR. It has its own responsibility (https://www.lda.bayern.de/media/FAQ_Abgrenzung_Auftragsverarbeitung.pdf).

Other
Special conditions apply when using Instant Payment Notifications (https://developer.paypal.com/docs/api-basics/notifications/ipn/IPNIntro/).

Payment Method: Klarna

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This enables Klarna to assess whether you can make use of the payment options offered via Klarna and to adapt the payment options to your needs. You can find general information about Klarna at: https://www.klarna.com/de/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and as specified in Klarna's privacy policy at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Payment Method: Stripe

We offer the option to process the payment through the payment service provider Stripe, c/o Legal Process, 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we will pass on the following data to Stripe, as far as it is necessary for the contract performance (Art. 6 para. 1 lit b. GDPR):

Cardholder name
Email address
Customer number
Order number
Bank connection
Credit card data
Validity of the credit card
Credit card verification number (CVC)
Date and time of the transaction
Transaction amount
Name of the provider
Location

The processing of the data specified in this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot carry out a payment through Stripe. [There is the possibility for you to choose another payment method.]

Stripe takes on a dual role as controller and processor in data processing activities. As a controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the contract execution (pursuant to Art. 6 para. 1 lit. b GDPR). We have no influence on this process.

As a processor, Stripe acts in order to complete transactions within the payment networks. Within the framework of the processing relationship, Stripe acts exclusively on our instruction and has been contractually obliged in the sense of Art. 28 GDPR to comply with data protection regulations.

Stripe has implemented compliance measures for international data transmissions. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU standard contract clauses (SCCs).

Further information on objections and elimination options against Stripe can be found at: https://stripe.com/privacy-center/legal.

Your data will be stored by us until the completion of the payment processing. This includes the time period required for processing refunds, debt management, and fraud prevention. [According to [§ 147 AO / § 257 HGB], there is a statutory retention period of 10 years for the following documents: books, inventories and annual financial statements, opening balances, booking documents, customs documents, order confirmations, delivery notes, reminders, commercial register extracts, account plans, contracts.]

Legal notices

Adress: Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Attention: Stripe Legal

Payment Method: AmazonPay

We offer the option to process the payment through the payment service provider AmazonPay (Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Amazon Payments, to the extent necessary for the performance of the contract (Art. 6 para. 1 lit b. GDPR).

First name Last name Address Email address Telephone number

The processing of the data specified in this section is neither legally nor contractually required. Without transmitting your personal data, we cannot carry out a payment through AmazonPay. [You have the option to choose a different payment method.]

Amazon Payments Europe reserves the right to perform a credit check to ensure your payment readiness and ability. This corresponds to the legitimate interest of Amazon Payments Europe (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data will be passed on to credit reporting agencies and online merchants. Your data may also be used for interest-related advertising and marketing purposes by AmazonPay, if you have consented to this in your account settings https://www.amazon.de/adprefs. We have no influence on this process and receive only the result of whether the payment was carried out or rejected.

For further information regarding objections and remedies against Amazon Payments Europe, please visit: https://pay.amazon.de/help/201212490.

We will store your data until the payment is processed, including the time required for processing refunds, debt management, and fraud prevention. [For us, the statutory retention period of 10 years for the following documents applies under [§ 147 AO / § 257 HGB]: books, inventories, and annual financial statements, as well as opening balances, booking receipts, customs documents, order confirmations, delivery notes, dunning notices, trade register extracts, account plans, contracts.]

Payment Method: iDEAL

iDEAL is a standard payment method for secure online payments directly between bank accounts and is one of the most popular payment methods in the Netherlands. With iDEAL, any Dutch visitor to the HanseNautic Shop who has access to online banking with one of the participating Dutch banks can easily pay using this method. Note: the iDEAL payment method is only available for orders within the Netherlands.

2.) Facebook Pixel

We use "Facebook Pixel" on our website, a service provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter referred to as "Facebook").

Facebook Pixel allows Facebook to display our advertisements on Facebook, so-called "Facebook Ads", only to those Facebook users who have visited our website, particularly those who have shown interest in our online offerings or certain topics or products. Facebook Pixel allows verification of whether a user has been redirected to our website after clicking on our Facebook Ads. Facebook Pixel uses cookies, i.e. small text files, which are stored locally in the cache of your web browser on your device. If you are logged in to Facebook with your user account, the visit to our online offerings will be recorded in your user account. The data collected about you is anonymous to us and does not give us any information about the identity of the users. However, this data can be linked to your user account with Facebook. We have no influence on the extent and further use of data collected by Facebook through the use of Facebook Pixel. To our knowledge, Facebook receives information that you have visited the relevant part of our website or clicked on an advertisement from us. If you have a Facebook user account and are registered, Facebook can associate your visit with your user account. Even if you are not registered with Facebook or not logged in, Facebook may be able to obtain and store your IP address and possibly other identification characteristics.

We use Facebook Pixel for marketing and optimization purposes, particularly to display relevant and interesting advertisements on Facebook and improve our offerings by making them more interesting for you as a user and avoiding annoying advertisements. This is also our legitimate interest in processing the data by the third-party. The legal basis is Art. 6 para. 1 sec. 1 lit. f) GDPR.

You can object to the above-described collection by Facebook Pixel and the use of your data to display Facebook ads. Settings regarding the types of advertisements displayed to you within Facebook can be made on the following Facebook website:https://facebook.com/settings?tab=ads. Please note that this setting will be deleted if you delete your cookies. In addition, you can deactivate cookies used for measuring reach and advertising purposes via the following websites:

We would like to inform you that this setting will also be deleted if you clear your cookies.

Additionally, Facebook has subscribed to the Privacy Shield Agreement between the European Union and the US and has been certified, thus committing to comply with European data protection standards and regulations. Further information can be found in the following link: https://privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Third-party information: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company Facebook Inc.

Further third-party data protection information can be found on Facebook's website: https://facebook.com/about/privacy. Information on Facebook Pixel can be found on the following Facebook website: https://facebook.com/business/help/651294705016616

Online presence on Facebook

We maintain an online presence on the social network Facebook to communicate with interested users and inform them about our company.

Facebook provides us, as page operators, with so-called "Facebook Insights." When you visit our page, cookies are set that collect anonymous statistical data. The setting of cookies is carried out by Facebook and is an essential part of the relationship between us and Facebook.

The processing of personal data is based on our legitimate interest according to Art. 6 (1) lit. f of the GDPR in effective communication and information for interested users. There is a legitimate interest in designing and optimizing our offer based on user behavior.

With respect to data processing, Facebook and we are jointly responsible under Art. 26 GDPR. Facebook has primary responsibility, while we as page operators do not make decisions regarding data processing and all other information resulting from Art. 13 GDPR.

Affected rights can be asserted against us or Facebook, but we would like to emphasize that asserting them against Facebook is most effective. Only Facebook has access to the processed data and can directly take appropriate measures and provide information.

For further information about data processing, the joint responsibility agreement, and the options for objections, please refer to Facebook's privacy policy:

Privacy Policy: https://facebook.com/about/privacy/
Joint Processing Agreement for Personal Data: https://facebook.com/legal/terms/page_controller_addendum
Objection options: https://facebook.com/ads/preferences/?entry_product=ad_settings_screen
Facebook insights: https://facebook.com/business/a/page/page-insights

Online presence in other social media

We maintain online presences within social networks (e.g. Instagram) and platforms to communicate with active customers, interested parties, and users there and to inform you about our services. The terms and conditions and data processing policies of the respective provider apply when calling the respective networks and platforms. In particular, with regard to a detailed description of the respective processing and the objection options (opt-out), we refer to the information linked below from the providers. We also note that with regard to asserting the rights of data subjects, these can best be asserted with the respective provider, as only the provider has access to your data.

Unless otherwise indicated in our privacy policy, we process user data when they communicate with us within social networks and platforms, e.g. by composing posts on our online presence or sending us messages.

Disclosure of personal data

Your data will be disclosed to the nationwide container services commissioned with delivery. Any other disclosure of data to third parties - even in extracts - for commercial or non-commercial purposes does not take place. This only applies if you have given express consent or if the data disclosure is justified due to the applicable legal provisions. There is no comparison with other data sets.

Routine deletion and blocking of personal data, storage duration

We process and store your personal data as long as it is necessary to fulfill our contractual and legal obligations. Personal data is therefore stored for the duration of the respective legal retention period. If the data is no longer necessary for fulfilling contractual or legal obligations, it will be regularly blocked or deleted, unless their processing - even on a temporary basis - is necessary for the following purposes:

Fulfillment of commercial and tax retention obligations: In particular, the German Commercial Code (HGB) and the Tax Code (AO) should be mentioned. The specified retention periods for preservation or documentation range from two to ten years. In case of preservation of evidence within the framework of the statutory limitation provisions of §§195ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years. Storage may also take place if this has been provided for by the European or national legislator in union regulations, laws or other regulations to which the responsible party is subject.

Rights of the affected person

Every data subject has the right to information under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to deletion under Article 17 GDPR, the right to limitation of processing under Article 18 GDPR, the right to data portability under Article 20 GDPR, and the right to object under Article 21 GDPR. In addition, there is a right of appeal to a supervisory authority under Article 77 GDPR. If you have any questions about the processing of your personal data, you can always contact us. This also applies to the revocation of declarations of consent that were given to us prior to the validity of the General Data Protection Regulation, i.e. prior to May 25, 2018. Please note that the revocation only takes effect for the future. Processing that has been carried out prior to the revocation is not affected.

Right of objection under Article 21 of the GDPR

You have the right, based on reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1) lit. e GDPR (data processing in the public interest) and Article 6(1) lit. f GDPR (data processing based on a balancing of interests), including profiling based on these provisions in accordance with Article 4(4) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims. In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such advertising purposes. This also applies to profiling to the extent that it is related to such direct marketing.

Data Security

In order to prevent unauthorized access or disclosure, to ensure the accuracy of the data, and to ensure the lawful use of the data, we have implemented technical and organizational procedures to secure and protect the data we collect online. Your personal data is transmitted via the internet encrypted using SSL encryption during the ordering process. Credit card data is not stored, but is directly collected and processed by our payment service providers. We secure our website and other systems with technical and organizational measures against loss, destruction, access, alteration or dissemination of your data by unauthorized persons. Access to your customer account is only possible after entering your personal password. You should always handle your access information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

Questions and Information

If you have further questions about data protection in our web offer, you can contact us via the given email address (support[at]nvcharts.com). We will then try to answer your questions and remove any possible concerns. For the use of our web offer, the version of the privacy policy that is accessible online at the time of your visit always applies. We reserve the right to change this privacy policy at any time in accordance with the applicable data protection regulations. If you have voluntarily provided us with personal data, we will inform you about the changed conditions in an appropriate manner, e.g. by email, within a reasonable period of time before the changes take effect. Nevertheless, you should regularly visit our website and take notice of any changes.