Nachhall Group Logo

Privacy policy

Thank you for your interest in our offer. Nachhall takes the protection of your data very seriously. Here you can find out which methods we use to collect data and how we use it.

General note and mandatory information

DESIGNATION OF THE CONTROLLER

The controller responsible for data processing on this website
is:
Nachhall c/o UND Schmidt GmbH
Managing Director: Karl-Ludwig Wachler
Chopinstraße 18
D-04103 Leipzig
Germany

APPOINTMENT OF THE DATA PROTECTION REPRESENTATIVE

Data Protection Representative:
Nachhall c/o UND Schmidt GmbH
Chopinstraße 18
D-04103 Leipzig
Germany
[email protected]

The controller alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, contact details).

REVOCATION OF YOUR CONSENT TO DATA PROCESSING

Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient for revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Which data we collect and process

1. data processed for the provision of the website and the creation of log files

1.1 Log files for the provision of the website

To ensure the optimization and functionality of our website, we log technical errors that may occur when accessing our website. In addition, information is automatically collected that your device's browser transmits to our hosting provider. This information includes

This automatically collected data is used exclusively for troubleshooting, optimizing and ensuring the performance of our website. We do not use it to personally access individual users unless there is a legal reason to do so or explicit consent is obtained from you. CloudFlare collects and stores the aforementioned information in order to optimize processes and procedures, in particular in connection with the use of our website and for the security and stability of the computer system.
Further information can be found in the privacy policy of CloudFlare, Inc. at the following link: www.cloudflare.com/privacypolicy/

1.2 Use of Google Analytics 4 as an analysis tool

If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Nature and purpose of processing

Google Analytics uses cookies that enable your use of our website to be analyzed. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events”. Events can be


Also recorded:
Purposes of the processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze our performance.

Recipients

Recipients of the data are/may be:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Storage duration

The data sent by us and linked to cookies is automatically deleted after 14 days. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 S. 1 lit. a GDPR and § 25 para. 1 S. 1 TDDDG.

Revocation

You can withdraw your consent at any time with effect for the future by clicking on this link: Clear Cookies and Reload to revoke your previous consent and reload the page. You can then decide again whether you wish to consent to the use of cookies. The lawfulness of the processing carried out on the basis of your consent until you withdraw it.
You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by
a. Not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.
You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=en.

2. use of Google signals

In addition to Google Analytics, we use Google Signals for the use of usage data. Google Signals collects session data from websites and apps that Google links to users who are logged into their Google account and have activated personalized advertising. This data is used to analyze your behavior and interests across devices. This expires by default after 14 months. Please note that this data is only collected if you have activated personalized advertising in your Google account.

Data transfer to third countries

Google LLC: For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.
Heroku: no data transfer to third countries.

Your rights

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details:
https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

RIGHT TO DATA PORTABILITY

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

RIGHT TO RESTRICTION OF PROCESSING

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data.

Changes to the privacy policy

This privacy policy may be updated from time to time to reflect changes in our practices. We recommend that you check this page regularly for updates.

Back to website