Privacy Policy

I. Name and address of the responsible body


The responsible body in accordance with the General Data Protection Regulation and other data protection laws of the Member States, as well as other data protection provisions is:
Nürnberg Gummi Babyartikel GmbH
Breitenloher Weg 6
91166 Georgensgmünd
Germany
Tel + 49 9172 69 19 0
Fax + 49 9172 69 19-45
E-Mail: info(at)nip-babyartikel.de

II. Name and address of the data protection officer
Dipl. Inf.(FH) Tim Prinz
Liebigstraße 9
91126 Schwabach
Germany
E-Mail: datenschutz(at)p-se.de

III.    General information concerning data processing

 

1.        Scope of the processing of personal data

As a rule, we process personal data of our users only if this is necessary in order to provide a functional website, as well as out contents and services. The processing of personal data of our users generally takes place only with the consent of the user. An exception applies in such cases where the prior obtaining of consent is not possible for actual reasons and the processing of the data is permitted under statutory regulations.

2.        Legal basis for the processing of personal data

Should we obtain the consent of the affected person for processing procedures of personal data, the legal basis is Article 6 Paragraph 1 Letter a) GDPR.
When processing personal data in order to process a contract where the contracting party is the affected person, the legal basis is Article 6 Paragraph 1 Letter b) GDPR. This also applies to processing procedures which are necessary in order to carry out pre-contractual measures.
Should processing of personal data be necessary in order to fulfil a legal obligation to which our company is subject, the legal basis is Article 6 Paragraph 1 Letter c) GDPR.
In case that essential interests of the affected person or of another natural person make the processing of personal data necessary, Article 6 Paragraph 1 Letter d) forms the legal basis.
Should the processing be necessary in order to safeguard a legitimate interest of our company or of a third party and should the interests, basic rights and basic freedoms of the affected person not override the named interest, Article 6 Paragraph 1 Letter f) GDPR forms the legal basis of the processing.

3.        Data deletion and duration of the saving

The personal data of the affected person will be deleted or blocked, once the purpose of the saving is no longer present. Saving can also take place if this was required by European or national legislators in ordinances, laws or other regulations of the EU to which the responsible body is subjected. Blocking or deletion of the data also takes place when the saving period prescribed by the named norms expires, unless it is necessary to continue saving the data in order to conclude or fulfil a contract.
 

IV.    Provisions of the website and creation of logfiles

 

1.    Description and scope of the data processing

Each time our Internet site is accessed, our system automatically records data and information from the computer system of the accessing device.
In such a case, the following data is gathered:

(1)    Information concerning browser type and the version used
(2)    The operating system of the user
(3)    The Internet service provider of the user
(4)    The IP address of the user
(5)    Date and time of the access
(6)    Websites from which the system of the user accessed our Internet site

The data will also be saved in the logfiles of our system. The IP addresses of the user or other data which enable the assignment of the data to a user are not affected by the above. Saving of this data together with other personal data of the user does not take place.

2.    Legal basis for the data processing

The legal basis for the temporary saving of the data is Article 6 Paragraph 1 Letter f) GDPR.

3.    Purpose of the data processing

The temporary saving of the IP address by the system is necessary in order to enable the delivery of the website to the computer of the user. For this purpose, the IP address of the user needs to remain saved for the duration of the setting.

These purposes also represent our legitimate interest in the data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.


 4.    Duration of the saving

The data will be deleted, once it is no longer necessary in order to attain the purpose for which it was gathered. In case the data is recorded in order to provide the website, this applies once the respective session comes to an end.

5.    Objection and correction option

The recording of the data in order to provide the website and the saving of the data in logfiles is absolutely necessary in order to operate the Internet site. As a result, the user does not have a right to raise an objection.


V. Use of cookies

 

1.    Description and scope of the data processing

Our website uses cookies. Cookies are text files which are saved in the Internet browser or are saved by the Internet browser on the computer system of the user. Should a user access a website, a cookie can be saved in the operating system of the user. This cookie contains a character based number order, which enables a clear identification of the browser next time the website is accessed.
We use cookies in order to make our website more user friendly. Certain elements of our Internet site make it necessary for the accessing browser to also be able to be recognised after a change to the page being accessed.
Thereby the following data is saved and transferred in the cookies:

(1)    Language settings
(2)    Log in information

 

2.     Legal basis for the data processing


The legal basis for the processing of personal data using technically necessary cookies is Article 6 Paragraph 1 Letter f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 Paragraph 1 Letter a) GDPR if consent of the user is present in this respect.

3.    Purpose of the data processing


The purpose of the use of technically necessary cookies is the simplification of the use of websites for the users. Certain functions of our Internet site cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognised again after visiting a different site.

For the following applications, we require cookies:
(1)    Implementation of language settings
(3)    Display of login information

The user data gathered by technically necessary cookies is not used in order to create user profiles.

The use of cookies which are not technically necessary takes place as follows:
The use of the analysis cookies takes place in order to improve the quality of our website and its content. By means of the analysis cookies, we are informed as to how the website is being used and are therefore able to constantly optimise our services.

These purposes also represent our legitimate interest in the processing of personal data in accordance with Article 6 Paragraph 1 Letter f) GDPR.

4.    Duration of the saving, right of objection and correction


Cookies are saved on the computer of the user and transferred from this to our site. Therefore, as the user, you have full control over the use of cookies. By altering the settings in your Internet browser, you can de-activate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also take place automatically. Should cookies be de-activated for our website, it may be the case that not all functions of the website can be subsequently used in full.
 

VI.    Registration

 

1.    Description and scope of the data processing

On our website, we offer midwives the option of registering by providing personal data. Thereby the data is input into an entry mask and transferred to us and saved by us. The data is not passed on to third parties. The following data is gathered during the registration process:

At the time of the registration, the following data is also saved:
(1)    The IP address of the user
(2)    Email address
(3)    Date and time of the registration

Within the framework of the registration process, the consent of the user to the processing of this data is obtained.

2.    Legal basis for the data processing


The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR if consent of the user is present in this respect.

3.    Purpose of the data processing


Registration of the user is necessary in order for certain content and services to be provided.

The registration serves the purpose of ordering of product samples and information materials.

4.    Duration of the saving


The necessary order data will be deleted, once this is no longer necessary in order to attain the purpose for which it was gathered.
The registration data will be saved until the time of revocation or deletion by the affected person.

5.    Objection and correction option

As a user, you have the option of cancelling the registration at any time. You can have the data which is saved about you altered at any time.
 

VII.    Bloggers

 

1.    Description and scope of the data processing


Bloggers have the option of voluntarily requesting free-of-charge product samples from us for product tests via the email address. Should the blogger be selected for a product test by us, the blogger must provide us with an address to which we can send the test product.
On our Internet site, bloggers can then get in touch with us via our email address which can be used in order to initiate electronic contact. Should a user make use of this option, the data which is entered via email is transferred to us and saved by us. This data includes:

- Email address
- Address data (in case of voluntary transmission by the blogger)

2.    Legal basis for the data processing


The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR if consent of the user is present in this respect.

3.    Purpose of the data processing


Ordering of product samples and information materials.

4.    Duration of the saving


The necessary order data will be deleted, once this is no longer necessary in order to attain the purpose for which it was gathered.

5.    Objection and correction option


As a user, you have the option of cancelling the registration at any time. You can have the data which is saved about you altered at any time.
 

VIII.    Applications by email

 

1.    Description and scope of the data processing


There is the option of applying for jobs which are advertised on this website by email. Within the course of the application process, personal data is processed.
Data which is connected to an application is processed. This can be general data relating to a person (such as name, address and contact data), information concerning vocational qualification and education or details relating to continued professional development or other information which is transferred to us in connection with an application.
We only gather the data which is transferred to us in the course of the application.
 

2.    Purpose and legal basis for the data processing


Personal data relating to the affected person is gathered for the purpose of the application for employment, should this be necessary in order to make a decision concerning the outcome of the application process. Thereby the legal basis is § 26 Paragraph 1 and Paragraph 8 Sentence 2 of the German Federal Data Protection Act (BDSG).
Furthermore, we can process personal data, should this be necessary in order to defend claims which are brought against us in connection with the application process. Thereby the legal process is Article 6 Paragraph 1 Letter f) GDPR. For example, the legitimate interests is a proof obligation in a process in accordance with the German General Equal Treatment Act (AGG).
Should an employment relationship be entered into, in accordance with § 26 Paragraph 1 BDSG the personal data which has already been received may be further processed for the purpose of the employment relationship, should this be necessary in order to perform or terminate the employment relationship or in order to exercise or fulfil rights and obligations of the representation of interests of the employees under the law, a collective agreement, a company or service contract (collective bargaining).

3.    Duration of the saving


Personal data will be saved for as long as is necessary to make a decision concerning the outcome of the application. Should no employment relationship come into existence, data can continue to be saved should this be necessary to defend against possible legal claims. Thereby the application documents will be deleted two months after the notification of the rejection of the application, unless a longer period of saving is necessary due to legal disputes.

4.    Objection and correction option


At any time, the affected person can revoke his or her consent to the processing of the personal data.
 
IX.    Contact form, email contact and complaint

1.    Description and scope of the data processing


Our Internet site contains a contact form which can be used in order to get in touch with us electronically. Should a user make use of this option, the data which is entered via email is transferred to us and saved by us. This data includes:

At the time of sending of the message, the following data is also saved:
(1)    The IP address of the user
(2)    Date and time
(3)    First name and surname
(4)    Email address
(5)    Comment
(6)    Address (voluntary)

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration.

Alternatively it is possible to get in touch with us via the provided email address. In such a case, the personal data of the user which is transferred in the email will be saved.

The data will not be passed on to third parties during this process. The data will only be used for processing the conversation or processing complaints.

2.    Legal basis for the data processing


The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR if consent of the user is present in this respect.

The legal basis for the processing of the data which is transferred when sending an email is Article 6 Paragraph1 Letter f) GDPR. Should the purpose of the email be the conclusion of a contract or the performance of an existing contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.

3.    Purpose of the data processing


The processing of the personal data from the entry mask merely enables us to process the contact initiation or process a complaint. In case of contact initiation by email, the necessary legitimate interest in this respect is the processing of the data.
The purpose of the other personal data which is processed during the sending process is the prevention of misuse of the contact form and ensuring the security of our IT systems.

4.    Duration of the saving


The data will be deleted, once it is no longer necessary in order to attain the purpose for which it was gathered. For the personal data from the entry mask of the contact form and the personal data sent by email, this is then the case once the respective conversation with the user has come to an end. The conversation has come to an end if it is clear from the circumstances that the matter concerned has been finally clarified.
The additional personal data gathered during the sending process will be deleted at the latest after a period of seven days.

5.   Objection and correction option


At any time, the affected person can revoke his or her consent to the processing of the personal data. Should the user get in touch with us by email, he or she can object to the saving or his or her personal data at any time. In such a case, the conversation cannot be continued.
All personal data which was saved during the contact initiation will be deleted in such a case.
 
 

I. External tools / aids

 

1.      Google Maps


This website uses Google Maps of Google Inc. By means of the use of our website, you are declaring your agreement to the recording, processing and use of the data which is gathered automatically by Google Inc, its representatives and third parties. You can find the terms and conditions of use of Google Maps at "Terms and Conditions of Google Maps".

 2.      YouTube


This website has integrated components of YouTube. YouTube is an Internet video portal which enables publishers to display video clips and other users to watch, rate and comment on these, also free of charge. YouTube permits the publication of all types of videos, as well as complete film and TV programmes, and also music videos, trailers or videos created by users which are available via the portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary company of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By means of each access to the individual pages of the Internet site which is operated by the responsible body for the processing and in which a YouTube component (YouTube videos) has been integrated, the Internet browser is automatically instructed by the IT system of the affected person through the respective YouTube component to download an image of the corresponding YouTube component. Further information relating to YouTube can be accessed at https://www.youtube.com/yt/about/de. Within the framework of this technical procedure, YouTube and Google are informed of which concrete subpage of our Internet site is being visited by the affected person.
Should the affected person be logged into You Tube at the same time, YouTube recognises by means of the accessing of a subpage which contains a YouTube video which concrete subpage of our Internet site is being visited by the affected person. This information is collected by YouTube and Google and assigned to the respective YouTube account of the affected person.
Via the YouTube components, YouTube and Google are always then informed that the affected person has visited our Internet site, should the affected person be logged in to YouTube at the same time he or she accessed our Internet site; this takes place regardless of whether the affected person clicks a YouTube video or not. Should such a transfer of this information to YouTube and Google be unwanted by the affected person, this transfer can be prevented by the affected person logging out of his or her YouTube account prior to accessing our Internet site.
The data protection provisions published by YouTube which can be viewed at https://www.google.de/intl/de/policies/privacy/ provide information concerning the gathering, processing and use of personal data by YouTube and Google.
 

X.    Rights of the affected person

The following lists includes all rights of the affected person under the GDPR. Rights which are not relevant to our website need not be named. To this extent, the list may be shortened.
Should personal data relating to you be processed, you are an affected person as defined under the  GDPR and you have the following rights in relation to the responsible body:

1.    Right of information


You can request confirmation from the responsible body as to whether personal data which concerns you is being processed by us.
Should such processing be present, you can request the following information from the responsible body:

(1)    the purposes for which the personal data is processed;
(2)    the categories of personal data which are processed;
(3)    the recipients or categories of recipients to whom the relevant personal data is disclosed or will be disclosed;
(4)    the planned duration of the saving of the personal data relating to you or, should concrete information not be available in this respect, the criteria for determining the length of time of the saving;
(5)    the existence of a right of correction or deletion of the personal data relating to you, a right of restriction of the processing by the responsible body or the right to raise an objection to this processing;
(6)    the existence of the right to complain to a supervisory authority;
(7)    all available information concerning the origin of the data, should the personal data no be gathered from the affected person;
(8)    the existence of automated decision making, including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and, at least in these case, detailed information concerning the involved logic and the breadth and intended effects of such processing for the affected person.

You have the right to request information as to whether the personal data relating to you is transferred to a third country or an international organisation. In such a case, you can request that you be informed of suitable guarantees in accordance with Article 46 GDPR in connection with the transfer.

2.    Right of correction


You have the right of correction and/or completion in relation to the responsible body, should the processed personal data which relates to you be incorrect or incomplete. The responsible body must carry out the correction immediately.

3.    Right to have the processing restricted


Under the conditions below, you can request that the processing of the personal data relating to you be restricted:

(1)   should you dispute the correctness of the personal data relating to you for such a length of time which enables the responsible body to check the correctness of the personal data;
(2)    the processing is unlawful and you reject the deletion of the personal data and instead request that the use of the personal data be restricted;
(3)    the responsible body no longer requires the personal data for the purposes of the processing, however you require this in order to assert, exercise or defend legal claims or
(4)    you have raised an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of the responsible body outweigh your reasons.

Should the processing of the personal data relating to you be restricted, then regardless of its saving, this data may only be processed with you consent or in order to assert, exercise or defend legal claim, in order to protect the rights of another natural or legal person or the reasons connected to an important public interest of the EU or a Member State.
Should the restriction of the processing be limited in accordance with the reasons above, you will be informed by the responsible body before the restriction is lifted.

4.    Right of deletion


a) Deletion obligation

You can request that the responsible body immediately deletes the personal data relating to you and the responsible body is obliged to immediately delete this data, should one of the following reasons be present:

(1) The personal data relating to you is no longer necessary for the purposes for which it was gathered or otherwise processed.
(2) You revoke your consent on which the processing in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR was based and no other legal basis for the processing is present.
(3) You raise an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and there are no legitimate reasons for the processing present which take priority or you raise an objection to the processing in accordance with Article 21 Paragraph 2 GDPR.
(4) The personal data relating to you has been processed unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation under EU or the laws of the Member States to which the responsible body is subject.
(6) The personal data relating to you was gathered in relation to services provided by the information company in accordance with Article 8 Paragraph 1 GDPR.

b) Provision of information to third parties

Should the responsible body have made the personal data relating to you public and should it be obliged to delete this in accordance with Article 17 Paragraph1 1 GDPR, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature, in order to inform the responsible body which is processing the personal data that you as the affected person have requested the deletion of all links to this personal data or the deletion of copies or reproductions of this personal data.

c) Exceptions

The right of deletion does not apply, should the processing be necessary:

(1)    in order to exercise the right of freedom of opinion and information;
(2)    in order to fulfil a legal obligation which requires the processing in accordance with EU law or the law of the Member States to which the responsible body is subject or in order to carry out a task which is in the public interests or which takes place in the exercising of public power which has been assigned to the responsible body;
(3)    for reasons in the public interest in the area of public health in accordance with Article 9 Paragraph 2 Letter h) and Article 9 Paragraph 3 GDPR;
(4)    for archiving purposes, scientific or historical research purposes or statistical purposes in accordance with Article 89 Paragraph 1 GDPR which are in the public interest, should the right named under section a) be expected to make the attainment of the objectives of this agreement impossible or should it be expected to significantly impair these or
(5)     in order to assert, exercise or defend legal claims.

 5.      Right of notification

Should you have claimed the right of correction, deletion or restriction of the processing in relation to the responsible body, it is obliged to provide notification of this correction or deletion of the data or restriction of the processing to all recipients to whom the personal data concerned was disclosed, unless this is shown to be impossible or would take place at disproportionately high expense.
In relation to the responsible body, you have the right to be informed of these recipients.

6.    Right of data portability

You have the right to receive the personal data relating to you which you have provided to the responsible body in a structured, current and machine readable format. In addition, you have the right to transfer this data to another responsible body without hindrance by the responsible to whom the personal data was provided, should:

(1) the processing be based on consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or Article 9 Paragraph 2 Letter a) GDPR or on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and (2) the processing take place with the assistance of automated procedures.

In addition, when exercising this right, you are entitled to ensure that the personal data relating to you is transferred directly to another responsible body by a responsible body, should this be technically possible. Freedoms and rights of other persons must not be impaired as a result.
The right of data portability does not apply to processing of personal data which is necessary to carry out a task which is in the public interest or which takes place by means of the exercising of public power which has been assigned to the responsible body.

7. Right of objection


You have the right to raise an objection to the processing of your personal data which takes place under Article 6 Paragraph 1 Letter e) or Letter f) GDPR at any time for reasons connected to your specific situation. This also applies to any profiling which is based on these provisions.
The responsible body will no longer process the personal data relating to you, unless it can provide proof of mandatory protectable reasons for the processing which take precedence over your rights and freedoms or the processing is necessary in order to assert, exercise or defend legal claims.
Should the personal data relating to you be processed in order to carry out direct advertising, you have the right at any time to raise an objection to the processing of the personal data relating to you for the purposes of such advertising; this also applies to the profiling, should this be connected to such direct advertising.
Should you object to the processing for the purposes of the direct advertising, the personal data relating to you will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the right to exercise your right of objection by means of automated procedures where technical specifications are used in connection with the use of services of the information company.

8.    Right to revoke the declaration of consent under data protection laws


You have the right to revoke your declaration of consent under data protection laws at any time. By means of the revocation of the consent, the lawfulness of the processing which took place under the declaration of consent prior to the revocation will not be affected.

9.    Automated decision making in individual cases, including profiling


You have the right not to be subjected to a decision based exclusively on automated processing, including profiling, which has legal effect in relation to you or otherwise causes you significant impairment. This does not apply if the decision:

(1)   is necessary in order to conclude or fulfil a contract between yourself and the responsible body,
(2)   is lawful under legal regulations of the EU or Member States to which the responsible body is subject and these legal regulations contain reasonable measures to safeguard your rights and freedoms and legitimate interests or
(3)   takes place with your express consent.

However, these decisions may not be based on special categories of personal data under Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letter a) or Letter g) GDPR applies and reasonable measures have been taken to protect the rights and freedoms, as well as your legitimate interests. In respect of the cases named in (1) and (3), the responsible body will take reasonable measures in order to safeguard the rights and freedoms, as well as your legitimate interests, whereas as a minimum the right to have a person on the part of the responsible body intervene, to set out one's own opinion and to contest the decision are included here.

10. Right to complain to a supervisory authority


Regardless of legal remedies elsewhere under administrative law or before a court, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, place of work or the location of the alleged breach, should you be of the opinion that the processing of the personal data relating to you breaches the GDPR.
The supervisory authority to whom the complaint was submitted will inform the complainant of the status and result of the complaint, including the option of legal remedy before a court in accordance with Article 78 GDPR.