1. Data Privacy Overview
The following information provides an overview of what happens with your personal data when you visit this website. Personal data refers to all data from which you can be personally identified. Please consult our data privacy notice listed under this text for more information on the subject of data privacy.
Data recording on this website
Who is responsible for recording data on this website?
The website operator processes data on this website. The website operator’s contact data can be seen in the Legal Information section of this website.
How do we record your data?
On the one hand your data is collected by you submitting it to us. This can for example be data which you have entered into a contact form.
Other data is collected automatically by our IT systems when you visit our website. This is above all technical data (e.g. Internet browser, operating system or time the website was visited). The recording of this data takes place automatically, as soon as you enter this website.
What do we use your data for?
Part of your data is collected in order to guarantee that the website can be provided error-free. Other data can be used to analyze your user behaviour.
What rights do you have regarding your data?
You have the right to receive information at any time free of charge about the origin, recipient and purpose of personal data of yours which has been stored. Additionally, you are entitled to demand that said data is corrected or erased. Any questions regarding this or data privacy in general can be directed to us at the address stated in the Legal Information section. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
Additionally, you have the right under certain circumstances to demand that the processing of your personal data is restricted. For more details regarding this, please refer to the data privacy notice under “Right to Restrict Processing”.
Analysis tools und tools from third party providers
When visiting this website your surfing behaviour can be statistically evaluated. This happens especially with cookies and with so-called analysis programs. The analysis of your surfing behaviour generally takes place anonymously; the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and about their objection options can be found in the following Data Privacy Notice.
This website is hosted by an external service provider (hoster). Personal data which is recorded on this website is also stored on the hoster’s servers. This can above all include IP addresses, contact enquiries, meta and communication data, contractual data, contact data, name, website visits and other data which is generated through a website.
The hoster is used to fulfil our contractual obligations regarding our potential and existing customers (section 6 para. 1 lit. b GDPR) and in the interest of a safe and efficient provision of our online offer by a professional supplier (section 6 para. 1 lit. f GDPR).
Our hoster will only process your data, in so far as this is necessary to meet its performance obligations and will follow our instructions with regard to this data.
Conclusion of an agreement on job processing
In order to ensure that processing is compliant with the data privacy regulations, we have concluded a contract covering order processing with our hoster.
3. General information and obligatory information
The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in compliance with the statutory data privacy regulations and this data privacy notice.
When you use this website, your personal data will be collected. Personal data is data with which you can be personally identified. This data privacy notice explains which data we collect and what we us it for. It also explains how and for what purpose this is done.
We would like to draw your attention to the fact that data transfer on the Internet (e.g. when communicating via email) may result in security gaps. A gap-free protection of data against attack from third parties is not possible.
Information regarding the holder of responsibility
The following is responsible for the data processing on this website:
NAP automotive Produkte GmbH
Tel.: +49 7231 42909-0
The responsible entity is the natural or legal person who alone or together with others decides about the purpose and means of the processing of personal data (e.g. names, email address etc.).
Legally compulsory data protection officer
We have appointed a data protection officer for our company.
iNoRisk GmbH & Co. KG
Tel: +49 621 685051–30
Revocation of your consent to data processing
Many data processing procedures are only possible with your express consent. At any time, you can revoke consent which has already been given. To do this, it is sufficient to send us an informal email notification. The legality of the data processing up until the revocation is made remains unaffected.
Right to object to data collection in special cases as well as against direct marketing (section 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF SECTION 6 PARA. 1 LIT. E OR F GDPR, YOU SHALL HAVE THE RIGHT AT ANY TIME DUE TO REASONS ORIGINATING FROM YOUR PERSONAL CIRCUMSTANCES TO OBJECT TO YOUR PERSONAL DATA BEING PROCESSED; THIS SHALL ALSO APPLY TO PROFILING WHICH IS BASED ON THESE PROVISIONS. PLEASE REFER TO THE DATA PRIVACY NOTICE FOR THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU LODGE AN OBJECTION, WE SHALL NO LONGER PROCESS YOUR PERSONAL DATA AFFECTED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACC. TO SECTION 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH DIRECT MARKETING; THIS SHALL ALSO APPLY TO PROFILING, IN SO FAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL WILL SUBSEQUENTLY NO LONGER BE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACC. TO SECTION 21 PARA. 2 GDPR).
Right to lodge a complaint with the responsible supervisory authority
In cases of violations against the GDPR, the data subjects shall have the right to complain to a supervisory body, especially in the member state of their usual place of residence, their workplace or the location of the assumed violation. The right to complain shall exist irrespective of any other judicial or administrative remedies.
Right to data portability
You have the right to receive data to yourself or a third party which we automatically process on the basis of your consent or in fulfilment of a contract, in a commonly used machine-readable format. If you demand a direct transfer of data to one of the other responsible parties, this will only happen in so far as this is technically feasible.
SSL or TLS encryption
Due to security reasons and for the protection of the transfer of confidential content such as orders or enquiries you have sent to us as the website operator, this website uses a SSL or TLS encryption. An encrypted connection can be recognized by the fact that the address line in your Internet browser changes from http:// to https:// and by the padlock sign in your browser line.
If the SSL or TLS encryption is activated, the data which you send us cannot be read by third parties.
Information, erasure and rectification
In the framework of the applicable statutory provisions, you have the right at any time to be informed free of charge about your personal data that has been stored, its origin and recipient and the purpose of the data processing and, if applicable, the right to rectification or erasure of said data. If you have any questions regarding this or the topic of personal data you can contact us at any time at the address stated in the Legal Information section below.
Right to restriction of the processing
You have the right to demand the restriction of the processing of your personal data. To do this, you can contact us at any time at the address specified below in the Legal Information section. The right to restrict processing exists in the following cases:
- If you contest the accuracy of your personal data stored by us, we generally need time to verify if this is the case. For the duration of the verification you have the right to demand the restriction of the processing of your personal data.
- If the processing of your personal data took place or is taking place unlawfully, you can demand the restriction of the data processing in place of the erasure.
- If we no longer require your personal data, you however need it for the establishment, exercise or defence of legal claims, you have the right to demand the restriction of processing instead of erasure.
- If you have lodged an objection in accordance with section 21 para. 1 GDPR, your and our interests must be taken into consideration. As long as it is not yet verified whose interests override, you shall have the right to demand the restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data shall – with the exception of storage- only be processed following your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
4. Data recording on this website
Our Internet website uses so-called cookies. Cookies do not cause any harm to your computer and do not contain any viruses. Cookies serve to make our offer more user friendly, more effective and safer. Cookies are small text files which are stored on your computer and which your browser stores.
Most of the cookies we use are so-called “session cookies”. They are automatically erased at the end of your visit. Other cookies stay on your device until you erase them. These cookies enable us to recognize you the next time you visit our site.
You can set your Internet browser in such a way that you are informed about cookies being set, and only allow cookies in specific cases, or generally to exclude them as well as automatically delete the cookies when closing the browser. When deactivating cookies the functionality of the website may be restricted.
Cookies which are necessary to carry out electronic communication processes or to provide certain functions you desire (e.g. basket functions) are stored on the basis of section 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in saving cookies for the technically error-free and optimized provision of its services. If a corresponding consent was asked (e.g. a consent to store cookies), processing takes place solely on the basis of section 6 para. 1 lit. a GDPR; consent can be revoked at any time.
If other cookies (e.g. cookies to analyze your surfing behaviour), these are dealt with separately in this data privacy notice.
Server log files
The provider of this website collects and automatically stores information in so-called server log files, which your Internet browser automatically sends to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the visiting computer
- Time of the server enquiry
- IP address
This data will not be combined with any other data sources.
This data is recorded on the basis of section 6 para. 1 lit. f GDPR. The provider of this website has a legitimate interest in the technically error-free depiction and optimization of its website – the server log files must be recorded for this purpose.
If you send an enquiry to us using a contact form, we will store your details from the contact form including the contact data you entered there, with an end to processing your enquiry and in case we have any follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of section 6 para. 1 lit. b GDPR, if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in efficiently processing enquiries sent to us (section 6 para. 1 lit. f GDPR) or on your consent (section 6 para. 1 lit. a GDPR) if the latter was requested.
The data you have entered in the contact form stay with us until you request that said data is erased or you revoke your consent to storage or if the purpose for which said data was stored no longer applies (e.g. after your query has been processed). Binding statutory provisions, in particular archiving periods, shall remain unaffected.
Queries by email, phone or fax
If you contact us by email, phone or fax, we will store and process your query including all the appertaining personal data (name, query) with an end to processing your matter. We will not pass on this data without your consent.
The data is processed on the basis of section 6 para. 1 lit. b GDPR, if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases the processing is based on your consent (section 6 para. 1 lit. a GDPR) and/or on our legitimate interests (section 6 para. 1 lit. f GDPR), as we have a legitimate interest in the efficient processing of the queries sent to us.
The data you sent to us through contact enquiries stay with us until you request that said data is erased or you revoke your consent to having said data stored or the purpose for storage no longer applies (e.g. after your query has been processed). Binding statutory provisions, in particular archiving periods, shall remain unaffected.
Processing data (customer and contractual data)
We collect, process and use personal data only if said data is necessary for the creation, content or amendment of the legal relationship (inventory data). This takes place on the basis of section 6 para. 1 lit. b GDPR, which enables data to be processed in order to perform a contract or contractual measures. We only collect, process and use personal data regarding the use of this website (usage data), if this is necessary to enable the user to use the service or for billing purposes.
The customer data collected is erased after completing the contract or the termination of the business relationship. Statutory archiving periods remain unaffected.
5. Analysis tools and marketing
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called cookies. These are text files which are stored on your computer and which enable your use of the website to be analyzed. The information about your use of this website generated by the cookie is generally transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool take place on the basis of section 6 para. 1 lit. f GDPR. The website provider has a legitimate interest in the analysis of the user behaviour, in order to optimize its online presence as well as its marketing. If corresponding consent has been requested (e.g. consent to store cookies), the processing is solely carried out on the basis of section 6 para. 1 lit. a GDPR; consent can be revoked at any time.
We have activated the IP anonymization function on this website. As a result your IP address is shortened by Google within the member states of the European Union or in other contractual states of the European Economic Area before being transferred to the USA. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases. On behalf of the provider of the website Google will use this information to evaluate your use of the website, to compile reports about website activities and to provide additional services to the website provider related to the use of the website and the Internet. The IP address conveyed by Google Analytics from your browser will not be merged with other data from Google.
You can prevent cookies from being stored through a corresponding setting in your Internet browser software. However, we would like to point out that in this case not all the functions of the website may be available in their full scope. You can additionally prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) being sent to Google as well as the processing of said data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data recording
You can prevent your data being recorded by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents the recording of your data on later visits to this website: Deactivate Google Analytics.
More information about the handling of user data by Google Analytics can be found here in the data privacy notice of Google: https://support.google.com/analytics/answer/6004245?hl=en.
Order processing contract
We have concluded an order processing contract with Google and fully implement the strict specifications of the German data privacy authorities when using Google Analytics.
Demographic characteristics at Google Analytics
This website uses the “demographic characteristics feature” of Google Analytics. As a result reports can be compiled which provide information about the age, sex and interests of the visitors to our website. This data originates from interest-related marketing by Google as well as visitor data from third-party suppliers. This data cannot be allocated to a specific person. You can deactivate this function at any time through the advertisement setting in your Google account or generally prohibit Google Analytics from recording your data as displayed under “Objection to data recording” above.
Data on the user and event level stored at Google, which is linked with cookies, user IDs or marketing IDs (e.g. doubleclick cookies, Android marketing ID), is anonymized or erased after 14 months. Details about this can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en
6. Plugins and Tools
Google Web Fonts
This website uses so-called web fonts supplied by Google to enable fonts to be uniformly displayed. Google fonts are locally installed. No connection is made to Google servers.
7. Own services
Handling applicant data
We offer you the option of applying for a job with us (e.g. by email, post or through an online application form). Below you can find information about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data take place in compliance with the applicable data privacy law and all additional statutory provisions and that your data will be treated with the strictest confidentiality.
Scope and purpose of the data collection
If you send us an application, we process your personal data connected with it (e.g. contact and communication data, application documents, notes as part of job interviews etc.), in so far as this is necessary to decide on the creation of an employment relationship. The legal basis for this is section 26 Federal Data Protection Act (BDSG) new, subject to German law (initiating an employment relationship), section 6 para. 1 lit. b GDPR (general contract negotiations) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on to persons in our company who are involved in processing your application.
If your application is successful, the data you have submitted will be stored in our data processing system with an end to executing the employment relationship on the basis of section 26 Federal Data Protection Act (BDSG new) and section 6 para. 1 lit. b GDPR.
Storage period of the data
If we are unable to offer you a job, you reject a job offer or you withdraw your application, we reserve the right to store your data you have transferred on the basis of our justified interest (section 6 para. 1 lit. f GDPR) up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Subsequently, the data will be erased and the physical application documents will be destroyed. The storage in particular serves to be able to furnish proof in the case of a judicial dispute. In so far as it is evident that the data will still be required after the expiry of the 6 month deadline (e.g. on the basis of an imminent or pending legal dispute), an erasure only takes place once the purpose for the continued storage no longer exists.
The storage period can additionally be longer, if you have given a corresponding consent (section 6 para. 1 lit. a GDPR) or if statutory storage obligations are in conflict with the erasure.