Status: 28. März 2024

1. DATA PROTECTION AT A GLANCE

General information
The following information in this clause 1. provides a clear overview of what happens to your personal data when you visit this web site. Personal data are all data using which you can be identified personally. You will find detailed information on the topic of data protection from clause 2. of this privacy statement.

Data collection on this web site

Who is responsible for data collection on this web site?
On this web site, data processing is undertaken by the person responsible. You will find this person’s contact data in clause 3 of this privacy statement.

How do we collect your data?
On the one hand, your data are collected because you provide your data to us. These data can relate, e.g., to data you enter on a contact form.

Other data are collected automatically or after your consent during your visit to our web site by our IT systems. These data are above all technical data (e.g. web browser, operating system or time the page was viewed). These data are collected automatically as soon as you visit this web site.

For what do we use your data?
Some of the data are collected to ensure the correct provision of the web site. Other data can be used to analyse your user behaviour.

What rights do you have in relation to your data?
You have the right, at any time, to obtain, free of charge, information about the origin, recipient and purpose of your personal data saved. You also have the right to request the correction or erasure of these data or to object to the processing of your data. If you have granted your consent to the processing of your data, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request from us the restriction of the processing of your personal data. You also have a right to lodge a complaint with the responsible supervisory authority.

On these topics and if you have any other questions about the topic of data protection, you can contact us at any time at the address stated in clause 3.

Analytical tools and tools from third party providers
Your surfing behaviour may be evaluated statistically during your visit to this web site. This evaluation is undertaken using so-called analysis programs; however only if you provide your consent.
You will find detailed information about these analysis programs in clause 5 of this privacy statement.

2. HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

External hosting
This web site is hosted by an external service provider (All-Inkl.com) (hoster). The personal data that are collected on this web site are saved on the hoster’s servers. Primarily, these data are IP addresses, contact requests, metadata and communication data, contract data, contact data, names, web site accesses and other data generated via a web site.

The hoster is used for the purpose of the performance of a contract in relation to our potential and existing customers (art. 6 para. 1 lit. b GDPR) and in the interest of the secure, fast, efficient provision of our online services by a professional provider (art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to meet the hoster’s service obligations and will follow our instructions in relation to these data.

Conclusion of a contract via order processing
We have concluded a contract about order processing with our hoster to ensure processing in compliance with data protection.

3. GENERAL INFORMATION AND OBLIGATORY INFORMATION

Data protection
The operators of this site take the protection of your personal data very seriously. We treat your personal data as confidential and as per the statutory data protection regulations as well as this privacy statement.

If you use this web site, various items of personal data are collected. Personal data are data using which you can be identified personally. This privacy statement explains which data we collect and for what we use these data. It also explains how this action occurs and its purpose.

We draw your attention to the fact that there may be gaps in data transmission security in the Internet (e.g. while communicating by e-mail). Complete protection of your data against access by third parties is not possible.

Information about the person responsible
The person responsible for data processing on this web site is:

nuvalore GmbH
Paul-Ehrlich-Str. 1
D – 69181 Leimen

Fon: +49 (6224) 179 966 0
Fax: +49 (6224) 179 966 9
Mail: info@nuvalore.com

The person responsible is the natural or legal person which alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Legally required data protection officer
We have nominated a data protection officer for our organisation.

Dr. rer. nat. Anamarija Curic
nuvalore GmbH
Paul-Ehrlich-Str. 1
D – 69181 Leimen

Fon: +49 (6224) 179 966 0
Mail: info@nuvalore.com

Information about the forwarding of data to the USA
On our web site, some of the tools are from organisations based in the USA. If these tools are active, your personal data may be forwarded to the US servers of the related organisation. We draw your attention to the fact that the USA is not a secure third country in the context of EU data protection law. US organisations have the obligation to provide personal data to security authorities and the affected party cannot take legal action against this provision of data. It is therefore not possible to exclude that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for the purposes of surveillance. We have no influence over these processing activities. Data transfers to the USA only occur if you provide your consent. The data transfers are permissible as per art. 49 para. 1 lit. a GDPR.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw any consent you have granted at any time. The legality of data processing that occurred up until your withdrawal remains unaffected.

Right to object to data collection in specific situations as well as direct advertising (art. 21 GDPR)
If data processing is based on Art. 6 Para. 1 Lit. E or F GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling based on these provisions. For the related legal basis on which this processing is based, refer to this privacy statement. If you object, we no longer process your personal data unless we can demonstrate compelling legitimate grounds fpr the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection according to Art. 21 Para. 1 GDPR).

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that is related to such direct marketing. If you object, your personal data are then no longer used for the purposes of direct marketing (objection according to Art. 21 Para. 2 GDPR).

Right to lodge a complaint with the responsible supervisory authority
If there are infringements of the GDPR, the person affected has a right to lodge a complaint with a supervisory authority, in particular in the Member State where the person normally resides, of the person’s workplace or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative procedures or judicial remedies.

Right to data portability
You have the right to the provision, to you or a third party, in a machine-readable format, of the data that we process based on your consent or while fulfilling a contract. If you request the transfer of the data to another controller, this action is only undertaken if technically feasible.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, for example orders or requests, that you send to the site operator. You can identify an encrypted connection by the change in the address bar of your browser from “http://” to “https://” and the padlock symbol in the bar in your browser.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, erasure and correction
In the context of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your personal data, their origin and recipients and the purpose of the data processing and, if necessary, a right to the correction or erasure of these data. On these topics and if you have any other questions about the topic of your personal data, you can contact us at any time at the address stated in the imprint.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. On this topic, you can contact us at any time at the address stated in the imprint. The right to the restriction of processing exists in the following situations:

• If you contest the correctness of your personal data stored in our systems, as a rule we need time to check this issue. You have the right to request the restriction of the processing of your personal data for the duration of the check.
• If your data were/are processed unlawfully, you can request the restriction of processing instead of erasure.
• If we no longer need your personal data, however you need the data to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have objected according to art. 21 para. 1 GDPR, your interests and our interests must be weighed. If it has not yet been identified which interests predominate, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data are only allowed – with the exception of storage – to be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Objection to advertising
The usage of the contact data published in the context of our obligations in the imprint or in this privacy statement for the purpose of sending unsolicited advertising and information materials is hereby rejected. The operators of the site expressly reserve the right to take legal action if advertising information, e.g. spam e-mails, is sent unsolicited.

4. DATA COLLECTION ON THIS WEBSITE

Cookies
Our web pages use so-called “Cookies”. Cookies are small text files and do not cause any damage to your terminal equipment. They are saved on your terminal equipment either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after the end of your visit. Permanent cookies remain saved on your terminal equipment until you delete them or they are deleted automatically by your browser.

Cookies have various functions. Numerous cookies are necessary technically because certain web site functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies necessary to undertake electronic communication processes (necessary cookies) or to provide specific functions you require (functional cookies, e.g. for the shopping basket function) or to optimise the web site (e.g. cookies to measure the web audience) are saved based on art. 6 para 1 lit. f GDPR, provided no other legal basis is stated. The web site operator has a legitimate interest in the storage of cookies for the technically correct and optimised provision of the web site operator’s services. If consent to the storage of cookies was requested, the related cookies are saved exclusively based on this consent (art. 6 para. 1 lit. a GDPR); the consent can be withdrawn at any time.

If you visit our web site, necessary and functional cookies are saved on your terminal equipment for 12 months.

You can configure your browser such that you are informed if cookies are saved and only allow cookies in specific cases, exclude the acceptance of cookies in certain situations or generally exclude them, as well as activate the automatic deletion of cookies when you close your browser. The functionality of this web site may be restricted by the deactivation of cookies.

If cookies from third party organisations or for the purposes of analysis are used, we inform you separately under clause 5. of this privacy statement and only use them if you consent.

Server log files
We collect and automatically save information your browser sends to us in so-called server log files. This information is:

• Browser type and version
• Operating system you use
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP adress

These data are not combined with other data sources.

These data are collected based on art. 6 para. 1 lit. f GDPR. The web site operator has a legitimate interest in the technically correct depiction and the optimisation of the operator’s web site – the server log files must be collected for this purpose.

Contact form
If you send us requests using a contact form, your information from the request form including the contact data stated there are saved by us for the purpose of processing the request and for any further related requests. We do not pass on these data without your consent.

These data are processed based on art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other situations, the processing is based on our legitimate interest in the effective processing of requests sent to us (art. 6 para. 1 lit. f GDPR) or your consent (art. 6 para. 1 lit. a GDPR) if this was requested.

The data you enter on the contact form remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular retention periods – remain unaffected and can prevent erasure.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request including all personal data stemming from your request (name, request) are saved and processed in our systems for the purpose of processing your request. We do not pass on these data without your consent.

These data are processed based on art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other situations, the processing is based on our legitimate interest in the effective processing of requests sent to us (art. 6 para. 1 lit. f GDPR) or your consent (art. 6 para. 1 lit. a GDPR) if this was requested.

The data you provide to us in a contact request remain with us until you request erasure, withdraw your consent to storage or the storage of the data is no longer necessary (e.g. after completion of the processing of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected and can prevent erasure.