This website is provided by Eugen Notter GmbH Beschlägefabrik (further on called „Notter“) Mönchstr. 38, D-74535 Mainhardt, Deutschland.

Notter is the supervisory authority for processing the personal data collected on this website. Notter respects the privacy of its users and processes all personal data in accordance with the EU General Data Protection Regulation (GDPR) and other relevant laws. The website is managed by Denis Auvray, on behalf of Notter.

This Privacy Notice is designed to help you understand what personal data we collect about you, why we collect it, what purposes we use it for and what rights you have when it comes to using, accessing and correcting this data.

1. Data controller

The data controller, in accordance with Article 4 (7) of the EU General Data Protection Regulation (GDPR), is Eugen Notter GmbH Beschlägefabrik Mönchstr. 38-42, D-74535 Mainhardt, Deutschland, info(@)Notter-Beschlaege.de

2. General information on data protection at Hydro

Throughout the Hydro Group of companies, we have implemented Binding Corporate Rules (BCR) for the processing of personal data. For more information on the data processing principles of Hydro Group, please go to https://www.hydro.com/en/privacy/privacy-statement/. If you want more information than provided in this policy, for example on how your information is used, how we maintain the security of your information, and your rights to access information we hold on you, please contact us by using the contact form provided on www.hydro.com (choose topic: “Data Privacy”) or contact us by telephone: +47 22 53 81 00.

3. Collecting and processing personal data

If you only access our website to gain information, i.e. if you do not register on the website or provide us with information in any other way, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following information about you which is technically necessary to enable us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6 (1)(f) of the GDPR.

–IP address, date and time of request, time difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, volume of data transferred, website making the request, browser, operating system and its interface, language and version of the browser software.

4. Contacting us by email or using our contact form

4.1 Requests and other purposes

When you contact us by email or using our contact form, the data you provide (your email address and possibly also your name and telephone number) will be stored by us in order that we can answer your questions. Insofar as we request you to enter information on the contact form which is not necessary to enable us to contact you, these entry fields always will be indicated as 'optional'. This information enables us to substantiate your request and to process it better. This information is provided exclusively on a voluntary basis and with your consent, in accordance with Article 6 (1)(a) of the GDPR. Insofar as this information relates to communication channels (for example, email address, telephone number), you also provide your consent for us to contact you, if necessary, via these communication channels, in order to respond to your request. You can withdraw this consent at any time, with future effect.

We will delete all data arising in this context once it is no longer necessary for this to be stored, or we will restrict the processing of this data if it is subject to statutory retention requirements.

4.2 Seminars and training

You can register yourself or your employees for our seminars via another contact form. When you register, the information provided by you (email address, participant's name and company details) is stored by us so that we are able to answer your questions. Insofar as we request you to enter information on the contact form which is not necessary to enable us to contact you (in this case 'comments'), these entry fields will be indicated as 'optional'. Data is processed in order to fulfil a contract, however at the least in order to implement pre-contractual measures; this occurs on the basis of your request in accordance with Article 6 (1)(b) of the GDPR.

Also, we will delete all data arising in this context once it is no longer necessary for this to be stored, or we will restrict the processing of this data if it is subject to statutory retention requirements.

5. Job applications

You can apply for a job with our company electronically, in particular via email. We will, of course, only use your information in order to process your application and will not forward this information on to third parties. Please be aware that unencrypted emails are not transmitted with access protection.

If you have applied for a certain position and it has already been filled or we consider you to be even more suited to another job, we would like to forward your application within the company. Please let us know if you agree to us forwarding your application in this case.

Your personal data will be deleted immediately once the application process is complete or after a maximum of six months, unless you have explicitly consented to us storing your data for a longer period or in the case that the application process has resulted in us concluding a contract with you. The legal basis for this is Article 6 (1)(a), (b) and (f) of the GDPR and Section 26 of the German Federal Data Protection Act [BDSG].

6. Use of cookies:

When you use our website, cookies are stored on your computer. Cookies are small text files which are stored on the hard drive assigned to the browser you are using and which provide certain information to the location setting the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make your experience of using the internet more user-friendly and effective.

The legal basis for processing personal data using cookies is Article 6 (1)(f) of the GDPR. The legitimate interest of the data controller is to facilitate the user-friendly and effective design of their website.

This website uses the following types of cookies, the scope and function of which are explained below:

6.1 Transient cookies

These cookies are deleted automatically when you close your web browser. These include, in particular, session cookies. These save a session ID, which can be used to assign different requests from your browser to a common session. These cookies allow us to recognise your computer when you return to our website. Session cookies are deleted when you log out or close your browser.

6.2 Persistent cookies

These cookies are automatically deleted after a specified period of time, which may differ depending on the type of cookie. You can delete these cookies at any time by going to the security settings in your web browser.

6.3 Preventing cookies

You can configure your browser settings according to your own wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that if you do so you may not be able to use all the functions of this website.

Furthermore, when accessing our website via the cookie banner, you can press the 'I do not agree' button. This sets a 'do not track' cookie, which ensures that no unnecessary cookies are set.

7. Use of social plugins

Google YouTube

Content from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), as well as for example YouTube and Google Maps, is embedded within this online offering. This always requires the providers of such content (hereinafter referred to as 'third-party providers') to know the IP address of the users. This is because without this IP address they would not be able to send the content to the browser of the respective user. The IP address is therefore required in order for this content to be presented. We endeavour only to use content, whose respective providers use this IP address solely in order to deliver the content. However, we do not have any influence over whether the third party stores this IP address, for example, for statistical purposes. In the event that we become aware of this, we will inform our users. The legal basis for this is Article 6 (1)(f) of the GDPR. The legitimate interest is the analysis, optimisation and cost-effective operation of our online offering.

8. Website analysis

We make use of various services for the purposes of analysing and optimising our website, and these are presented below. In this way, we are able, for example, to analyse how many users visit our site, what information is most sought-after and how users find the offering. Among other things, we collect data regarding which website was used to access our website (referrer), which sub-pages of our website were accessed and how often and for what duration a sub-page was viewed. This helps us to design and improve our offerings to be more user-friendly. The data collected is not intended to personally identify individual users. Anonymous, or at most pseudonymous, data are collected. The legal basis for this is Article 6 (1)(f) of the GDPR.

The legitimate interest of the data controller is to optimise their website by means of website analysis programs.

8.1 Google Analytics

This website uses Google Analytics, a web-analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; this includes the use of the Universal Analytics operating mode. In this way, we are able to assign data, sessions and interactions across multiple devices to a single pseudonymous user ID and therefore to analyse the activities of a user across different devices.

Google Analytics uses cookies, which enable us to analyse the use of our website. The information regarding your use of this website, which is generated using the cookie, is usually transferred to a Google server in USA and stored there. However, in cases where IP anonymisation is activated on this website, your IP address will be truncated in advance by Google within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and then truncated. The IP address provided by your browser as part of Google Analytics will not be merged with any other data from Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about the website activities and to provide other services relating to the use of the website and the services associated with the use of the website to the website operator. We also have a legitimate interest in data processing for these purposes. The legal basis for using Google Analytics is Article 15 (3) of the German Telemedia Act [TMG] and Article 6 (1)(f) of the GDPR. The data sent by us and linked by means of cookies, user identities (e.g. user ID) or advertising IDs will be deleted automatically after 14 months. Data, which has reached the end of this retention period, will be deleted automatically once each month. Specific information regarding terms of use and data privacy can be found at www.google.com/analytics/terms/de.html and policies.google.com

You can prevent cookies from being stored by changing the corresponding settings in your browser software; however, please be aware that if you do this you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent Google from collecting and processing the data generated by the cookie relating to your use of the website (inc. your IP address) by downloading and installing the browser plugin available at tools.google.com/dlpage/gaoptout. Opt-out cookies prevent the future collection of your data when you visit this website. In order to prevent tracking by Universal Analytics across various devices, you must opt out on all systems that you use. Clicking this link sets the opt-out cookie: <a href="javascript:gaOptout()"><strong>Google Analytics deaktivieren</strong></a></p>

8.2 LinkedIn Analytics

This website uses conversion tracking technology as well as the retargeting function provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. This technology allows visitors to this website to play personalised advertisements on LinkedIn. It also enables the generation of anonymous reports about the performance of these ads and information about website interaction. In order to do this, the LinkedIn Insight Tag is included on our website, which enables connection to the LinkedIn server when you visit this website and are simultaneously logged into your LinkedIn account.

LinkedIn's Privacy Notice www.linkedin.com/legal/privacy-notice contains more information about how LinkedIn collects and uses your data and about the methods and rights you have for protecting your privacy interests. When you are logged into LinkedIn, you can deactivate data collection at any time by clicking the link: www.linkedin.com/psettings/enhanced-advertising.

8.3 Hotjar

This website uses Hotjar, an analysis software provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe. Hotjar enables us to measure and evaluate usage behaviour on our website. The information generated about your visit to our website by means of the tracking code and cookie are transmitted to the Hotjar server in Ireland and stored there. The tracking code collects the following information: device-dependant data.

The following information may be recorded by your device and your browser:

the IP address of your device (collected and stored in an anonymous format)

your email address, including your first name and family name, if you have made these available to us on our website

screen size of your device

device type and browser information

geographical location (country only)

your preferred language for viewing our website

log data

The following data are automatically collected by our servers when Hotjar is used:

referring domain

pages visited

geographical location (country only)

your preferred language for viewing our website

date and time the website was accessed

Hotjar will use this information to evaluate your use of our website, generate reports about this usage and to provide other services relating to website usage and online evaluation of the website. In order to provide its services, Hotjar also uses third-party services, such as Google Analytics and Optimizely. These third parties may store information sent by your browser during your visit, for example, cookies or IP requests. For specific information on how Google Analytics and Optimizely store and use your data, please refer to their privacy policies. You can prevent Hotjar from collecting data here.

8.4 Pardot

We use the Pardot Marketing Automation System (Pardot MAS) provided by Pardot LLC, 950 E. Paces Ferry Rd. Suite 3300 Atlanta, GA 30326, USA (Pardot). Pardot is a Salesforce software module for collecting and evaluating website usage by visitors.

Pardot MAS generates a unique, pseudonymised user profile for you. For this purpose, cookies are used to facilitate recognition of your web browser. By clicking the 'I agree' button, via the cookie banner, when using our website or by continuing to use our website, you consent to the use of cookies and thereby declare that you also consent to the use of Pardot cookies.

Further information is available at: www.google.de/policies/privacy/

You can deactivate the generation of a pseudonymised user profile at any time by configuring your browser so that cookies from the domain 'pardot.com' are not accepted. However, this may result in restrictions to the functionality and usability of our website.

8.5 Rapidmail

We use the Rapidmail newsletter tool provided by Rapidmail GmbH Augustinerplatz 2 79098 Freiburg, Germany.

Rapidmail generates a unique, pseudonymised user profile for you. For this purpose, cookies are used to facilitate recognition of your web browser.

You can find information about this in the privacy policies available at Rapidmail.de www.rapidmail.de/datenschutz

8.6 Baufragen.de

Use of the BAUFRAGEN.DE platform

We use the services of the BAUFRAGEN.DE platform in our web presence. You can ask questions to WICONA via online chat.

You can find information about this in the BAUFRAGE.DE privacy policies.

www.baufragen.de/nutzungsbedingungen

9. Advertising

We use cookies for marketing purposes, so that we can target our users with advertising based on their interests. In addition, we use cookies to limit the likelihood that an ad will be displayed and to measure the effectiveness of our ads. This information also may be shared with third parties, such as ad networks. The legal basis for this is Article 6 (1)(a) and (f) of the GDPR. The purposes pursued using data processing have the legitimate interest of direct marketing. You have the right to object to your data being processed for the purpose of this means of advertising. We make this service available to you by means of the following opt-out options. Alternatively, you can use your browser settings to prevent cookies from being set.

9.1 Google DoubleClick

We use DoubleClick, a service provided by Google Inc. DoubleClick uses cookies to display user-based advertisements. The cookies recognise which ads have already been displayed in your browser and whether you have accessed a website via the displayed ad. The cookies do not collect any personal data and cannot be associated with such data.

If you do not wish to receive user-based advertisements, you can disable these by using Google's ad preferences.

You can read more about how Google uses cookies in Google's Privacy Policy.

10. Your rights

You have the following rights with regard to personal data relating to you:

10.1 General rights

You have the right to be informed about your personal data, the right to rectification and erasure of that data, the right to restrict and object to processing, and the right to data portability. Insofar as processing is based on your consent, you have the right to withdraw that consent with future effect.

10.2 Rights when data is processed for legitimate interests

In accordance with Article 21 (1) of the GDPR, you have the right, at any time and for reasons relating to your own personal circumstances, to raise an objection against the processing of your personal data, which is carried out on the basis of Article 6 (1)(e) of the GDPR (data processing in the public interest) or on the basis of Article 6 (1)(f) of the GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on this regulation. If you make an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for doing so, which outweigh your interests, rights and freedoms, or in the case that the data processing serves the establishment, exercise or defence of legal claims.

10.3 Rights in the case of direct advertising

Inasmuch as we process your personal data in order to pursue direct advertising, you have the right, at any time and in accordance with Article 21 (2) of the GDPR, to raise an objection to the processing of your personal data for the purpose of this means of advertising; this also applies to profiling, insofar as this relates to direct advertising.

If you object to your data being processed for the purpose of direct advertising, we will no longer process your data for this purpose.

10.4 Right of appeal to a supervisory authority

You also have the right to appeal to a supervisory authority with regard to the processing of your personal data carried out by us.

11. Data transfer

Your personal data will not be transferred to third parties unless we are legally obliged to do this, the disclosure of data is required for executing the contractual relationship, or you have previously expressly consented to your data being disclosed.

External service providers and partner companies, e.g. online payment providers or shipping companies commissioned with delivery, will only receive your personal data if this is necessary for processing your order. In these cases, however, the data transfer is limited to the minimum required. Insofar as our service providers come into contact with your personal data, within the context of order processing in accordance with Article 28 of the GDPR, we will ensure that they comply with the provisions of the data privacy laws in the same way. Please also refer to the privacy policies of the providers. Each service provider is responsible for the content of third-party services; we therefore check the services for compliance with legal requirements, to the extent which can be reasonably expected of us.

We attach great importance to processing your data within the EU/EEA. However, it may be the case that we use service providers who process data outside of the EU/EEA. In these cases, we will ensure that the recipient provides a suitable level of data protection before your personal data is transferred to them. This means that an EU Standard Contract or other adequate provision, such as the EU Privacy Shield, is in place which achieves a level of data protection that is comparable to the standards within the EU.

12. Data privacy

We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted in keeping with technological progress.

Our Privacy Policy is reviewed on a regular basis. This Privacy Notice was last updated in July 2018.