Data protection declaration
1. Data protection at a glance
The following notes provide a simple overview of what happens to your personal information when you visit our website. Personal data are all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details imprint of this website.
How do we collect your data?
On the one hand, your data are collected by you communicating it to us. This can be date that you enter in a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or the time the page was viewed). These data are collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure that the website is error-free. Other data may be used to analyse your user behaviour.
What right do you have with regard to your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of these data. You can contact us at any time regarding this and other questions on the subject of data protection at the address given in the imprint. Furthermore, you have the right to appeal to the competent supervisory authority.
Analysis and third-party tools
When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.
You can object to the analysis. We will inform you about the objection in this data protection declaration.
2. General notes and mandatory information
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentally and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what purpose we use them. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. communication by email) can be subject to security breaches. A complete protection of the data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
NOSTA Holding GmbH
Phone: +49 (0)541-9333-0
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal notification by sending an email to us is sufficient. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
In the event of breaches of data protection law, the data subject shall have the right to lodge a complaint with the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data transferability
You have the right to data that we process automatically on the basis of your consent or in fulfilment of contract to be handed over to you or a third party in conventional, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done to the extent it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that address line of the browser changes from “http://” auf “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be ready by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to gratuitous information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time regarding this and other questions on the subject of data protection at the address given in the imprint.
Objection to advertising mails
We hereby object to the use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action against unsolicited mailing or emailing of spam and other similar advertising materials.
3. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company.
Phone: + 49 251 489 570 - 41
4. Data collection on our website
Cookie Consent with CookieFirst
This website uses CookieFirst's cookie content technology to obtain your consent to the storage of certain cookies on your end device and to document this consent in accordance with data protection regulations. The provider of this technology is Digital Data Solutions B. V. , Plantage Middenln 42a, 1018 DH Amsterdam, website: cookiefirst.com (hereinafter “CookieFirst”).
When you enter our website, the following personal data is transferred to CookieFirst:
- Your consent(s) or the revocation of your consent(s)
- Your IP address
- Information about your browser
- Information about your terminal device
- Information about the time of your visit to the website
- Furthermore, CookieFirst stores a cookie in your browser in order to provide you with the consent or information you have given or to be able to assign their revocation. The data collected in this way is stored until you request us to delete the CookieFirst.
Order Processing Agreement
We have entered into an order processing agreement with CookieFirst. This is a data protection contract which guarantees that CookieFirst processes the personal data of our website visitors only according to our instructions and in compliance with the DSGVO.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address
These data will not be merged with other data sources.
The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal notification by email to us is sufficient. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Registration on this website
You can register on our website to use additional features on the site. We use the data entered for this purpose only for using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.
In the case of important changes, for example in the scope of our services or in the case of technically necessary changes, we will use the email address provided during registration to inform you.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal notification by sending an email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
The data collected during registration is stored by us as long as you are registered on our website and is then deleted. Legal retention periods remain unaffected.
5. Dealing with data in the career portal
The career portal is operated by NOSTA Holding GmbH, Buchenbrink 1, 49086 Osnabrück, Germany (hereinafter referred to as NOSTA) as the person responsible in the sense of the General Data Protection Regulation.
By accepting our career portal privacy Pplicy, you consent to NOSTA storing and processing your personal data for the purposes of application and recruitment. In the case of applications by minors, a declaration of consent from the parent or guardian is required.
Purpose-related use and disclosure of personal data
The data you enter on the pages of the career portal will be collected, processed and used exclusively for the purpose of processing your application. If you apply for a job in a company affiliated with NOSTA or if you send a speculative application, NOSTA will forward your application to the appropriate specialist department of the company of NOSTA Holding GmbH. Your details will be treated confidentially throughout the entire application process.
The data will be stored and processed on a server within Germany in accordance with the applicable data protection regulations. NOSTA takes security precautions to protect your data managed by us against manipulation, loss, destruction or against access by unauthorised persons or unauthorised disclodure. The data transfer between your browser and our career portal is encrypted.
The deletion of the transmitted data takes place at the latest six months after the end of the application procedure upon rejection of your application or a negative decision. This shall not apply if statutory provisions prevent the deletion or if further storage is necessary for the purpose of presenting evidence.
If your application is followed by the conclusion of an employment contract, your data may be stored and used within the framework of the necessary organisational and administrative process. You have the right to withdraw your application and have your data deleted at any time.
6. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. These are text files which are stored on your computer and which allow an analysis of your webiste usage. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States.
Googly Analytics cookies are stored on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both their website and advertising.
We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other signatory states to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your website usage, to compile reports on website activity and provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to this website: Disable Google Analytics.
You can find more information about the handling of user data by Google Analytics in Google´s privacy statement: https://support.google.com/analytics/answer/6004245?hl=de.
Order data processing
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics of Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of the site visitors. This data comes from interest-related advertising by Google and from visitor data from third parties. This data cannot be assigned to a specific person. You can disable this function at any time via the display settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in "Objection to data collection".
Google AdWords and Google Conversion-Tracking
This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
Within the framework of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the Internet browser stores on the user´s computer. These cookies lose their validity after 30 days and do not serve the personal identification of the users. If the user visits certain pages of this website and the cookie has not expired, Google and we may recognise that the user clicked on the ad and was directed to that page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking, Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie in your Internet browser under user settings. They will then not be included in the conversion tracking statistics.
Conversion cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both his website and his advertising.
You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organised and analysed. The date you enter for newsletter subscription (e.g. email address) will be stored on CleverReach´s servers in Germany and Ireland.
Our newsletters sent with CleverReach enable to us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link was clicked in the newsletter. With the help of so-called conversion tracking, we can also analyse whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking the link in the newsletter. Further information on data analysis through the CleverReach newsletter can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
If you don´t want an analysis by CleverReach, you have to unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
The data that you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted both from our servers and from CleverReach´s servers after you cancel the newsletter. This does not affect data stored by us for other purposes (e.g. email addresses for the member area).
Conclusion of a contract for order data processing
We have concluded a contract with CleverReach for order data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
8. Plugins and Tools
Our website uses plugins from the YouTube page operated by Google. The operator of these pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plug-in, a connection is established to the YouTube servers. This will tell the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you can allow YouTube to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 Abs. 1 lit. f DSGVO.
This page uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
Google Maps is used in the interest of an appealing presentation of our online offers and to easily locate the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 Abs. 1 lit. f DSGVO.
9. Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
10. Our social media appearances
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads).
When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
Individual social networks Facebook
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in:
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified under the EU-US Privacy Shield. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link:
11. INSTAGRAM PLUGIN VIA FLOCKLER
We use Flockler, a social media aggregator tool, to curate social media feeds and present social media content that we believe is relevant and inspiring to you.
Flockler does not store any information about your visit. However, depending on the platform, social media services may store information about you if you choose to interact with the content (e.g. play a video or visit our social media profile page).