Data protection declaration of
norelem Normelemente GmbH & Co. KG
Section 1 Information on the collection of personal data
(1) In the following, we would like to inform you about the collection of personal data when using our website. The term “personal data” includes all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) The data controller in accordance with Article 4 (7) EU General Data Protection Regulation (GDPR) is
norelem Normelemente GmbH & Co. KG
Telephone: +49 7145 206-0
Fax: +49 7145 206-66
Register court Stuttgart HRA 202135
VAT ID No.: DE 813191811
General partner of norelem Normelemente GmbH & Co. KG:
norelem Normelemente Verwaltungs-GmbH
Managing director of norelem Normelemente Verwaltungs-GmbH:
Registry court: Stuttgart District Court
Register number: HRB 206124
You can reach our dedicated contact person for data protection at
firstname.lastname@example.org or via our postal address by adding the identifier “data protection”.
(3) When contacting us by email or using the contact form, the data you provide (your email address, your name if applicable, company/educational institution, your address and your telephone or fax number) will be stored by us in order to respond to your enquiry. We will delete the data arising in connection herewith after storage is no longer required, or restrict its processing if there is a legal obligation to data retention.
(4) If we use contracted service providers for individual functions as part of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. Here, we would also like to mention the defined criteria pertaining to the duration of data retention.
Section 2 Your rights
(1) You have the following rights in relation to personal data concerning you:
– Right to its disclosure,
– Right to its rectification or erasure,
– Right to limit its processing,
– Right to object to its processing,
– Right to its transferability.
(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us.
Section 3 The collection of personal data when visiting our website
(1) When using the website for informational purposes only, i.e. if you choose not to register or otherwise provide us with information, we will only collect the personal data that your browser sends to our server. If you would like to view our website, we collect the following data, which is necessary from a technical standpoint for us to display our website and to ensure both its stability and security (the legal basis for this is Art. 6 (1) Sentence 1 Letter f GDPR):
– IP address
– Date and time of the request
– Operating system and its user interface
– Type of device from which the website is accessed (personal computer or mobile device)
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, through which certain information flows to the site that sets the cookie (in this case by us). Cookies cannot run programmes or spread viruses to your computer. They serve to make our Internet offering altogether more user-friendly and effective.
a) This website uses the following types of cookie, the scope and function of which are explained below:
– Transient cookies (please see b)
– Persistent cookies (please see c).
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called Session-ID, with which different requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a predetermined period of time, which may vary depending on the cookie involved. You can delete the cookies at any time via the security settings of your browser.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website if you choose to block certain (or all) cookies.
– identify users on a follow-up visit, if you have an account with us. Otherwise, you would have to log in again for each visit.
– track your activities during a session (transient cookies)
– ascertain the browser being used
– ensure a level of technical protection against the unauthorised sending of forms
f) [The flash cookies in use are not registered by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your end device. These objects store the required data regardless of the browser you are using and have no automatic expiration date. If you do not want flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to its private mode. We also recommend that you regularly delete your cookies and browser history manually.]
Section 4 Further functions and offers available on our website
(1) In addition to the use of our website for purely informative purposes, we offer various services which you can access if these are of interest. For this purpose, you will generally have to provide additional personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) We sometimes use external service providers to process your data. These providers have been carefully selected and commissioned by us, they are bound by our instructions and are subject to regular review.
Section 5 Objection (or the revocation of your consent) to the processing of your data
(1) If you have given your consent for your data to be processed, you may revoke your consent at any time. Such a revocation affects the permissibility of processing your personal data once you have notified us thereof.
(2) You may object to the processing of your data to the extent that we base the processing of your personal data on the weighing up of respective interests. This applies if said processing is, in particular, not necessary for the fulfilment of a contract with you, which is described by us in the following description of functions. Should you wish to register your objection, please explain the reasons why we should not process your personal data as we have done. In the event that your objection is justified, we will review the situation and either cease or adapt the data processing in question, or we will demonstrate to you our compelling reasons, which serve as the basis for the continued processing of your data.
(3) You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. Please notify us of your objection to the use of your personal data for advertising purposes by contacting us via the following contact details:
norelem Normelemente GmbH & Co. KG
Telephone: +49 7145 206-0
Fax: +49 7145 206-66
Section 6 Use of our training centre / eLearning platform
(1) If you wish to use our training centre / eLearning platform, you must register by providing your first name, last name, email address, a password of your choice and your freely selectable user name. There is no obligation to use a clear name, pseudonymous use is possible. We use the so-called double-opt-in procedure for registration, i.e. Your registration will only be completed once you have confirmed your registration by clicking on the link contained in a confirmation email, which is sent to you for this purpose. If your confirmation is not received within 7 days, your registration will be automatically deleted from our database. Providing the above-stated data is mandatory; all other information can be provided voluntarily by using our training centre / eLearning platform.
(2) If you use our training centre / eLearning platform, we will store the data required for the fulfilment of the contract – including details of the method of payment (see below, paragraph 3) – until you finally delete your access. Furthermore, we store the voluntary data provided by you for the duration of your use of the training centre / eLearning platform, unless you delete this first.
You can manage and amend all details in the protected customer area.
The legal basis for this is Art. 6 (1) Sentence 1 Letter f GDPR.
Furthermore, the following data is stored in connection with the implementation of training sessions / programmes via the training centre / eLearning platform:
– Booked / ordered training sessions / programmes
– Status of the implementation
– Final result (pass / fail)
(3) If you would like to take advantage of those offers available on our eLearning platform (orders) that are subject to a charge, it will be necessary – for the conclusion of contract – that you provide your personal data, which we need to process your order. Mandatory information needed for the processing of the contracts is highlighted separately; further information is voluntary. We process the data provided by you to complete your order. For this purpose, we can pass on your payment data to our house bank. The legal basis for this is Art. 6 (1) Sentence 1 Letter b GDPR.
You can voluntarily create a customer account, through which we can store your data for future orders. When creating an account under “Registration”, the data you provide will be stored on a revocable basis. You always have the option of deleting all other data, including your user account, in the customer area.]
We may also process the data you provide in order to notify you about other interesting products from our portfolio or to send you emails containing technical information.
(4) We are obligated under commercial and tax laws to store your address, payment and order data for a period of ten years. However, after two years we will restrict its processing, i.e. Your data will only be used to comply with all statutory obligations.
(5) In order to prevent unauthorised access by third parties to your personal data, in particular financial data, the connection is encrypted using TLS technology.
Section 7 Web Analytics
Use of Google Analytics:
(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “Cookies”, text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie concerning your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within Member States of the European Union or in other States which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to render further services vis-a-vis the website operator in connection with the use of the website and the internet.
(2) The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.
As an alternative to the browser add-on – and especially for browsers found on mobile devices – you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie is set to prevent future collection of your information when you visit this site. The opt-out cookie is only valid in this browser and only for our website; it is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again. For instructions on how to include the opt-out cookie, please go to: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].
(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in shortened form, meaning that any personal reference can be excluded. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is, therefore, deleted without delay.
(5) We use Google Analytics to analyse (and regularly improve) the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In exceptional cases where personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for the use of Google Analytics is Art. 6 (1) Sentence 1 Letter f GDPR.
(6) Third-party information:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland,
Fax: +353 (1) 436 1001.
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is performed with the help of a user ID.
Section 8 Use of social media plug-ins (Facebook, Instagram)
(1) We currently use the following social media plug-ins: Facebook, Instagram.
We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the identifying mark on the box and its initial letter or logo. We offer you the option to communicate directly with the provider of the plug-in via the button. Only if you click on the highlighted field (thereby activating it) will the plug-in provider receive the notification that you have accessed the corresponding website of our online offer. In addition, the data mentioned under Section 3 of this declaration will be transmitted. In the case of Facebook and Instagram, and according to the respective providers in Germany, the IP address is anonymised immediately after it is collected. By activating the plug-in, your personal data is transferred to the respective plug-in provider and stored there (for US providers in the USA). Due to the fact the plug-in provider collects data, in particular, via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.
(2) We have no influence over the data that is collected or the data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing or its retention periods. We also have no information about the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as user profiles and uses this for the purposes of advertising, market research and/or the demand-oriented design of its website. In particular, such an evaluation is carried out – including for users who are not logged in – for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via these plug-ins, we offer you the possibility of interacting with social networks and other users, in order that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of plug-ins is Art. 6 (1) Sentence 1 Letter f GDPR.
(4) The data is passed on irrespective of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect from you will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as you can then avoid being assigned to your profile with the plug-in provider.
(5) Further information pertaining to the purpose and scope of data collection and its processing by the plug-in provider can be found in the following data protection declarations of these providers. There, you will also find further information on your rights and settings to protect your privacy.
(6) The addresses of the respective plug-in providers and URL with their data protection declarations:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.
Section 9 Integration of YouTube videos
(1) We have integrated YouTube videos into our online offer, which are stored at http://www.YouTube.com and can be played directly from our website. These have all been integrated using the “enhanced privacy mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in Section 2 be transmitted. We have no influence over this data transmission.]
(2) By visiting the website, YouTube receives the information that you have visited the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration will be transmitted. This happens irrespective of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not want to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores the data collected about you as user profiles and uses this for the purposes of advertising, market research and/or the demand-oriented design of its website. In particular, such an evaluation is carried out – even for users who are not logged in – for the purpose of delivering need-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) Further information pertaining to the purpose and scope of data collection and its processing by YouTube can be found in the following data protection declaration. There, you will also find further information on your rights and settings to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Section 10 Map service from Google Maps
(1) On this website, we use Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function at your convenience.
(2) By visiting the website, Google receives the information that you have visited the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this declaration will be transmitted. This happens irrespective of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not want to be associated with your profile on Google, you must log out before activating the button. Google stores the data collected about you as user profiles and uses this for the purposes of advertising, market research and/or the demand-oriented design of its website. In particular, such an evaluation is carried out – even for users who are not logged in – for the purpose of delivering need-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) Further information pertaining to the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the provider. There, you will also find further information on your rights and settings to protect your privacy: http://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Section 11 Contact form and email contact
(1) There is a contact form on our website, which can be used to establish electronic contact. If a user decides to use this option, the data entered in the input screen is transmitted to us and stored.
This data includes:
An email address and everything you enter under “Your message”.
You can voluntarily provide your telephone number if you would like us to call you back.
At the point in time when the message is sent, the following data is also stored:
A list of the corresponding data then follows. Examples can include:
(a) The user’s IP address
(b) Date and time of the registration
Your consent is obtained when sending to enable the processing of your data and reference is made to this data protection declaration.
(2) Alternatively, contact can also be established via the email address provided. In this case, the user’s personal data transmitted along with the email will be stored.
The data will not be passed on to third-parties in this context. The data will be used exclusively for processing the respective communication request.
(3) The legal basis for the processing of data is Art. 6 (1) Letter a GDPR if the user has provided their consent.
The legal basis for the processing of data is Art. 6 (1) Letter f GDPR when sending an email. If email contact is established with the intention of concluding a contract, the additional legal basis for its processing is Art. 6 (1) Letter b GDPR.
(4) The processing of personal data from the input screen serves us solely to process the contact request. In the event of contact by email, a necessary and legitimate interest exists with regard to the processing of your data.
Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
(5) The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. With regard to the personal data from the input screen on the contact form and those requests sent by email, this is the case when the respective communication request with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been fully clarified.
(6) The user has the option of revoking their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the respective communication request cannot be pursued.
All personal data stored in the course of establishing contact will be deleted in this case.
Section 12 Data security
This website uses 256-bit SSL (AES 256) encryption technology. User data will only be transmitted in encrypted form.
Version as of August 2020