Privacy policy

Introduction

We, Naue GmbH & Co KG, Gewerbestr. 2, 32339 Espelkamp, Germany, as the operator of the online service, are responsible for the processing of the personal data of the users of the online service. Our contact details can be found in the legal notice of the online service; the contact persons for questions regarding the processing of personal data are named directly in this privacy policy.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.

With this data protection declaration, we inform you to what extent and for what purposes personal data is processed in connection with the use of the online offer.

Personal data

Personal data is information relating to an identified or identifiable natural person. This includes all information relating to your identity, such as your name, your e-mail address or your postal address. Information that cannot be linked to your identity (such as statistical data, e.g. the number of users of the online service) is not considered personal data.

In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. However, personal data is collected from you for some of the services offered. This data is then only processed by us for the purposes of using this online service, in particular to provide the requested information and to ensure the clear allocation of project-specific data. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We will indicate in each case whether the information is mandatory or voluntary. We will then provide information on the specific details in the corresponding section of this privacy policy.

Automated decision-making based on your personal data does not take place in connection with the use of our online services.

Processing of personal information

Your data is stored by us on specially protected servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to your data is only possible for a few authorised persons. These persons are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.

Your personal data is transmitted over the Internet in encrypted form. We use HTTPS encryption (Hypertext Transfer Protocol Secure) for data transmission.

Disclosure of personal data to third parties

We only use your personal information to provide the services you have requested. If we use external service providers to provide our services, they will also access the data exclusively for the purpose of providing the service. We take technical and organisational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.

Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the data being passed on or if we are authorised or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

If we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Art. 44 et seq. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is guaranteed in particular by an adequacy decision of the EU Commission or by suitable guarantees in accordance with Art. 46 GDPR.

Legal basis for data processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR is the legal basis for data processing.

Insofar as we process your personal data because this is necessary for the fulfilment of a contract or in the context of a contract-like relationship with you, Art. 6 para. 1 lit. b) GDPR is the legal basis for data processing.

Insofar as we process your personal data to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR is the legal basis for data processing.

Art. 6 para. 1 lit. f) GDPR may also be considered as the legal basis for data processing if the processing of your personal data is necessary to protect our legitimate interests or the interests of a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

For the storage of information in the end user’s terminal equipment or access to information that is already stored in the terminal equipment by means of cookies or comparable technologies that are not required to make the online offer available, our legal basis is also the user’s consent in accordance with Section 25 para. 1 TDDDG.

In this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.

Data erasure and storage duration

We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this point if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we delete or block your personal data after the end of the corresponding requirements.

Use of our online offer

Information about your computer

Each time you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this enquiry. We also collect product and version information about the browser used and the computer’s operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the duration of your use of the online service and is then deleted or anonymised by shortening it. The other data is stored for a limited period of time.

We use this data for the operation of the online offering, in particular to detect and eliminate errors, to determine the utilisation of the online offering and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.

Use of cookies

As on many websites, cookies and similar technologies are used for our online offering. Cookies are small text files that are stored on your computer and save certain settings and data for exchange with our online offering via your browser. A cookie can be used to store information on your end device and to access information on your end device. The use of cookies is also regularly used for further processing of personal data. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier

Cookies enable us to recognise your computer and make any default settings and preferences, such as the language setting, immediately available. The cookies we use are – as far as possible – so-called session cookies, which are automatically deleted at the end of the browser session. Cookies with a longer storage period can also be used so that your pre-settings and preferences can also be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

If cookies are not required for our online offering, we will ask you to consent to the use of cookies and the associated further data processing when you access the online offering for the first time. With regard to the non-essential cookies from third-party providers, you will find a more detailed description of the services we use from these third-party providers below. The legal basis for the storage of and access to information in your terminal equipment through the setting and reading of cookies is Section 25 para. 1 TDDDG. The legal basis for the associated further data processing, which is the purpose of the use of cookies, is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR. Once consent has been given, it can be revoked at any time with effect for the future, in particular by changing the selected settings. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR and – insofar as contracts are concluded or fulfilled via our online offer – the fulfilment of the contract within the meaning of Art. 6 para. 1 lit. b) GDPR.

Once a selection has been made with regard to the use of cookies, it can be changed again at any time.

Naue Portal

You can use our Naue Portal for any project planning. The Naue Portal is intended in particular for concrete project preparation. It is a web-based software portal that contains various modular programs, digital tools and documents for consulting, configuration, design, calculation, documentation, storage and management of the results and data of the aforementioned work steps for planning geotechnical structures with geosynthetics, natural fibre products and biodegradable products, fasteners and supplementary components (Naue products) and is available to the user for the aforementioned work steps of project processing.

In order to use the portal, you must create a user account. All your personal data and data relating to your use of the online services will be stored in your user account, provided you log in with your user account. You can register online for the user account. To do so, you must provide the data requested during the registration process. The information requested as a mandatory field during registration is required to fulfil or initiate a contract with us for certain services. To create a user account, you only need to provide an e-mail address and company affiliation, a password and your name and the services you have requested. We also record the date and time of registration and the IP address. Further information during registration and in the user account is voluntary. You can change the password you entered during registration at any time in the account settings. If you register with us for the fulfilment or initiation of a contract, the legal basis for processing the data is Art. 6 para. 1 lit. b) GDPR.

In order to use the full functionality of the user account, it is necessary to verify the e-mail address provided during registration. For this purpose, we will send a confirmation link to the e-mail address provided, which you must click on. This procedure serves to ensure the security of your data on the one hand and to ensure that communication regarding services is sent to a valid e-mail address on the other. We reserve the right to offer other registration options in addition to registration via the online offer, for which the regulations then apply accordingly.

The user account allows you to manage, update and, if necessary, delete your data. This includes, in particular, personal data (name, date of birth, addresses, telephone and mobile phone number), data on company affiliation (company, position, department), communication history, profile picture, language settings, consent to individual services, information on projects, search and navigation behaviour and information provided explicitly or implicitly by the customer on areas of interest. We can create segments from this data and assign customers to these segments. Membership of such segments is also stored in the user account. Location-related data such as your addresses or your location are stored if you have given your consent. Your current location may be used to provide you with location-based offers.

We use the stored data to process the joint business relationship. We also use the stored data to send you interesting and relevant offers via all the communication channels you use, provided you have given us your consent to do so. In this case, we use the stored data to try to determine which offers are relevant to you.

We will contact you as part of the business relationship using the contact details provided if you make use of individual services. We will inform you according to your selected preferences. Contact can be made by email, via messages on your smartphone or via other digital communication channels. You can also select optional communication channels and occasions; these include, in particular, special newsletters and app messages.

The data collected when using the user account is generally stored for the duration of the user account, but can also be deleted prematurely upon request. Most of the data can be viewed directly online and – with the exception of the e-mail address – can be changed or deleted. You can delete your user account at any time by informing us of your request for deletion, for example via the e-mail addresses provided in our online offer. If you delete your data immediately, it may not be possible to restore it later if you register again.

We use Amazon Web Services for the Naue Portal. This is a cloud computer service/hosting provided by Amazon Web Services, Inc, 410 Terry Avenue North, Seattle WA 98109, USA. We use the service to store our data on Amazon’s servers. If you transmit data to us or data is lawfully collected from you, it will be stored in the cloud . Due to the storage on servers in the USA, it cannot be ruled out that security authorities in the USA may also gain access to the data stored there. Amazon is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. In addition, Amazon Web Services is used for statistical analyses and to optimise the provision of content. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the provision of a secure and fast online offering and the optimisation of our website. You can find more information about the processing of data in Amazon’s privacy policy at https://aws.amazon.com/de/privacy/.

Customer Centre

You can voluntarily create a customer account in our Customer Centre for our online services. All information about you and your use of the various services is managed centrally in the customer account. In this way, you have the option of managing, updating and, if necessary, deleting all data. The legal basis for the processing of data for registration is Art. 6 para. 1 lit. a) GDPR in the case of consent. If you register with us for the fulfilment or initiation of a contract, the legal basis for the processing of the data is additionally Art. 6 para. 1 lit. b) GDPR.

Registration in the Customer Centre

You can register for a customer account online. To create a customer account, you only need to provide an e-mail address and a password. In order to use the full functionality of the customer account, it may be necessary to verify the e-mail address provided during registration. For this purpose, we will send a confirmation link to the e-mail address provided, which you must access. This procedure serves to ensure the security of your data on the one hand, and to ensure communication regarding services, delivery status or payment situation to a valid e-mail address on the other.

Collecting data via the Customer Centre

All data relating to the use of the online services is stored in the customer account, provided you log in with your customer account. This includes, in particular, personal data (name, age, addresses, delivery and payment information), vouchers, wish lists, purchase history, communication history, search and navigation behaviour, consent to individual services (such as newsletters) and information provided explicitly or implicitly by the customer about their main areas of interest. We can form segments from this data and assign customers to these segments. Membership of such segments is also stored in the customer account. Location-related data such as your delivery addresses or your location are stored if you have given your consent.

Your current location may be used to provide you with location-based offers. If you do not want the data to be stored in your customer account in individual cases, you can use the respective offers without using your customer account. If you wish to stop the storage of data in your customer account altogether, you can have your customer account deleted at any time.

Storage period and deletion

The data collected when using the customer account is generally stored for the duration of the customer account, but can also be deleted prematurely upon request. Most of the data can be viewed and changed or deleted directly online. You can delete your customer account at any time by informing us of your request for deletion, for example via the general contact form. If you delete your data immediately, it may not be possible to restore it later if you register again.

Applicant portal

You can use the applicant portal to apply for a job with us and submit all the necessary information and documents. Use of the applicant portal is voluntary; you can also send us your application by other means, for example by e-mail or post. In principle, you have the option of either applying for positions advertised by us or sending us an unsolicited application. As part of the application process, we will process all the information you submit with your application, e.g. name, contact details, CV and references. Upon receipt of an application by e-mail, post or in person, your documents will be forwarded to the responsible employees at our company and transferred to our applicant management system “Softgarden”. The data is processed for the purpose of carrying out the application process, deciding whether to establish an employment relationship and communicating with you. Our legal basis is your consent in accordance with Art. 6 para. 1 lit. a) GDPR or the processing for the decision on the establishment of an employment relationship in accordance with Art. 6 para. 1 lit. b) GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG and our legitimate interest in standardised applicant management within the meaning of Art. 6 para. 1 lit. f) GDPR. In the event of a rejection, the data will be kept for six months. In the event of a successful application, the data transmitted will also be stored by us for the purpose of processing the employment relationship in compliance with the legal requirements.

softgarden

For the efficient implementation of application procedures, we use an applicant management system from softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin (“softgarden”), which operates the applicant management system as a processor within the meaning of Art. 4 No. 8 GDPR. A contract for order processing in accordance with Art. 28 GDPR has been concluded with the provider, which ensures compliance with data protection regulations.

Further information can be found in softgarden’s privacy policy at https://softgarden.com/de/datenschutz-webseite/. You can contact the service provider directly at datenschutz@softgarden.de.

Application process

If you wish to submit your application documents via our applicant portal, you must provide the following data: First name, surname, email address, telephone number and cover letter. In addition, you can upload further documents, such as a CV or certificates, on a voluntary basis.

After you have sent your application documents, you will receive confirmation of receipt of your documents by e-mail.

As part of the application process, you can also set up and manage an account in the career portal after configuring your user name and password. After submitting your application documents, you will receive an email informing you that a user account has been created for you at the email address you provided when you submitted your application and that you still need to set a password for this account. In addition to the individual application, you can use further options in the softgarden applicant management system and make your individual settings (e.g. inclusion in a talent pool). For an efficient and promising application, you can voluntarily provide the following information as part of your application:

Contact details (e.g. address, telephone number)
Curriculum vitae data (e.g. school education, vocational training, professional experience, language skills)
Profiles in social networks (e.g. XING, LinkedIn, Facebook)
Documents in connection with applications (application photos, cover letters, certificates, references, work samples, etc.)

In addition, data associated with the use of the applicant management system is also collected, so-called usage data (e.g. information on the start, end and scope of use of the website, login data, date and time of access, browser type and version, operating system used, amount of data sent, IP address).

The legal basis for processing for the purposes of conducting the application procedure and initiating an employment relationship is Art. 6 para. 1 lit. b) GDPR in conjunction with Section 26 para. 1 BDSG. Section 26 para. 1 BDSG. In addition, the use of the applicant management system by the controller is in the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. If consent within the meaning of Art. 6 para. 1 lit. a) GDPR is required for a specific processing activity, this will be obtained separately and transparently from you by the controller, unless it results from conclusive and voluntary behaviour on your part in accordance with the transparency requirement.

Forwarding of data

Your data will not be passed on to unauthorised third parties in the context of applicant management and will only be processed for the purposes stated in this data protection declaration. For example, it is in the legitimate interest of Naue’s internal departments and specialist managers to inspect your data, provided that knowledge of the information from the application process is required and permitted for the selection of applicants or for the company’s internal administrative purposes. For this purpose, your data may be forwarded to third parties in the company by e-mail or within the management system. The legal basis may be Art. 6 para. 1 lit. b) GDPR in conjunction with Section 26 para. 1 BDSG, Art. 6 para. 1 lit. f) and Art. 6 para. 1 lit. a) GDPR.

The transfer to third parties also takes place within the framework of order processing in accordance with Art. 28 GDPR, in which the controller has a legitimate interest in outsourcing processing activities that it is otherwise authorised to carry out itself. For this purpose, the controller shall take measures to ensure compliance with data protection regulations.

Disclosure to external third parties may also take place for the defence of legal claims based on legitimate interest or in the context of the investigation of or disclosure to government agencies, insofar as this is required by law or there is an obligation to disclose. The information obligations towards data subjects within the meaning of Art. 13, 14 GDPR are guaranteed in advance of the relevant disclosure, insofar as these are to be fulfilled separately.

CV analysis with Textkernel

We process and analyse documents uploaded by you using AI technology to extract CV data and convert it into a structured form (so-called “CV parsing”).

To ensure data subject rights and security standards, an order processing contract has been concluded with the service provider. The processor is the ISO27001-certified provider Textkernel B.V. Asterweg 15D 1031 HL Amsterdam, Netherlands (“Textkernel”). The data processing takes place on a server in Germany in a secure environment.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR in order to initiate an employment relationship and to organise the application process as efficiently as possible. Personal data is not transferred to third countries. Your data will be deleted from Textkernel’s cache after processing.

Further information on data protection at Textkernel can be found at https://www.textkernel.com/privacy-statement/.

Feedback module

In addition to your application, we may ask you to submit your feedback after an interview and three months after you have been hired. We will send you an invitation link that will take you to the rating system to submit your feedback. The purpose of the processing is to further develop and optimise our recruiting and application processes as well as the company image. The following data is processed automatically for this purpose:

Contact details (name, e-mail)
Title of the position for which you have applied
Location of the position
Job category
Applicant identification

The feedback itself is anonymised and stored in the database. A direct personal reference is not established. However, it cannot be ruled out that an indirect personal reference may result from the position for which you have applied. In addition to a star rating and individual questions in which no personal data is requested, you have the option of leaving individual comments, in which you can also provide personal data on a voluntary basis. The information collected in this way can be displayed together with your feedback on our review page or transmitted to external partners such as kununu.

Participation is purely voluntary and only takes place with your consent, without which it is not possible to provide feedback. The legal basis is Art. 6 para. 1 lit. a) GDPR.

Referral Manager

The Referral Manager tool gives recruiters and employees the opportunity to share vacancies in our company on social networks or by email to friends and acquaintances in order to approach potential applicants or make direct recommendations.

If you decide to apply for a directly or indirectly proposed position, your personal data will be processed in accordance with a regular application process. Your data will be displayed to the relevant users and processed in applicant management. The name, position and application photo can be viewed by the recommending person in the Referral Manager. Before submitting your application, however, you have the option of displaying your application anonymously in the Referral Manager. The referrer can therefore only see that a person has applied in response to a recommendation.

The legal basis for the processing of your data for the purposes of recommendation and application is your consent in accordance with Art. 6 para. 1 lit. a) GDPR and Art. 6 para. 1 lit. b) GDPR in conjunction with Section 26 para. 1 BDSG. The data will be processed and deleted analogue to the regular application procedure.

Salary statistics module “Salary statistics”

Our service provider softgarden will give you the opportunity to provide feedback on your salary expectations and salaries offered to you at various stages of the application process.

The information transmitted is anonymised and processed without linking it to your name and contact details. Softgarden processes this data anonymised for its own purposes (statistics, analysis, studies) and is the controller for this processing within the meaning of Art. 4 No. 7 GDPR.

Processing will only take place with your consent through participation and on a purely voluntary basis. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.

Social Share Buttons

It is possible to share the job adverts on various social networks. Different buttons are provided for each network. After clicking on one of these buttons, you will be directed to the respective networks and will be taken to their login pages. These buttons are not plug-ins and do not transfer any personal data directly to the operators of the social networks.

The job adverts can currently be shared on the following social networks:

Facebook (https://de-de.facebook.com/privacy/explanation)
X ( https://x.com/de/privacy)
LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-join-privacy-policy)
Xing (https://privacy.xing.com/de/datenschutzerklaerung)

We have no influence on the processing of your personal data by the social networks. Information about the data processing of the respective social networks can be found under the links provided.

Easyfeedback” online surveys

At the end of the application process, softgarden may send you an invitation to a survey via a link. The survey takes place via a service provided by easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz (“easyfeedback”) in order to analyse the application experience. Softgarden conducts this survey as the controller within the meaning of Art. 4 No. 7 GDPR and processes the collected data anonymously for its own purposes (statistics, analysis, studies) and for the further development of softgarden products.

The collection of survey data is secured by SSL encryption as standard and softgarden does not establish any personal reference during the evaluation. The survey can be cancelled at any time. The data processed up to the time of cancellation can be used for the stated purposes.

Your participation in the survey is purely voluntary. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. The processing of data for evaluation purposes is anonymised at softgarden.

You can find more information about easyfeedback’s data protection in the following information: https://easy-feedback.de/privacy/datenschutzerklaerung.

Talent pool

As part of your application or via the “Get in touch” button, you have the opportunity to recommend yourself for our talent pool. The processing is necessary in order to be automatically considered for further job advertisements (similar or other suitable positions). If you register for the talent pool via the “Get in touch” button, the following information will be requested:

Salutation, academic title (optional)
First name, surname, e-mail address
Job fields of interest
Current career level
Favourite location(s)
XING profile or CV

Inclusion in the talent pool is purely voluntary with your consent and by using an opt-in link. The legal basis is Art. 6 para. 1 lit. a) GDPR. We will also write to you after four months to ask whether you still wish to be part of the talent pool.

Forwarding the status information of an application

If you apply to us via a job board (e.g. Hellowork, Stepstone), the data you submit will be automatically transferred to our recruiting system.
With some of these job boards, you have the option of tracking the status of your application in your account with the respective job board. For this purpose, our service provider, softgarden e-recruiting GmbH, transmits the status of your application (receipt, processing of the application, rejection) to the job exchange on our behalf. The transmission of the status in your account with the job exchange takes place with a time delay (up to four weeks) so that we can inform you personally about the status of your application in advance.
The legal basis for the data transfer is Art. 6 para. 1 lit. b) GDPR (initiation of an employment relationship) and Art. 6 para. 1 lit. a) GDPR.

Further information on data processing can be found in the data protection notices of the respective job exchange through which you have applied.

Deletion and use of data from the applicant portal

Your data will be stored for the duration of the application process and in accordance with the legitimate retention periods after completion of the application process. In the event of a rejection, the data will be retained for six months. After recruitment, the data will also be retained in the system for a further six months. Once the retention period has expired, the data is completely anonymised. The processing of anonymised data records is not subject to the material scope of the data protection regulations, so that anonymised data can be processed for statistical and analytical purposes, for the creation of market studies or for product development.

Automated decision making

Automated decision-making does not take place. Should this be or become necessary, transparent consent will be obtained in advance of the processing.

Naue Academy

We offer various e-learning opportunities via our Naue Academy, which are aimed at both internal and external users. The platform is provided and operated by Magh und Boppert GmbH as a processor. The content of the Naue Academy is managed and provided by Naue.

Registration is required in order to use the program. The Naue Academy is accessed via the Naue Portal using a single sign-on procedure. As part of the single sign-on procedure, the access data for the Naue Portal (user name, e-mail address and password and, if applicable, company affiliation) are transferred to the Naue Academy. For internal company users, the department, line manager and company contact details are also stored in the system. In addition, various usage data, in particular login times and data on the use of the learning units (e.g. start, completion, duration, ID, status) are processed.

After logging in, the respective user can access a partially personalised interface. Here, users have the opportunity to view various learning units. There are control questions at the end of various units. In some cases, the user has the option of obtaining a certificate for the respective learning unit after successfully completing . Naue provides the option of tracking which user has completed which learning unit and in what time.

External users can use the offer voluntarily. Our legal basis for data processing is the consent of the user in accordance with Art. 6 para. 1 lit. a) GDPR.

For internal company users, the use of the offer is partly mandatory and partly voluntary. Our legal basis in this respect is consent in accordance with Art. 6 para. 1 lit. a) GDPR or processing for the purposes of the employment relationship in accordance with Art. 6 para. 1 lit. b) in conjunction with Section 26 para. 1 sentence 1 BDSG and, if applicable, Art. 6 para. 1 lit. c) GDPR. § Section 26 para. 1 sentence 1 BDSG and, if applicable, Art. 6 para. 1 lit. c) GDPR and Art. 6 para. 1 lit. f) GDPR.

The data collected in the context of using the Naue Academy is generally stored in the Naue Academy for the duration of the user account, but can also be deleted prematurely upon request.

Naue Assistant

We provide you with the Naue Assistant via our online offering, which you can ask questions about our products and services in particular and which provides you with general information about our company. Our Naue Assistant is an AI tool in the form of a chatbot that does not make automated decisions.

Use of the Naue Assistant is voluntary. You can decide for yourself what information you enter in the Naue Assistant. We also store the IP address and the date and time of the enquiry. The data is only stored for the duration of use and is not retained beyond this period. When using the Naue Assistant, please note that although it endeavours to provide you with accurate and helpful answers, it may occasionally generate incorrect information. We therefore recommend that you check critical information and do not rely solely on the Naue Assistant when making a decision. If you require personalised advice or have any problems with the answers provided by the Naue Assistant, please contact our support team at .info@naue.com

In order to be able to offer you the Naue Assistant, we work with the service providers Amazon Web Services, Inc. Box 81226, Seattle, WA 98108, USA and OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. It cannot be ruled out that data may be transferred to Amazon and OpenAI in the USA in this context and that US security authorities may gain access to the data under certain circumstances. We have no influence on data processing by Amazon and OpenAI. Further information can be found in the privacy policy at https://aws.amazon.com/de/privacy/ and https://openai.com/policies/privacy-policy/

Our legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

Integration of the services of third-party providers

We use third-party services for some of the functions on our website. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and, as far as possible, we endeavour to ensure that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with data protection regulations.

Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for our Naue Portal and our Customer Centre as well as in our general online offering at www.naue.com. Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google Tag Manager can be used to integrate Google services into a website.

When using the Google Tag Manager, a connection to the Google servers is established. As a result, the IP address of the browser of the end device used by the visitor to this website is stored by Google. It cannot be ruled out that data may be transmitted to Google in the USA in this context and that US security authorities may gain access to the data under circumstances. However, cookies are not set in connection with the use of Google Tag Manager.

You can find more information about the Google Tag Manager and data processing by Google here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

Our legal basis for the use of Google Tag Manager is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the management of the tracking codes in our online offering, which enable us to analyse the use of our online offering and to improve and personalise our services.

Google Analytics

We use Google Analytics in our general online offering at www. naue.com, in the Naue Portal and in the Customer Centre for statistical analyses. Google Analytics is a web analysis service from Google.

As part of Google Analytics, Google uses cookies, among other things, for the analyses. The type and scope of the use and analysis of cookies are specified by Google. The information generated by the cookies about your use of the online offer is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data as a result. However, due to the automatic activation of IP anonymisation on this website, your IP address will be truncated by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there.

Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us, as the operator of the website, with other services relating to website activity and internet usage. Google may also use the data for its own purposes. As part of these purposes, Google may, for example, create a profile of user behaviour or link the data with other data, for example with an existing Google account. We have no influence whatsoever on these data processing operations. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other data that Google collects or already has. For more information, please refer to Google’s data protection information, which is linked below.

We also use the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the following paragraph. You can find more information on the “demographic features” function at Google at https://support.google.com/analytics/answer/2799357?hl=de.

You can prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Further information on this can be found at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). Please note that the code “anonymizeIp();” has been added to Google Analytics on our website in order to anonymise IP addresses, whereby the last octet is deleted.

The legal basis for the setting and reading of technically unnecessary cookies or the use of comparable technologies is your consent in accordance with Section 25 para. 1 TDDDG. For the subsequent further data processing in connection with the use of Google Analytics, which is the purpose of the use of cookies or comparable technologies, your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR is our legal basis.

Google reCAPTCHA

To secure our forms, including against misuse for sending spam, we use the reCAPTCHA service provided by Google for our general online offering at www.naue.com. The service analyses the extent to which manual input is actually made by a user. The service analyses the extent to which manual input is actually made by a user and is intended to filter out automated access, for example by scripts or so-called bots. In order to use the service the IP address and other data required by Google for the reCAPTCHA service (device information, user behaviour and cookie content) must be transmitted to Google.

The legal basis for the setting and reading of technically unnecessary cookies or the use of comparable technologies is your consent pursuant to Section 25 para. 1 TDDDG. The legal basis for the subsequent transmission of the data and the further data processing, which is intended with the use of cookies or comparable technologies, is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information on data protection at Google, including in relation to the reCAPTCHA service, be found at https://policies.google.com/privacy?hl=de.

Matomo

For our general online offering at www.naue.com and in our applicant portal, we use the open source software Matomo to statistically analyse the use of our online offering. This is a web analysis service. The data collected by Matomo is stored in a database for usage analysis purposes, which serves to optimise our website. This constitutes our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. The data collected includes the shortened IP address, the time, the website accessed, the website from which you accessed our website (“referrer”), the browser used, the time spent on our website and the frequency of access.

The analyses generated by Matomo are completely anonymised and cannot be used to identify individual persons. The data stored by Matomo is not linked to other data sources or passed on to third parties

OpenStreetMap

We use the OpenStreetMap map service for our applicant portal. OpenStreetMap is a service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (“OSMF”).

No cookies are set for the maps integrated into our online offering. When you call up a page of our online offer in which a map of the map service is integrated, a connection is established to the servers operated by OSMF in Great Britain and other countries. With your consent, your personal data, such as your IP address, the time of the query, the location queried and your location, may be transmitted to OSMF. It cannot be ruled out that data may be transferred to countries outside the EU and that government agencies may be able to access this data as a result. We have no influence on data processing by OSMF. Information on data protection at OSMF can be found at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The legal basis for the integration of the map service is Art. 6 para. 1 lit. f) GDPR; our legitimate interest lies in the provision of map material for your orientation. If you have given your consent to the transfer of data to or the processing of data by OSMF, the legal basis for the setting and reading of technically unnecessary cookies or the use of comparable technologies is your consent pursuant to Section 25 para. 1 TDDDG and for the subsequent data processing, which is the purpose of the use of cookies or comparable technologies, your consent pursuant to Art. 6 para. 1 lit. a) GDPR. Once you have given your consent, you can revoke it at any time with effect for the future.

Font Awesome

We use the “Font Awesome” service provided by Fonticons, Inc, 710 Blackhorn Dr, Carl Junction, MO, 64834, USA, in our general online offering at www.naue.com to display fonts and icons on our general online offering at www.naue.com in a standardised manner.

When you access our website, your browser loads the required fonts and icons into your browser cache in order to display fonts and icons correctly. The fonts and icons are stored on our own servers. The integration takes place by a call from our own servers. A connection to the Fonticons servers is not established. You can find more information on data protection at Fonticons at: https://fontawesome.com/privacy.

The legal basis for the integration of Font Awesome is Art. 6 para. 1 lit. f) GDPR; our legitimate interest is the optimisation of our online offer.

Leadinfo

For our general online offering at www.naue.com and in the Naue Portal, we use the service of the provider Leadinfo B.V, Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands (“Leadinfo”). Through the Leadinfo service, we are shown publicly accessible company data based on IP addresses, such as company names and addresses. This is done to give us an overview of which companies visit our website. The recognition of companies is based solely on the processing of IP addresses. These IP addresses are not saved after use. In addition to this recognition via IP addresses, two first-party cookies are used to provide us with information on how visitors use the website (analytics). Leadinfo also processes domains from form entries in order to correlate IP addresses with companies and improve services. These cookies are not linked to other information and no personal data is passed on to third parties.

Further information can be found in Leadinfo’s privacy policy at https://www.leadinfo.com/de/datenschutz/.

You have an opt-out option at https://www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.

We use Leadinfo in relation to the setting and reading of technically necessary cookies or the use of comparable technologies on the basis of your express consent in accordance with Section 25 para. 1 TDDDG and in relation to the subsequent further data processing, which is intended with the use of cookies or comparable technologies, on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke this consent at any time with effect for the future.

Use of YouTube

YouTube videos are integrated into our general online offering at www.naue.com and in our applicant portal. We use a plugin from the YouTube service operated by Google (hereinafter referred to as “YouTube”) to play these videos. The operator of the service is Google

We use the YouTube service in extended data protection mode in order to protect your privacy as well as possible. If you call up a website of our online offer on which a YouTube video is integrated, Google initially only receives the information necessary for integration and no cookies are set to analyse usage. Only when you play the embedded video does Google receive further information; Google may also set cookies to analyse your user behaviour. When you play the video, Google’s YouTube servers are informed, for example, which page of our website you are using to play the video.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the assignment of data to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube to show you videos so that we can better inform you about us and our services. The legal basis for the integration of the videos is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR; however, the playing of the videos and the associated further data processing is carried out with regard to the setting and reading of technically unnecessary cookies or the use of comparable technologies only on the basis of your consent in accordance with Section 25 para. 1 TDDDG and with regard to the subsequent further data processing, which is intended with the use of cookies or comparable technologies, on the basis of your consent within the meaning of Art. 6 para. 1 lit. a) GDPR.

Content Delivery Network

We use content delivery network tools (CDN) in our online offering. A CDN is a network of (globally) distributed servers that is able to deliver content to users quickly and in an optimised manner. In particular, it helps with the loading speed of online content. The data traffic between users and our online offering is analysed. For this purpose, personal data is processed in server log files from various providers. It cannot be ruled out that these servers are located in the USA or other third countries. As a result, security authorities in the USA or other third countries may also be able to access the data stored there. In this respect, we use the following service providers:

Cloudflare Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. Further information can be found in the privacy policy at https://www.cloudflare.com/de-de/privacypolicy/ and at https://blog.cloudflare.com/what-cloudflare-logs/.

Leadinfo B.V, Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, The Netherlands. Further information can be found in the privacy policy at https://www.leadinfo.com/de/datenschutz/.

BunnyWay d.o.o., Dunajska c. 165, 1000 Ljubljana, Slovenia. Further information can be found in the privacy policy at https://bunny.net/privacy/.

Amazon Web Services, Inc, P.O. Box 81226, Seattle, WA 98108, USA. Further information can be found in the privacy policy at https://aws.amazon.com/de/privacy/.

Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB (jsDelivr). Further information can be found in the privacy policy at https://www.jsdelivr.com/terms/privacy-policy.

The use of CDN service providers is based on our legitimate interest in optimising our online offering in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

Gstatic

We use the Gstatic service as a domain from Google. In particular, Gstatic helps to load content on Google faster from our content delivery networks. The domain reduces bandwidth utilisation, increases network performance and generally speeds up the loading of Google services. When using it, it cannot be ruled out that data will be stored on Google servers in the USA. This may also allow security authorities in the USA to access the data stored there. The use is in our legitimate interest in the best possible presentation of our online offer in accordance with Art. 6 para. 1 lit. f) GDPR. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

Posthog

To improve our service and ensure that we provide the most relevant and accurate information, we use the analytics service Posthog in the Naue Portal and Naue Assistant. Posthog is a service provided by Posthog Inc, 2261 Market Street #4008, San Francisco, CA 94114.

When using Posthog, cookies are used, among other things, to collect and subsequently analyse data. The data collected includes, in particular, the user’s activity on our site, entries on our site, device and browser information and a tracking code. The analysis is largely pseudonymised using an ID. The data helps us to understand how you interact with the Naue Portal and the Naue Assistant and enables us to continuously improve our service. Posthog is a provider from the USA. In this respect, it cannot be ruled out that data may be transmitted to the USA when using Posthog and that government agencies may be able to access the data as a result. Information on data protection at Posthog can be found at: https://posthog.com/privacy.

Our legal basis for the setting and reading of technically unnecessary cookies or the use of comparable technologies is your consent in accordance with Section 25 para. 1 TDDDG. For the subsequent further data processing, which is intended with the use of cookies or comparable technologies, your consent is our legal basis in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

Registration for events

You have the opportunity to participate in our online webinars via various links on our website. We use the service provider GoTo Technologies Ireland Unlimited Company, 77 Sir John Rogerson’s Quay, Block C, Suite 207, Grand Canal Docklands, Dublin 2, D02 VK60, Ireland (“GoTo”) to organise the web seminars. You can find more information on data processing by GoTo at https://www.goto.com/de/company/legal/privacy.

Participation in our web seminars is voluntary. If you wish to participate in a web seminar, we will process the personal data you provide in a registration form, in particular your name, email address and address. In addition, we also process technical information and information about participation in our webinars, such as the start, duration and end of participation, as part of the organisation of the webinars.

We process the data transmitted via the registration form and the data collected in the course of conducting the web seminars for the purpose of conducting the web seminar, contacting you regarding the event, providing you with further information and evaluating and optimising our offer.

Our legal basis for data processing in connection with the organisation of the web seminars and with regard to the information you provide to us in this context is Art. 6 para. 1 lit. f) GDPR in conjunction with our interest in organising web seminars, unless you have consented to the processing pursuant to Art. 6 para. 1 lit. a) GDPR.

As part of the web seminars, you also have the opportunity to participate, for example by using the chat function or making comments. The use of the respective functions is voluntary. Our legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. If you do not agree to your participation being recorded, we ask you to refrain from participating.

Our webinars are recorded as standard. If necessary, the recordings are made available to participants on request or published on one of our communication channels (e.g. website or YouTube channel). However, the content is edited before publication so that comments and requests to speak from external participants are cut out.

Communication with us

You can contact us in various ways, including via the contact form on our website or the project form in our Naue portal, live chat or by e-mail.

Contact form

If you wish to use the contact form on our website, we will collect the personal data you provide in the contact form, in particular your name, e-mail address and department. We also store the IP address and the date and time of the enquiry. We process the data transmitted via the contact form solely for the purpose of responding to your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

After the matter has been processed by us, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise we will delete the data once the matter has been fully dealt with; statutory retention obligations remain unaffected in each case.

Project form

You can send us technical questions via the project form in our online offer. By clicking on the “Use our project form” button, you have the option of sending your questions by e-mail to our e-mail address specially set up for technical questions. If you wish to use this function, we will collect the personal data you enter in your e-mail, in particular your name, e-mail address and your message. We also store the date and time of the enquiry. We process the data transmitted via the project form solely for the purpose of responding to your enquiry or request.

You can decide for yourself what information you send us by email via the project form. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Contact by e-mail

If you wish to use the e-mail addresses provided in our online offer to contact us, we will collect the personal data you provide in your e-mail, in particular your name, e-mail address and your message. We also store the date and time of the enquiry. We process the data transmitted by e-mail solely for the purpose of responding to your enquiry or request.

You can decide for yourself what information you send us by e-mail. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

When you register for our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by e-mail on current topics as well as e-mails on special occasions, such as special promotions. Within the framework of the legal requirements, it is also possible that you may receive promotional emails from us without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. The emails may be personalised and individualised based on our information about you.

To register for our newsletter, we use the so-called double opt-in procedure, i.e. we will only send you advertising by e-mail if you have expressly confirmed this to . We will send you a notification e-mail for this purpose and ask you to click on a confirmation link contained in this e-mail in order to verify the accuracy of the e-mail address provided. Such verification may be omitted if we already know the e-mail address or if no verification is required for other reasons.

The legal basis for processing your data when ordering the newsletter is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. If we send e-mail advertising without your express consent, our legitimate interest in sending direct advertising in accordance with Art. 6 para. 1 lit. f) GDPR is to be regarded as the legal basis in this case.

If you no longer wish to receive promotional e-mails from us, you can revoke your consent at any time with effect for the future or object to the further receipt of e-mails without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer. As a precaution, we would like to point out that cancellation and objection have no influence on the sending of such e-mails by us, which are sent on the occasion of order or contract processing and have no advertising background (so-called transactional e-mails).

Brevo

We use Brevo to send our newsletter. Brevo is a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin (hereinafter: Brevo). The email addresses of our newsletter recipients as well as the other data processed in the context of sending the newsletter are stored on Brevo’s servers. Brevo also offers various options for analysing the extent to which the newsletters sent are opened and used, e.g. to how many users an email was sent, whether emails were rejected and whether users unsubscribed from the list after receiving an email. Further information on data protection in connection with Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/.

The legal basis for the cooperation with Brevo is your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Our legal basis for the use of technically unnecessary cookies or comparable technologies that can be used in this context is your consent in accordance with Section 25 para. 1 TDDDG.

Live Chat Userlike

Customers can use the Userlike live chat in our general online offering at www.naue.com and in the Customer Centre to communicate with us. This service is operated by Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne (“Userlike”). The service is a live chat plugin. This tool offers the possibility to chat with our employees almost in real time. When using the live chat, the date and time of the call, browser type and version, IP address, operating system used, URL of the previously visited website, amount of data sent, name, e-mail address and company name are processed.

The information about the use and related data is collected, stored and processed on Userlike servers in Germany. You can find more information in Userlike’s privacy policy at https://www.userlike.com/de/terms#privacy-policy.

When you visit our website, the chat widget is loaded in the form of a JavaScript file from AWS Cloudfront. The chat widget represents a source code that is executed on your computer and thus enables the chat.

In addition, Userlike stores the history of live chats. The purpose of this is to save you the trouble of having to provide extensive details about the history of your enquiry and to ensure the ongoing quality control of our live chat service. If you do not wish this to happen, you are welcome to let us know using the contact details below. Saved live chats will then be deleted by us immediately.

Userlike uses a global server network (CDN) of the company Amazon Web Services, Inc, P.O. Box 81226, Seattle, WA 98108, USA (“Amazon”). A CDN is a worldwide network of servers that provides content for Userlike. The use of a CDN ensures that the Userlike service can be accessed equally quickly in every country in the world. In this context, content refers to Java script files or chat widgets that contain source code for executing the chat. It can therefore not be completely ruled out that data may be transmitted to Amazon in the USA in this context and that US security authorities may be able to access the data.

The data processing is carried out with regard to the setting and reading of technically necessary cookies or the use of comparable technologies on the basis of your express consent in accordance with Section 25 TDDDG and with regard to the subsequent further data processing, your consent in accordance with Art. 6 Para. 1 lit. a) GDPR.

Social Media

In addition to our online offering, we also use various social media channels for the transmission of information and communication, to which you will find links in our online offering or in which you will find links to our online offering. Specifically, we use the social networks Facebook, Instagram and YouTube, the career networks LinkedIn and Xing, as well as the short message service Twitter. You can recognise the links by the respective provider’s logo.

Clicking on the links opens the corresponding social media pages, for which the respective providers’ own provisions and data protection notices apply. We have summarised an overview of the respective provider’s information for you below

Facebook: https://www.facebook.com/policy.php

Instagram: https://help.instagram.com/519522125107875

X: https://twitter.com/privacy?lang=de

YouTube: https://policies.google.com/privacy

LinkedIn: https://de.linkedin.com/legal/privacy-policy

Xing: https://www.xing.com/privacy

No personal information is transmitted to the respective providers before the corresponding links are called up. Your access to the linked page is also the basis for data processing by the respective provider.

We would also like to take this opportunity to point out that the German Federal Office for Information Security (BSI) provides general information on the safe use of social networks on its website at https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Onlinekommunikation/Soziale-Netzwerke/soziale-netzwerke_node.html.

The following information on the associated processing of your personal data also applies to our use of the Facebook social media channel.

Facebook Fanpage

In addition to our own online offering, we also operate a fan page on the social network Facebook. We use the fan page to provide information about our activities and offer a channel for communication. The operator of the Facebook social network is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (referred to as: “Meta”). In this respect, we use the technical platform and services of Meta.

Delimitation of responsibility

We would like to point out that you use the fan page and its functions on your own responsibility, especially with regard to interactive functions such as commenting, sharing or rating. Alternatively, you can also access the information offered via the fan page on our homepage.

We endeavour to ensure the protection of your privacy and your private data within the scope of the possibilities offered by Facebook. Insofar as your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the Fanpage into Meta’s offering, it should also be noted that Meta processes personal data at the same time. When you visit the Fanpage, Meta collects, among other things, your IP address and other information that may be stored in the form of cookies on the device you are using or in the respective browser. We have no influence on data processing by Meta; in particular, Meta does not act as a processor for us under our responsibility. Meta’s data processing is governed – at least according to Meta – by Facebook’s guidelines, which are available at https://de-de.facebook.com/privacy/policy/. We would like to point out that the data collected by Meta about you in this context may also be transferred outside the European Union.

In terms of data protection law, it can be assumed that Meta and we are jointly responsible for the operation of the fan page and the analysis of user data when visiting the fan page. In accordance with data protection regulations, we have reached an agreement with Meta on the internal delimitation of responsibility.

Facebook Insights

Facebook offers fan page operators the option of using the Page Insights function to obtain an overview of the use of the fan page and its users. Page Insights can be used primarily to access and analyse statistical data. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated itself. Meta provides further information on how the Page Insights function works and who is responsible for it at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Users who are registered with Facebook also have the option of communicating directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, the evaluation of customer enquiries and the monitoring of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option to revoke your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further information about Facebook

If you have any questions about the use of personal data by us in connection with the use of the fan page on Facebook, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in this privacy policy. If you have any questions about data protection on Facebook, please contact Meta directly.

Instagram account

We also have an account on the social network Instagram. We use the Instagram account to provide information about our activities through our own publications and offer another channel for communicating with us. The Instagram social network is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: “Meta”).

Please remember that you use Instagram and its functions on your own responsibility, especially with regard to interactive functions such as commenting, sharing or rating.

Responsibility under data protection law

We endeavour to ensure the protection of your privacy and your private data as far as possible on Instagram. Insofar as your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this privacy policy apply without restriction. Due to the integration of the account into Meta’s offer, it should also be noted that Meta’s personal data is processed at the same time. When you access our Instagram content, Meta collects, among other things, your IP address and other information that may be stored in the form of cookies and similar technologies on the device you are using or in the respective browser.

We may instruct Meta to match user IDs with other user information and to combine these matched user IDs with event data. Meta then processes the event data for us in order to provide measurement and analysis services and products. The information provided to us by Meta is generally statistical data that we can use to determine the impact of our advertising and content and to gain insights into the use of our online services. The data is only used for these purposes. In this respect, Meta acts as our processor in accordance with our instructions.

Insofar as personal data about the use of our online services is processed in event data as part of the Meta Business Tools used by us, it can be assumed that Meta and we are jointly responsible for the operation of our social media channel and the analysis of user data when visiting the channel. In accordance with the data protection regulations, we have reached an internal agreement with Meta on the delimitation of responsibility. The Meta Business Tool we use is Instagram Insights, about which you can find more information in the following section of this privacy policy.

With regard to the further data processing that takes place, it can be assumed that Meta and we have two separate responsibilities for the operation of the Instagram account and the associated communication and analysis options. Insofar as your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case if you communicate directly with us via the “Instagram Direct Messaging” function and transmit your data to us in the process. If your personal data is processed by Meta and Meta alone decides on the purposes and means of data processing, Meta is solely responsible for this data processing. This applies in particular to the analysis of user behaviour by Meta for its own purposes.

We have no influence on data processing by Meta under its responsibility. Meta’s data processing is governed – at least according to Meta – by Meta’s guidelines, which are available at https://privacycenter.instagram.com/. We would like to point out that the data collected by Meta about you may also be transferred outside the European Union.

Instagram Insights

Meta offers the operators of Instagram accounts the opportunity to obtain an overview of the use of the account and its users via the “Instagram Insights” function. Instagram Insights can be used primarily to access and analyse statistical data. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated. The data we receive from Meta is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our Instagram account.

Meta further information on Instagram Insights at https://help.instagram.com/1533933820244654.

Instagram Direct Messaging

Instagram gives you the opportunity to communicate directly with us via the “Instagram Direct Messaging” function. If you contact us via the Instagram Direct Messaging function, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, the evaluation of customer enquiries and the monitoring of misuse.

Further information about Instagram

If you have any questions about the use of personal data by us in connection with the use of our Instagram account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on the Instagram social network offered by Meta, please contact Meta directly.

X-Account

In addition to our own online offering, we also operate an account on the short message service X (formerly Twitter). We use the X account to provide information about our activities and offer a channel for communication. The short message service X is operated by Twitter International Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (hereinafter referred to as “X”).

We would like to point out that you use the X short messaging service and its functions at your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

Processing of personal data

The data collected about you when you use the service is processed by X and may be transferred to countries outside the European Union. The data processed includes your IP address, the application used, details of the device you are using (including device ID and application ID), information on websites accessed, your location and your mobile phone provider. This data is assigned to your X-account data. We have no influence on the type and scope of the data processed by X, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by X and for what purposes it is used can be found in X’s privacy policy at https://twitter.com/privacy?lang=de. The option to view your own data can be found at https://help.twitter.com/de/managing-your-account/accessing-your-twitter-data.

We process the data you enter on X, in particular your user name and the content published under your account, to the extent that we may retweet your tweets, reply to them or write tweets from us that refer to your account. The data you freely publish and disseminate on X will be included by us in this way in our offer and made accessible to our followers in order to make our channel more attractive.

You have the option of restricting the processing of your data in the general settings of your X account and under “Privacy and security”. You can also restrict X’s access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system used. Further information on these points can be found on the following X support pages: https://support.twitter.com/articles/105576#.

X Analytics

X offers operators of X accounts the option of using the “X Analytics” function to obtain an overview of the use of the account and its users. In particular, statistical data can be accessed and analysed via X Analytics. We use the data from X Analytics to make the X Account as attractive and efficient as possible. For this purpose, X provides us with data that X has generated itself under its own responsibility. The data we receive from X is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our X account. X provides further information on X Analytics at https://business.twitter.com/de/advertising/analytics.html.

Direct messages

At X, you have the option of communicating with us directly via the “direct messages” function. If you contact us via the direct messaging function, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer enquiries, the evaluation of customer enquiries and the monitoring of misuse.

X-Buttons, X-Widgets

X buttons or X widgets integrated into websites and the use of cookies enable X to record your visits to these websites and assign them to your X account. The information generated by the cookies is transferred to an X server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data as a result. The data collected by the cookies can be used to offer you customised content or advertising. Information on this and the available setting options can be found at https://help.twitter.com/de/using-twitter/tailored-suggestions or https://help.twitter.com/de/rules-and-policies/twitter-cookies.

Further information on X

If you have any questions about the use of personal data by us in connection with the use of our X-Account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at X, please contact X directly.

YouTube channel

In addition to our own online offering, we also operate a channel on the YouTube video platform. We use the channel to provide information about our activities and offer a channel for communication. The YouTube video platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

We would like to point out that you use the video platform and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. discussion, comments).

Processing of personal data

The data collected about you when you use the service is processed by Google and may be transferred to countries outside the European Union. The processed data includes the data you voluntarily provide, such as your name, user name, email address and telephone number, the content you create, upload or receive, such as photos and videos, documents and tables as well as comments, your IP address, information about the device you are using, information about websites and content accessed, your location and your mobile phone provider. We have no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. Information about which data is processed by Google and for what purposes can be found in Google’s privacy policy at https://policies.google.com/?hl=de&gl=de.

We process the data you enter on YouTube, in particular your user name and the content published under your account, to the extent that we may link to your posts or reply to them or write posts from us that refer to your account. The data freely published and distributed by you on YouTube will be included by us in this way in our offer and made accessible to our followers.

You have the option of restricting the processing of your data in the general settings of your Google account. You can also restrict Google’s access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system you are using. In addition to these tools, Google also offers specific data protection settings for YouTube. You can find out more about this at: https://policies.google.com/privacy?hl=de&gl=de#infochoices.

YouTube Analytics

Google offers the operators of YouTube channels the opportunity to obtain an overview of the use of the account and its users via the “YouTube Analytics” function. YouTube Analytics can be used primarily to access and analyse statistical data. We use the data from YouTube Analytics to make the YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that Google itself has generated under its own responsibility. The data we receive from Google is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our YouTube channel. Google provides further information on YouTube Analytics at https://support.google.com/youtube/answer/9002587?hl=de.

Further information about YouTube

If you have any questions about the use of personal data by us in connection with the use of the YouTube channel, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Google, please contact Google directly.

In addition to our own online offering, we also operate an account on the career network LinkedIn. We use the account to provide information about our company and our activities and offer a channel for communication. The LinkedIn career network is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

We would like to point out that you use the career network and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. liking, sharing, commenting).

Processing of personal data

The data collected about you when you use the service is processed by LinkedIn. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes data you provide voluntarily, such as your name, user name, email address, telephone number, information about your professional career, profile data, content you create, upload or receive and comments, your IP address, information about the device you are using, information about websites and content accessed and your location. We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by LinkedIn and for what purposes can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy?.

We process the data you enter on LinkedIn to the extent that we may like, comment on or share your posts or contact you and interact with you. The data you freely publish and disseminate on LinkedIn will be included by us in our offer in this way.

You have the option of restricting the processing of your data in the general settings of your LinkedIn account. You can also restrict LinkedIn’s access to contact and calendar data, photos, location data, etc. in the settings options for mobile devices. However, this depends on the operating system you are using. You can find out more about LinkedIn’s data protection settings at: https://de.linkedin.com/legal/privacy-policy.

Analysis

LinkedIn offers the operators of LinkedIn accounts the opportunity to obtain an overview of the use of the account and its users. Statistical data in particular can be accessed and analysed using the analysis functions. We use the data to make our account as attractive and efficient as possible. For this purpose, LinkedIn provides us with data that LinkedIn itself has generated under its own responsibility. The data we receive from LinkedIn is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our LinkedIn account. Further information can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy.

Communication

LinkedIn gives you the opportunity to communicate directly with us. If you contact us via LinkedIn, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of enquiries, the evaluation of enquiries and the monitoring of misuse.

Further information about LinkedIn

If you have any questions about the use of personal data by us in connection with the use of the LinkedIn account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at LinkedIn, please contact LinkedIn directly.

Xing

In addition to our own online presence, we also operate an account on the Xing career network. We use the account to provide information about our company and our activities and offer a channel for communication. The Xing career network is operated by New Work SE, Am Strandkai 1, 20457 Hamburg (“New Work”).

Processing of personal data

The data collected about you when you use the service will be processed by New Work. It cannot be ruled out that data may also be transferred to countries outside the European Union. The processed data includes, among other things, the data you voluntarily provide, such as your name, user name, e-mail address, telephone number, information about your professional career, profile data, content that you create, upload or receive, as well as comments, your IP address, information about the end device you use, information about websites and content accessed and your location. We have no influence on the type and scope of the data processed by New Work, the type of processing and use or the disclosure of this data to third parties. Information about which data is processed by New Work and for what purposes it is used can be found in New Work’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

We process the data you enter on Xing to the extent that we may like, comment on or share your posts or contact you and interact with you. The data you freely publish and disseminate on Xing will be included by us in our offer in this way.

You have the option of restricting the processing of your data in the general settings of your Xing account. On mobile devices, you can also restrict New Work’s access to contact and calendar data, photos, location data, etc. in the settings options. However, this depends on the operating system you are using. You can find out more about the data protection settings at Xing at: https://privacy.xing.com/de/ihre-privatsphaere.

Analysis

New Work offers the operators of Xing accounts the opportunity to obtain an overview of the use of the account and its users. Statistical data in particular can be accessed and analysed using the analysis functions. We use the data to make our account as attractive and efficient as possible. For this purpose, New Work provides us with data that New Work has generated itself under its own responsibility. The data we receive from New Work is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for our further processing of this data to analyse the use of our Xing account. Further information can be found in Xing’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

Communication

Xing gives you the opportunity to communicate directly with us. If you contact us via Xing, the data transmitted will be stored and used by us exclusively for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of enquiries, the evaluation of enquiries and the monitoring of misuse.

Further information about Xing

If you have any questions about the use of personal data by us in connection with the use of the Xing account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Xing, please contact New Work directly.

Your rights and contact

We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of the rights to which you are entitled. If you would like more information or wish to exercise your rights, you can contact us and our data protection officer at any time so that we can take care of your request.

Rights of data subjects

You have extensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right of access and can request the correction and/or deletion or blocking of your personal data if necessary. You can also request the restriction of processing and have the right to object. With regard to the personal data you have provided to us, you also have the right to data portability .

If you wish to assert one of your rights and/or receive more information about this, please contact the Naue service team by e-mail at datenschutz@naue.com or the Naue portal service team at portal@naue.com. Alternatively, you can also contact our data protection officer

Revocation of consent and objection

Once you have given your consent, it can be freely revoked at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The contact persons for revocation are also our aforementioned service teams and our data protection officer.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and – if the data processing is nevertheless to be continued – you will receive more detailed information from us as to why the data processing is permissible.

Data protection officer and contact

We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have regarding our handling of personal data or further information on data protection issues:

Attorney Dr Christoph Rempe
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Telephone: 0521 / 96535-875
E-mail: datenschutz@naue.com

If you would like to contact our data protection officer personally by e-mail, you can also reach him at . christoph.rempe@brandi.net

Complaints

If you are of the opinion that the processing of your personal data by us is not in accordance with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You can also lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation.

Further information and changes

Links to other websites

Our online offer may contain links to other websites. These links are generally labelled as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the data protection declarations of other websites

Changes to this privacy policy

The status of this privacy policy is indicated by the date (below). We reserve the right to amend this privacy policy at any time with effect for the future. Changes will be made in particular in the event of technical adjustments to the online offering or changes to data protection regulations. The current version of the data protection declaration can always be accessed directly via the online offer. We recommend that you inform yourself regularly about changes to this privacy policy.

Status of this privacy policy: May 2025

Privacy policy

Introduction

Personal data

Processing of personal information

Disclosure of personal data to third parties

Legal basis for data processing

Data erasure and storage duration

Use of our online offer

Information about your computer

Use of cookies

Naue Portal

Customer Centre

Registration in the Customer Centre

Collecting data via the Customer Centre

Storage period and deletion

Forwarding the status information of an application

Automated decision making

Naue Academy

Naue Assistant

Integration of the services of third-party providers

Google Tag Manager

Google Analytics

Google reCAPTCHA

Matomo

OpenStreetMap

Font Awesome

Leadinfo

Use of YouTube

Content Delivery Network

Gstatic

Posthog

Registration for events

Communication with us

Contact form

Project form

Contact by e-mail

Newsletter

Brevo

Live Chat Userlike

Social Media

Facebook Fanpage

Delimitation of responsibility

Facebook Insights

Messenger

Further information about Facebook

Instagram account

Responsibility under data protection law

Instagram Insights

Instagram Direct Messaging

Further information about Instagram

X-Account

Processing of personal data

X Analytics

Direct messages

X-Buttons, X-Widgets

Further information on X

YouTube channel

Processing of personal data

YouTube Analytics

Further information about YouTube

LinkedIn

Processing of personal data

Analysis

Communication

Further information about LinkedIn

Xing

Processing of personal data

Analysis

Communication

Further information about Xing

Your rights and contact

Rights of data subjects

Revocation of consent and objection

Data protection officer and contact

Complaints

Further information and changes

Links to other websites

Changes to this privacy policy

Solutions

Products