Privacy policy

Personal data

Personal data is information relating to an identified or identifiable natural person. This includes all information relating to your identity, such as your name, your email address or your postal address. Information that does not establish a connection to your identity (such as statistical data, for example on the number of users of the online service) is not, however, considered to be personal data.

In principle, you can use our online service without disclosing your identity or providing any personal data. In such cases, we will only collect general information about your visit to our online service. However, for some of the services offered, we do collect personal data from you. We will generally process this data solely for purposes relating to your use of this online service, in particular to provide the requested information and to ensure the unambiguous allocation of project-specific data. When we collect personal data, you only need to provide the data that is strictly necessary. We may also request further details, which you may provide voluntarily. We will indicate in each instance whether fields are mandatory or optional. We will then provide specific details in the relevant section of this privacy policy.

No automated decision-making based on your personal data takes place in connection with the use of our online services.

Processing of personal data

We store your details on specially secured servers within the European Union. These servers are protected by technical and organisational measures against loss or destruction of your data and against unauthorised access to, alteration of or disclosure of your data. Access to your data is restricted to a small number of authorised individuals. These individuals are responsible for the technical, commercial or editorial management of the servers. However, despite regular checks, it is not possible to provide complete protection against all risks.

Your personal data is transmitted over the internet in encrypted form. We use HTTPS (Hypertext Transfer Protocol Secure) encryption for data transmissionn.

Disclosure of personal data to third parties

We generally use your personal data solely to provide the services you have requested. Where we engage external service providers in the course of providing these services, their access to the data is also strictly limited to the purpose of providing the service. We ensure compliance with data protection regulations through technical and organisational measures and also require our external service providers to comply with these regulations.

Furthermore, we do not disclose your data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be disclosed if you have consented to such disclosure or where we are authorised or obliged to do so on the basis of statutory provisions and/or official or court orders. This may, in particular, involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

Where we transfer your personal data, either ourselves or via service providers, to countries outside the European Union, we comply with the specific requirements of Articles 44 et seq. of the GDPR and also require our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union provided that the level of protection guaranteed by the GDPR is ensured. This level of protection is ensured, in particular, by an adequacy decision of the European Commission or by appropriate safeguards in accordance with Article 46 of the GDPR.

Legal basis for data processing

Where we obtain your consent for the processing of your personal data, Article 6(1)(a) of the GDPR forms the legal basis for the data processing.

Where we process your personal data because this is necessary for the performance of a contract or within the framework of a pre-contractual relationship with you, Article 6(1)(b) of the GDPR constitutes the legal basis for the data processing.

Where we process your personal data to comply with a legal obligation, Article 6(1)(c) of the GDPR forms the legal basis for the data processing.

Article 6(1)(f) of the GDPR may also serve as the legal basis for data processing if the processing of your personal data is necessary to safeguard our legitimate interests or the interests of a third party, and your interests, fundamental rights and freedoms do not require the protection of personal data.

For the storage of information on the end user’s terminal equipment or access to information already stored on the terminal equipment by means of cookies or similar technologies that are not necessary to provide the online service, our legal basis is also the user’s consent in accordance with Section 25(1) of the TDDDG.

Throughout this privacy policy, we always specify the legal basis on which we process your personal data.

Data erasure and retention period

We generally delete or block your personal data whenever the purpose for which it was stored no longer applies. However, data may be retained beyond this period if required by legal provisions to which we are subject, for example in relation to statutory retention and documentation obligations. In such cases, we will delete or block your personal data once the relevant provisions have expired.

Use of our online services

Information about your computer

Every time you access our online service, regardless of whether you are registered, we collect the following information about your computer: your computer’s IP address, the request made by your browser and the time of that request. We also record the status of the request and the volume of data transferred. We collect product and version information about the browser and operating system used on your computer. We also record the website from which you accessed the online service. Your computer’s IP address is stored only for the duration of your use of the online service and is subsequently deleted or anonymised by truncation. The remaining data is stored for a limited period.

We use this data to operate the online service, in particular to identify and rectify errors, to assess how the online service is used, and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

Use of cookies

As is the case with many websites, our online service uses cookies and similar technologies. Cookies are small text files that are stored on your computer and record certain settings and data for exchange with our online service via your browser. A cookie enables information to be stored on your device and allows access to information stored on your device. Cookies are also regularly used for the further processing of personal data. A cookie usually contains the name of the domain from which the cookie file was sent, as well as information about the cookie’s age and an alphanumeric identifier.

Cookies enable us to recognise your computer and make any presets and preferences, such as your language setting, immediately available. The cookies we use are – where possible – session cookies, which are automatically deleted at the end of the browser session. Cookies with a longer storage period may also be used so that your settings and preferences can be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can disable the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been stored via your browser settings. Please note that you may only be able to use our website to a limited extent, or not at all, if you refuse to accept cookies or delete essential cookies.

Where cookies are not essential for our online service, we will ask for your consent to the use of cookies and the associated further data processing the first time you access the online service. With regard to non-essential third-party cookies, you will find a more detailed description below of the services provided by these third parties that we use. The legal basis for the storage of and access to information on your device through the setting and reading of cookies is Section 25(1) of the TDDDG. The legal basis for the associated further data processing, which is the purpose of using cookies, is your consent within the meaning of Article 6(1)(a) of the GDPR. Consent once given may be withdrawn at any time with effect for the future, in particular by changing the selected settings. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

The legal basis for the use of essential cookies is our legitimate interest in the proper provision of our online service within the meaning of Article 6(1)(f) of the GDPR, as well as – insofar as contracts are concluded or fulfilled via our online service – the performance of a contract within the meaning of Article 6(1)(b) of the GDPR.

Any choice made regarding the use of cookies can be changed at any time.

Naue Portal

You can use the Naue Portal to plan your projects. The Naue Portal is specifically designed for the preparation of specific projects. It is a web-based software portal comprising a modular range of programs, digital tools and documentation for consultation, configuration, design, calculation, documentation, storage and management of the results and data from the aforementioned work steps for the planning of geotechnical structures using geosynthetics, natural fibre products and biodegradable products, fasteners and supplementary components (Naue products), and which are made available to the user for the aforementioned work steps involved in project management.

To use the portal, you must create a user account. All data relating to your personal details and your use of the online services is stored in your user account, provided you log in using your user account each time. You can register for a user account online. To do so, you must provide the data requested during the registration process. The information requested in mandatory fields during registration is required to fulfil or initiate a contract with us for specific services. To create a user account, you are only required to provide an email address, your company affiliation, a password, your name and details of the services you have requested. We also record the date and time of registration and your IP address. Any further details provided during registration and in the user account are voluntary. You can change the password you entered during registration at any time via your account settings. Where you register with us for the purpose of entering into or initiating a contract, the legal basis for the processing of your data is Article 6(1)(b) of the GDPR.

To use the full range of functions available in your user account, it is necessary to verify the email address provided during registration. To do this, we will send a confirmation link to the email address provided. You must click on this link to verify your email address. The purpose of this procedure is to protect your data and ensure that communications regarding our services are sent to a valid email address. We reserve the right to offer additional registration options alongside registration via our online platform, to which the relevant provisions will then apply.

Your user account allows you to manage, update and, if necessary, delete your data. This includes, in particular, personal data (name, date of birth, addresses, landline and mobile telephone numbers), data relating to your employment (company, position, department), communication history, profile picture, language settings, consents to individual services, details of projects, search and navigation behaviour, and information provided explicitly or implicitly by the customer regarding areas of interest. We may create segments from this data and assign customers to these segments. Membership of such segments is also stored in the user account. Location-based data, such as your addresses or your location, is stored – provided you have consented to this. Your current location may be used to provide you with location-based offers.

We use the stored data to manage our business relationship with you. We also use the stored data to provide you with interesting and relevant offers via all the communication channels you use, provided you have given us your consent to do so. In this case, we use the stored data to determine which offers are relevant to you.

We will contact you as part of our business relationship using the contact details you have provided when you make use of individual services. We will keep you informed in accordance with your chosen preferences. We may contact you via email, through messages on your smartphone or via other digital communication channels. In addition, you can select optional communication channels and occasions; these include, in particular, special newsletters and app notifications.

The data generated when using the user account is generally stored for as long as the user account exists, but may also be deleted earlier upon request. Most of the data can be viewed directly online and – with the exception of the email address – amended or deleted. You can delete your user account at any time by informing us of your wish to do so, for example via the email addresses provided on our website. In the event of immediate deletion, the data may not be recoverable later should you re-register.

We use Amazon Web Services as part of the Naue Portal. This is a cloud computing and hosting service provided by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA. We use this service to store our data on Amazon’s servers. Where you transmit data to us or where data is lawfully collected from you, it is stored in the cloud. As the data is stored on servers in the USA, it cannot be ruled out that US security authorities may also access the data stored there. Amazon is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data belonging to EU citizens to the USA. Furthermore, Amazon Web Services is used for statistical analysis and to ensure the optimal delivery of content. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing a secure and fast online service and in optimising our website. Further information on the processing of data can be found in Amazon’s privacy policy at https://aws.amazon.com/de/privacy/.

Customer Centre

You may, on a voluntary basis, create a customer account in our Customer Centre for our online service. All information relating to you and your use of the various services is managed centrally within this customer account. This enables you to manage, update and, if necessary, delete all your data. The legal basis for processing registration data, where consent is given, is Article 6(1)(a) of the GDPR. Where you register with us for the purpose of fulfilling or entering into a contract, the legal basis for processing the data is additionally Article 6(1)(b) of the GDPR.

Registration in the Customer Centre

You can register for a customer account online. To create a customer account, you only need to provide an email address and set a password. To use the full range of functions offered by the customer account, it may be necessary to verify the email address provided during registration. To do this, we will send a confirmation link to the email address provided. You must click on this link to verify your email address. The purpose of this procedure is to protect your data and ensure that communications regarding services, delivery status or payment status are sent to a valid email address.

Collection of data via the Customer Centre

All data relating to the use of our online services is stored in your customer account, provided you log in using your customer account each time. This includes, in particular, personal data (name, age, addresses, delivery and payment details), vouchers, wish lists, purchase history, communication history, search and navigation behaviour, consents to individual services (such as newsletters) and information provided explicitly or implicitly by the customer regarding their main areas of interest. We may create segments from this data and assign customers to these segments. Membership of such segments is also stored in your customer account. Location-based data, such as your delivery addresses or your current location, is stored – provided you have consented to this.

Your current location may be used to provide you with location-based offers. If you do not wish data to be stored in your customer account in specific cases, you can make use of the relevant offers without using your customer account. If you wish to stop data being stored in your customer account altogether, you can have your customer account deleted at any time.

Retention period and deletion

Data generated through the use of the customer account is generally stored for as long as the account exists, but may also be deleted earlier upon request. Much of the data can be viewed, amended or deleted directly online. You may delete your customer account at any time by informing us of your wish to do so, for example via the general contact form. If you request immediate deletion, the data may not be recoverable later should you re-register.

Careers Portal

You can use the applicant portal to apply for a role with us and submit all the necessary information and documents. Use of the applicant portal is voluntary; you may also submit your application to us by other means, such as by email or post. In principle, you have the option of applying for advertised vacancies or submitting a speculative application. As part of the recruitment process, we process all the information you provide with your application, e.g. your name, contact details, CV and references. When we receive an application by email, post or in person, your documents are forwarded to the relevant staff members at our organisation and transferred to our applicant tracking system, ‘softgarden’. The data is processed for the purposes of conducting the recruitment process, deciding whether to establish an employment relationship and communicating with you. Our legal basis is your consent under Article 6(1)(a) of the GDPR or the processing necessary to decide whether to establish an employment relationship under Article 6(1)(b) in conjunction with Section 26(1), first sentence, of the German Federal Data Protection Act (BDSG), as well as our legitimate interest in standardised applicant management within the meaning of Article 6(1)(f) of the GDPR. In the event of a rejection, the data will be retained for six months. In the event of a successful application, the data provided will also be stored by us for the purpose of administering the employment relationship, in accordance with the relevant legal requirements.

softgarden

To ensure the efficient handling of recruitment processes, we use an applicant tracking system provided by softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin (‘softgarden’), which operates the applicant tracking system as a data processor within the meaning of Article 4(8) of the GDPR. A data processing agreement has been concluded with the provider in accordance with Article 28 of the GDPR, which ensures compliance with data protection regulations.

Further information can be found in softgarden’s privacy policy at https://softgarden.com/de/datenschutz-webseite/. You can contact the service provider directly at datenschutz@softgarden.de.

Application process

If you wish to submit your application documents via our applicant portal, you must provide the following information and documents: first name, surname, email address, telephone number and cover letter. In addition, you may upload further documents, such as a CV or certificates, on a voluntary basis.

Once you have submitted your application documents, you will receive an email confirming receipt of your application.

As part of the application process, you can also set up and manage an account on the careers portal once you have set your username and password. To this end, after submitting your application documents, you will receive an email informing you that, as part of the application process, a user account has been created for you using theemail address you provided and that you still need to set a password for it. In addition to submitting a one-off application, you can make use of further options within the softgarden applicant tracking system and configure your individual settings (e.g. inclusion in a talent pool). To make the application process as efficient and successful as possible, you may voluntarily provide the following information as part of your application to us:

• Contact details (e.g. address, telephone number)
• CV data (e.g. education, vocational training, work experience, language skills)
• Social media profiles (e.g. XING, LinkedIn, Facebook)
• Application documents (application photos, cover letters, certificates, employment references, work samples, etc.)

In addition, when you use the applicant tracking system, data relating to its use – known as usage data – is also collected during your session (e.g. details of the start, end and extent of website use, login details, date and time of access, browser type and version, operating system used, volume of data transmitted, IP address).

The legal basis for processing for the purposes of conducting the application process and establishing an employment relationship is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG. Furthermore, the controller’s use of the applicant tracking system is in its legitimate interests pursuant to Article 6(1)(f) of the GDPR. If consent within the meaning of Article 6(1)(a) of the GDPR is required for a specific processing activity, this will be obtained from you separately and transparently by the data controller, unless it is implied by your clear and voluntary conduct in accordance with the principle of transparency.

Disclosure of data

Your data will not be disclosed to unauthorised third parties as part of the applicant management process and will only be processed for the purposes set out in this privacy policy. Accordingly, access by internal departments and specialist managers at Naue is in the legitimate interest of the company, insofar as knowledge of the information from the application process is necessary and permissible for the selection of applicants or for the company’s internal administrative purposes. For this purpose, your details may be forwarded to third parties within the company by email or within the applicant tracking system. The legal basis for this may be Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG, Article 6(1)(f) and Article 6(1)(a) of the GDPR.

Data may also be disclosed to third parties in the context of data processing on behalf of the controller pursuant to Article 28 of the GDPR, where the controller has a legitimate interest in outsourcing processing activities which it would otherwise be entitled to carry out itself. To this end, the controller shall take the necessary measures to ensure compliance with data protection regulations.

Data may also be disclosed to external third parties for the purpose of defending legal claims on the basis of a legitimate interest, or in the context of investigations by or disclosure to public authorities, insofar as this is required by law or there is an obligation to disclose. The obligations to provide information to data subjects within the meaning of Articles 13 and 14 of the GDPR are fulfilled prior to the relevant disclosure, insofar as these must be met separately.

CV analysis with Textkernel

We process and analyse documents uploaded by you using AI technology to extract CV data and convert it into a structured format (known as ‘CV parsing’).

To safeguard data subjects’ rights and uphold security standards, a data processing agreement has been concluded with the service provider. The data processor is the ISO 27001-certified provider Textkernel B.V., Asterweg 15D, 1031 HL Amsterdam, Netherlands (‘Textkernel’). Data processing takes place on a server in Germany within a secure environment.

The legal basis for the processing is Article 6(1)(f) of the GDPR. The purposes of the processing are to initiate an employment relationship and to make the application process as efficient as possible. No personal data is transferred to third countries. After processing, your data will be deleted from Textkernel’s temporary storage.

Further information on data protection at Textkernel can be found at https://www.textkernel.com/privacy-statement/.

Feedback module

In connection with your application, we may ask you to provide feedback following an interview and three months after your appointment. We will send you an invitation link that will direct you to the rating system where you can submit your feedback. The purpose of the processing is to further develop and optimise our recruitment and application processes, as well as our corporate image. The following data is processed automatically for this purpose:

• Contact details (name, email address)
• Job title of the position you applied for
• Location of the role
• Job category
• Applicant ID

The feedback itself is stored anonymously in the database. No direct link to a specific individual is established. However, it cannot be ruled out that an indirect link to a specific individual may arise from the role for which you have applied. In addition to a star rating and individual questions – which do not require you to provide any personal data – you have the option here to leave individual comments, in which you may, in principle, provide personal data on a voluntary basis. The information collected in this way may be displayed on our review page alongside your feedback or transmitted to external partners such as kununu.

Participation is entirely voluntary and takes place only with your consent; without this, it is not possible to submit feedback. The legal basis is Article 6(1)(a) of the GDPR.

Referral Manager

The Referral Manager tool enables recruiters and staff to share job vacancies within our company on social media or via email with acquaintances and friends, in order to reach out to potential candidates or make direct recommendations.

If you decide to apply for a role that has been suggested directly or indirectly, your personal data will be processed in accordance with the standard application process. Your data will be displayed to authorised users and processed within the applicant tracking system. The person who referred you will be able to view your name, the role and your application photo in the Referral Manager. However, before submitting your application, you will have the option to view your application anonymously in the Referral Manager. The person making the recommendation will therefore only be able to see that someone has applied in response to a recommendation.

The legal basis for processing your data for the purposes of referral and application is your consent pursuant to Article 6(1)(a) of the GDPR and Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG. The data will be processed and deleted in the same way as in the standard application procedure.

Salary Statistics Module

Our service provider, softgarden, will give you the opportunity at various stages of the application process to provide feedback on your salary expectations and the salaries offered to you.

The information provided in this context is anonymised and processed without any link to your name or contact details. softgarden processes this data in anonymised form for its own purposes (statistics, analysis, studies) and is the controller within the meaning of Article 4(7) of the GDPR.

Processing takes place only on a voluntary basis, with your consent given through your participation. The legal basis is Article 6(1), first sentence, point (a) of the GDPR.

Social sharing buttons

It is possible to share the job advertisements on various social networks. Different buttons are provided for each network. After clicking on one of these buttons, you will be redirected to the relevant network’s login page. These buttons do not constitute plug-ins and do not transfer any personal data directly to the operators of the social networks.

Currently, job advertisements can be shared on the following social networks:

• Facebook (https://de-de.facebook.com/privacy/explanation)
• LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-join-privacy-policy)
• Xing (https://privacy.xing.com/de/datenschutzerklaerung)

We have no control over how your personal data is processed by these social media platforms. You can find information about how each platform processes data via the links provided.

‘easyfeedback’ online surveys

At the end of the application process, softgarden may display a link inviting you to take part in a survey. The survey is conducted via a service provided by easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz (“easyfeedback”), to gather feedback on the application experience. softgarden conducts this survey as the data controller within the meaning of Article 4(7) of the GDPR and processes the data collected in anonymised form for its own purposes (statistics, analysis, studies) as well as for the further development of softgarden products.

The collection of survey data is secured by default using SSL encryption, and softgarden does not link the survey data to individuals as part of the evaluation. You may discontinue the survey at any time. The data processed up to the point of discontinuation may be used for the purposes stated.

Your participation in the survey is entirely voluntary. The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR. The processing of data for evaluation purposes is carried out anonymously by softgarden.

Further information can be found in easyfeedback’s privacy policy: https://easy-feedback.de/privacy/datenschutzerklaerung.

Talent pool

As part of your application or via the ‘Get in touch’ button, you have the option to put yourself forward for our talent pool. This processing is necessary to ensure you are automatically considered for future job vacancies (similar or otherwise suitable positions). If you register for the talent pool via the ‘Get in touch’ button, you will be asked to provide the following details:

• Title, academic title (optional)
• First name, surname, email address
• Fields of work you are interested in
• Current career stage
• Preferred location(s)
• XING profile or CV

Inclusion in the talent pool is entirely voluntary and requires your consent, as well as confirmation via an opt-in link. The legal basis is Article 6(1)(a) of the GDPR. Furthermore, we will contact you after four months to ask whether you would still like to remain part of the talent pool.

Sharing the status of an application

If you apply to us via a job board (e.g. Hellowork, Stepstone), the data you submit will be automatically transferred to our recruitment system.

On some of these job portals, you have the option to track the status of your application via your account on the relevant portal. To this end, our service provider, softgarden e-Recruiting GmbH, transmits the status of your application (receipt, processing of the application, rejection) to the job portal on our behalf. The status is displayed in your account on the job portal with a time delay (up to four weeks), so that we can inform you personally of the status of your application beforehand. The legal basis for the data transfer is Article 6(1)(b) of the GDPR (initiation of an employment relationship) and Article 6(1)(a) of the GDPR.

Further information on data processing can be found in the privacy policy of the relevant job portal through which you applied.

Deletion and use of data from the applicant portal

Your data will be stored for the duration of the application process and in accordance with the applicable retention periods following the conclusion of the application process. In the event of a rejection, the data will be retained for six months. Following successful recruitment, the data will also be retained in the system for a further six months. Once the retention period has expired, the data will be fully anonymised. The processing of anonymised data records falls outside the material scope of the data protection regulations, meaning that anonymised data may be processed for statistical and analytical purposes, to produce market studies or for product development.

Automated decision making

No automated decision-making takes place. Should this be or become necessary, your consent will be obtained transparently before processing, where appropriate.

Naue Academy

Through our Naue Academy, we offer various e-learning opportunities aimed at both internal company staff and external users. The platform is provided and operated by Magh und Boppert GmbH as a data processor. The content of the Naue Academy is managed and provided by Naue.

Registration is required to use the service. Access to the Naue Academy is via the Naue Portal using a single sign-on procedure. As part of the single sign-on procedure, the login details for the Naue Portal (username, email address and password, as well as company affiliation where applicable) are transferred to the Naue Academy. For internal company users, the department, line manager and work contact details are also stored in the system. In addition, various types of usage data, in particular login times and data relating to the use of learning modules (e.g. start time, completion time, duration, ID, status), are processed.

Once logged in, users can access a partially personalised interface. Here, users can view various learning modules. There are review questions at the end of each module. In some cases, users can have a certificate issued for the relevant learning module once they have answered the questions correctly. Naue is able to track which users have completed which learning modules and when.

External users may, in principle, use the service on a voluntary basis. Our legal basis for data processing is the user’s consent in accordance with Article 6(1)(a) of the GDPR.

For internal company users, use of the service is partly mandatory and partly voluntary. Our legal basis in this respect is consent under Article 6(1)(a) of the GDPR or processing for the purposes of the employment relationship under Article 6(1)(b) in conjunction with Section 26(1), first sentence, of the German Federal Data Protection Act (BDSG), as well as, where applicable, Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR.

Data collected in connection with the use of the Naue Academy is generally stored for as long as the user account exists within the Naue Academy, but may also be deleted earlier upon request.

Naue Assistant

Through our online service, we provide you with the Naue Assistant, which you can use in particular to ask questions about our products and services and which provides you with general information about our company. Our Naue Assistant is an AI tool in the form of a chatbot that does not make any automated decisions.

Use of the Naue Assistant is voluntary. You can decide for yourself what information to enter into the Naue Assistant. We also store your IP address, as well as the date and time of the enquiry. The data is stored only for the duration of use and is not retained beyond that. Please note when using the service that, whilst the Naue Assistant endeavours to provide you with accurate and helpful answers, it may occasionally generate incorrect information. We therefore recommend that you verify critical information and do not rely solely on the Naue Assistant when making decisions. If you require personal advice or encounter any issues with the Naue Assistant’s responses, please contact our support team at info@naue.com.

In order to provide you with the Naue Assistant, we work with the service providers Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108, USA, and OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. It cannot be ruled out that, in this context, data may be transferred to Amazon and OpenAI in the USA and that US security authorities may, under certain circumstances, gain access to the data. We have no influence over the data processing carried out by Amazon and OpenAI. Further information can be found in the privacy policies at https://aws.amazon.com/de/privacy/ and https://openai.com/policies/privacy-policy/.

Our legal basis is your consent in accordance with Article 6(1)(a) of the GDPR.

Integration of third-party services

We use third-party services for certain functions within our online offering. These services are predominantly optional features which you must explicitly select or use. We have entered into contractual agreements with the respective providers regarding the provision and integration of their services, and we do our utmost to ensure that these third-party providers also provide transparent information on the scope of personal data processing and comply with data protection regulations.

Google Tag Manager

On our Naue Portal and in our Customer Centre, as well as on our general website at www.naue.com, we use Google Tag Manager provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google Tag Manager is a tag management system (TMS) that enables tags – i.e. tracking codes and associated code snippets – to be managed on our website. Google Tag Manager allows Google services to be integrated into a website.

When Google Tag Manager is used, a connection is established with Google’s servers. As a result, Google stores the IP address of the device used to access this website. It cannot be ruled out that, in this context, data may be transferred to Google in the USA and that US security authorities may, under certain circumstances, gain access to the data. However, no cookies are set in connection with the use of Google Tag Manager.

Further information on Google Tag Manager and data processing by Google can be found here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

Our legal basis for using Google Tag Manager is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in managing the tracking codes on our website, which enable us to analyse the use of our website and to improve and personalise our service.

Google Analytics

We use Google Analytics on our general website at www.naue.com, on the Naue Portal and in the Customer Centre for statistical analysis. Google Analytics is a web analytics service provided by Google.

As part of Google Analytics, Google uses cookies, amongst other things, for the purposes of analysis. The nature and scope of the use and analysis of cookies are determined by Google. The information generated by the cookies regarding your use of the online service is transmitted to a Google server and stored there. It cannot be ruled out that data may be transferred to the USA and that, as a result, government authorities there may gain access to this data. However, due to the automatic activation of IP anonymisation on this website, your IP address is truncated by Google beforehand. Only in exceptional cases is the full IP address transmitted to a Google server and truncated there.

On our behalf, Google uses this information to analyse your use of the online service, to compile reports on website activity and to provide us, as the operator of the online service, with further services relating to website and internet usage. In addition, Google may use the data for its own purposes. As part of these purposes, Google may, for example, create user profiles based on user behaviour or link the data to other data, such as an existing Google account. We have no influence whatsoever over these data processing operations. According to Google, the IP address transmitted by your browser as part of Google Analytics is not combined with other data that Google collects or already holds. For further information, please refer to Google’s privacy policy, which is linked below.

We also use the ‘demographic characteristics’ feature of Google Analytics. This enables the creation of reports containing information on the age, gender and interests of website visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. You can disable this feature at any time via the ad settings in your Google Account, or generally prevent Google Analytics from collecting your data as described in the following paragraph. Further information on the ‘demographic characteristics’ feature can be found in Google’s documentation at https://support.google.com/analytics/answer/2799357?hl=en.

You can prevent Google from collecting the data generated by Google Analytics and relating to your use of the website (including your IP address), as well as prevent Google from processing this data, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on this can be found at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). Please note that on our website, Google Analytics has been extended to include the code “anonymizeIp();” in order to anonymise IP addresses by deleting the last octet.

The legal basis for setting and reading cookies that are not technically necessary, or for the use of comparable technologies, is your consent in accordance with Section 25(1) of the TDDDG. For the subsequent processing of data in connection with the use of Google Analytics, which is intended through the use of cookies or comparable technologies, our legal basis is your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR.

Google Maps

In our customer portal, we also use the Google Maps mapping service, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).

We use Google Maps to display locations on a map, search for addresses and calculate the route between two addresses entered by the user.

To this end, we use the following interfaces in particular:

• Maps JavaScript API
• Maps Geocoding API
• Maps Places API
• Routes API (Compute Routes)

The map and search functions will only be loaded once you have given your consent via our consent management tool. Without your consent, the map function will not be available and no data will be transmitted.

When you use this feature, the following data in particular may be transmitted to Google:

• your IP address,
• technical information about your browser, device and usage,
• the search and address data you have entered,
• map and location data, insofar as this is necessary for displaying the map, searching for addresses and calculating the route.

Our customer portal does not actively share your location or geolocate your device. Distance calculations are based solely on the addresses you have entered manually. There is no provision for displaying or planning a route.

Data may also be processed by Google’s affiliated companies, in particular Google LLC, which is based in the USA. In this context, the transfer of personal data to countries outside the European Union or the European Economic Area cannot be ruled out. Google uses appropriate safeguards for international data transfers, in particular the Standard Contractual Clauses provided by the European Commission.

The legal basis for loading and using Google Maps, as well as any associated storage or retrieval of information on your device, is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

You may withdraw or amend your consent at any time with future effect via the settings in our consent management tool. The lawfulness of the processing up to the point of withdrawal remains unaffected.

Further information on data processing by Google can be found in Google’s privacy policy: https://policies.google.com/privacy.

Google reCAPTCHA

To secure our forms, including against misuse to send spam, we use the reCAPTCHA service, provided by Google, for our general online offering at www.naue.com. The service analyses the extent to which a user is actually entering data manually and is designed to filter out automated access, such as that carried out by scripts or so-called bots. In order to use the service, it is necessary to transfer the IP address and other data required by Google for the reCAPTCHA service (device information, user behaviour and cookie content) to Google.

The legal basis for setting and reading cookies that are not technically necessary, or for the use of comparable technologies, is your consent in accordance with Section 25(1) of the TDDDG. The legal basis for the subsequent transfer of data and the further data processing intended through the use of cookies or comparable technologies is your consent in accordance with Article 6(1)(a) of the GDPR.

Further information on data protection at Google, including in relation to the reCAPTCHA service, can be found at https://policies.google.com/privacy?hl=d).

Matomo

On our general website at www.naue.com and on our careers portal, we use the open-source software Matomo to analyse usage statistics. This is a web analytics service. The data collected by Matomo is stored in a database for the purposes of usage analysis, which serves to optimise our website. This constitutes our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR. The data collected comprises the truncated IP address, the time, the webpage accessed, the website from which you arrived at ours (‘referrer’), the browser used, the duration of your visit to our website and the frequency of visits.

The analyses generated by Matomo are completely anonymised and cannot be used to identify individuals. The data stored by Matomo is not linked to other data sources, nor is it disclosed to third parties.

OpenStreetMap

We use the OpenStreetMap mapping service for our careers portal. OpenStreetMap is a service provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (“OSMF”).

No cookies are set for the maps integrated into our online service. When you access a page on our website that incorporates a map from this mapping service, a connection is established with the servers operated by OSMF in the UK and other countries. With your consent, personal data relating to you – such as your IP address, the time of the request, the location queried and your current location – may be transferred to OSMF. It cannot be ruled out that data may be transferred to countries outside the EU, which may result in government authorities gaining access to this data. We have no influence over the data processing carried out by OSMF. Information on data protection at OSMF can be found at https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The legal basis for the integration of the map service is Article 6(1)(f) of the GDPR; our legitimate interest lies in providing maps to help you navigate. Insofar as you have given your consent to the transfer of data to, or the processing of data by, OSMF, the legal basis for setting and reading technically non-essential cookies or using comparable technologies is your consent in accordance with Section 25(1) of the TDDDG, whilst the legal basis for the subsequent data processing intended through the use of cookies or comparable technologies is your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect.

Font Awesome

On our general website at www.naue.com, we use the ‘Font Awesome’ service provided by Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, MO, 64834, USA, to display fonts and icons consistently across our website.

When you access our website, your browser loads the required fonts and icons into your browser cache to ensure they are displayed correctly. The fonts and icons are stored on our own servers. They are integrated by calling them from our own servers. No connection is established with Fonticons’ servers. Further information on data protection at Fonticons is available at: https://fontawesome.com/privacy.

The legal basis for the integration of Font Awesome is Article 6(1)(f) of the GDPR; our legitimate interest is the optimisation of our online service.

Leadinfo

On our general website at www.naue.com and on the Naue Portal, we use the service provided by Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands (‘Leadinfo’). Through Leadinfo’s service, publicly available company data, such as company names and addresses, is displayed to us on the basis of IP addresses. This is done so that we can gain an overview of which companies visit our website. The identification of companies is based solely on the processing of IP addresses. These IP addresses are not stored after use. In addition to this identification via IP addresses, two first-party cookies are used, which provide us with information on how visitors use the website (analytics). Furthermore, Leadinfo processes domains from form submissions in order to correlate IP addresses with companies and to improve its services. These cookies are not linked to any other information, and no personal data is passed on to third parties.

Further information can be found in Leadinfo’s privacy policy at https://www.leadinfo.com/en/datenschutz/.

You can opt out at https://www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.

We use Leadinfo in relation to the setting and reading of technically necessary cookies or the use of comparable technologies on the basis of your explicit consent in accordance with Section 25(1) of the TDDDG, as well as in relation to the subsequent data processing intended through the use of cookies or comparable technologies, on the basis of your consent under Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect.

Use of YouTube

YouTube videos are embedded on our general website at www.naue.com and on our careers portal; to play these videos, we use a plug-in from the YouTube service operated by Google (hereinafter: ‘YouTube’).

We use the YouTube service in enhanced privacy mode to provide the best possible protection for your privacy. When you visit a page on our website that contains an embedded YouTube video, Google initially receives only the information necessary for embedding the video, and no cookies are set for the purpose of analysing usage. Only when you play the embedded video does Google receive further information; in doing so, Google may also set cookies to analyse your user behaviour. When you play the video, Google’s YouTube servers are informed, for example, of the page on our online service from which you are playing the video.

If you are logged in to your Google account, you allow Google or YouTube to link your browsing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you consent to the associated data processing by Google. You can prevent data from being linked to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube so that we can show you videos and thereby provide you with better information about us and our services. The legal basis for embedding the videos is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR; however, the playback of the videos and the associated further data processing – in relation to the setting and reading of technically non-essential cookies or the use of comparable technologies – take place solely on the basis of your consent in accordance with Section 25(1) of the TDDDG; and, in relation to the subsequent data processing intended through the use of cookies or comparable technologies, on the basis of your consent within the meaning of Article 6(1)(a) of the GDPR.

Content delivery network

We use content delivery network (CDN) tools on our website. A CDN is a network of servers distributed worldwide that is capable of delivering content to users quickly and efficiently. In particular, it helps to improve the loading speed of the website. In doing so, data traffic between users and our website is analysed. For this purpose, personal data is processed in server log files by various providers. It cannot be ruled out that these servers are located in the USA. As a result, US security authorities may also gain access to the data stored there. In this regard, we use the following service providers:

Cloudflare Inc., 665 3rd St. #200, San Francisco, CA 94107, USA. Further information can be found in the privacy policy at https://www.cloudflare.com/de-de/privacypolicy/ and at https://blog.cloudflare.com/what-cloudflare-logs/.

Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands. Further information can be found in the privacy policy at https://www.leadinfo.com/en/datenschutz/.

BunnyWay d.o.o., Dunajska c. 165, 1000 Ljubljana, Slovenia. Further information can be found in the privacy policy at https://bunny.net/privacy/.

Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108, USA. Further information can be found in the privacy policy at https://aws.amazon.com/de/privacy/.

Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB (jsDelivr). Further information can be found in the privacy policy at https://www.jsdelivr.com/terms/privacy-policy.

The use of CDN service providers is based on our legitimate interest in optimising our online offering in accordance with Article 6(1)(f) of the GDPR

Gstatic

We use the Gstatic service, a Google domain. Gstatic helps, in particular, to load content from our content delivery networks onto Google more quickly. The domain reduces bandwidth usage, improves network performance and generally speeds up the loading of Google services. When you use this service, it cannot be ruled out that data may be stored on Google’s servers in the USA. As a result, US security authorities may also be able to access the data stored there. The use of this service is based on our legitimate interest in presenting our online offering in the best possible way, in accordance with Article 6(1)(f) of the GDPR. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

Posthog

To improve our service and ensure that we provide the most relevant and accurate information, we use the Posthog analytics service on the Naue Portal and in the Naue Assistant. Posthog is a service provided by Posthog Inc., 2261 Market Street #4008, San Francisco, CA 94114.

When Posthog is used, cookies are used, amongst other things, to collect and subsequently analyse data. The data collected relates in particular to the user’s activity on our site, inputs made on our site, device and browser information, and a tracking code. The data is analysed mainly in pseudonymised form using an ID. The data helps us to understand how you interact with the Naue Portal and the Naue Assistant, and enables us to continuously improve our service. Posthog is a provider based in the USA. It cannot therefore be ruled out that, in the course of using Posthog, data may be transferred to the USA and that government authorities there may, as a result, gain access to the data. Information on data protection at Posthog can be found at: https://posthog.com/privacy.

Our legal basis for setting and reading cookies that are not technically necessary, or for the use of comparable technologies, is your consent in accordance with Section 25(1) of the TDDDG. For the subsequent processing of data, which is intended through the use of cookies or similar technologies, your consent pursuant to Article 6(1), first sentence, point (a) of the GDPR forms our legal basis.

Registration for events

You have the option of participating in our online webinars via various links on our website. To run these webinars, we use the service provider GoTo Technologies Ireland Unlimited Company, 77 Sir John Rogerson’s Quay, Block C, Suite 207, Grand Canal Docklands, Dublin 2, D02 VK60, Ireland (‘GoTo’). Further information on data processing by GoTo can be found at https://www.goto.com/de/company/legal/privacy.

Participation in our webinars is voluntary. If you wish to take part in a webinar, we will process the personal data you provide in a registration form, in particular your name, email address and postal address. In addition, as part of the delivery of the webinars, we also process technical information as well as information relating to your participation in our webinars, such as the start time, duration and end time of your participation.

We process the data submitted via the registration form, as well as the data collected in the course of organising the webinars, for the purpose of organising the relevant webinar, contacting you regarding the event, providing you with further information, and evaluating and optimising our services.

Our legal basis for data processing in connection with the organisation of the webinars and with regard to the information you provide to us in this context is Article 6(1)(f) of the GDPR in conjunction with our legitimate interest in organising webinars, provided that you have not consented to the processing in accordance with Article 6(1)(a) of the GDPR.

During the webinars, you also have the opportunity to participate, for example by using the chat function or raising your hand to speak. Use of these functions is voluntary. Our legal basis is your consent under Article 6(1), first sentence, point (a) of the GDPR. If you do not consent to your participation being recorded, we ask that you refrain from participating.

Our webinars are recorded as standard. Where applicable, the recordings may be made available to participants on request or published on one of our communication channels (e.g. our website or YouTube channel). However, before publication, the content is edited to remove comments and contributions from external participants.

Communication with us

You can contact us in various ways, including via the contact form on our website, the project form on our Naue Portal, live chat or by email.

Contact form

If you wish to use the contact form on our website, we will collect the personal data you provide in the contact form, in particular your name, email address and department. We also store your IP address, as well as the date and time of your enquiry. We process the data submitted via the contact form solely for the purpose of responding to your enquiry or request.

You are free to decide for yourself what information you wish to provide to us via the contact form. The legal basis for the processing of your data is your consent in accordance with Article 6(1)(a) of the GDPR.

Once we have dealt with the matter, the data will initially be stored in case any further enquiries arise. You may request that the data be deleted at any time; otherwise, we will delete the data once the matter has been fully resolved. Statutory retention obligations remain unaffected in all cases.

Project form

You can send us technical enquiries via the project form on our website. By clicking on the ‘Use our project form’ button, you can send your enquiries by email to our dedicated email address for technical enquiries. If you wish to use this function, we will collect the personal data you provide in your email, in particular your name, email address and message. We also store the date and time of the enquiry. We process the data submitted via the project form solely for the purpose of responding to your enquiry or request.

You are free to decide for yourself what information you wish to send to us via the project form by email. The legal basis for the processing of your data is your consent in accordance with Article 6(1)(a) of the GDPR.

Once we have dealt with your enquiry, the data will initially be stored in case we need to contact you with any further queries. You may request the deletion of the data at any time; otherwise, we will delete the data once the matter has been fully resolved. Statutory retention obligations remain unaffected in each case.

Contacting us by e-mail

If you wish to use the email addresses provided on our website to contact us, we will collect the personal data you provide in your email, in particular your name, email address and message. We also store the date and time of the enquiry. We process the data sent by email solely for the purpose of responding to your enquiry or request.

You are free to decide for yourself what information you wish to send us by email. The legal basis for the processing of your data is your consent in accordance with Article 6(1)(a) of the GDPR.

Once we have dealt with your enquiry, the data will initially be stored in case we need to contact you with any further questions. You may request the deletion of the data at any time; otherwise, we will delete the data once the matter has been fully resolved. Statutory retention obligations remain unaffected in each case.

Newsletter

When you subscribe to our newsletter, your email address will be used for our own marketing purposes until you unsubscribe. You will receive regular updates by email on current topics, as well as emails on specific occasions, such as special promotions. Subject to the applicable legal requirements, you may also receive promotional emails from us without your express consent, because you have ordered goods or services from us, we have received your email address in this context, and you have not objected to receiving information by email. These emails may be personalised and tailored to you based on the information we hold about you.

For newsletter subscriptions, we use the double opt-in procedure, i.e. we will only send you promotional emails once we have received your explicit confirmation. We will send you a notification email and ask you to click on a confirmation link contained in that email in order to verify the accuracy of the email address provided. Such verification may be omitted if we already know the email address or if verification is not required for other reasons.

The legal basis for the processing of your data when you subscribe to the newsletter is your consent under Article 6(1)(a) of the GDPR. If we send you promotional emails without your explicit consent, our legitimate interest in sending direct marketing under Article 6(1)(f) of the GDPR shall be regarded as the legal basis in this case.

If you no longer wish to receive any promotional emails from us at all, you may withdraw your consent at any time with future effect or object to the continued receipt of emails, without incurring any costs other than the transmission costs in accordance with standard rates. Simply use the unsubscribe link included in every newsletter or send a message to us or our Data Protection Officer. Please note that withdrawal of consent and objection do not affect emails that we send in connection with order or contract processing and that have no promotional purpose (transactional emails).

Brevo

We use Brevo to send out our newsletter. Brevo is a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin (hereinafter: Brevo). The email addresses of our newsletter recipients, as well as any other data processed in connection with the sending of the newsletter, are stored on Brevo’s servers. Brevo also offers various analytics tools to track how the newsletters sent are opened and used, e.g. how many users an email was sent to, whether emails bounced, and whether users unsubscribed from the list after receiving an email. Further information on data protection in relation to Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/.

The legal basis for our collaboration with Brevo is your explicit consent in accordance with Article 6(1)(a) of the GDPR. Our legal basis for the use of technically non-essential cookies or comparable technologies that may be used in this context is your consent in accordance with Section 25(1) of the TDDDG.

Userlike Live Chat

Customers can use the Userlike live chat feature to communicate with us via our general online platform at www.naue.com and in the Customer Centre. This service is operated by Userlike UG (limited liability), Probsteigasse 44–46, 50670 Cologne (“Userlike”). The service is a live chat plug-in. This tool enables you to chat with our staff almost in real time. When you use the live chat, the following data is processed: the date and time of the session, browser type and version, IP address, operating system used, URL of the previously visited website, amount of data sent, name, email address and company name.

Information regarding usage and related data is collected, stored and processed on Userlike’s servers in Germany. Further information can be found in Userlike’s privacy policy at https://www.userlike.com/de/terms#privacy-policy.

When you visit our website, the chat widget is loaded from AWS CloudFront in the form of a JavaScript file. The chat widget consists of source code that is executed on your computer, thereby enabling the chat function.

In addition, Userlike stores the history of live chats. This serves to spare you, where applicable, the need to provide extensive details regarding the history of your enquiry, as well as to ensure ongoing quality control of our live chat service. If you do not wish this to happen, please feel free to let us know using the contact details provided below. We will then delete any stored live chats immediately.

Userlike uses a global server network (CDN) provided by Amazon Web Services, Inc., P.O. Box 81226, Seattle, WA 98108, USA (‘Amazon’). A CDN is a global network of servers that delivers content on behalf of Userlike. The use of a CDN ensures that the Userlike service can be accessed at the same speed in every country worldwide. In this context, ‘content’ refers to JavaScript files or the chat widgets, which contain the source code required to run the chat. It cannot therefore be entirely ruled out that, in this context, data may be transferred to Amazon in the USA and that US security authorities may, under certain circumstances, gain access to the data.

Data processing relating to the setting and reading of technically necessary cookies or the use of comparable technologies is carried out on the basis of your explicit consent in accordance with Section 25 of the TDDDG; as regards the subsequent data processing, the legal basis is your consent in accordance with Article 6(1)(a) of the GDPR.

Social Media

In addition to our online platform, we also use various social media channels to provide information and communicate; you will find links to these on our online platform, or you may find links to our online platform on these channels. Specifically, we use the social networks Facebook, Instagram and YouTube, the professional networking sites LinkedIn and XING. You can recognise the links by the respective provider’s logo.

Clicking on the links will open the relevant social media pages, to which the respective providers’ own terms and conditions and privacy policies generally apply. Links to the providers’ respective policies are listed below.

Facebook: https://www.facebook.com/policy.php

Instagram: https://help.instagram.com/519522125107875

YouTube: https://policies.google.com/privacy

LinkedIn: https://de.linkedin.com/legal/privacy-policy

XING: https://www.xing.com/privacy

No personal data is transferred to the respective providers until you follow the relevant links. Your access to the linked page constitutes the basis for data processing by the respective providers.

We would also like to point out here that the Federal Office for Information Security (BSI) provides general information on the safe use of social networks on its website at https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Onlinekommunikation/Soziale-Netzwerke/soziale-netzwerke_node.html

The following information regarding the associated processing of your personal data also applies to our use of the social media platform Facebook.

Facebook Fan Page

In addition to our own online presence, we also operate a fan page on the social network Facebook. We use the fan page to provide information about our activities and to offer a channel for communication. The operator of the social network Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: ‘Meta’). In this respect, we make use of Meta’s technical platform and services.

Scope of responsibility

Please note that you use the fan page and its features at your own risk, particularly with regard to interactive features such as commenting, sharing or rating. Alternatively, you can also access the information provided via the fan page on our website.

Within the limits of what is possible on Facebook, we endeavour to ensure the protection of your privacy and your personal data. Insofar as we process your personal data in connection with your visit to the fan page, the provisions set out in this privacy policy apply in full. Due to the integration of the fan page into Meta’s platform, it should also be noted that personal data is processed by Meta at the same time. When you visit the fan page, Meta collects, amongst other things, your IP address and other information that may be stored in the form of cookies on the device you are using or in the relevant browser. We have no influence over the data processing carried out by Meta; in particular, Meta does not act as a data processor on our behalf under our responsibility. Data processing by Meta is governed – at least according to Meta’s own information – by Facebook’s policies, which are available at https://de-de.facebook.com/privacy/policy/. Please note that the data collected about you by Meta in this context may also be transferred outside the European Union.

From a data protection perspective, Meta and we are to be regarded as joint controllers for the operation of the fan page and the analysis of user data when the fan page is visited. In accordance with data protection regulations, we have entered into an agreement with Meta to delineate our respective responsibilities.

Facebook Insights

Facebook offers fan page administrators the opportunity to gain an overview of the use of the fan page and its users via the Page Insights features. The Page Insights features are primarily used to access and analyse statistical data. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta itself has generated. Further information on how Page Insights works and who is responsible for the feature is available from Meta at https://www.facebook.com/legal/terms/page_controller_addendum.

Messenger

Users registered with Facebook also have the option of communicating directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us solely for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Article 6(1)(a) of the GDPR, as well as our legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the collection and processing of customer enquiries, the evaluation of customer enquiries, and the prevention of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For your personal data, this is the case once the relevant conversation has ended. For us, the conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. You may withdraw your consent to the processing of your personal data at any time; in this case, we will delete the data immediately, provided there is no legal basis for further storage.

Further information on Facebook

If you have any questions regarding our use of personal data in connection with the use of the Facebook fan page, please feel free to contact us and our Data Protection Officer at any time. The contact details and communication channels are set out in this privacy policy. If you have any questions regarding data protection on Facebook, please contact Meta directly.

Instagram account

We also have an account on the social network Instagram. Through this Instagram account, we use our own posts to provide information about our activities and offer a further channel for communicating with us. The social network Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: ‘Meta’).

Please bear in mind that you use Instagram and its features at your own risk, particularly with regard to interactive features such as commenting, sharing or rating.

Data protection responsibility

Within the limits of what is possible on Instagram, we endeavour to ensure the protection of your privacy and your personal data. Insofar as we process your personal data in connection with your visit to our Instagram account, the provisions set out in this privacy policy apply in full. Due to the integration of the account into Meta’s platform, it should also be noted that personal data is processed by Meta at the same time. When you access our Instagram content, Meta collects, amongst other things, your IP address and other information that may be stored on the device you are using or in your browser in the form of cookies and similar technologies.

We may instruct Meta to match user IDs with further user information and to combine these matched user IDs with event data. Meta then processes the event data on our behalf in order to provide measurement and analytics services and products. The information provided to us by Meta is generally statistical data, which we use to determine the effectiveness of our advertising and content and to gain insights into the use of our online services. The data is used solely for these purposes. In this respect, Meta acts as our data processor and is bound by our instructions.

Insofar as personal data relating to the use of our online services is processed within event data as part of the Meta Business Tools we use, it is to be assumed that Meta and we share responsibility for the operation of our social media channel and the analysis of user data when the channel is visited. In accordance with data protection regulations, we have entered into an agreement with Meta to delineate our respective responsibilities. The Meta Business Tool we use is Instagram Insights; you can find further information on this in the following section of this privacy policy.

With regard to other data processing activities that take place, it is to be assumed that Meta and we each bear separate responsibility for the operation of the Instagram account and the associated communication and analysis capabilities. Insofar as we process your personal data in connection with your visit to our Instagram page and we alone determine the purposes and means of this data processing, we are responsible for this data processing. This is generally the case when you communicate directly with us via the ‘Instagram Direct Messaging’ feature and provide us with your data in the process. Where your personal data is processed by Meta and Meta alone determines the purposes and means of such data processing, Meta is solely responsible for this data processing. This applies in particular to Meta’s analysis of user behaviour for its own purposes.

We have no influence over the data processing carried out by Meta under its own responsibility. Data processing by Meta is governed – at least according to Meta’s own statements – by Meta’s policies, which are available at https://privacycenter.instagram.com/. Please note that the data collected by Meta about you may also be transferred outside the European Union.

Instagram Insights

Meta offers Instagram account holders the option to use the ‘Instagram Insights’ feature to gain an overview of the account’s usage and its users. Instagram Insights is primarily used to access and analyse statistical data. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with data that it has generated. The data we receive from Meta consists mainly of anonymised data and statistics. Where we receive personal data in this context, we are responsible for the further processing of this data for the purpose of analysing the use of our Instagram account.

Meta provides further information on Instagram Insights at https://help.instagram.com/1533933820244654.

Instagram Direct Messaging

On Instagram, the ‘Instagram Direct Messaging’ feature allows you to communicate with us directly. If you contact us via Instagram Direct Messaging, we will store and use the data you provide solely for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Article 6(1)(a) of the GDPR, as well as our legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the collection and processing of customer enquiries, the evaluation of customer enquiries and the prevention of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For your personal data, this is the case once the relevant conversation has ended. For us, the conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. You may withdraw your consent to the processing of your personal data at any time; in this case, we will immediately delete the data if there is no legal basis for further storage.

Further information on Instagram

If you have any questions regarding our use of personal data in connection with the use of our Instagram account, please feel free to contact us and our Data Protection Officer at any time. The contact details and communication channels are set out in this privacy policy. If you have any questions regarding data protection on the Instagram social network provided by Meta, please contact Meta directly.

YouTube channel

In addition to our own online presence, we also operate a channel on the YouTube video platform. We use this channel to provide information about our activities and to facilitate communication. The YouTube video platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’).

Please note that you use the video platform and its features at your own risk. This applies in particular to the use of interactive features (e.g. discussions, comments).

Processing of personal data

The data collected about you when using the service is processed by Google and may be transferred to countries outside the European Union. The data processed includes, amongst other things, data you provide voluntarily, such as your name, username, email address and telephone number; content that you create, upload or receive, such as photos and videos, documents and spreadsheets, as well as comments; your IP address; details of the device you are using; information about the websites and content you access; and your location and mobile network provider. We have no influence over the nature and scope of the data processed by Google, the manner in which it is processed and used, or the disclosure of this data to third parties. Details of which data is processed by Google and for what purposes can be found in Google’s Privacy Policy at https://policies.google.com/?hl=de&gl=de.

We process the data you enter on YouTube – in particular your username and the content published under your account – to the extent that we may link to or reply to your posts, or create posts ourselves that refer to your account. The data you freely publish and share on YouTube is incorporated into our service in this way and made available to our followers.

You can restrict the processing of your data via the general settings of your Google account. Furthermore, on mobile devices, you can use the settings to restrict Google’s access to contact and calendar data, photos, location data, etc. However, this depends on the operating system used. In addition to these tools, Google also offers specific privacy settings for YouTube. You can find out more at: https://policies.google.com/privacy?hl=de&gl=de#infochoices

YouTube Analytics

Google offers YouTube channel operators the option to use the ‘YouTube Analytics’ feature to gain an overview of the use of their channel and its users. YouTube Analytics is primarily used to access and analyse statistical data. We use the data from YouTube Analytics to make the YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that Google itself has generated under its own responsibility. The data we receive from Google consists mainly of anonymised data and statistics. Where we receive personal data in this context, we are responsible for the further processing of this data for the purpose of analysing the use of our YouTube channel. Google provides further information on YouTube Analytics at https://support.google.com/youtube/answer/9002587?hl=en, amongst other places.

Further information on YouTube

If you have any questions regarding our use of personal data in connection with the use of the YouTube channel, please feel free to contact us and our Data Protection Officer at any time. The contact details and communication channels are set out in this privacy policy. If you have any questions regarding data protection at Google, please contact Google directly.

LinkedIn

In addition to our own online presence, we also operate an account on the professional networking site LinkedIn. Through this account, we provide information about our company and our activities, and offer a channel for communication. The professional networking site LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

Please note that you use the professional networking site and its features at your own risk. This applies in particular to the use of interactive features (e.g. liking, sharing, commenting).

Processing of personal data

The data collected about you when using the service is processed by LinkedIn. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes, amongst other things, data you provide voluntarily, such as your name, username, email address, telephone number, information about your professional background and profile data; content that you create, upload or receive, as well as comments; your IP address; details of the device you are using; information about websites and content you have accessed; and your location. We have no influence over the nature and scope of the data processed by LinkedIn, the manner in which it is processed and used, or the disclosure of this data to third parties. Details of which data is processed by LinkedIn and for what purposes can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy.

We process the data you enter on LinkedIn to the extent that we may ‘like’, comment on or share your posts, or contact and interact with you. The data you freely publish and share on LinkedIn is incorporated into our service in this way.

You can restrict the processing of your data via the general settings of your LinkedIn account. Furthermore, on mobile devices, you can use the settings to restrict LinkedIn’s access to contact and calendar data, photos, location data, etc. However, this depends on the operating system used. You can find out more about LinkedIn’s privacy settings at: https://de.linkedin.com/legal/privacy-policy.

Analysis

LinkedIn offers LinkedIn account holders the opportunity to gain an overview of the use of the account and its users. The analytics functions primarily allow statistical data to be accessed and analysed. We use this data to make our account as attractive and efficient as possible. To this end, LinkedIn provides us with data that LinkedIn itself has generated under its own responsibility. The data we receive from LinkedIn consists mainly of anonymised data and statistics. Where we receive personal data in this context, we are responsible for the further processing of this data for the purpose of analysing the use of our LinkedIn account. Further information can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy.

Communication

On LinkedIn, you have the option to communicate directly with us. Where you contact us via LinkedIn, the data transmitted will be stored and used by us solely for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Article 6(1)(a) of the GDPR, as well as our legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the collection and processing of enquiries, the analysis of these enquiries, and the prevention of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For your personal data, this is the case once the relevant conversation has ended. For us, the conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. You may withdraw your consent to the processing of your personal data at any time; in this case, we will delete the data immediately, provided there is no legal basis for further storage.

Further information on LinkedIn

If you have any questions regarding our use of personal data in connection with the use of the LinkedIn account, please feel free to contact us or our Data Protection Officer at any time. The contact details and communication channels are set out in this privacy policy. If you have any questions regarding data protection at LinkedIn, please contact LinkedIn directly.

Xing

In addition to our own online platform, we also maintain an account on the professional networking site XING. We use this account to provide information about our company and our activities, and to offer a channel for communication. The professional networking site XING is operated by New Work SE, Am Strandkai 1, 20457 Hamburg (“New Work”).

Please note that you use the professional networking site and its features at your own risk. This applies in particular to the use of interactive features (e.g. liking, sharing, commenting).

Processing of personal data

The data collected about you whilst using the service is processed by New Work. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes, amongst other things, data you provide voluntarily, such as your name, username, email address, telephone number, information about your professional background and profile data; content that you create, upload or receive, as well as comments; your IP address; details of the device you are using; information on websites and content you have accessed; and your location. We have no influence over the nature and scope of the data processed by New Work, the manner in which it is processed and used, or the disclosure of this data to third parties. Details of which data is processed by New Work and for what purposes can be found in New Work’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

We process the data you enter on XING to the extent that we may ‘like’, comment on or share your posts, or contact and interact with you. The data you freely publish and share on XING is incorporated into our service in this way.

You can restrict the processing of your data via the general settings of your XING account. Furthermore, on mobile devices, you can use the settings to restrict New Work’s access to contact and calendar data, photos, location data, etc. However, this depends on the operating system used. You can find out more about XING’s privacy settings at: https://privacy.xing.com/de/ihre-privatsphaere

Analysis

New Work offers XING account holders the opportunity to gain an overview of the use of the account and its users. The analytics functions primarily allow statistical data to be accessed and analysed. We use this data to make our account as attractive and efficient as possible. To this end, New Work provides us with data that it has generated itself under its own responsibility. The data we receive from New Work consists mainly of anonymised data and statistics. Where we receive personal data in this context, we are responsible for the further processing of this data for the purpose of analysing the use of our XING account. Further information can be found in XING’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.

Communication

On XING, you have the option to communicate directly with us. Where you contact us via XING, the data transmitted will be stored and used by us solely for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Article 6(1)(a) of the GDPR, as well as our legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the collection and processing of enquiries, the analysis of these enquiries, and the prevention of misuse.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For your personal data, this is the case once the relevant conversation has ended. For us, the conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved. You may withdraw your consent to the processing of your personal data at any time; in this case, we will delete the data immediately, provided there is no legal basis for further storage.

Further information on Xing

If you have any questions regarding our use of personal data in connection with the use of the XING account, please feel free to contact us and our Data Protection Officer at any time. The contact details and communication channels are set out in this privacy policy. If you have any questions regarding data protection at XING, please contact New Work directly.

Your rights and contact details

We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of your rights. If you would like further information or wish to exercise your rights, please do not hesitate to contact us at any time so that we can address your enquiry.

Data subject rights

You have extensive rights regarding the processing of your personal data. Firstly, you have a comprehensive right of access and may, where applicable, request the rectification and/or erasure of your personal data or restriction of its processing. You also have a right to object. With regard to the personal data you have provided to us, you also have a right to data portability.

If you wish to exercise any of your rights and/or receive further information on this matter, please contact the Naue service team by email at datenschutz@naue.com or the Naue Portal service team at portal@naue.com. Alternatively, you may also contact our Data Protection Officer.

Withdrawal of consent and objection

You may freely withdraw your consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent up until the time of withdrawal. The points of contact for withdrawing consent are also our aforementioned service teams and our Data Protection Officer.

If the processing of your personal data is not based on consent but on another legal basis, you may object to this data processing. Your objection will result in a review and, where appropriate, the cessation of data processing. You will be informed of the outcome of the review and, should data processing nevertheless continue, you will receive further information from us explaining why the data processing is permissible.

Data Protection Officer and contact details

We have appointed an external Data Protection Officer who assists us with data protection matters and whom you may also contact directly. If you have any questions regarding our handling of personal data or require further information on data protection matters, our Data Protection Officer and his team will be happy to assist you:

Attorney Dr Christoph Rempe
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Telephone: 0521 / 96535-875
E-mail: datenschutz@naue.com

If you wish to contact our Data Protection Officer directly by email, you can also reach him at christoph.rempe@brandi.net

Complaints

If you believe that our processing of your personal data is not in accordance with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You may also lodge a complaint with our Data Protection Officer. The Data Protection Officer will then investigate the matter and inform you of the outcome of the investigation.

Further information and changes

Links to other websites

Our website may contain links to other websites. These links are usually marked as such. We have no control over the extent to which the linked websites comply with applicable data protection regulations. We therefore recommend that you also familiarise yourself with the respective privacy policies of other websites.

Changes to this privacy policy

The current version of this privacy policy is indicated by the date below. We reserve the right to amend this privacy policy at any time with future effect. Amendments will be made, in particular, in the event of technical adjustments to the online service or changes to data protection regulations. The latest version of the privacy policy is always available directly via the online service. We recommend that you check regularly for any changes to this privacy policy.

Date of this privacy policy: September 2026

Note: This translation of our privacy policy was prepared in part with the assistance of artificial intelligence (AI); if you have any questions or comments regarding the translation, please send an e-mail to info@naue.com or to datenschutz@naue.com