DATA PRIVACY STATEMENT
Our company NIKOSAX A/S, subsidiary to UNION TANK Eckstein GmbH & Co. KG is aware of the fact that protection of privacy is an important issue for you when visiting our website and while dealing with us as partners or customers. We take the protection of your privacy very seriously. Therefore we want you to know when and which of your data (personal and non-personal) we save and how your data is used. This data privacy statement is thence meant to inform you about the measures which we take for data security.
Our use of your non-personal business data is only purpose and consent driven. With regards to personal data, we have adopted internal policies and measures which meet General Data Protection Regulation (GDPR) principles of privacy by design and data protection by default.
The GDPR approved on 14th April 2016 and published in the EU Official Journal on 4th May 2016 applies in all EU Member States from 25th May 2018. It will repeal and replace Directive 95/46EC and its Member State implementing legislation.
The concept of accountability is at the heart of the GDPR rules: this means that organisations within the EU or outside the EU who target EU residents must in compliance with GDPR increase transparency and fairness in the handling of individual personal information. Personal information here refers to any information relating to an identifiable individual (referred to in the statute as a data subject).
At NIKOSAX, Data subjects may include: business customers who may have a sole proprietorship or persons affiliated with a company that is our customer or partner. Get more insight into our privacy protection measures below.
In line with GDPR rules, all employees of NIKOSAX A/S are obligated to adhere to data secrecy issues.
COLLECTION OF DATA
Personal data will only be collected, when you voluntarily provide it to us, e. g. by completing our forms or by sending e-mails within the scope of ordering products or services, or by making inquiries or requests for information materials. The database and its contents will remain with our company and with our service provider. However, personal data will in no way be forwarded to any third party neither by us nor by any party charged by us, unless: you have agreed hereto, its within the scope of fulfilling contractual obligations, its for the information of our customers, business partners, and/or service providers, or if its in fulfillment of legal obligations in connection with Art. 6 para. 1 lit. c of the GDPR.
From company representatives of our customers and partners, Nikosax may require all or some of the following personal information depending on the instance of MSR (Member State of Refund) and the documentations requisite: basic personal information; i.e. name, contact data, copy of passport and address (in case of a one-person company).
From our web portal, it is possible as a matter of principle to browse without having to disclose any personal data. However, when opening our website, data is saved for backup purposes – data such as the name of your internet service provider, the website from where you visited our site, and your IP address. These data would possibly enable an identification, however, we do not effect any individual-related exploitation. The data can be evaluated for the purpose of statistics, but the individual user always remains anonymous. Where data is transmitted to an external service provider, we have ensured – by means of technical and organisational measures – that the provisions relating to data protection/privacy is always adhered to.
In addition to the aforementioned data, temporal cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in association with the browser you’re using and by which information is transmitted by the body which sets the cookie. These cookies serve to make our site more user-friendly and effective and cannot run programs or deliver viruses to your computer.
Some cookies are necessary to run our website efficiently but if you do not want cookies to be stored on your computer, you may set your browser preferences to reject all cookies before accessing our website. Most browsers allow you to choose whether or not to accept cookies. Please note however that some features may not be available as a result. By using our website without deactivating the acceptance of cookies, you agree that we may temporarily place our cookies on your computer. We give you an opportunity to decide whether to accept our cookies with our on-site cookie consent request.
We currently utilize the categories of cookies below:
1. Necessary cookies
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
We use necessary cookies to preserves user session state across page requests.
2. Preference cookies
Preference cookies enable a website to remember information that changes the way the website behaves or looks – like your preferred language or the region that you are in.
We use preference cookies to save the user’s preferred language on our website.
3. Web analytics cookies
We use various tools on our website to analyse surfing behaviour on our websites. Chief among these is Google Analytics, a web analytics service provided by Google, Inc. ("Google"). The use is made on the basis of Art.6 para. 1 lit. 1 (f) GDPR. The information generated regarding your use of our site may include:
- Browser type/version,
- used Operating system
- Referrer URL (the previously visited website),
- Host name of the accessing computer (IP address), and
- Time of the server request
This information is generally transmitted to a Google server in the USA and stored there.
You can deactivate the acceptance of cookies in your browser at any time; you can read about this step by step in the “Browser Help”.
PURPOSE & LEGAL BASIS FOR PROCESSING
Your personal data will only be used for providing you with the desired products and/or services or for other purposes for which you have given your approval, provided that it does not contravene any existing legal regulations. This is in accordance with Art. 6 para. 1 lit b of the GDPR.
RIGHTS OF THE DATA SUBJECTS
In the event that we process personal data from you, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis us as the responsible party within the meaning of the GDPR:
You have the right to request insight into the use of your personal data. This may include a request for information about the particular recipients or categories of recipients to whom your personal data has been or will be disclosed or a request for clarifications regarding purpose or duration of processing.
- THE RIGHT OF RECTIFICATION
You have a right of rectification and/or completion if the personal data processed concerning you is incorrect or incomplete. To do so, contact us at the below mentioned address.
- THE RIGHT TO RESTRICT PROCESSING
You may request that the processing of personal data concerning you be restricted if:you contest the accuracy of your personal data
• the processing is unlawful
• the controller (i.e. our company, Nikosax) no longer needs the personal data for the purposes of processing.
• you have objected to processing pursuant to Art. 21 Para. 1 GDPR pending the verification whether the legitimate grounds of the controller override your reasons.
Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction has been lifted.
- THE RIGHT TO DELETION (RIGHT TO BE FORGOTTEN)
You have the right to request the erasure of personal data where one of the following grounds apply:
• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing is based according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 (a) GDPR , and where there is no other legal reason for the processing.
• The personal data have been unlawfully processed.
• The personal data must be erased in compliance with a legal obligation in Union or Member State law to which the controller (i.e. Nikosax A/S) is subject.
- RIGHT OF DATA PORTABILITY
You have the right to request that the personal data concerning you be transferred directly by us to another person responsible without any hindrance by us, insofar as this is technically feasible and provided that
• the processing is based on consent pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 (b) GDPR and
• the processing is carried out using automated methods.
The freedoms and rights of other persons must not be affected by your request and the right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.
- THE RIGHT OF APPEAL TO A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
Barring any existing legal requirements such as ongoing legal proceedings etc., we will record personal data for as long as they are required to fulfill the desired service to which you have agreed. Your data is completely expunged from our database after the termination of contractual agreements based on the legal requirements of the respective MSR’s.
NIKOSAX A/S applies technical and organisational security measures to protect the data made available from accidental or intended manipulation, loss, destruction or access by unauthorized persons. In the case of the collection and processing of personal data, we ensure that we don’t share them with any third party without your prior consent and that where sharing is necessary to serve you, we use only securely encrypted channels. Our security measures will be revised from time to time and in accordance with the corresponding technological development.
The protection of the privacy of children is an important issue. Therefore we do not request, process or use any personal data of persons who – according to our knowledge – are under thirteen (13) years old on our website or firm without having requested verifiable authorization from the person’s legal representative. Upon request, the legal representative of the child concerned may review the information given and/or request deletion of the information given.
In case of any queries or proposals regarding data protection issues, please contact our group data protection officer:
UNION TANK Eckstein GmbH & Co. KG
Data protection officer
D-63801 Kleinostheim / Main
by email: firstname.lastname@example.org or email@example.com
When you contact us by e-mail or by phone, the data you provide (your e-mail address, and if applicable your name and your telephone number) will be stored by us in order to answer your questions. We will delete the data collected in this context after the storage is no longer required by law or otherwise limit its further processing if we are required by law to continue archiving it.
Continuous enhancements on the internet require adaptations to our Data Privacy Statement from time to time. We reserve the right to effect the corresponding modifications as required.