Data protection declaration
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:
+49 (0) 721 96458 0
The Nexway AG data protection officer is:
1. General information about data processing
1.1. Processing of personal data and its purpose
Nexway AG (hereinafter referred to as „Nexway AG“ or „we“) processes users‘ personal data only to the extent necessary to provide a functional website and our content and services. When visiting our website, the following data is processed:
Processing and temporary saving of the IP address is necessary to enable the website to be delivered to the user's computer. Therefore, the user‘s IP address must be saved for the duration of the session. The log files contain the IP addresses or other data that makes it possible to identify the user. The data is saved in the log files to ensure the functionality of the websites. The data also serves to optimise our websites, to ensure the security of our information technology systems and to detect and analyse attempts of fraud or attacks.
1.2. Legal bases for processing personal data
Our users' personal data is processed regularly with the user's consent. An exception is constituted in cases where prior consent cannot be obtained for real reasons and we are permitted to process the data by legal regulations. Data and log files are stored on the basis of Art. 6 Para. 1 (f) GDPR.
1.3. Deletion of data and storage period
The personal data of the person in question is deleted or blocked by us as soon as the purpose of the storage ceases to apply. In case of data processing for the provision of the websites, the deletion takes place once the respective session has ended. In case of storage of personal data in log files, the deletion takes place after 30 days. Extended storage is possible if the users‘ IP addresses are deleted or altered beforehand so it is no longer possible to allocate them to the accessing client.
The purpose of cookies is to allow for the user-friendly design of our websites. Processing personal data using cookies is done based on Art. 6 Para. 1 (f) GDPR. Cookies are stored on the user‘s computer and are transmitted to our websites from there. The users can disable or restrict the transmission of cookies by changing the settings on their internet browser. Already stored cookies can be deleted at any time. If cookies are disabled, it is possible that not all functions of our websites can be used to their full extent.
Nexway AG implements technical and organisational safety measures to protect users‘ personal data from random or intentional manipulations, loss, destruction or from access by unauthorised persons. Our security measures are subject to continuous improvement in line with technological developments.
4. Data processing when using our shop systems
If you shop in our online shop, we process the following personal data from you in order to be able to carry out your order:
We pass your data on to our partner companies, who support us in the correct fulfilment of the contract, within the scope of what is legally permitted. These companies, for their part, are obliged to comply with the applicable data protection regulation, in particular these companies can exclusively process the data for the fulfilment of their tasks on our behalf and only in accordance with our instructions. Data processing in connection with the ordering process is carried out on the basis of Art. 6 Para 1 (b) GDPR.
5. Rights of the person concerned
If Nexway AG processes your personal data, you are a person concerned in accordance with Art. 4 No. 1 GDPR and have the following rights in relation to Nexway AG:
5.1. Right to information
In accordance with Art. 15 GDPR, you can ask us to confirm whether we will process personal data concerning you. If we process your personal data, you can request the following information from us:
You are entitled to request information as to whether your personal data is transferred to a third country or to an international organisation. In this context, you can request to be informed about the suitable guarantees in accordance with Art. 46 GDPR in connection with the transfer.
5.2. The right to correction
In accordance with Art. 16 GDPR, you are entitled to request us to correct and/or complete any incorrect personal data concerning you.
5.3. The right to deletion
In accordance with Art. 17 GDPR, you can request that your personal data is deleted immediately. We are obliged to delete your data immediately, if one of the following reasons applies:
If we have made your personal data public and we are obliged to delete it in accordance with Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you - as the person concerned - have requested the deletion of all links to your personal data or of copies or replications of your personal data.
5.4. The right to restriction of processing
Under the following prerequisites, you can request the restriction of processing of your personal data, in accordance with Art. 18 GDPR:
If the processing of your personal data has been restricted, this data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal persons or on the grounds of an important public interest of the European Union or a member state. If the restriction of processing has been restricted in accordance with the aforementioned prerequisites, we will inform you about this before the restriction is in place.
5.5. The right to consultation
If you have asserted your right towards us to correct, delete or restrict the processing, we are obliged, in accordance with Art. 19 GDPR, to inform all recipients whose personal data has been disclosed by us about this circumstance, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
5.6. The right to data transferability
In accordance with Art. 20 GDPR, you have the right to receive personal data that you have provided us with in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another responsible party without obstruction by us, provided that:
In exercising this right, you also have the right to have your personal data being transferred directly by us to another responsible party, insofar as this is technically feasible. The freedoms and rights of other parties shall not be affected by this. The right to data transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority which has been entrusted to us.
5.7. The right to object
In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of your personal data on the basis of Art. 6 Para. 1 (e) or (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions. We will not subsequently process your personal data unless we can prove compelling reasons worthy of protection for our processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
5.8. The right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent to us at any time. The revocation of consent does not affect the legality of the processing that has taken place on the basis of the consent until revocation.
5.9. Automated decision in individual cases including profiling
In accordance with Art. 22 GDPR you have the right not to be subject to a decision based exclusively on automated processing - including profiling - which has a legal effect against you or significantly affects you in a similar manner. This does not apply, if the decision:
5.10. The right to complain to a supervisory authority
Irrespective of any other administrative or legal remedy, you have the right to complain to a supervisory authority, in particular in the member state where you are a resident, work or suspected of having infringed the GDPR, if you believe that the processing of your personal data by us is contrary to it.
6. Responsibility for contents and information
Our websites include links to internet offers from external providers. The contents of the internet offer from external providers were carefully checked by us when setting the link as to whether they violate applicable laws under civil or criminal law. However, it cannot be ruled out that these contents are subsequently changed by the respective providers. If you are of the opinion that linked external sites violate applicable law or have other inappropriate content, please inform us about this. We will follow up on your information and remove the external links if necessary. We are not responsible for the contents and availability of the linked external internet sites.
7. Inclusion and validity of the data protection declaration
By using our website, you consent to the data processing described above. This data protection declaration only applies for the content of Nexway AG. Other data protection and data security regulations apply for the linked external contents. You can find out who is responsible for these offers in the respective imprint.
Last updated: October 2019