Notardec kindly welcomes you to their online presence and thanks you for your interest in the company and its services. With the following information we would like to inform you about how we collect, process, and manage personal data and for what purposes we use this data.
The controller responsible for the described data collection and processing is: Hegit GmbH (in course of incoperation) Schutzengelstrasse 36 6340 Baar Zug
We only collect and process personal data as required to appropriately provide the services requested, and do so only with your prior consent. An exception solely applies if such a prior consent is not possible or the processing of personal data is explicitly allowed by law. Generally, your prior consent serves as the legal basis to collect and process your personal data. Where your personal data is required to conclude and fulfill a contract between you and Notardec, the contract and/or the obligations derived from the contract serve as the legal basis to collect and process your personal data.
On our website we provide the possibility to register your email-address for our general newsletter. This general newsletter will be used for general email marketing purposes, mainly to give you updates about Hegit’s business and offers that might be relevant to you. By registering your email-address for the general newsletter you explicitly allow us to store and process this data to the extend required. At any time, you are able to unsubscribe from our general newsletter either by contacting us directly or by using the unsubscribe link provided in each email.
Please let us know if the personal information which we hold about you needs to be corrected or updated.
We have taken appropriate technical and organisational security measures to protect your personal data from unauthorised access and misuse. Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. You are responsible for keeping your passwords and login details confidential. We will not ask you for your password (except when you log in to the website’s services).
We might transfer your data to service providers who help us in the operation of our website and the associated processes. Those service providers may be located in other countries than where your residence is or where Hegit is operating out of. This transference is made under the scope of a data processing agreement. Our service providers are bound to us by strict instructions and contractual obligations. In some cases, we may transfer personal data to third countries outside the EU. If we transfer data to a country without adequate legal data protection, we ensure an appropriate level of protection as legally required by way of using appropriate contracts, or binding corporate rules, or we rely on the statutory exceptions of consent, performance of contracts, the establishment, exercise or enforcement of legal claims, overriding public interests, published personal data, or because it is necessary to protect the integrity of the persons concerned. In the case of Google Analytics (USA), an appropriate level of data protection is ensured by the corresponding participation in the Privacy Shield Agreement.
We use tools to monitor and store anonymous information about how you use the website. This information will be used to improve the website, its navigation and content. We only collect anonymous data and do not combine this data with other information (e.g. your email-address). The information we collect in this process may comprise data on how you navigate the website, or how often you use a certain feature.
We may use Google Analytics or similar services on our website. These are services provided by third parties, which may be located in any country worldwide (in the case of Google Analytics Google LLC is in the U.S., www.google.com) and which allow us to measure and evaluate the use of our website (on an anonymized basis). For this purpose, permanent cookies are used, which are set by the service provider. The service provider does not receive (and does not retain) any personal data from us, but the service provider may track your use of the website, combine this information with data from other websites you have visited and which are also tracked by the respective service provider and may use this information for its own purposes (e.g. to controlling of advertisements). If you have registered with the service provider, the service provider will also know your identity. In this case, the processing of your personal data by the service provider will be conducted in accordance with its data protection regulations. The service provider only provides us with data on the use of the respective website (but not any personal information of you). Google Analytics might record: – the page, from which the data is requested – the name of the data file, – the date and time of the query, – the amount of data transferred, – the access status (file transmitted, file not found), – a description of the type of browser used, – a description of the type of operating system used; – the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.
We might use plug-ins from social networks such as Facebook, Twitter, Youtube, Google+, Pinterest or Instagram on our websites. This is visible for you (typically based on the respective symbols). We have configured these elements to be disabled by default. If you activate them (by clicking on them), the operators of the respective social networks may record that you are on our website and where on our website you are exactly and may use this information for their own purposes. This processing of your personal data lays in the responsibility of the respective operator and occurs according to its data protection regulations. We do not receive any information about you from the respective operator.
In accordance with and as far as provided by applicable law, you have the right to access, rectification, and erasure of your personal data, the right to restriction of processing or to object to our data processing in addition to right to receive certain personal data for transfer to another controller (data portability). Please note, however, that we reserve the right to enforce statutory restrictions on our part, for example if we are obliged to retain or process certain data, have an overriding interest (insofar as we may invoke such interests) or need the data for asserting claims. If exercising certain rights will incur costs on you, we will notify you thereof in advance. You have the right to object to the processing at any time for reasons arising out of your particular situation. Consent given to collect and process your data can be withdrawn at any time, but this does not affect data processed prior to withdrawal. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims. You have the right to lodge a complaint with a supervisory authority. Please note that the exercise of these rights may be in conflict with your contractual obligations and this may result in consequences such as premature contract termination or involve costs. If this is the case, we will inform you in advance unless it has already been contractually agreed upon. In general, exercising these rights requires that you are able to prove your identity (e.g., by a copy of identification documents where your identity is not evident otherwise or can be verified in another way). In order to assert these rights, please contact us.
We process and retain your personal data as long as required for the performance of our contractual obligation and compliance with legal obligations or other purposes pursued with the processing, i.e. for the duration of the entire business relationship (from the initiation, during the performance of the contract until it is terminated) as well as beyond this duration in accordance with legal retention and documentation obligations. Personal data may be retained for the period during which claims can be asserted against our company or insofar as we are otherwise legally obliged to do so or if legitimate business interests require further retention (e.g., for evidence and documentation purposes). As soon as your personal data are no longer required for the above-mentioned purposes, they will be deleted or anonymized, to the extent possible. In general, shorter retention periods of no more than twelve months apply for operational data (e.g., system logs).