______________________________

Text additions to the privacy policy
- Social Media - 

______________________________

Privacy policy / information on data protection in social media

NICI GmbH maintains appearances in the ‘social media’, in this case on Facebook, Instagram and YouTube. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with. Below you will find the most important information on data protection law in relation to our websites.

Name and address of the person responsible for operations

In addition to NICI GmbH, the following company is responsible for the company websites within the meaning of the EU General Data Protection Regulation (EU GDPR) and other data protection regulations

- Facebook (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Instagram (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- YouTube (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).

We would also like to point out that your data may be processed outside the European Union.

Purpose and legal basis

We maintain the fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offers in this way. 

We also collect data for statistical purposes in order to further develop and optimise the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) are processed by the social networks and made available to us. We have no influence on the generation and presentation of this data. 

In addition, your personal data is processed by the social media providers for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behaviour and the resulting interests. This allows, among other things, adverts to be displayed within and outside the platforms that correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly on your end devices may also be stored in your user profiles. 

Data is also stored and analysed across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms. The processing of your personal data by NICI GmbH is based on our legitimate interests in effective information and communication in accordance with Art. 6 para. 1 sentence 1 lit. f. EU-GDPR.

If you are asked to consent to data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Art. 6 para. 1 sentence 1 lit. a., Art. 7 EU-GDPR.

Your rights / possibility to object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data on the respective network, you must

- log out of the respective network before visiting our fan page,
- delete the cookies on your device and
- close and restart your browser.

After logging in again, however, you will once again be recognisable to the network as a specific user. For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

Facebook
Privacy policy:      https://www.facebook.com/about/privacy/;
Opt-out:                   https://www.facebook.com/settings?tab=ads and
                                     http://www.youronlinechoices.com;

Instagram Privacy

policy:                     https://help.instagram.com/519522125107875;
Opt-out:                optout.networkadvertising.org/ and
                                    http://www.youronlinechoices.com;

YouTube
Privacy policy:      https://policies.google.com/privacy;
Opt-out:                  https://tools.google.com/dlpage/gaoptout?hl=de and 
                                     http://www.youronlinechoices.com;

Overall, you have the following rights regarding the processing of your personal data: 

Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

However, since NICI GmbH does not have full access to your personal data, you should contact the social media providers directly when asserting your rights, as they have access to the personal data of their users and can take appropriate measures and provide information. 

Should you nevertheless require assistance, we will of course endeavour to support you. Please contact info@nici.de.

Notes on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music etc. on our website, you should be aware that you may be transferring all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

______________________________

Privacy policy
______________________________

We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. This privacy policy provides you with comprehensive information about the processing of your personal data by NICI GmbH and the rights to which you are entitled.

Personal data is information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address.

Data is anonymous if no personal reference to the user can be established.

Responsible party and data protection officer

Address:

Langheimer Straße 94
96264 Altenkunstadt / Germany

Contact details:

Website: www.nici.de
Phone: +49 9572 / 7220-100
Mail: info@nici.de

Contact data privacy:

Mail: kommunikation@nici.de

Your rights as data subject

First of all, we would like to inform you here about your rights as a data subject. These rights are standardized in Art. 15 - 22 EU GDPR. This includes

- The right to information (Art. 15 EU GDPR),
- The right to erasure (Art. 17 EU GDPR),
- The right to rectification (Art. 16 EU GDPR),
- The right to data portability (Art. 20 EU GDPR),
- The right to restrict data processing (Art. 18 EU GDPR),
- The right to object to data processing (Art. 21 EU GDPR).

To assert these rights, please contact: kommunikation@nici.de. The same applies if you have any questions about data processing in our company or wish to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with rights of objection:

### ### ### ### 

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, if possible to: kommunikation@nici.de.

In the event that we process your data to protect legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

### ### ### ### 

Purposes and legal basis of data processing

When processing your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with. The legal basis for data processing arises in particular from Art. 6 EU GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection authorization provision. Before you give your consent, we will inform you about the purpose of the data processing and your right of withdrawal.

Disclosure to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, your data will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In certain cases, service providers support our specialist departments in fulfilling their tasks. These include hosting, store programming, payment processing, credit checks, newsletters and shipping. The necessary data protection contracts have been concluded with all service providers.

Third country transfer / intention to transfer to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law or if you have given us your consent to do so.

We do not transfer your personal data to any service provider outside the European Economic Area.

Storage duration of the data

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further retention obligations, the data will be routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transmission of your data

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

The exchange of data to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the latest encryption protocols. It is also possible to use alternative communication channels (e.g. by post).

Obligation to provide data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or execute the underlying contractual relationship without providing this data.

Categories, sources and origin of data

Which data we process is determined by the respective context: this depends on whether, for example, you place an order online or enter an inquiry in our contact form or declare a revocation.

Please note that we may also provide information for special processing situations separately in a suitable place, e.g. when uploading application documents or in the case of a contact request.

We collect and process the following data when you visit our website:

- Name of the internet service provider
- Information about the website from which you are visiting us
- Web browser and operating system used
- The IP address assigned by your Internet service provide
- Information about the websites you visit on our site, including date and time
- Access status / http status code

For reasons of technical security (in particular to defend against attempted attacks on our web server), this data is stored in accordance with Art. 6(1)(F) EU GDPR. After 7 days at the latest, anonymization takes place by shortening the IP address so that no reference to the user is established.

We collect and process the following data as part of a contact request:

- Surname first name
- Contact details
- Title
- Details on wishes and interests
- Company name (if applicable)
- Telephone number (not mandatory)

We process the following data as part of the ordering process:

- Title
- Surname, first name
- Shipping address
- Billing address
- Email address
- Data that may be permissibly processed from other sources

We collect and process the following data for newsletters:

- Email adress as mandatory field
- Last name, first name and title can be optionally entered when registering for the newsletter.

When you order the NICI catalog / brochure, we collect and process the following data:

- Title
- Surname, first name
- Email address
- Address

We collect and process the following data for competitions:

- Surname, first name
- E-mail address (depending on the notification channel)
- Address
- Date of birth

When registering / opening a customer account, we collect and process the following data:

- Title
- Surname, first name
- E-mail address
- Address, possibly different delivery address
- Data that may be permissibly processed from other sources

Automated decisions in individual cases

We do not use purely automated processing to reach a decision.

Cookies (Art. 6 para. 1 S. 1 lit. a, fc  EU-GDPR, § 25 para. 1,2 TTDSG 

Our website uses so-called cookies. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your end device and saved (locally) by your browser. Cookies only contain pseudonymous, usually even anonymous data. Some cookies remain in place for the duration of a browser session (so-called session cookies), others are stored for longer periods (so-called persistent cookies, e.g. consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies that are controlled by third-party providers. These use the information contained in the cookies, e.g. to show you content or to record the pages you have visited. 

On the basis of our legitimate interest (Art. 6 para. 1 sentence 1 lit. f EU GDPR), we set technically necessary cookies that are absolutely necessary for the operation of the website and to ensure its functionality. We also use cookies without your consent if their sole purpose is to store or access information stored in the terminal device for the transmission of messages or if they are absolutely necessary to provide the service you have expressly requested, § 25 para. 2 TTDSG.

Subject to your consent, other cookies are used to enable us or third parties to analyse how our services are used, for example. This allows us to customise the content according to user needs. Cookies also enable us to measure the effectiveness of a particular advert and to place it, for example, depending on the thematic interests of the user. The legal basis for this is your express consent (Art. 6 para. 1 sentence 1 lit. a EU-GDPR, § 25 para. 1 TTDSG).

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our website, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not giving or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance. 

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, you will not be able to use our website to its full extent or only to a limited extent. 

Please also note our information in the section of the respective service that uses cookies. 

Usercentrics (Art. 6 para. 1 lit. c EU-DS-GVO) 

We use the Usercentrics Consent Management Platform to obtain and manage your consent. The operator is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. The Usercentrics Consent Management Platform collects device information, browser information, anonymised IP address, opt-in and opt-out data, date and time of visit, request URLs, website page path and geographical location via a JavaScript. This JavaScript enables Usercentrics GmbH to inform users about certain tags and web technologies on our website and to obtain, manage and document their consent. The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. c GDPR, as we are legally obliged to provide proof of consent (in accordance with Art. 7 para. 1 GDPR). The aim is to know the preferences of the users and to implement them accordingly and to document them in a legally secure manner. The data is deleted as soon as it is no longer required for logging and there are no legal obligations to retain it. The consent data (consent and revocation of consent) is stored for three years. The data will then be deleted immediately or forwarded to the responsible body in the form of a data export on request. The user can permanently prevent the execution of JavaScript at any time by making the appropriate settings in their browser, which would also prevent Usercentrics from executing the JavaScript. Further information on data protection at Usercentrics can be found at: https://usercentrics.com/privacy-policy/ 

This also applies to other cookies: most web browsers accept cookies automatically. Of course, you can also deactivate, restrict or delete cookies on your end device manually via your browser settings or with the help of software. 

Please note: If you deactivate the setting of cookies, you may not be able to use all functions of our website to their full extent. 

Google Tag Manager (Art. 6 para. 1 lit. f EU-DS-GVO, § 25 para. 2 TTDSG) 

Our websites use the Google Tag Manager of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service allows website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags that are implemented with Google Tag Manager. 

Further information can be found at http://www.google.com/tagmanager/use-policy.html.

Creation of user profiles or use of cookies that are not purely functional (Art. 6 para. 1 lit. a EU GDPR, Section 25 para. 1 TTDSG)

Google Analytics (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

We use the Google Analytics tracking tool from Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland on our website.

Based on your consent (Art. 6 para. 1 lit. a EU GDPR), Google Analytics uses so-called ‘cookies’, text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Please note that by giving your consent, you also give your consent for this circumstance.

However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We therefore use the tool in particular to analyse how our website is used in order to make it even more appealing to you.

Of course, you have the choice as to whether you want us to use this data to improve the site by authorising this via our consent banner. The legal basis for the processing of your personal data is therefore based on your consent in accordance with Art. 6 para. 1 lit. a. EU-GDPR. 

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our site, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

The purpose of the processing of your personal data by the Google Analytics service is to analyse the interaction of our website visitors with our website. By evaluating the data obtained here, we can optimise our offer and increase user-friendliness.

We delete or anonymise the data collected by Google Analytics as soon as it is no longer required for our purposes. This is the case after 14 months.

Please note that personal data may be processed in a third country, the USA, in this context. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 para. 1 sentence 1 lit. a GDPR), in which case you will be informed of this separately when obtaining your consent, as well as the possibility of revocation.

Hotjar (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

This website uses the web analysis service Hotjar from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).

This tool can be used to track movements on the websites on which Hotjar is used (so-called heat maps). For example, it is possible to recognise how far users scroll and which buttons users click and how often. The tool also makes it possible to obtain feedback directly from website users. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of your consent in accordance with Art. 6 para. 1 lit. a EU GDPR.

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our site, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

We pay particular attention to the protection of your personal data when using this tool. For example, we can only track which buttons you click and how far you scroll. Areas of the websites in which personal data about you or third parties is displayed are automatically hidden by Hotjar and can therefore not be traced at any time. 

Personal data is stored for 6 months and then deleted by us.

Further information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com

The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy’

Facebook Pixel (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

This website uses the ‘Facebook pixel’ of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If explicit consent is given, this allows the behaviour of users to be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures. The data collected is anonymous to us and does not allow us to identify users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to place adverts on and off Facebook. A cookie may also be stored on your computer for these purposes. The Facebook pixel also collects the following data from the use of our website: email address, gender, city, region, postcode, country, first and last name, telephone number, date of birth. This enables Facebook to assign your data to a specific Facebook profile and to display suitable advertising measures there.

When collecting data, we rely on your consent in accordance with Art. 6 para. 1 lit. a EU GDPR for the corresponding data processing.

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our website, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

If you withdraw your consent, your data will no longer be used for this purpose and will be deleted, provided there are no legal retention periods to the contrary. Without revocation, the data will be stored for 180 days. The data will then be deleted automatically.

You can also deactivate the use of cookies by third-party providers such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Specific information about the Facebook pixel and how it works can be found here: https://www.facebook.com/business/help/651294705016616.

Please note that personal data may be processed in a third country, the USA, in this context. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 para. 1 sentence 1 lit. a GDPR), in which case you will be informed of this separately when obtaining your consent, as well as the possibility of revocation.

Google AdWords Remarketing und Conversion Tracking (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

Our website uses Google Remarketing Tags. These are services provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). Google uses cookies, which are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. The IP address is then shortened by Google by the last three digits, so that a clear assignment of the IP address is no longer possible. Google uses this information to analyse your use of the website, to compile reports for the website operator and to provide services relating to your use of the Internet and the website. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Third-party providers, including Google, place adverts on websites on the Internet and use stored cookies to place adverts on the basis of a user's previous visits to the website. Google will not associate your IP address with any other data held by Google.

Our website also uses Google Conversion Tracking. Google AdWords places a cookie on your computer if you have reached our website via a Google advert. These cookies lose their validity after 30 days and are not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who use conversion tracking. In this respect, we learn the total number of users who clicked on our advert and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which we can identify you personally. If you do not wish to participate in the tracking process, you can refuse the setting of the cookie required for this.

The use of Google AdWords Remarketing and Google Conversion Tracking is based on your consent in accordance with Art. 6 para. 1 lit. a EU-GDPR, § 25 para. 1 TTDSG.

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our site, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

You can find more information on the cookies used on this website and the option of deactivating the setting of cookies on this website in our cookie notice.

Google Maps (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

On our website, we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’) on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a EU-GDPR.

Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. By using this service, you are shown our location and it is easier for you to contact us. 

If you give us your consent for the integration of Google Maps via the consent banner, information about your use of our website (such as your IP address) will be transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the Google Maps map is integrated. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. We have implemented Google Maps via the consent banner so that data can only be collected once you have given your consent to the integration of Google Maps. Please note that your consent also includes the transfer of data, particularly to the USA.

If you do not wish to be associated with your profile on Google, you must log out of Google before giving your consent and accessing a corresponding sub-page with a Google Maps map. Google stores your data (even for users who are not logged in) as usage profiles and analyses them.

Such an evaluation is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a EU-GDPR on the basis of your consent. Google in turn uses the data to display personalised advertising, conduct market research and/or design its website to meet your needs. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right, as we unfortunately have no influence over this.

If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. However, Google Maps and thus also the map display on this website can then unfortunately not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (‘Google Privacy Policy’): https://www.google.de/intl/de/policies/privacy 

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our site, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers.

Please note that personal data may be processed in a third country, the USA, in this context. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 para. 1 sentence 1 lit. a GDPR), in which case you will be informed of this separately when obtaining your consent, as well as the possibility of revocation.

You tube (Art. 6 para. 1 lit. a EU-DS-GVO, § 25 para. 1 TTDSG)

YouTube is a video portal of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter ‘YouTube’). We have integrated at least one YouTube plugin into our online services. When you access an online service that contains a YouTube plugin, your browser establishes a direct connection with the YouTube servers. This transmits the information to YouTube that your browser has visited the corresponding page of our online services, even if you do not have a YouTube account or are not logged into your account. This information is transmitted directly from your browser to a YouTube server in the USA and stored there.

If you are logged into your YouTube account at the same time, it is also possible to assign the page view to your YouTube account and you would enable YouTube to assign your surfing behaviour directly to your personal profile.

If you wish to prevent this transmission and storage of your data and your behaviour on our online services by YouTube, you must log out of YouTube before you visit our site and delete any cookies placed by YouTube.

Further information on the collection and use of your data by YouTube can be found in their privacy policy at https://www.YouTube.com/static?template=privacy_guidelines and in Google's privacy policy at https://www.google.com/policies/privacy/

When collecting data, we rely on your consent in accordance with Art. 6 para. 1 lit. a EU GDPR for the corresponding data processing. 

You can revoke your consent at any time with effect for the future and change the cookie settings. In this case, please delete the cookies from www.nici.de in your browser settings. The next time you visit our website, you will be asked to accept cookies again. Please reject the cookies then. Please note that this must be done separately for different end devices and for different browsers. 

Please note that personal data may be processed in a third country, the USA, in this context. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing or storage in third countries may also take place on the basis of your consent (Art. 49 para. 1 sentence 1 lit. a GDPR), in which case you will be informed of this separately when obtaining your consent, as well as the possibility of revocation. 

Links to social media 

On our website you will find links to the social media services of Meta / Facebook, Twitter, YouTube. You can recognise links to the websites of social media services by the respective company logo. If you follow these links, you will reach the company website of NICI GmbH on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the social media service's servers that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example 

- Address of the website on which the activated link is located
- Date and time the website was accessed or the link was activated
- Information about the browser and operating system used
- IP address 

If you are already logged in to the corresponding social media service at the time you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand. 

The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. 

Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union. Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service. 

Contact form / Contact by e-mail (Art. 6 para. 1 lit. a, b EU-DS-GVO) 

There are contact forms on our website that can be used to contact us electronically. If you write to us via a contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests. The principle of data minimisation and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you. This is your e-mail address, the message field itself and any other information required to process your enquiry. Your IP address is also processed for technical reasons and for legal protection. All other data are voluntary fields and can be provided optionally (e.g. for a more personalised response to your questions). In order to protect the security and confidentiality of your data in the best possible way, we implement appropriate security measures. Your enquiry will be transmitted to us https-encrypted. If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your enquiry. If you do not use the forms provided to contact us, no further data will be collected.

Newsletter (Art. 6 para. 1 lit. a EU-DS-GVO)

You can subscribe to a free newsletter on our website. The e-mail address provided when registering for the newsletter will be used to send the newsletter. If you optionally provide us with your title, first name and surname, the newsletter will be sent in a personalised form.

The principle of data minimisation and data avoidance is observed here, as only the email address is marked as a mandatory field. For technical reasons and for legal protection, your IP address is also processed when you order the newsletter.

We use the so-called double opt-in procedure for sending newsletters by e-mail. This means that you will only receive advertising by e-mail if you have previously expressly confirmed that we should activate the newsletter service. We do this by sending you a notification e-mail and asking you to confirm that you wish to receive our newsletter at this e-mail address by clicking on a link contained in this e-mail.

You can of course unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent. It is also possible to unsubscribe from the newsletter at any time directly via our website.

This also applies to any newsletter tracking pixels used.

Competition / advertising consent (Art. 6 para. 1 lit. a, b EU-DS-GVO)

You have the opportunity to take part in temporary competitions on our website. If you fill in the competition form, we will process the data you enter there solely for the purpose of organising the competition.

The principle of data minimisation and data avoidance is observed in that you only have to provide the data that we absolutely need from you to carry out the competition and to notify you of the prize.

The mandatory fields are marked with an (*). Your IP address will also be processed for technical reasons and for legal protection. The other fields are optional and can be completed if you wish. Unfortunately, we cannot carry out the competition without the mandatory fields. Participation is then not possible.

We will only pass on your data to third parties within the framework of the statutory provisions or with your consent. Otherwise, your data will not be passed on to third parties unless we are obliged to do so due to mandatory legal provisions (passing on to external bodies such as supervisory authorities or law enforcement agencies). 

As part of the competition form, you also have the option of giving us your consent to send you a newsletter. Of course, it is also possible to take part in the competition without giving your advertising consent.

If you give us your consent by ticking the newsletter checkbox, we will process your data as described in the Newsletter section. You can revoke this consent at any time as described in the Newsletter section.

Order process in the webshop (Art. 6 para. 1 lit. b EU-GDPR)

We process the data you provide during the ordering process only to fulfil or process the contractual relationship, unless you consent to further use.

The principle of data economy and data avoidance is observed in that you only have to provide us with the data that we absolutely need to execute the contract or fulfil our contractual obligations or that we are legally obliged to collect.

Your IP address is also processed for technical reasons and for legal protection. Without this data, we will unfortunately have to refuse to conclude the contract, as we will then be unable to fulfil it or may have to terminate an existing contract.

Registration / customer account (Art. 6 para. 1 lit. a, b EU-GDPR)

On our website, we offer users the opportunity to register by providing personal data. The advantage of this is that you can view your order history in particular and the data you provide for the order form is saved. This means that you do not have to enter them again when you place another order.

Registration is therefore possible either to fulfil a contract (via our online shop) with you or to carry out pre-contractual measures. An order can also be placed without opening a customer account.

The principle of data minimisation and data avoidance is observed here, as only the data required for registration is marked with an asterisk (*) as a mandatory field.

By registering on our website, the user's IP address and the date and time of registration are also stored (technical background data). By clicking the ‘Register now’ button, you consent to the processing of your data.

Please note: The password you assign is stored by us in encrypted form. Employees of our company cannot read this password. They are therefore unable to provide you with any information if you have forgotten your password.

In this case, please use the ‘Forgotten password’ function, which will send you an automatically generated new password by e-mail. No member of staff is authorised to ask you for your password by telephone or in writing. Therefore, please never give your password if you receive such requests.

Once you have completed the registration process, your data will be stored with us for use in the protected customer area. As soon as you log in to our website with your e-mail address as your user name and password, this data will be made available for actions you carry out on our website (e.g. for orders in our online shop). Completed orders can be tracked in the order history. You can enter changes to the billing or delivery address here.

Registered persons are free to make changes / corrections to the billing or delivery address in the order history themselves. Of course, you can also cancel or delete your registration or customer account.

Payment systems (Art. 6 para. 1 lit. a, b EU-GDPR), credit check (Art. 6 para. 1 lit. f EU-GDPR)

In our online shop, you can pay by credit card, PayPal or instant bank transfer. For this purpose, the respective payment-relevant data is collected in order to be able to process your order and payment. Your IP address is also processed for technical reasons and for legal protection.

The principle of data economy and data avoidance is observed in that you only have to provide us with the data that we absolutely need to process the payment and thus fulfil the contract or that we are legally obliged to collect. 

Without this data, we will unfortunately have to refuse to conclude the contract, as we will then be unable to fulfil it. 

The payment system we use utilises SSL encryption to protect the transmission of your data.

Note on credit card payments: As is usual with credit card payments, the credit card details will be checked and a credit check carried out.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects ‘PayPal’ as the payment option during the ordering process in our online shop, the data of the data subject is automatically transmitted to PayPal.

By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, surname, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.

Personal data that is necessary for processing the purchase contract is also data that is related to the respective order. Details on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev (for the legal situation as of 25 May 2018).

Advertising purposes for existing customers (Art. 6 para. 1 lit. f EU-GDPR)

NICI GmbH is interested in maintaining the customer relationship with you and sending you information and offers about our products / services. We therefore process your data in order to send you relevant information and offers by email.

### ### ### ### 

If you do not wish this, you can object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will no longer process your data for this purpose.

The objection can be made free of charge and without giving reasons and should preferably be sent by e-mail to kommunikation@nici.de or by post to NICI GmbH, Datenschutz, Langheimer Strasse 94, 96264 Altenkunstadt, Germany.

### ### ### ###

Online offers for children

Persons under the age of 16 may not transmit any personal data to us or submit a declaration of consent without the consent of their legal guardians. We would like to encourage parents and legal guardians to actively participate in the online activities and interests of their children.

Links to other providers

Our website also contains - clearly recognisable - links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any legal infringements, such links will be removed immediately.

Transparency and information obligations for customers, suppliers, contractual partners and interested parties of NICI GmbH

Categories / origin of the data

We process the following personal data as part of the contractual relationship and for the initiation of the contract: 

 For business customers: 
- Contact data (e.g. first/surname of the current and, if applicable, previous contact persons as well as name affixes, company name and address of the customer (employer), telephone number with extension, business e-mail address)
- Job-related data (e.g. function in the company, department) 

For private customers:
- Master data (title, first/last name, name affixes, date of birth if applicable)
- Contact data (e.g. name and private address (if applicable, floor, district, federal state), mobile and landline telephone number, e-mail address, fax number)
- Different delivery/billing address (e.g. name and address (if applicable, floor, district, federal state), if applicable, telephone number, if applicable, e-mail address)
- Order history
- If applicable, bank details (in the context of a SEPA direct debit mandate also first name/surname of the account holder)
- If applicable, preferred payment system, information on creditworthiness and credit behaviour 

For suppliers:
- Contact details (e.g. first/surname of current and, if applicable, previous contact persons as well as name affixes, company name and address of the customer (employer), telephone number with extension, business e-mail address)
- Job-related data (e.g. function in the company, department) 

Purposes and legal basis of data processing 

When processing your personal data, the provisions of the EU GDPR, the BDSG (new) and other relevant legal provisions are always complied with. 

Your personal data will be processed exclusively for the implementation of pre-contractual measures (e.g. for the preparation of offers for products or services) and for the fulfilment of contractual obligations (e.g. for order/order/payment processing), (Art. 6 para. 1 lit. b EU GDPR) or if there is a legal obligation to process (e.g. due to tax law requirements) (Art. 6 para. 1 lit. c EU GDPR). The personal data was originally collected for these purposes. 

Of course, your consent to data processing can also constitute a data protection authorisation provision (Art. 6 para. 1 lit. a EU GDPR). Before granting consent, we will inform you about the purpose of the data processing and about your right of cancellation in accordance with Art. 7 para. 3 EU GDPR. 

NICI GmbH is also interested in maintaining the customer relationship with you and sending you information and offers about our products / services by e-mail, post or in personal contact. We therefore process your data in order to send or provide you with relevant information and offers (Art. 6 para. 1 lit. f EU GDPR). 

Your personal data will only be processed for the detection of criminal offences under the conditions of Art. 10 EU GDPR.

Transparency and information obligations for applicants of NICI GmbH

Categories / origin of the data

We process the following personal data as part of the application process:

- Your master data (surname, first name, name affixes)
- Contact details (address, telephone number, e-mail address)
- Qualification data (CV, cover letter, qualifications)
- Photo / work permit / residence permit / date of birth, if applicable
- If applicable, criminal record / certificate of good conduct

Your personal data is generally collected directly from you as part of the application process. 

Exceptionally, in certain constellations, your personal data may also be collected by other organisations, such as recruitment agencies.

Purposes and legal basis of data processing

hen processing your personal data, we always comply with the provisions of the EU GDPR, the BDSG (new) and all other (labour) law provisions.

We are aware of the importance of your data. Your personal data will be processed exclusively for the purpose of effectively and correctly handling the application process and for contacting you as part of the application process. 

We also process your data if we have a legal obligation to do so, in particular under labour law. In the case of special categories of personal data in accordance with Art. 9 para. 1 EU GDPR, a balancing of interests also takes place, i.e. data processing only takes place if your interests worthy of protection do not outweigh this (Art. 88 para. 1 EU GDPR in conjunction with. § Section 26 para. 1, 3 BDSG (new)).

Your consent also constitutes authorisation for data processing. If you have therefore given us your consent (e.g. for longer storage of the application documents in our applicant pool), we will also process your data for this purpose (Art. 88 para. 1 EU GDPR in conjunction with Section 26 para. 2 BDSG (new)). § Section 26 (2) BDSG (new)). If we obtain your consent, we will of course inform you about the specific purpose of the data processing and about your right of cancellation. If the consent also relates to the processing of special categories of personal data in accordance with Art. 9 EU GDPR, we will expressly inform you of this in advance.

Storage period of the data

We store your applicant data until the application process has been completed or we no longer need your data for the above-mentioned purposes or you have withdrawn your consent. If we enter into an employment relationship with you, we will continue to store the relevant applicant data, provided that it is still relevant for the fulfilment of the employment relationship. 

If we unfortunately have to reject your application, we will delete your application documents no later than 6 months afterwards. 

Unless you have given us your consent to include you in our applicant pool and the associated longer storage of your application documents. In this case, we will delete your data after 5 years. You can revoke this consent at any time by sending a corresponding message to kommunikation@nici.de. In the event of cancellation, we will delete your data within 30 days.