Privacy policy

On this page NBB Controls + Components GmbH (hereinafter referred to as NBB Controls + Components GmbH) provides information on the following NBB (“we”) provides information on the collection and processing of personal data.

Personal data is all data that can be personally related to a person concerned, e.g. name, address, e-mail addresses, phone number.
Person responsible according to. Art. 4 (7) of the EU Data Protection Basic Regulation (GDPR):
NBB Controls + Components GmbH
Otto-Hahn-Str. 3-5
75248 Ölbronn-Dürrn
Management:
Dipl.-Ing. Thomas Burchard
Dipl.-Wirtschafts-Ing. (Technical University) / MBA Pierre Augstein
You can contact our data protection officer Dr. Henning Kahlert at datenschutz@nbb.de or via our postal address with the addition “the data protection officer”.

1. Collection of personal data when visiting our website
(1) When visiting our website, we only collect the personal data that the visitor’s browser transmits to our server. The following data is collected, which is technically necessary for us to display the website and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access status/HTTP status code
Amount of data transmitted in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

(2) In addition to the provisions set out in point 1 listed data are stored on the visitor’s computer when the page Cookies is called up. Cookies are small text files that are stored on the visitor’s hard drive and through which certain information is sent to the site that set the cookie. Cookies cannot execute programs and cannot transfer viruses or other malware to the visitor’s computer. They only serve to make the internet offer more user-friendly and effective. They enable the server and the visited website to distinguish the individual page visitor from other visitors.
The cookies are automatically deleted when the visitor closes the browser. The visitor can prevent cookies from being stored on his computer by adjusting his browser settings. In this case, the visitor may not be able to use all functions of this website.

2. Contact options via the website
If the visitor contacts us via the e-mail address given on the website or via a contact form, the data provided by the visitor will be stored and processed automatically. These personal data, which are transmitted on a voluntary basis, are stored for the processing of the enquiry or for contacting the visitor. The data will not be passed on to third parties.

3. Order through our webshop
1. If you want to order something in our webshop your personal data is necessary for the conclusion of the contract. We need this data to process your order. The legal basis of the processing is again Art. 6 para. 1 lit. b GDPR
2. You can create a customer account voluntarely. Then your data will be saved for further purchases.When you create an account under “My Account” your provided data will be revocably saved. All other data, including your customer account, can be deleted at any time by emailing the website operator. We further save and process the data if it is necessary to carry out a concluded contract (para. 1) and to fulfill our legal obligations (para. 3).

4. Transfer of data to third parties for the purpose of contract implementation
For the execution of the contract we work together with the service providers listed below. The legal basis of the processing is again Art. 6 para. 1 lit. b GDPR.
a) PayPal
On our website we offer payment via PayPal among other things. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). We do not collect or store the data ourselves.
If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations carried out in the past.
For details on the handling of user data, please refer to PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
https://www.giropay.de/en/legal/private-policy
b) Credit card
On our website we offer, among other things, payment by credit card through our payment service provider Worldline S.A., Tour Voltaire, 1 place des degrés, CS 81162, 92059 Paris La Défense Cedex, France (former Ingenico Payment Services GmbH; before „Ogone“, hereinafter „Worldline“). We do not collect or store the data ourselves.

If you choose to pay by credit card, any personal and payment-related data that is requested and required for processing the transaction will also or exclusively be transmitted directly to your bank or credit card company or Worldline. Credit card information is collected and stored in encrypted form only by Worldline. Detailed information about Worldline Payment Services can be found under this link: https://financial-services.worldline.com/en/home/solutions/digital-services/payment-services.html.

The transmission of your data to Worldline is based on Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations carried out in the past.
For details on the handling of user data, please refer to Worldline’s privacy policy:

https://financial-services.worldline.com/en/home/privacy.html

c) giropay
On our website we offer payment via giropay, among other things. Provider of this payment service is giropay GmbH, An der Welle 4
60322 Frankfurt. We do not collect or store the data ourselves.
If you select payment via giropay, the payment data you have entered will be transmitted to giropay.
The transmission of your data to giropay is based on Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of data processing operations carried out in the past.
Details on the handling of user data can be found in the data protection declaration of giropay at:
https://www.giropay.de/rechtliches/datenschutzerklaerung
(d) UPS
To enable us to deliver your order, we pass on your data (name, address) to the shipping service provider.
We send regular shipments in Germany by UPS. The service provider is United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss. UPS’s privacy policy can be found here:
https://www.ups.com/de/de/help-center/legal-terms-conditions/privacy-notice.page
(e) GLS
To enable us to deliver your order, we pass on your data (name, address) to the shipping service provider.
We send shipments in Austria by GLS. The service provider is General Logistics Systems Germany GmbH & Co OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein. The data protection information of GLS can be found here:
https://gls-group.com/DE/de/datenschutz-standard

5. Rights of the data subject
Data subjects have the following rights regarding personal data concerning them:

Right of access,
Right of correction or deletion,
Right to restrict processing,
Right to object to the processing,
Right to data portability.

Data subjects also have the right to complain to a data protection supervisory authority about the processing of their personal data by us.

6. Objection or withdrawal of consent to the processing of personal data
If a data subject has given his or her consent to the processing of his or her data, he or she may revoke it at any time. Such a revocation affects the permissibility of the processing of personal data after it has been expressed to us.
Where we base the processing of personal data on the balancing of interests, the data subject may object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with the data subject. In the event of such an objection, we ask you to explain the reasons why we should not process the personal data as we have done. In the event of a justified objection, we will examine the situation and either stop or adapt the data processing or show the data subject our compelling reasons for continuing the processing that are worthy of protection.

7. Deletion and blocking of personal data
We store and process personal data only as long as this is necessary to achieve the purpose associated with the collection or as long as storage is required by European or national legislation. The data is blocked or deleted as soon as these storage periods have expired.

8. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.

9. YouTube
For integration and display of video content our website uses plugins from YouTube. The video portal is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When a page with an integrated YouTube plugin is called, a connection to the YouTube servers is established. YouTube will then know which of our pages you have accessed.
YouTube can directly link your surfing habits to your personal profile if you are logged in to your YouTube account. You can prevent this by logging out beforehand.
YouTube is used in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For details on the handling of user data, please refer to the YouTube privacy policy:
https://www.google.de/intl/de/policies/privacy

10. Use of Google Maps
This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data on the use of the map functions by visitors. You can find more detailed information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center.
You can find detailed instructions on how to manage your own data in connection with Google products here.
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. You can find further information in the privacy policy for Google Maps: https://policies.google.com/privacy

11. Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider of the web analytics service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses cookies. These are small text files that your web browser stores on your end device and enable an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.
The setting of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behaviour in order to optimise our website and, if necessary, advertising.
IP anonymisation
We use Google Analytics in conjunction with the IP anonymisation function. It guarantees that Google will truncate your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before sending it to the USA. There may be exceptional cases in which Google transfers the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activities and to provide us with further services related to website and internet use. The IP address transmitted by Google Analytics is not merged with other Google data.
Browser plugin
The setting of cookies by your web browser can be prevented. However, some functions of our website could be limited by this. You can also prevent the collection of data regarding your website usage, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Opposition to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link An opt-out cookie is set to prevent the collection of your information on future visits to our site: Disable Google Analytics.
Details on the handling of user data at Google Analytics can be found in the privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
In order to fully comply with the legal data protection requirements, we have concluded a contract with Google for order processing.
Demographic characteristics in Google Analytics
Our website uses the “demographic features” function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data is derived from interest-based advertising by Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this through the ad settings in your Google Account or by generally prohibiting Google Analytics from collecting your data as explained in the section “Opting out of data collection”.
Demographic characteristics in Google Analytics
Our website uses the “demographic features” function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data is derived from interest-based advertising by Google and from visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this through the ad settings in your Google Account or by generally prohibiting Google Analytics from collecting your data as explained in the section “Opting out of data collection”.

12. Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising program. In the context of the online advertising program we work with conversion tracking. After a click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and do not serve to personally identify users. The cookie enables Google and us to recognise that you have clicked on an advertisement and been redirected to our website.
Every Google AdWords customer receives a different cookie. The cookies are not traceable via websites of AdWords customers. Conversion cookies are used to generate conversion statistics for AdWords customers who use conversion tracking. Adwords customers learn how many users clicked on their ad and were redirected to pages with conversion tracking tags. However, AdWords customers do not receive any information that allows for personal identification of the users. If you do not wish to participate in tracking, you can object to any use. Here the conversion cookie must be deactivated in the user settings of the browser. This means that there is no inclusion in the conversion tracking statistics.
The storage of “conversion cookies” is based on Art. 6 para. 1 lit. f GDPR. As website operators, we have a legitimate interest in analyzing user behaviour in order to optimise our website and our advertising.
Details about Google AdWords and Google conversion tracking can be found in the Google Privacy Policy: https://www.google.de/policies/privacy/.
With a modern web browser you can monitor, restrict or prevent the setting of cookies. Disabling cookies may result in limited functionality of our website.

13. Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
With reCAPTCHA it should be checked, if the data inputon our websites (e.g. in a contact form) by a human being or by an automated program.For this purpose reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically, as soon as the website visitor enters the website. For analysis evaluates reCAPTCHA can retrieve various information (e.g. IP address, time spent by the website visitor on the website or by the user mouse movements). The data collected during the analysis are forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM.
Further information about Google reCAPTCHA and the Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

14. Bunny CDN
For proper and fast display of the content of our website we use Bunny CDN (Content Delivery Network), a service of BunnyWay d.o.o. When you access this content, you connect to servers of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Bunny CDN.
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer according to Art. 6 para. 1 lit. f GDPR.

15. Google Fonts
We use “Google Fonts” from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. In order to obtain these fonts, the user’s browser connects to servers of Google Ireland Limited and the visitor’s IP address is transmitted. The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f GDPR. The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google Fonts privacy policy: https://policies.google.com/privacy.

16. Google Tag Manager
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager allows us to manage website tags through an interface, allowing us to control the precise integration of services on our website. This allows us to flexibly integrate additional services in order to evaluate user access to our website. The legal basis is Art. 6 para. 1 lit. f GDPR.
The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google Tag Manager Privacy Policy: https://policies.google.com/privacy?hl=en.

17. Borlabs cookie
This website uses Borlabs cookie, the technically necessary Cookies (borlabs-cookie) to store your cookie consent Borlabs Cookie does not process any personal data.In the cookie borlabs-cookie your consent is stored, that you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser.
When you re-enter/reload the website, you will be asked again for your cookie consent.

18. Changes to our privacy policy
We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your new visit.