Privacy Policy

INFORMATION OBLIGATION PURSUANT TO § 5 DDG & ARTICLES 12, 13, AND 14 GDPR

Protecting personal data is more than just complying with legal requirements for us at Noratis AG. We are pleased that you are interested in how we handle personal data.
The processing of personal data, such as a person’s name, address, email address, or telephone number, is always in accordance with applicable data protection laws.
Through this privacy policy, we aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Additionally, we want to educate affected individuals about their rights.
Noratis AG has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for personal data processed through this website.
Despite our diligence, internet-based data transmissions can have security vulnerabilities, so absolute protection cannot be guaranteed. Therefore, you are free to transmit personal data to us via alternative means, such as by telephone or postal mail.

Name and Address of the Responsible Entity and Contact Information
Noratis AG
Represented by Kim Niklas Andersson (Executive Board)
Hauptstraße 129
65760 Eschborn
Germany

T +49 (0) 6196 91 506 200
F +49 (0) 6196 91 506 245
E info@noratis.de
www.noratis.de

Please note our availability:
Monday to Thursday: 9:00 AM – 12:00 PM and 2:00 PM – 5:00 PM
Friday: 9:00 AM – 12:00 PM and 2:00 PM – 3:00 PM

Contact Details of the Data Protection Officer (DPO)
The Data Protection Officer for the data controller is:
DDI – Deutsches Datenschutz Institut GmbH
Website: www.deutsches-datenschutz-institut.de

You can reach our Data Protection Officer by mail at the above company address with the addition – Data Protection Officer – or by email at: datenschutz@noratis.de

Purposes and Legal Basis of Data Processing – General Website Visit
If you use our website purely for informational purposes and do not register or otherwise provide us with information (e.g., via email), we only collect data that your browser transmits to our server (so-called “server log files”). The processing of this data is based on our legitimate interest in improving the stability and functionality of our website, pursuant to Art. 6(1)(f) GDPR. This data is not used in any other way or shared with third parties. However, we reserve the right to retrospectively analyze the log files if there are indications of unlawful use.

Purposes and Legal Basis of Data Processing – Contact Form
When you contact us (e.g., via contact form or email), personal data is collected. This data is stored and used solely for the purpose of responding to your inquiry and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry, pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be
deleted after your inquiry has been fully processed, provided that there are no legal retention obligations that prevent deletion.

Purposes and Legal Basis of Data Processing – Comment Function
When using the comment function on this website, in addition to your comment, information about the time of comment creation and the chosen commenter name are stored and published on the website. Additionally, your IP address is logged and stored. The storage of the IP address is for security reasons and in the event that a comment violates the rights of third parties or contains unlawful content. The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to as unlawful or offensive by third parties.

Purposes and Legal Basis of Data Processing – Newsletter Function
Upon subscribing to our email newsletter, we will regularly send you information about our company (press releases and ad-hoc news). The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm your subscription by clicking a corresponding link.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address as entered by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any potential misuse of your email address at a later time. The data collected during newsletter registration is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is legally permitted and about which we inform you in this declaration.

Recipients or Categories of Recipients

Website Hosting Provider:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Email: datenschutz@mittwald.de

IT Service Provider:
NITEX GmbH
Alleestraße 4
65812 Bad Soden

Website Maintenance & Support:
Noratis AG
Hauptstraße 129
65760 Eschborn

Investor Relations:
edicto GmbH
Axel Mühlhaus / Dr. Sönke Knop
Eschersheimer Landstraße 42
60322 Frankfurt am Main
Phone: +49 (0)69 905 505 52
Email: noratis@edicto.de

Others:
Google (see detailed information under “Gstatic,” “Google Fonts”)

Transfer to Third Countries

Google Inc.

Data Retention Periods

The data controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or as provided by the European legislator or another legislator in laws or regulations to which the data controller is subject.
If the storage purpose ceases to apply or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with legal requirements.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your data at any time. In the event of withdrawal, we will immediately delete the affected data, provided that further processing cannot be based on a legal basis for processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Note on Profiling and Scoring
No profiling or scoring takes place

Note
The German version of this page is authoritative.