EN DE
Nuclos 5

Customer privacy information

To fulfill our information obligations under Art. 12 et seq. GDPR, we provide the following privacy information for customers and contractual partners.

Controller

The controller within the meaning of data protection law is Novabit Informationssysteme GmbH, represented by managing directors Ramin Göttlich and Klaus Röder, Mühlweg 2, 82054 Sauerlach, Germany.

Phone: +49 (0) 8104 6473 – 0 · Fax: +49 (0) 8104 6473 – 99 · Email: info@nuclos.de · Web: www.nuclos.de

Further company details and contact options are available in our imprint.

If we have received personal data from you, we generally process it only for the purposes for which it was obtained or collected.

a) Contractual obligations

We collect and process personal data when establishing contact and fulfilling our contractual obligations to you (Art. 6(1)(b) GDPR — pre-contractual measures and contract performance).

We may process data to comply with legal and regulatory requirements (Art. 6(1)(c) GDPR) or where processing is in the public interest (Art. 6(1)(e) GDPR), e.g. risk prevention or public safety and health.

c) Legitimate interests

We process data where necessary to protect legitimate interests of ours or third parties, unless your interests or fundamental rights override (Art. 6(1)(f) GDPR), in particular for asserting or defending legal claims. You may object under Art. 21 GDPR where applicable.

Where required, processing is based on your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time with future effect without affecting prior lawful processing.

Processing for other purposes occurs only where permitted under Art. 6(4) GDPR; we will comply with information duties under Art. 13(3) and 14(4) GDPR.

Storage period

Processing generally continues as long as required for contractual purposes (Art. 6(1)(b) GDPR). With consent, processing continues until withdrawal.

After the contract ends, data may be retained for legal retention periods (Art. 6(1)(c) GDPR) or legitimate interests (Art. 6(1)(f) GDPR), e.g. legal defense. Data is deleted when retention periods expire or interests no longer apply.

Recipients

Only internal units that need data for contractual or legal duties receive access. Processors (Art. 28 GDPR) may receive data in categories such as IT services, logistics, print, telecommunications, collections, consulting, sales/marketing, and address research.

External disclosure occurs only where legally required or permitted, you have consented, or we are authorized to disclose — e.g. public authorities, banks, credit agencies, suppliers, sales agents, or recipients you approve.

Place of processing

Your personal data is processed exclusively in data centers within the Federal Republic of Germany.

Your rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR) where statutory requirements are met
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object (Art. 21 GDPR) to processing based on Art. 6(1)(e) or (f) GDPR; for direct marketing, processing stops after objection
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Supervisory authority: Bavarian State Office for Data Protection Supervision, Promenade 27, 91522 Ansbach, Germany, phone +49 981 53 1300, email poststelle@lda.bayern.de.

Where processing is based on consent, you may withdraw it at any time under Art. 7(3) GDPR.

Data protection officer

Mr Sascha Weller, Attorney at Law, IDR – Institut für Datenschutzrecht, Ziegelbräustraße 7, 85049 Ingolstadt, Germany, phone +49 (0) 841 – 885 167 15, fax +49 (0) 841 – 885 167 22, email ra-weller@idr-datenschutz.de, www.idr-datenschutz.de.