Skip to main contentSkip to page footer

Data protection

Data protection information
Information pursuant to Art. 13 and 14 GDPR

1. responsible body

Responsible for the processing of your personal data is

Nicolay GmbH
Graf-Zeppelin-Str. 21
72202 Nagold
Germany
Tel: +49 7452 823 0
Email: info@nicolay.de

Register court:
Amtsgericht Stuttgart HRB 341093 
VAT ID No.: DE 24 60 58 471

Managing directors authorized to represent the company: 
Oliver Muz, Matthias Wiegand

2. contact details of the data protection officer

We have appointed a data protection officer who can be contacted as follows

By post at the above address with the reference 
"Data Protection Officer". 
By email at datenschutz@nicolay.de

3. purposes and legal bases of data processing

Purposes:

  • Operation and provision of the website
  • Communication via contact forms
  • Web analysis and optimization
  • Use of Chatbase (chatbot)
  • Newsletter registration, if applicable

Legal basis:

  • Art. 6 para. 1 lit. f GDPR (legitimate interest: operation, security, optimization)
  • Art. 6 para. 1 lit. a GDPR (consent, e.g. for analysis tools, chatbase, newsletter)
  • Art. 6 para. 1 lit. b GDPR (fulfillment of contract, e.g. for contact requests)

4. categories of personal data

The processed data includes in particular

  • Company, name, address data
  • Communication and contact data (e.g. email, telephone)
  • Event-related and business-specific information
  • Image, video and audio material (e.g. for uploads or media inquiries)
  • Billing and payment data (for store or bookings)
  • Contract and customer history
  • Technical data (IP address, browser type, operating system, access time, referrer URL, cookies)

5. recipients of the data / service providers used

We use external service providers for the operation and maintenance of our website and for certain functions. These include in particular

  • Hosting and technical maintenance: Timme Hosting GmbH & Co. KG
  • Email marketing: CleverReach GmbH & Co KG
  • Web analysis: Google Ireland Ltd (Google Analytics), Salesforce/Pardot, SalesViewer GmbH
  • Chat function: Userlike UG, Chatbase
  • Cookie management: Usercentrics/Cookiebot
  • Accessibility: Eye-Able® Web Inclusion GmbH
  • Marketing and social media: HubSpot Inc, flockler, WONDERLINK, Wirkstoffmedia AG
  • Other specialized service providers according to current technical requirements

Your data will be processed exclusively in accordance with our instructions and in compliance with the statutory data protection regulations.

6 Data transfer to third countries

When using certain tools (e.g. Google Analytics, HubSpot, Atlassian), personal data may be transferred to third countries (e.g. USA, Australia). Protection is provided by suitable guarantees such as EU standard contractual clauses.

7 Storage duration

  • Technical data (e.g. IP address): max. 7 days
  • Cookies: session or defined time
  • Analysis and tracking data: according to tool settings (e.g. Google Analytics: 14 months)
  • Other data: in accordance with legal requirements and necessity

8. your rights

You have the following rights under the GDPR

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with a supervisory authority

If you wish to exercise any of these rights, please contact our data protection officer.

9 Automated decision-making

Automated decision-making including profiling in accordance with Art. 22 GDPR does not take place.

10 Data security

We use technical and organizational measures to protect your data against manipulation, loss, destruction or unauthorized access. These include SSL encryption and regular reviews of security measures.

11. further information

If you have any further questions about data protection, please contact our data protection officer.

Cookie explanation