Data protection statement

We process data that we receive through our business relationship with you. We receive the data from you directly, e.g. in the context of concluding a contract or placing an order or in the course of an enquiry. In specific terms, we process the following data:

• Master data from the contract documents (e.g. name, address and contact details, bank details)
• Data in the context of contract performance (e.g. subject of the contract, delivery address, method and type of payment)
• Correspondence (e.g. correspondence with you), advertising and sales data (e.g. for potentially interesting products)

Furthermore, personal data are saved at least temporarily when you access our website www.glas-nowak.de or when you use our contact form.

Art. 6 (1) b GDPR regulates the normal exchange of data for setting up/initiating and managing contract relationships.

As soon as we receive an enquiry from you, we create a corresponding dossier. Frequently an enquiry will be accompanied by details about commission, delivery addresses and customer data, together with the names, phone numbers and e-mail addresses of the staff responsible for dealing with the project. Where necessary, we revert to these master data when drawing up our quotation. Incoming orders are entered in the system and the corresponding data are used for the production process. The finished glass products are prepared for shipment and delivered/handed over on endorsement of the delivery notes. The transaction is invoiced. Incoming payments are posted against the invoices. Initially the transaction is recorded on paper and subsequently archived digitally.

All transactions refer to the order handling process and are used solely for the documentation needed under commercial law.

Art. 6 (1) f GDPR also allows us to use your data on the basis of balancing interests for protecting the legitimate interests of ourselves or the third party. This is carried out for the following purposes:

• General control of business and further development of our services
• General control of business and further development of our services
• Asserting legal claims and for defence purposes in legal disputes
• Warranting IT security and operation of the IT system
• Involving trade credit insurers and providing information they need to ascertain creditworthiness or default risks
• Preventing and investigating criminal offences
• Mailing newsletters at irregular intervals, whereby you may opt out of such mailings.

Our interest in such processing is business-related (efficient task fulfilment, prevention of legal risks, quality control). We process your data in pseudonymous form where permitted by the specific purpose.

Your data will only be forwarded if this is allowed by law. Within our company, your data will be received by those who need the data to fulfil our contractual and legal obligations or to perform their specific tasks.

• Public bodies and institutions (e.g. finance authorities) when statutory or official obligations apply and
• Other bodies for whom you have given us your consent to data forwarding (e.g. payment transactions, trade credit enquiries, creditworthiness checks pp.)
• Suppliers where direct delivery has been agreed
• Drivers/hauliers delivering the glass, whereby the delivery notes are to be endorsed by the consignee as proof of faultless handover.

Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and implementation of a contract. Furthermore, we are subject to various retention and documentation obligations resulting among others from the German Commercial Code and the Tax Code. The storage and documentation periods stipulated therein amount to two to ten years.

Finally, the storage period also depends on the legal statutes of limitations. As a rule these amount to three years e.g. pursuant to §§ 195 et seq. German Civil Code, but in some cases they can also amount to 30 years. The warranty period for the construction industry is usually 5 years.

First and foremost, our website serves a purely informational purpose. When used for purely informational purposes, in other words if you do not send us any information on our online contact form, for technical reasons we collect initially the personal data sent by your browser to our server. When you access our website www.glas-nowak.de, the browser used on your device automatically sends information to our website server. This information is saved temporarily in a so-called log file. The data are only analysed for statistical purposes in anonymised form.

The following data are collected and saved when you access our website:

• Date and time of access
• Access status/http status code, IP address of the enquiring computer, referrer URL of the website from which you accessed our website
• The browser and possibly the operating system of your computer together with the name of your access provider

We process these data in order to warrant a smooth connection and convenient use of our website. The data are also used to warrant and analyse the technical security and stability of our systems. These data are not processed in any other way. In particular, they are not compared with other data statuses.

The legal basis for processing is Art. 6 (1) f GDPR and § 15 (1) 1 Telemedia Law (TMG). Our legitimate interest consists in warranting the technical security and stability of our systems.

The above information and data are saved for maximum 7 days for security reasons (e.g. to investigate misuse or attacks on our web server) and are then erased. Data that have to be stored for longer for purposes of proof are exempted from erasure until conclusive clarification of the incident.

The personal data collected when you access our website are not forwarded to third parties or to other bodies.

When you visit our website, you have the possibility of contacting us with the website contact form or with the e-mail address stated in the legal notice. Your personal data are collected when you use the website contact form by e-mail. These include

• Form of address
• Your name
• Your address
• Your phone number
• Your e-mail address
• Other details about your enquiry

The specially marked data fields are mandatory data (name and e-mail address) which we need to answer and deal with your request. Failure to complete these data means that you will not be able to send us an enquiry with the contact form. At the same time, you click on a button to give your consent to our use of your personal data for dealing with your enquiry.

We shall only collect and use the personal data provided by you in the contact form or e-mail where necessary to process, answer and handle your contact enquiry. The legal basis for data processing is Art. 6 (1) b GDPR in the context of contract initiation and possibly performance. Otherwise the legal basis is Art. 6 (1) f GDPR; our legitimate interest consists in answering and handling your enquiry, which necessitates the saved data. The personal data collected by us from the contact form are erased automatically after your enquiry has been dealt with. They are fundamentally never forwarded to third parties.

We use cookies on our website. These are small files that are automatically created by your browser and saved on your device when you visit our website. Cookies do not cause any damage to your device. They do not contain any viruses, Trojans or other malware. Our approach consists in asking your explicit consent to the use of cookies when you visit our website. The functionality of our website may be impaired if the cookies are deactivated.

The cookies store information resulting from the context of the specific device being used. However, this does not put us in direct knowledge of your identity.

On the one hand, the use of cookies lets us make our website more pleasant for you to handle. We use so-called session cookies to recognise that you have already visited individual pages of our website. They are erased automatically when you leave our website.

We also use temporary cookies to make the website more user-friendly. These are saved on your device for a certain defined period. When you visit our website again to use our services, they recognise automatically that you visited us before and see which inputs and settings you activated so that you don’t have to do that again.

The data processed by cookies are necessary for the stated purposes to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) f GDPR.

Cookies are accepted automatically by most browsers. However, you can configure your browser so that no cookies are saved on your computer or a message appears every time before a new cookie is created. However, if you disable cookies completely, it is then possible that you will no longer be able to use all the functions of our website.

Google Fonts

We use the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy:https://policies.google.com/privacy,
Opt-Out: adssettings.google.com/authenticated

In the context of your visit to our website, we use the widespread SSL method (secure socket layer) in conjunction with the highest encryption level supported by your browser. As a rule, this refers to 256 bit encryption. If your browser does not support 256 bit encryption, we will revert to 128 bit v3 technology instead. You can see whether an individual page of our website is transmitted in encrypted form by the fact that the key or lock symbol is shown closed in the bottom status bar of your browser.

Otherwise we use suitable technical and organisational measures to protect your data from random or intentional manipulation, partial or complete loss, destruction or unauthorised third-party access. We are constantly improving our security measures in line with technological development.

Your data are only forwarded to previously hand-picked, contractual service providers, partner companies and vicarious agents who are likewise committed to secrecy. The staff in our company receive regular training and have to give a regular undertaking to maintain data confidentiality.

You have the right to object at any time to the processing of your personal data on the basis of legitimate interests pursuant to Art. 6 (1) f GDPR (data processing on the basis of balancing interests), on grounds relating to your particular situation.

In case of objection, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves for the establishment, exercise or defence of legal claims.