Skip to main content

Privacy policy

1. General information on data protection

The security of your data is very important to us and data protection has a high priority. Therefore, we have taken technical and organisational measures to protect against attacks, misuse, loss and incorrect changes to personal data, as well as to prevent access by unauthorised third parties (Art. 32 DSGVO).

We collect, use and store your personal data exclusively within the framework of European and national data protection law. In the following, we inform you about the type, scope and purpose of the data collection and use within the scope of our online offer as well as about your rights within the scope of data protection.

Name and address of the responsible party

The responsible party within the meaning of the Federal Data Protection Act is:

Nordic Woodfibre A/S
Industrivej 16
4652 Haarlev
Denmark

Managing Director:
Klaus Nørholm Jørgensen

Contact:
Phone: +45 5628 7444
Fax: +45 5628 7555
knj@nolco.com

Data Protection Officer

data-protection@nolco.com

Type, scope and purpose of the data processed

We only process data to the extent necessary to provide you, our customers, prospective customers, suppliers, visitors and users of our online offering, with our content, contractual and pre-contractual services and a functional, secure and market-oriented online presence, as well as to maintain contact with our business partners and prospective customers. This includes data that you enter yourself when using our online services (e.g. registrations, orders, contacts, etc.) and transmit to us, as well as automatically collected and logged data (e.g. access times, device information, IP addresses, etc.). Connection data is stored insofar as it is necessary for the performance of the business in order to comply with legal regulations.

Legal basis for data processing

If we have your consent to process your data, Art. 6 para. 1 lit. a) DSGVO serves as our legal basis. If the data processing is carried out in order to fulfil a contract with you or to carry out pre-contractual measures, Art. 6. para. 1 lit. b) DSGVO is the legal basis. If it serves to fulfil a legal obligation, the data processing is based on Art. 6 para. 1 lit. c) DSGVO. Finally, it is possible that the processing of your data serves to protect our legitimate interests and does not override your interests or fundamental rights and freedoms that require the protection of personal data. In this case, Art. 6 para. 1 lit f) DSGVO serves as the legal basis.

Duration of storage and data deletion

The deletion of the processed data takes place as soon as the purpose of the data storage no longer applies and the deletion of the data does not conflict with any national or European laws, regulations or other provisions and retention periods or contractual obligations that require storage beyond this. These include, among others, any warranty rights that may exist at a later date, the guarantee of proper accounting as well as the prevention and clarification of acts of abuse or fraud, which may argue against data deletion.

Objection

You can revoke your consent at any time. The easiest way to do this is to send an e-mail to data-protection@nolco.com. In this case, the stored personal data will be deleted insofar as it is no longer required to fulfil the purpose for which it was stored, unless ordinances, laws or other regulations by the national or European legislator or contracts and agreements of any kind require storage beyond this. Data relevant to accounting or for accounting purposes are not covered by a deletion request.

Data transfer to third countries

Should data be processed in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), this will only be done if it can be based on one of the legal bases mentioned above. The data is only processed within the framework of the provisions of Art. 44 et seq. DSGVO. This means that processing only takes place in compliance with officially recognised specific contractual obligations (so-called "standard contractual clauses").

However, we would like to point out that the same level of data protection generally does not apply in third countries as in the EU. For example, US companies may be obliged to hand over personal data to US security authorities without you or us being able to do anything about it.

2. log files and server data

Description of the processed data

For technical system-related and statistical reasons, we automatically collect data and information from your internet browser or computer system every time you access our online presence. Specifically, the following data is collected:

  • URL of the sub-page of our online presence that you visit.
  • Amount of data transferred
  • Your IP address
  • Browser type and current version
  • Operating system of the device used to access our website
  • Date and time of the page visit
  • Referrer URL The data in the log files are not stored together with other personal data.

Purpose of data processing

Data processing is carried out in our legitimate interest for technical reasons. The contents of our online presence can only be displayed if the technical conditions of the displaying end device are taken into account. Errors in the transmission of content can also be found and corrected more easily in this way.

Legal basis for data processing

Our legitimate interests as described above in accordance with Art. 6 para. 1 lit. f) serve as the legal basis for the storage of server data and log files.

Duration of data storage

The deletion of the log files takes place automatically after 6 weeks.

Objection

Data processing within the scope of log files is absolutely necessary for the proper operation of our online presence. Therefore, there is no possibility for you to object here.

3. use of cookies

Cookies are used on our website. Cookies typically contain data about the website visited, which the web browser stores while surfing. If the user calls up our website again via the corresponding server, the user's browser sends the previously received cookie back to our website. This enables the server to evaluate the information received and to facilitate navigation on a website or to control the display of advertisements.

On our online offer, we distinguish between technically necessary cookies and marketing and analysis cookies.

When you first access our online offer, you will be asked about your wishes with regard to cookies. You can change your decision as to which cookies you accept and which you do not at any time by calling up the cookie settings query again. However, you cannot deselect the technically necessary cookies in the cookie settings.

By configuring the Internet browser on your computer accordingly, i.e. the program with which you open or display Internet pages (such as Microsoft Edge, Internet Explorer, Mozilla Firefox, Opera, Google Chrome or Safari), you can generally exclude the use of cookies. In this case, certain functions of our online offer, which are essential for the error-free use of the online presence, will no longer be available to you.

3.1 Technically necessary cookies

Description of the processed data

In the case of technically necessary cookies, we distinguish between the so-called session cookie and the consent cookie. In the session cookie, only the so-called session ID, with which our system recognises a user after a page change, is stored. The consent cookie is placed when you make your decision in the consent banner on your first visit to our website as to which of our cookies you accept and which you do not. This decision is stored in the consent cookie.

Purpose of data processing

It is our legitimate interest to present our users with a technically flawless online presence. We use the technically necessary cookies to make core functions of our online presence possible in the first place. With their help, for example, logging in with a user login or filling a shopping basket can be implemented in such a way that the function is still available even if the user changes pages. It is also in our legitimate interest and that of our users that our users are not shown the Consent banner every time they visit our website and have to select which cookies they accept each time. Therefore, we store the user's decision in the consent cookie. Users can still change their decision at any time by calling up the Consent banner manually.

Legal basis for data processing

Our legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO form the legal basis for data processing in connection with technically necessary cookies.

Duration of data storage

The session cookies are automatically deleted after one hour, the content cookies after one year.

3.2 Google Analytics

Description of the data processed

We use Google Analytics on our online offer. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA ("Google"). Insofar as we have your consent to use analytics cookies through your selection in the "We use cookies" banner, we use Google Analytics to obtain information about your use of our website.

Google Analytics uses cookies, which are usually transferred to a Google server in the USA and stored there. The anonymizeIP function is activated on our website.This means that your IP address is anonymised by Google as soon as the data is received by the Analytics data collection network and before it is stored or processed.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data unless you are logged into a Google service while using our online presence. Google Analytics is set up so that no user IDs are created.

During your visit to our online presence, the following data is collected, among others:

  • Your anonymised IP address
  • Date and time of your visit to our website
  • All the pages you visit on our website
  • Your surfing behaviour on our website, e.g. clicks, length of stay, submission of a form
  • Technical information on the device used, browser, operating system etc.
  • Your approximate location
  • The website URL from which you reached our website (referrer URL)

Purpose of data processing

Google uses this data on our behalf to evaluate your usage behaviour on our website, to compile reports on the activities on our website and to provide us, the website operator, with other services associated with the use of the website and the Internet. For this purpose, we have concluded a contract with Google for commissioned data processing. We use the Analytics reports and evaluations to understand how visitors use our online presence and to adapt it as best as possible to the needs of our users.

Legal basis for data processing

The basis for data processing is your consent pursuant to Art. 6 Para. 1 lit. a) in conjunction with Art. 7 DSGVO. You can revoke this consent at any time by changing the cookie settings.

Duration of data storage

Google Analytics is set on this website so that data linked to cookies is automatically deleted after 14 months.

Objection

You can prevent cookies from being stored by changing your cookie settings.

3.3 Google Ads

We use Google Ads to prominently present our online offer to interested users within the Google search engine. In this context, we use Google Conversion Tracking on our online offer. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA ("Google"). With the help of conversion tracking, we are able to align our advertisements and our online offering as closely as possible to the needs of our customers and interested parties. When you click on a Google Ads ad, a cookie is set for conversion tracking. On our online offer, you can prevent data processing in connection with the conversion tracking cookies by preventing the storage of cookies by changing your cookie settings.

You can find more information on Google Ads and Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=en.

4. data transmission to third parties

In the context of order processing, but also in order to make your visit to our online presence as pleasant and informative as possible, it may be necessary to transfer data to third parties. This particularly affects processes for payment processing and the delivery of goods, but also the integration of third-party content. In any case, the data transfer is limited to the necessary minimum. The basis for data transmission to third parties and data processing by third parties is - if necessary - a contract for commissioned data processing concluded with the respective third parties.

4.1 Delivery of goods

Description of the data processed

Part of our obligations to our customers in connection with an order is the timely delivery of the ordered goods to the desired place of delivery. For this purpose, we work together with various transport companies and/or suppliers. The selection and commissioning of the transport company or supplier responsible for an order is carried out on a case- and material-related basis. In order to process the delivery of the goods, the following data is transferred to the transport companies:

  • Delivery address
  • Special features of the delivery
  • If necessary, internal contact person and their contact details

Purpose of data processing

The purpose of data processing is to fulfil our obligation under the purchase contract associated with the order to deliver the ordered goods to the desired location on time. In this context, communication between the transport company and the contact person at the ordering company is also necessary in some cases.

Legal basis of data processing

The data processing is related to the execution of the purchase contract concluded in the context of the order, so that Art. 6 para. 1 lit. b) DSGVO serves as the legal basis.

Duration of data storage

Our order data processing contract stipulates that the transport companies and suppliers commissioned delete the data received after delivery, subject to the retention obligations for reasons of commercial or tax law in accordance with Art. 6 Para. 1 lit. c) DSGVO.

Objection

You can object to the processing of your data by transport companies and suppliers commissioned by us at any time with effect for the future by sending us an e-mail to data-protection@nolco.com. In this case, it may not be possible to deliver goods within the scope of your orders.

4.2 Credit assessment and scoring

Description of the data processed

If we make advance payments, e.g. in the case of a purchase on account, we may carry out a credit check. This is done on the basis of the customer number of a company in our system and the previous payment transactions of this company in joint business transactions. If this own credit check is not sufficient, we may carry out a credit check at Creditreform Braunschweig Göttingen Bruns und Harland GmbH & Co. KG, Willi-Eichler-Str. 11, 37079 Göttingen. For this purpose we transmit the following data:

  •  Address of the company (incl. company name, company name, street, house number, postcode and town)
  • If applicable, the telephone number
  • If applicable, the UstID
  • If applicable, the tax number

We use the information received on the statistical probability of a payment default for a weighed decision on the establishment, implementation or termination of the contractual relationship. The creditworthiness information may contain probability values (score values) with which a customer will meet his payment obligations. The score values are based on scientifically recognised mathematical-statistical procedures.

Purpose of data processing

The data processing is carried out in our legitimate interest to protect ourselves against payment defaults. In addition, the creditworthiness check is part of the processing of a purchase contract resulting from an online order.

Legal basis for data processing

The legal basis for data processing is our legitimate interest according to Art. 6 Para. 1 lit. f) DSGVO.

Duration of data storage

Your customer account, the associated business transactions and payment transactions as well as creditworthiness information from Creditreform will be manually deleted by us, subject to the retention obligations for reasons of commercial or tax law in accordance with Art. 6 Para. 1 lit. c) DSGVO, as soon as you inform us via a cancellation of your customer account that you no longer wish to use the account.

Objection

You can revoke your consent to data processing in connection with all orders placed via your customer account at any time with future effect by having your customer account deleted by e-mail to: data-protection@nolco.com.

4.3 YouTube

We include videos hosted on YouTube in our online offers. YouTube is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA, 94043, USA. However, the videos are only loaded when you click on them. There is no data exchange with YouTube until you activate the loading of the video.

As soon as you have activated the loading of the YouTube video by actively clicking on it, a cookie is stored in your web browser. Data collected by this cookie is usually transferred to a Google server in the USA and stored there.

If you are logged into YouTube or another Google service while viewing a video on our website, Google may link the data to other personal data.

You can find more information on data protection at Youtube here: https://policies.google.com/privacy?hl=en

We cannot influence which data Youtube processes, where, for how long and to what extent this is done and to whom Youtube may pass on data. If you would like to prevent Youtube from processing your data, you should not activate the loading of videos.

5. contacting us

Description of the processed data

We offer you various options for contacting us: Contact form, e-mail, telephone, etc. In the event of contact being made, all the data you send to us will be processed.

Purpose of the data processing

The data from your contact is processed solely for the purpose of communicating with you and clarifying your request.

Legal basis for data processing

It is in both your and our legitimate interest that a contact request from you is also processed by us. Therefore, Art 6 Para. 1 lit. f) DSGVO is to be seen as the legal basis for data processing in every case. If you have contacted us via our contact form, Art 6 (1) a) DSGVO is also the legal basis for data processing. If your contact is aimed at concluding a contract, Art 6 (1) (b) DSGVO also applies.

Duration of data storage

We will only process your data for as long as is necessary to maintain our business relationship with you. As long as you do not object, we will use your data to maintain and intensify our trusting business relationship for our mutual benefit. Should you wish your data to be deleted, we will delete your data without delay, insofar as the deletion does not conflict with legal obligations to retain data.

Objection

You can object to your consent to data processing in connection with your contact at any time by sending an e-mail to data-protection@nolco.com. In this case, however, communication with you cannot be continued.

6. Newsletter and event-based e-mails

Description of the data processed

On our online offer, you have the option to register for our free newsletter. For this purpose, you will be asked for the e-mail address to which the newsletter should be sent. In addition, the date and time of your newsletter registration will be saved.

In order to register for the newsletter, you must actively agree to the processing of your data by clicking on the corresponding checkbox below the form.

The registration takes place in the so-called double opt-in procedure. After registration, you will receive an e-mail with a confirmation link that you must click to complete the registration. This is necessary to prevent users from registering other people's e-mail addresses for the newsletter.

We use your name and e-mail address, which you have provided as part of registration, to send you e-mails on suitable occasions based on your activities on our website.

Purpose of the data processing

Your e-mail address is processed in order to be able to send you the newsletter. The data is also processed for documentation purposes and to prevent misuse of the newsletter and your e-mail address.

In the context of sending event-based e-mails, your e-mail address and name are used to make recommendations to you based on the items you have viewed, ordered or added to your shopping basket.

Legal basis for data processing

Art 6 (1) lit. a) DSGVO serves as the legal basis for data processing within the scope of the newsletter, as you must actively subscribe to the newsletter for data processing to take place. In addition, Art 6 (1) lit. f) DSGVO serves as the legal basis for data processing beyond the newsletter subscription, as it is in our legitimate interest to be able to prove a previous newsletter subscription.

For the event-based sending of e-mails, §7 para. 3 UWG serves as the legal basis.

Duration of data storage

The data from the newsletter registration are not only stored during the time of the newsletter subscription, but also beyond this time in order to be able to prove a former consent to the newsletter subscription.

Your customer account and thus all data collected during registration will be deleted by us, subject to the retention obligations for reasons of commercial or tax law in accordance with Art. 6 Para. 1 lit. c) DSGVO, as soon as you inform us by cancelling your customer account that you no longer wish to use the account.

Objection

You can cancel your newsletter subscription at any time via the link provided for this purpose in the newsletter. Likewise, you can inform us of your wish to cancel your newsletter subscription by sending an e-mail to data-protection@nolco.com. You can request deletion of your registration data at any time by sending an e-mail to data-protection@nolco.com.

7. surveys

Description of the data processed

Occasionally we conduct surveys directed at our customers. For this purpose, we use the free survey software LimeSurvey from LimeSurvey GmbH, whereby the software itself as well as the individual surveys are hosted on our own servers. There is no data exchange with LimeSurvey GmbH.

Within the scope of the individual surveys, you will be asked for personal data in some cases. What this is in detail varies from survey to survey.

Participation in surveys is always voluntary. In order to participate in a survey, you must actively agree to the processing of your data by clicking on the corresponding checkbox below the survey form.

Purpose of data processing

Surveys are usually conducted for market research purposes. The aim is usually to find out certain details about the purchasing behaviour of our customers. In detail, the purposes depend on the individual surveys.

Legal basis for data processing

As data processing only ever takes place after a customer has actively participated in the survey, Art 6 (1) a) DSGVO serves as the legal basis for data processing.

Duration of data storage

As the data collected on the purchasing behaviour of our customers within the scope of the surveys is usually of permanent interest to us, the data is only deleted at the explicit request of the survey participants.

Objection

You can prevent data processing within the scope of a survey by not participating in it. If you would like to object to data processing for a survey in which you have already participated in the future or would like your data to be deleted, please send us an e-mail at data-protection@nolco.com.

8. rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller:

8.1 Right of access

You may request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you have a right of access to this personal data and to the information listed in Article 15 of the GDPR.

You have the right to request information on whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

8.2 Right to rectification

You have a right of rectification and/or completion vis-à-vis us if the personal data processed concerning you is inaccurate or incomplete. We will make any rectification you request without undue delay.

8.3 Right to restriction of processing

Under the conditions set out in Article 18 of the GDPR, you may request the restriction of the processing of personal data relating to you.

If the processing of personal data concerning you has been restricted, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with Art. 18 DSGVO, you will be informed by us before the restriction is lifted.

8.4 Right to erasure

You may request that the personal data concerning you be erased without delay and we are obliged to erase such data without delay if one of the following reasons applies:

  1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
  4. The personal data concerning you have been processed unlawfully.
  5. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  6. The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

Information to third parties

If we have made the personal data concerning you public and are obliged to erase it pursuant to Article 17(1) DSGVO, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers who process the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, that personal data.

Exceptions

The right to erasure does not apply insofar as the processing is necessary to.

  1. for the exercise of the right to freedom of expression and information;
  2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section (a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
  5. for the assertion, exercise or defence of legal claims.

8.5 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients.

8.6 Right to data portability

Under the conditions of Art. 29 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to transfer this data to another controller to whom the personal data has been provided without hindrance from us.

In exercising this right, you also have the right to have the personal data relating to you transferred directly from one controller to another controller, where this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

8.7 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

We will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

8.8 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8.9 Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and us,
  2. is permissible on the basis of legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
  3. is made with your express consent.

However, these decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in (1) and (3), we take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express your point of view and to contest the decision.

8.10 Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

9. changes and updates to the data protection declaration

If we introduce new offers, products or services, adapt online procedures or if Internet and IT security technology develops further, we will update this data protection declaration. We therefore reserve the right to adapt this declaration as necessary. The adjustments will be announced here. We therefore recommend that you regularly inform yourself here about the current status of the data protection declaration.

Status: 09/2021