Privacy Policy

Thank you for visiting our website.

The protection of your personal data during collection, processing and use during your visit to our website is very important to us. Your data is protected in accordance with legal regulations.

Please take a moment to read the following information. It will tell you how we handle your personal data, how and for what purpose this data is used, to whom we pass on this data and how we protect your personal data.

Your personal rights are our top priority and we make every effort to protect and guarantee these rights.

The Controller responsible for processing your personal data within the meaning of the European General Data Protection Regulation is:

NORD Holding Unternehmensbeteiligungsgesellschaft mit beschränkter Haftung

Walderseestraße 23
30177 Hannover
Phone: +49 511 270415 0
Fax: +49 511 270415 5
Email: info@nordholding.de

Data Protection Officer

If you have any questions about data protection, please contact our Data Protection Officer at S-CON GmbH & Co. KG, Podbielskistraße 386, 30659 Hannover (datenschutzteam202@s-con.de).

Collection and processing of data

Every time you visit our website and every time you access a file stored on the website, this is logged. The storage serves internal system-related and statistical purposes.

The following is logged:

• name of the file accessed,
• date and time of retrieval,
• amount of data transferred,
• notification of successful retrieval,
• operating system used,
• browser and browser type,
• the website from which you were redirected,
• the Internet service provider,
• pages visited and
• the requesting domain.

In addition, the IP addresses of the requested computers are logged. However, the Controller does not draw any conclusions about a person.

This data is only required to display the content of our website correctly, to optimise the content for you on an ongoing basis and to support criminal prosecution in the event of hacker attacks. The data is processed based on our legitimate interest in accordance with Art. 6 para. 1 subpara. 1 lit. f) GDPR. The processing of the data is necessary for the operation of the website.

The data is stored for as long as it is required to fulfil the purpose and is then automatically deleted.

Rights of data subjects

In accordance with Art. 15 GDPR, you have the right to obtain information about the processing of your personal data.

Furthermore, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16–18, 20 GDPR. If you wish to exercise this right, please contact our Data Protection Officer.

You also have the right to lodge a complaint with the competent supervisory authority at any time. If you believe that the processing of your personal data does not comply with data protection laws, we kindly ask you to contact our Data Protection Officer.

Furthermore, you have the right to object to the processing of your personal data at any time.

Protection of stored data

We use technical and organisational security measures to protect the personal data you provide us with from manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted in line with the state of the art. It cannot be ruled out that data transmitted by you in unencrypted form may be viewed by third parties during transmission. Please note that no conclusively secure transmission can be guaranteed for data transmission via the Internet (e.g. when communicating by email). Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet.

Protection of minors

Consent to the processing of personal data can only be given by an adult. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Art. 8 GDPR.

Hosting and Content Delivery Networks (CDN)

The content of this website is hosted by the following provider:

Mittwald CM Service GmbH & Co. KG.

Königsberger Straße 4-6

32339 Espelkamp

(hereinafter referred to as Mittwald).

The use of Mittwald is based on Art. 6 para. 1 subpara. 1 lit. f) GDPR. Our legitimate interest lies in the reliable, secure and efficient provision of our online offering. Further information can be found in Mittwald's privacy policy at the following link: https://www.mittwald.de/datenschutz

Webflow

The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, for the provision of certain website functions and to ensure security (necessary cookies).

Webflow uses the content delivery networks of jsDelivr and Fastly to ensure fast and error-free display of the website.

For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.

The use of Webflow is based on Art. 6 para. 1 subpara. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If consent has been requested, processing is carried out exclusively based on Art. 6 para. 1 subpara. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6365

Amazon CloudFront CDN

We use the Amazon CloudFront CDN content delivery network. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg (hereinafter referred to as "Amazon").

Amazon CloudFront CDN is a globally distributed content delivery network. Technically, the transfer of information between your browser and our website is routed via the content delivery network. This enables us to increase the global accessibility and performance of our website.

The use of Amazon CloudFront CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 subpara. 1 lit. f GDPR).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

Further information on Amazon CloudFront CDN can be found here: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5776

Email contact and telephone

You can contact us via the email address provided on our website. You can also contact us via the telephone number provided on the website. If you use these options, the personal data transmitted will be stored and collected and processed solely for the purpose of processing and responding to your enquiry.

By contacting us, you consent to the processing of your data in accordance with Art. 6 para. 1 subpara. 1 lit. a) GDPR.
If you are interested in an offer, your personal data will be processed for the purpose of contract initiation in accordance with Art. 6 para. 1 subpara. 1 lit. b) GDPR.

If you do not provide this information, we will unfortunately not be able to process your request. No automated decision-making takes place.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so.

You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

The personal data you provide to us will be stored by us for the duration of the processing of your request until the expiry of the relevant statutory periods.

Online application

The personal data you provide will be collected, processed and used for the purpose of deciding whether to establish an employment relationship in accordance with Art. 6 para. 1 subpara. 1 lit. b) GDPR. The provision of your personal data is necessary for the processing of the application process and for deciding on the establishment of an employment relationship. If you do not provide this data, we will unfortunately not be able to consider you for the advertised position.

No automated decision-making is carried out.

We process the personal data you provide exclusively for the application process. Your data is transmitted to us in encrypted form using Transport Layer Security (TLS).

We will provide you with the necessary information in accordance with Art. 13 GDPR upon receipt of your application by means of an email reply.

Your personal data will not be passed on to external third parties. Your documents will be forwarded to the relevant employees in the Human Resources department and to the relevant contact persons/department heads in the respective specialist department for which the application is intended.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so.

Your application documents will be stored by us for the duration of the application process and for a further 3 months so that we can answer any questions you may have. After this period, the documents will be deleted. Documents sent by post will be returned or destroyed after the 3-month period has expired. If you are offered a position at our company, your application documents will be transferred to your personnel file.

Cookies

Strictly necessary cookies

We use technically necessary cookies on our website to make the website more user-friendly. For technical reasons, it is therefore necessary to allow these cookies in order to use the full functionality of our website.

The purpose of using such cookies is to enable you to use the website in a simplified and more user-friendly manner. It is therefore necessary that the browser can identify you even after you have changed pages.

The data is not used to create a user profile for you. The legal basis for the use of technically necessary cookies is § 25 (2) TDDDG. It is not possible to use the website without these cookies.

Cookies for evaluation (tracking cookies)

In addition to the use of technically necessary cookies, tracking cookies are used on this website. These cookies are pieces of information that are stored on your computer and enable an analysis of your use of the website. However, they collect and store data exclusively in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content.

The legal basis for the use of tracking cookies is the consent you have given in accordance with § 25 (1) TDDDG.

You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing until the withdrawal remains unaffected.

You can adjust your cookie settings at any time.

Detailed information about the cookies and analytics services used, as well as the purpose and legal basis for data processing, is provided in our privacy policy.

Plausible Analytics

Our website uses Plausible Analytics. This is a service provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia. Plausible Analytics enables us to analyse the behaviour of our website visitors.

When using Plausible Analytics, data such as page URL, HTTP request, HTTP referrer, browser, operating system, device type and IP address may be collected. HTTP requests and IP addresses are stored in a hash for 24 hours; within this period, a user can be recognised if they return to the website. The data is anonymised so that it is not possible to identify the person.

The legal basis for the collection and processing of your data is your consent in accordance with Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke this consent at any time with effect for the future. The lawfulness of the data processing until revocation remains unaffected.

For more information about the collection and processing of your data by Plausible Analytics and your rights in this regard, please refer to the privacy policy of Plausible Insights OÜ at: https://plausible.io/data-policy

Hotjar

This website uses features of the web service Hotjar, operated by Hotjar Ltd. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta; hereinafter: "Hotjar"). Hotjar is a European company based in Malta. Hotjar uses cookies. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Hotjar server and stored there.

The data is deleted as soon as it is no longer required for our recording purposes. The service enables us to analyse surfing behaviour. By evaluating the data obtained, we are able to improve our website and ensure a better Internet presence.

Your consent is the legal basis for the collection and processing of your data in accordance with Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to withdraw this consent at any time with effect for the future. The lawfulness of the data processing until the withdrawal remains unaffected.

Further information can be found in Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy.

CookieScript

We use the CookieScript cookie banner on our website. The provider is Objectis Ltd., Žalgirio g. 88, LT-09303 Vilnius, Lithuania (hereinafter: "CookieScript").

We use the cookie banner to collect and store your consent and any revocations regarding the use of cookies and similar technologies. For this purpose, a cookie from the service provider CookieScript is stored in your browser.

The legal basis is our legitimate interest pursuant to Art. 6 para. 1 subpara. 1 lit. f) GDPR. We want to provide you with transparent and comprehensive information about the use of cookies and similar technologies on our website. At the same time, it is our goal to obtain and manage your consent in a legally compliant manner. The use of a cookie banner enables us to comply with our legal information and documentation obligations and to design our online offering in accordance with data protection regulations.

Your data will be stored by us until you revoke your consent or CookieScript deletes it itself. Further information about CookieScript can be found here: https://cookie-script.com/legal/privacy-policy

Privacy policy for social media

We would like to get in touch with you and other customers. We use various social networks for this purpose. You can find out which individual social networks we use in the following §.

As a rule, data is collected for market research and advertising purposes. This data includes linking your visit to our website to your user account on the social network or linking it using your stored cookies or your IP address. This is usually done by creating user profiles and determining interests based on them. This enables tailored advertising to be displayed both within and outside the social network. Therefore, cookies may be set on your device when you use social networks. However, we would like to point out that we have no influence over which data is collected.

Through our social media presence, we want to provide you with information in the simplest and fastest way possible or give you the opportunity to share such information. Therefore, unless you have consented to data processing on the respective platform, the legal basis is our legitimate interest pursuant to Art. 6 para. 1 subpara. 1 lit. f) GDPR. If you have given your consent on the respective platform, your consent pursuant to Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device, is the legal basis for the processing. You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing until the withdrawal remains unaffected.

If you withdraw your consent, request us to delete your data or the purpose for storing the data no longer applies, we will delete your data unless mandatory legal provisions prevent this. Cookies stored by you remain on your end device until you delete them.

The data processed as a result of your visit to our social media websites is classified as data processing initiated by us and is therefore subject to joint controllership with the operator of the social media website in accordance with Art. 26 GDPR. Joint controllership is limited to those processing operations for which the purpose and means of processing are jointly determined. If you wish to exercise your rights as a data subject, you can do so both vis-à-vis us and vis-à-vis the operator of the social media website.

Furthermore, we would like to point out that your data may also be processed outside the European Union and that you therefore run the risk of not being able to enforce your rights properly.

You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. You may also request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

XING (presence)

We maintain a presence on the social career network XING. This is an application provided by New Work SE (Am Strandkai 1, 20457 Hamburg; hereinafter: "XING").

If you have consented to data processing by XING, your consent pursuant to Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device, is the legal basis for the processing. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until the withdrawal remains unaffected.

We would like to point out that we have no knowledge of the content of the data transmitted or its use by XING. Further information can be found at: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn (presence)

We maintain a presence on the social career network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter "LinkedIn").

If you have consented to data processing on LinkedIn, your consent pursuant to Art. 6 para. 1 subpara. 1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device, is the legal basis for the processing. You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing until the withdrawal remains unaffected.

The transfer of data to the USA is based on the EU Standard Contractual Clauses, which you can view in detail here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

LinkedIn Corporation is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the USA that aims to ensure that European data protection standards are upheld when data is processed in the USA. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information can be found at the following link: https://www.dataprivacyframework.gov/participant/5448

You can object to the analysis of your usage behaviour and targeted advertising by LinkedIn here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

We would like to point out that we have no knowledge of the content of the data transmitted or its use by LinkedIn. The following link leads to LinkedIn's privacy policy: http://de.linkedin.com/legal/privacy-policy