Privacy policy

Section 1 Information about the collection of personal data

(1) We will provide you below with information about the collection of your personal data when you use our website. Personal data means all data relating to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) The Controller as defined in Article 4(7) of the EU General Data Protection Regulation (GDPR) is Nolden Cars & Concepts GmbH, Robert-Perthel-Strasse 27, 50739 Cologne, Germany, e-mail address: info@noldengmbh.de, tel.: +49 (0) 221 9174440 (see Imprint section of our website). You can contact our Data Protection Officer using the e-mail address datenschutz@noldengmbh.de or our postal address, marked for the attention of "Data Protection Officer".

(3) When you contact us via e-mail or a contact form, we will store the data you provide (your e-mail address, your name) in order to answer your questions. The data that you provide is processed on the basis of a legitimate interest (Article 6(1f) GDPR). If you contact us to request a quotation, the data that you provide is processed in order to undertake pre-contractual measures (Article 6(1b) GDPR). We will erase the data that arises in this context once storage is no longer required, or we will restrict processing if there are statutory retention requirements.

(4) If you contact us by telephone or fax, we will store and process your enquiry and all personal data provided in this context (name, enquiry) for the purposes of processing your matter. We will not share this data without your consent. If your enquiry is related to the fulfilment of a contract or measures required prior to the conclusion of a contract, this data is processed on the basis of Article 6(1b) GDPR. In all other cases, the processing is based on our legitimate interest in the efficient processing of enquiries made to us (Article 6(1f) GDPR) or on your consent (Article 6(1a) GDPR) if this has been requested. We will retain the data you provide when contacting us until you request its erasure, withdraw your consent to its storage, or the purpose for which it was stored no longer exists (e.g. if your query has been processed and completed). Mandatory statutory provisions – particularly retention periods – remain unaffected.

(5) If we wish to use commissioned service providers for individual functions of our website or use your data for commercial purposes, we will inform you in detail about the relevant processes. We will also provide the defined criteria for the storage period.

Section 2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

– Right of access,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– Right to data portability.

(2) You also have the right to lodge a complaint regarding the processing of your personal data by us with a data protection supervisory authority.

Section 3 Collection of personal data when visiting our website

(1) If you only use the website for information purposes, i.e. you do not register or transmit information to us in any other way, we will only collect the personal data transmitted by your browser to our server. If you want to browse our website, we will collect the following data. This data is required for technical reasons in order to display our website to you and guarantee its stability and security (the legal basis for this is Article 6(1f) GDPR):

– IP address

– Date and time of the server request

– Content of the request (specific page)

– Access status/HTTP status code

– Volume of data transferred in each case

– Website from which the request is received

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) In addition to collecting the above-mentioned data, we store cookies on your computer when you use our website. Cookies are small text files that are assigned to the browser you use and stored on your hard drive, and are used to send specific information to the party that set the cookie (in this case us). Cookies cannot run any programs and do not transfer any viruses to your computer. They are designed to make the entire website more user-friendly and more effective.

(3) Use of cookies:

a) This website uses the following types of cookies whose scope and function are explained below:

– Transient cookies (see b)

– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. Session cookies save a session ID which is used to assign various requests from your browser to the same session. It is used to recognise your computer when you return to our website. Session cookies are automatically deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified time period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser settings as you wish and, for example, choose to reject third-party cookies or all cookies. We wish to point out that you may not be able in this case to make full use of all the functions on this website.

e) This website uses cookie consent technology from Usercentrics to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this consent in a data protection-compliant manner. This technology is provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: https://usercentrics.com/ (hereinafter referred to as "Usercentrics").

When you visit our website, the following personal data is sent to Usercentrics:

– Your consent or withdrawal of consent

– Your IP address

– Information about your browser

– Information about your end device

– Date/time of your visit to the website

Usercentrics also stores a cookie in your browser in order to assign your consent or withdrawal of consent to you. The data collected in this way is stored until you request its erasure, the Usercentrics cookie deletes itself or the purpose for which the data was stored no longer exists. Mandatory statutory retention requirements remain unaffected. Usercentrics technology is used to obtain the legally required consent to the use of certain technologies. The legal basis for this is Article 6(1c) GDPR. We have concluded an agreement on commissioned data processing with Usercentrics.

(4) In addition to the purely informative use specified above, our website also incorporates a password-protected section that provides information about specific products. If you want to use this section of our website, you must enter your personal data which we need to verify your identity for this section and manually activate your account. The mandatory data required for this verification are clearly marked; other details are submitted voluntarily. We will only process the data you submit for the purpose of deciding whether or not you can be granted access to our password-protected section. The legal basis for this is Article 6(1b) GDPR. If we do not grant you access to the password-protected area, we will erase your data after this decision has been made. If you use the password-protected section of our website, we will store the data required for the activation decision until you finally delete your account. We will also store any data you submitted voluntarily for the duration of your use of the password-protected section of our website, unless you erase this data earlier. You can manage and change all data submitted within the password-protected section. The legal basis for this is Article 6(1f) GDPR.

Section 4 Further functions on our website

(1) In addition to using our website for information purposes, we offer various services which you can use should you be interested. To do this, you may need to provide additional personal data, which we will use to provide the relevant service and to which the basic principles relating to data processing specified above shall apply.

(2) We sometimes also use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions and are monitored on a regular basis.

This website is hosted by an external service provider. The personal data collected on this website is stored on the host's servers. In particular, this data may include IP addresses, contact enquiries, meta and communication data, contractual data, contact details, names, website access information and other data that is generated via a website. The host is used for the purposes of fulfilling contracts with potential and existing customers (Article 6(1b) GDPR) and in the interests of ensuring the reliable, fast and efficient provision of our website by a professional provider (Article 6(1f) GDPR). Our host will use your data only to the extent required to fulfil its performance obligations and shall comply with our instructions concerning this data. We use the following host: Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen, Germany. To ensure that data processing is carried out in a data protection-compliant manner, we have concluded an agreement on commissioned data processing with our host.

(3) Where our service providers or partners have their registered offices in a state outside the European Economic Area (EEA), we will inform you about the resulting circumstances in the description of the offer.

Section 5 Objecting to or withdrawing consent to the processing of your data

(1) If you have consented to the processing of your data, you can withdraw this consent at any time. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have informed us of your wishes. The lawfulness of data processing that has taken place before you withdraw your consent will remain unaffected by this.

(2) Where we base the processing of your personal data on a balancing of interests, you can object to this data processing. This is the case if processing is in particular not required in order to fulfil a contract with you, which we will illustrate in the following description of the functions. When exercising an objection of this kind, we ask that you provide us with reasons why we should not process your personal data. In the case that your objection is justified, we will check the facts and will either stop or adapt the data processing, or demonstrate to you our legitimate grounds for continuing to process your data.

(3) You can, of course, also object to the processing of your personal data for the purpose of advertising and data analysis at any time. You can tell us that you object to your data being used for advertising using the following contact details:

NOLDEN CARS & CONCEPTS GmbH
Robert-Perthel-Straße 27
50739 Köln

Telefon: 0049(0)221/917444-0
Telefax: 0049(0)221/917444-33

E-Mail: info@noldengmbh.de
Internet: www.noldengmbh.de

Section 6 Web analytics

Use of Matomo (formerly Piwik)

This website uses the open-source web analytics service Matomo. Matomo uses technologies that enable users to be detected across different pages to facilitate the analysis of user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymised beforehand.

Using Matomo enables us to collect and analyse data about the use of our website by website visitors. This allows us to determine when which pages were accessed and from which region, for example. We also collect various log files (e.g. IP address, referrer, browser and operating system used) and can measure whether our website visitors take certain actions (e.g. clicks, purchases).

This analytics tool is used on the basis of Article 6(1f) GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise its website and its advertising. If consent has been requested in relation to this data processing (e.g. consent to the storage of cookies), the data processing is carried out exclusively on the basis of Article 6(1a) GDPR; this consent may be withdrawn at any time. We use IP anonymisation for analyses carried out using Matomo. Your IP address is truncated prior to analysis so that it can no longer be uniquely assigned to you. We host Matomo solely on our own servers, so all analysis data remains with us and is not transferred.

Section 7 Use of social media plug-ins

(1) We currently use the following social media plug-ins: Facebook and LinkedIn. We use the two-click solution for these plug-ins. This means that when you visit our website, personal data will not normally be forwarded initially to the plug-in providers. You can identify the provider of the plug-in by the marking on the box, by its initial or by the logo. We give you the opportunity to communicate directly with the plug-in provider via the button. The plug-in provider will not receive the information that you have visited a particular page on our website unless you activate the plug-in by clicking on the field indicated and thereby activating it. The data specified under Section 3 of this Privacy Policy will also be transmitted. In the case of Facebook, according to information provided by the corresponding providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the plug-in provider concerned, who then stores it (in the case of American providers, in the USA). Because the plug-in provider collects data primarily by means of cookies, we recommend that you delete all cookies from your browser before clicking on the greyed-out box. You can do this via your browser's security settings.

(2) We have no influence over the data collected or the data processing operations, nor do we know the full scope of data collection, the purposes of its processing or the applicable storage periods. We also do not have any information regarding the plug-in provider's erasure of the collected data.

(3) The plug-in provider stores the data collected from you in the form of usage profiles and uses it for the purposes of advertising, market research and/or tailoring the design of its website. This analysis is carried out (even for users who are not logged in) in particular to display tailored advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these usage profiles. You must exercise this right with the plug-in provider in question. Through the plug-ins, we enable you to interact with the social networks and other users so that we can improve our website and make it more appealing to you as the user. The legal basis for the use of the plug-ins is Article 6(1f) GDPR.

(4) Data is transferred irrespective of whether you have an account with the plug-in provider or whether you are logged in there. If you are logged in with the plug-in provider, the data we collect from you will be assigned directly to your existing account with the plug-in provider. If you click on the activated button and, for example, link the page, the plug-in provider will also store this information within your user account and will publicly share it with your contacts. We recommend that you routinely log out of a social network after using it, especially prior to activating the button, because that way you can prevent the plug-in provider from assigning data to your profile.

(5) Facebook and LinkedIn each process your data in the USA. The USA is an unsafe third country in accordance with the GDPR because the level of data protection in the USA is not commensurate with that afforded by the GDPR. The legal basis for the use of Facebook and LinkedIn and the associated data transfer is your consent (Article 6(1a) GDPR). You can withdraw your consent with effect for the future at any time. To do this, contact us using the contact details provided in the Imprint section of the website. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have informed us of your wishes. The lawfulness of data processing that has taken place before you withdraw your consent will remain unaffected by this.

 

(6) Further information regarding the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers referenced below. These policies also provide further information regarding your rights and setting options for the protection of your privacy.

(7) Addresses of the relevant plug-in providers and URLs featuring their privacy policies:

a) [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

b) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.

 

Section 8 Integration of Google Maps

(1) We use Google Maps on this website, if you consent to this. This means that we can show you interactive maps directly on the website and allow you to use the map function at your convenience.

(2) If you have consented to the use of Google Maps, Google will receive the information that you have accessed the relevant subpage on our website. The data specified under Section 3 of this Privacy Policy will also be transmitted. This information is transmitted regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want data to be assigned to your Google profile, you must log out before activating the button. Google saves your data as usage profiles and uses them for the purposes of advertising, market research and/or the tailoring the design of its website. This analysis is carried out (even for users who are not logged in) in particular to provide tailored advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. You must exercise this right with Google.

(3) Further information about the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policies. These policies also provide more information about your rights regarding this topic and your setting options for protecting your privacy: https://policies.google.com/privacy.

(4) Google processes your data in the USA. The USA is an unsafe third country in accordance with the GDPR because the level of data protection in the USA is not commensurate with that afforded by the GDPR.

(5) The legal basis for the use of Google Maps and the associated data transfer to Google is your consent (Article 6(1a) GDPR).

(6) You can withdraw your consent to the use of Google Maps with effect for the future at any time. To do this, contact us using the contact details provided in the Imprint section of the website. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have informed us of your wishes. The lawfulness of data processing that has taken place before you withdraw your consent will remain unaffected by this.

Section 9 Google Web Fonts

This website uses web fonts provided by Google to display fonts in a uniform fashion. Google Fonts are installed locally, and there is no connection to Google servers during this process. Further information on Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy.

Section 10 Embedded YouTube videos

(1) We have integrated YouTube videos on our website which are saved at http://www.YouTube.com and can be played directly from our website. If you wish you use YouTube videos, you must provide your consent. The YouTube videos are all integrated in "extended data protection mode", meaning that no data about you as the user is transmitted to YouTube if you do not play the videos. The data specified in paragraph 2 is transmitted only if you play the videos. We have no influence over this data transfer.

(2) If you have consented to the use of YouTube videos, YouTube will receive the information that you have accessed the relevant subpage on our website. The data specified under Section 3 of this Privacy Policy will also be transmitted. This data is transmitted regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish data to be assigned to your YouTube profile, you must log out before activating the button. YouTube saves your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring the design of its website. This analysis is carried out (even for users who are not logged in) in particular to provide tailored advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. You must exercise this right with YouTube.

(3) You can find further information about the purpose and scope of data collection and processing by YouTube in the privacy policy. This policy also provides more information about your rights regarding this topic and your setting options for protecting your privacy: https://policies.google.com/privacy.

(4) Google processes your data in the USA. The USA is an unsafe third country in accordance with the GDPR because the level of data protection in the USA is not commensurate with that afforded by the GDPR.

(5) The legal basis for the use of YouTube videos and the associated data transfer to Google is your consent (Article 6(1a) GDPR).

(6) You can withdraw your consent to the use of YouTube videos with effect for the future at any time. To do this, contact us using the contact details provided in the Imprint section of the website. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have informed us of your wishes. The lawfulness of data processing that has taken place before you withdraw your consent will remain unaffected by this.

Section 11 SSL and TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or queries that you send to us in our capacity as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. When SSL or TLS encryption is enabled, the data that you send to us cannot be read by third parties.