Data Protection Statement

1. Data protection at a glance

General information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information on the subject of data protection in our data protection declaration listed under this text.


Data collection on our website

Who is responsible for the data collection on this website?
The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

How do we collect your information?
On the one hand, your data is collected when you communicate it to us. This may be data that you enter in a contact form, for example. On the other hand data is automatically collected by our IT systems when you visit our website. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Data collection is necessary to ensure the error-free usage of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time without charging You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection. You also have the right of appeal to the competent supervisory authority. Further information on rights as data subjects can be found under § 5 Rights of the data subject person.

Third-party analysis and tools
When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration. You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration. Further information on the subject of web analytics can be found under § 8 Web Analytics.

Right of appeal to the competent supervisory authority
In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found on the following link: Die Kontaktdaten der Datenschutzbeauftragten in den Bundesländern (site in German).

Opposition to advertising mails
We herewith object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "https://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

§ 1 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
(1) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis.
(2) Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
(3) Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
(4) If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
(5) If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

§ 2 DATA ERASURE AND STORAGE DURATION
(1) The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply.
(2) Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subjected.
(3) The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

§ 3 INFORMATION ON THE PROCESSING OF PERSONAL DATA
(1) In the following we inform about the collection of personal data when using our website. Personal data are all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.
(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or limit the processing if statutory retention obligations exist.
(3) If we make use of contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We also specify the defined criteria for the storage period.

Collection of personal data when you visit our website
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to guarantee stability and security (legal basis for this is Art. 6 Para. 1 S. 1 lit. f GDPR):

• IP-Adress
• Hostname
• Date and Time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access Status/HTTP Status Code
• the amount of data transferred in each case
• Website from which the request comes (Referrer)
• The specific pages of our website you have visited
• Browser: Type, Version und used language
• Operation Systems: Type and Version
• If JavaScript is also activated:
• Display resolution
• color depth
• Size of the browser windows
• Installed browser-plugins

Use of cookies
(1) When you use our website, cookies are stored on your computer in addition to the aforementioned data. Cookies are small text files that can be used by websites to make a user's experience more efficient. They cannot run programs or transmit viruses to your computer.
(2) The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types, we need your permission.
(3) To meet these requirements, we use the 'Cookiebot' solution provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. This allows you to choose whether you wish to allow other cookies from the categories of preferences, statistics and marketing in addition to those required for the operation of our website. You can obtain a detailed overview of the cookies used by clicking on the 'Details' button in the cookie banner when you visit our website. Further information can be found on the website Cookiebot.
(4) This website uses the following types of cookies, the scope and functioning of which are explained below:
• Transient cookies (see b)
• Persistent cookies (see c)
• Flash cookies (see f)

b) Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and refuse the acceptance of third party cookies or all cookies, for example. Third Party Cookies" are cookies that have been set by a third party and therefore not by the actual website you are currently visiting. Please note that you may not be able to use all functions of this website without cookies.
e) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you will have to log in again for each visit.
f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your mobile device. These objects store the required data independently of your browser and do not have an automatic expiry date. You can configure the setting and deletion of Flash cookies using the Adobe Flash Player Website Storage Settings Panel .Alternatively, if you do not wish the Flash cookies to be processed, you can install an appropriate add-on, e.g. for Mozilla Firefox from Privacy & Security - Firefox Extensions or the Adobe Flash Cookie Killer extension for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and your browser history manually.

§ 4 FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE
(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. As a rule, you must provide further personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory fields are marked with an asterisk. Information in fields not marked in this way is purely voluntary.
(2) When you contact the Service Provider by e-mail or via the contact form, your e-mail address and, if you specify this, your name, your telephone number and [...] are saved by us to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
(4) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. For more information, please provide your personal data or see the description of the offer below.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 5 RIGHTS OF THE DATA SUBJECT PERSON
Below you will find information on your rights as a person concerned in accordance with Art. 15 GDPR. You can exercise these rights at any time and therefore contact us directly. If you demand these rights from us, we will examine them in detail, taking into account the related legal requirements. We may ask you for further information. We will explain in detail the results of our audit and our procedure for fulfilling your request. It is possible that we may not be able to fully meet your wishes in the manner you request. This should not prevent you from claiming your rights from us or asking us about them. It would be a pleasure for us to answer all your questions.
(1) Right to information
You have the right to request information from us at any time as to whether and which of your personal data is processed by us. This also includes information on the purposes of processing, if applicable on recipients to whom we have disclosed data about you, the planned storage period and, if applicable, information on the origin of this data, unless we have collected this data directly from you. In addition, you have the right to a one-time free copy of your personal data stored by us.
(2) Right to correction
You have the right to request us to correct any inaccurate information we hold about you. This also includes the right to complete incomplete personal data.
(3) Right to cancellation
You have the right to request the deletion of data that we have stored about you. If we have published data about you, this also includes our obligation to forward all links to this data as well as copies or replications of this data concerning to other persons responsible for the processing of this published personal data within the framework of the "right to be forgotten" pursuant to Art. 17 para. 2 GDPR, considering available technology and the implementation costs.
(4) Right to limitation of processing
You have the right to request us to restrict the processing of data that we have stored about you. Thereafter, processing of these data is only possible with your consent or for a few, legally defined purposes.
(5) Right of opposition to processing
If we base the processing of your personal data on the weighing of interests, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the following description of the functions. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your advertising contradiction using the contact channels listed above.
(6) Right to revoke consent under data protection law
If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.
(7) Right to data transferability
You have the right to receive information about yourself that you have provided to us from us in a structured, common and machine-readable format for the purpose of transfer to another person responsible. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other person responsible.
(8) Right of appeal to a supervisory authority
You have the right to complain at any time to a data protection supervisory authority about our processing of your personal data.
(9) Automated decision making including profiling
They have the right to obtain information on the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

§ 6 SPECIAL FORMS OF USE OF WEBSITES
1. Use of blog functions
(1) In our blog, where we publish various articles on topics related to our activities, you can make public comments. Your comment will be published with your username. We recommend that you use a pseudonym instead of your clear name. User name and e-mail address are required, all other information is voluntary. If you make a comment, we continue to store your IP address, which we delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address in order to contact you if a third party should object to your comment as unlawful. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Comments will not be reviewed before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.

§ 7 MAIL-BASED INFORMATION SERVICES
1. Newsletter / Press Distribution List
(1) With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
(2) We use the double opt-in procedure to subscribe to our newsletter. This means that after your registration we will send you an e-mail to your given e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. The indication of further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter e-mail without incurring any costs other than the transmission costs according to the basic rates.

§ 8 WEB ANALYTICS
The legal basis for the use of all web analysis tools listed in this section is Art. 6 para. 1 sentence 1 f GDPR, i.e. the protection of our legitimate interests in consideration of the interests of our website visitors. We are interested in analysing the use of our website by our website visitors in order to improve our offer and make it more interesting for you as a user. If the analysis tool used also serves other purposes or we use it for other interests, we will inform you directly in the explanations for the respective analysis tool. This website uses the web analysis services Google Analytics, Inspectlet and Pardot.

1. Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the use of cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and Internet use.
(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Google Analytics Opt-out Browser Add-on .
(4) This website uses Google Analytics with the extension "anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.
(5) For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-U.S. Privacy Shield Framework .
(6) Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Usage Terms: Google Analytics Global Terms of Service .
Overview of data protection: Google Analytics Data Privacy and Security .
Data protection declaration: Google Privacy Policy .
(7) This website also uses Google Analytics for a device-independent analysis of visitor flows that is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

2. Use of Google reCAPTCHA
In order to ensure sufficient data security when submitting forms, we use the reCAPTCHA service of Google Inc. on our websites in certain cases. This serves primarily to distinguish whether the input is made by a natural person or abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. The deviating data protection provisions of Google Inc. apply here.
Google Recaptcha uses Google Fonts, also a service of Google LLC. The processing of personal data is based on your consent pursuant to Art. 6 (1) lit. a DS-GVO.
We would like to point out that Google LLC may transfer personal data in the form of your IP address to the USA, a country with a lower level of data protection than in the EU. However, we have taken reasonable steps to ensure an adequate level of data protection by entering into an EU standard contractual clause with Google LLC.
For more information about the privacy policies of Google Inc. please visit the Google Privacy Notice.

3. Use of Inspectlet
(1) This site uses the web analysis service Inspectlet of the provider Inspectlet. Inspectlet uses cookies, which are text files placed on your computer, to help the website analyze how users use the site (e.g. by clicking on content on the site). No personal data is collected, processed or used for this purpose; only pseudonymous user profiles are created.
(2) You can object to the collection, processing and collection of data generated by Inspectlet at any time by following Inspectlet opt-out.
(3) Further information about Inspectlet can be found at https://www.inspectlet.com and in Inspectlet's Privacy Policy.

4. Use of Pardot
(1) This site uses the web analytics service Pardot Marketing from PARDOT EMEA, Heron Tower, Floor 26, 110 Bishopsgate, London, EC2N 4AY, United Kingdom, Phone: +44 (0) 20 3147 7600, a company of Salesforce.com, inc. The Landmark at One Market, Suite 300, San Francisco, CA 94105, United States.
(2) Pardot uses cookies, text files which are stored on your computer and which enable an analysis of your use of the website (e.g. clicked content on the website). No personal data is collected, processed or used for this purpose; only pseudonymous user profiles are created.
(3) For the exceptional cases in which personal data is transferred to the USA, Pardot has submitted to the EU-U.S. Privacy Shield .
(4) For more information about Pardot, visit https://www.pardot.com und in der Salesforce Privacy.

5. Use of Sistrix
For the continuous improvement of our websites we use the web analysis tool of SISTRIX GmbH, Thomas-Mann-Str. 37, 53111 Bonn, Germany. Subject of the application is the continuous improvement of the findability of our websites in search engines, where keywords, domain and search data are summed and stored. Under certain circumstances, Google Analytics data may be included. Further information on the use and collection of data can be found at Sistrix' privacy policy.

6. Use of Hotjar
For the purpose of website analytics we use the services of Hotjar Ltd. For these purposes, the service provider is acting as our data processor. Declaration of the service provider:

“If you are a visitor of a Hotjar Enabled Site, this section applies to you.

The data that Hotjar processes for a Hotjar Enabled Site is processed by us on behalf of our customer, and our privacy practices will be governed by the contracts that we have in place with our customers, not this Privacy Policy. This section should always be read in conjunction with the specific Privacy Policy of the Hotjar Enabled Site which will contain further details regarding the processing of your personal data by the Hotjar Enabled Site.

You can get more information about Hotjar by visiting the ‘about Hotjar’ section of our support site. Hotjar assists its users/customers in providing their end users with a better experience and service as well as assist them in diagnosing technical problems and analyzing user trends. Most importantly, through Hotjar’s services, the functionality of the Hotjar Enabled Site can be improved, making them more user-friendly, more valuable, and simpler to use for the end users.

You may opt-out from having Hotjar collect your information when visiting a Hotjar Enabled Site at any time by visiting our Opt-out page and clicking ‘Disable Hotjar’ or enabling Do Not Track (DNT) in your browser.”.

§ 9 SOCIAL MEDIA AND OTHER THIRD-PARTY SERVICES
Our websites contain links to websites of other providers and social media services. Since these websites are not subject to our influence, we cannot assume any responsibility for their content or their data protection regulations. We would also like to point out that this data protection declaration applies exclusively to the websites of the NORMA Group.

1. Google Web Fonts
This site uses so-called web fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font is used by your computer.
Further information about Google Web Fonts can be found at Google Fonts FAQ and under Google's Privacy Policy .

2. Adobe Typekit Web Fonts
This page uses web fonts provided by Adobe Typekit to display fonts uniformly. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly. To do this, your browser must connect to the Adobe Typekit servers. This will allow Adobe Typekit to know that your IP address has been used to access our website. The use of Adobe Typekit Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a default font is used by your computer. Further information about Adobe Typekit Web Fonts, visit Adobe Typekit and review the Adobe Typekit privacy statement.

3. Integration of YouTube videos
(1) We have integrated YouTube videos into our online offer, which are stored on YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission. With the integration of YouTube videos we pursue our interest in making our website more interesting and attractive for our visitors and to achieve a better presentation of contents and/or facts. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in § 5 of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. You will also find more information about your rights and privacy settings at: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google Privacy Policy . Google also processes your personal data in the USA and has submitted to the EU-U.S. Privacy Shield Framework .

4. Integration of Google Maps
(1) On this website we use the offer of Google Maps. We are pursuing our interest in increasing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to conveniently use the map function. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) By visiting the website, Google receives information that you have called up the corresponding subpage of our website. In addition, the data specified in § 5 of this declaration will be transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the provider. You will also find more information about your rights and privacy settings at: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Google Privacy Policy . Google also processes your personal data in the USA and has submitted to the EU-U.S. Privacy Shield Framework .

5. Integration of Typeform
(1) On this website we use the services of Typeform. In this way, we are pursuing our interest in increasing the attractiveness of our website by offering you an interactive form on our website. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) By visiting our website and participating in surveys, evaluations & competitions and forms, data entered there is stored and processed on our behalf by Typeform. The IP address of the user, information on the time and duration of use and the information provided by the user in the forms are transmitted.
(3) Further information can be found in the data protection regulations of the provider Typeform, Carrer Bac de Roda, 163, 08018 Barcelona, Spain, available at Typeform Terms and at What happens to my data?

6. Integration of Facebook
(1) On this website we also use offers from Facebook (Connect: registration service). By using these offers we can offer you a better user experience on our website. This serves our interest in increasing the attractiveness of our website. The legal basis for the use of these offers is Art. 6 para. 1 sentence 1 lit. f GDPR.
Instead of registering directly on our website, you can register with Facebook Connect. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you choose to register with Facebook Connect and click on the "Login with Facebook"- /"Connect with Facebook" button, you will automatically be redirected to the Facebook platform. There you can log in with your user data. This will link your Facebook profile to our website or services. This link gives us access to your data stored on Facebook. These are above all:
• Facebook-Name
• Facebook profile and cover picture
• email address stored on Facebook
• Facebook-ID
• Facebook-Friendlists
• Facebook Likes (“Like”-Information)
• Birthday
• Gender
• Country
• Language
This data is used to set up, provide and personalise your account.
For more information, please see the Facebook Terms of Service and Data Policy .
(2) By visiting the website, the respective third party provider receives information that you have accessed the corresponding subpage of our website. In addition, the data specified in § 5 of this declaration will be transmitted. This is regardless of whether this third party provides a user account through which you are logged in, or whether no user account exists. If you are logged in to the third party, your information will be directly associated with your account. If you do not wish to be assigned to your profile with the respective third-party provider, you must log out before activating the button. The third party provider may store your data as a user profile and may use it for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective third party provider to exercise this right.
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers notified below. They will also provide you with further information about your rights in this regard and setting options to protect your privacy:
(4) Addresses of the respective providers and URL with their data protection information:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; Facebook Data Policy ; further information on data collection: What information does Facebook get when I visit a site with the Like button? and Facebook Full Data Use Policy .Facebook has submitted to the EU-U.S. Privacy Shield Framework .

7.Integration of Twitter
Within our online offering, features and content of the Twitter service offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, may be incorporated. This content may comprise e.g. images, videos, or text and buttons that allow users to share content from this online offering within Twitter.
If the users who access the aforementioned contents or functions are members of the platform Twitter, Twitter can assign content access or use of functions to the personal profiles of the users in question. Twitter is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (EU-U.S. Privacy Shield/Twitter ). Privacy Policy , Opt-Out .

8. Integration of LinkedIn
Within our online offer functions and contents of the network LinkedIn, offered by the Linkedin Corporation, 2029 Stierlin Cout, Mountain View, CA 94043, USA, can be integrated.
If, while logged into your LinkedIn account, you click the LinkedIn "Recommend" button, the content of our pages will be linked to your LinkedIn profile. This enables LinkedIn to assign the visit to our pages to your LinkedIn user account. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (EU-U.S. Privacy Shield/LinkedIn ). Privacy Policy .

§ 10 ONLINE ADVERTISING
1. Use of Google AdSense
(1) This website uses the online advertising service Google AdSense, through which you can be presented with advertising tailored to your interests. We are interested in showing you advertisements that might be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements can be recognized by the reference "Google ads" in the respective advertisement. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) By visiting our website, Google receives the information that you have accessed our website. Google uses a web beacon to set a cookie on your computer. The data specified in § 5 of this declaration are transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. If you are logged in with your Google account, your data can be directly assigned to it. If you do not wish to be associated with your Google profile, you must log out. It is possible that this data will be passed on to Google's contractual partners to third parties and authorities. Vendors that are certified for third-party ads .
(3) You can prevent the installation of Google AdSense cookies in various ways:
a) by adjusting your browser software accordingly, in particular the suppression of third party cookies means that you will not receive any ads from third party providers,
b) by deactivating the interest-based ads on Google via Google Ads Settings , this setting being deleted if you delete your cookies,
c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via DAA's WebChoices Tool , this setting will be deleted if you delete your cookies,
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome using Ads Settings Browser Plugin . Please note that in this case you may not be able to use all functions of this offer in full.
(4) Further information on the purpose and scope of data collection and processing as well as further information on your rights in this regard and setting options for the protection of your privacy can be obtained from: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; Advertising - Privacy & Terms . Google has submitted to the EU-U.S. Privacy Shield Framework .

2. Use of Google Adwords Conversion / Remarketing
(1) We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to increase the attractiveness of our website for you and to achieve a fair calculation of advertising costs. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) These advertising media are delivered by Google via so-called "Ad Servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values.
(3) These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Adwords customers. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognize which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and the further use of the data which are raised by the use of this tool by Google and inform you therefore according to our knowledge: By the integration of AdWords conversion Google receives the information that you called the appropriate part of our Internet appearance or clicked an announcement of us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
(5) You can prevent participation in this tracking process in various ways:
a) by adjusting your browser software accordingly, in particular the suppression of third party cookies means that you will not receive any ads from third party providers,
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the „https://www.google.com/ads/ “ domain, Google Ads Settings , which will be deleted when you delete your cookies,
c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via DAA's WebChoices Tool , this setting being deleted if you delete your cookies,
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome using Ads Settings Browser Plugin . Please note that in this case you may not be able to use all functions of this offer in full.
(6) Further information on data protection at Google can be found here: Google Privacy Policy and Google Site Stats . Alternatively, you can visit the website of the Network Advertising Initiative (NAI) . Google has submitted to the EU-U.S. Privacy Shield Framework .

3. DoubleClick by Google
(1) This website continues to use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. In addition, DoubleClick may use cookie IDs to collect conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. By using this tool, we are interested in showing you advertisements that are of interest to you, to increase the attractiveness of our website for you and to achieve a fair calculation of advertising costs. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and the further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called the corresponding part of our Internet presence or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
(3) You can prevent participation in this tracking process in various ways:
a) by adjusting your browser software accordingly, in particular the suppression of third party cookies means that you will not receive any ads from third party providers,
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the „https://www.google.com/ads/ “ domain, Google Ads Settings , which will be deleted if you delete your cookies,
c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via DAA's WebChoices Tool , this setting will be deleted if you delete your cookies,
d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome using Ads Settings Browser Plugin . Please note that in this case you may not be able to use all functions of this offer in full.
Alternatively, you can visit the website of the Network Advertising Initiative (NAI) .
(4) Further information on DoubleClick by Google can be found at https://www.doubleclickbygoogle.com/ and AdSense Help Center , as well as on data protection at Google in general: Google Privacy Policy . Google has submitted to the EU-U.S. Privacy Shield Framework .

4. Google Tag Manager
(1) This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage webiste tags through a single interface. The Google Tool Manager only implements tags. The Tag Manager is a cookieless domain. This means that no cookies are used and no personal data is collected. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
Privacy Policy: Google Tag Manager Use Policy .
Click here to opt out of Google Tag Manager capture.

5. Facebook Impressions
(1) This website uses the "Facebook Impressions" function of Facebook Inc. "("Facebook"). This collects information about the frequency with which individual pages of our website are displayed. Facebook uses cookies for this purpose. This is in order to better understand the use of our website by our visitors and to provide them with more relevant information as a result. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Impressions, Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying information.
(3) The "Facebook Impressions" function can be deactivated by logged in users at Facebook Ads Preferences . In addition, you can refuse the acceptance of third party cookies or all cookies in your browser settings, which, however, has no influence on the server communication described under point 2. Please note that you may not be able to use all functions of this website.
(4) For more information about Facebook's data processing, please visit:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; Facebook Data Policy ; further information on data collection: What information does Facebook get when I visit a site with the Like button? and Facebook Full Data Use Policy . Facebook has submitted to the EU-U.S. Privacy Shield Framework .

6. A/B-Testing
(1) This website also carries out analyses of user behaviour via so-called A/B testing. We can show you our websites with slightly varied content, depending on your profile assignment. In this way, we are pursuing our interest in analysing and regularly improving our services and making them more interesting for you as a user. The legal basis for A/B testing is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) Cookies (more details in § 5) are stored on your computer for this evaluation. The person responsible stores the information collected in this way exclusively on his server in Germany. You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use our website in full. The prevention of the storage of cookies is possible through the setting in your browser.
(3) Before the analyses are carried out, the IP addresses are further processed in abbreviated form, so that direct personal contact can be ruled out. The IP address transmitted by your browser is not combined with other data collected by us.
(4) The service provider for the analysis is Kiss Metrics. Information on data protection from the third-party provider is available at Kissmetrics' Privacy Policy .

§ 11 Initiative applications by e-mail
(1) You can send us an initiative application by e-mail. In the context of this e-mail application, you provide us with personal data. It is a special concern of ours to handle your personal data with confidence already during the application process. It is therefore a matter of course for us to treat all personal data that you entrust to us in strict confidence and responsibly, in compliance with the applicable legal data protection regulations. We use technical and organizational security measures to protect your personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The legal basis for the processing of personal data that you send us in the context of your application is basically the implementation of pre-contractual measures initiated by your application in accordance with Art. 6 para. 1 sentence 1 lit. b EU-GDPR. If the data transmitted by you for application purposes also contain particularly sensitive data of a special category in accordance with Art. 9 para. 1 EU-GDPR, these data will be processed by us on the legal basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a, which we therefore obtain from you as described in more detail in para. 2.
(2) When you send us your e-mail application, you provide us with personal data such as your first and last name, postal address and e-mail address. To make it easier for us to contact you, you can also voluntarily enter further contact data, in special your landline and mobile phone number. To help us better meet your application requirements, you may also voluntarily provide us with additional data and files, e.g. a personal message, details of your professional qualifications and experience and files containing your application documents, such as your personal cover letter, your curriculum vitae, your application photo, your certificates, etc. We will then send you a copy of your application. Please note that in special curricula vitae, certificates or other data you submit for application purposes may also contain particularly sensitive data, such as information about race or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or political party, physical or mental health or sex life. We therefore recommend that you do not provide any information regarding such sensitive data in a special category.
(3) It is not to be excluded and in individual cases also quite necessary that you send us in the context of your application data of special category as specified under paragraph 2. The processing of such data without your consent is prohibited by law. By sending us your application documents by e-mail, you give us your consent to process these sensitive data of special categories in accordance with this data protection declaration.
(4) The data and files transmitted by you will only be stored and used for purposes in connection with the registration and processing of your interest in employment or training with us and the processing of your e-mail application, including the necessary contact with you. Your application will be treated confidentially and will only be made available to authorized employees of NORMA Group. If your application is successful, the data and files you submit can be used in the context of your employment relationship with you. If your application for a job offer is unsuccessful, the data and files you submit will be stored in our applicant database for six months to answer any questions you may have in connection with your application. After this time, the data and files are automatically deleted.
(5) Your data and files transmitted in the context of the mail application will not be passed on to third parties unless you have given your express consent or an official order to do so.
(7) You have the option of withdrawing all or part of your application at any time. You can also request at any time that all or some of your transmitted data and files be deleted or changed from our applicant database. You are also entitled to revoke your consent to the processing of the personal data and files transmitted by you in the context of the e-mail application at any time with effect for the future. All you need to do is send an e-mail to career.de@normagroup.com. However, certain data relating to your application must be stored for a limited period of time to comply with legal provisions. After elimination of the legal basis, the data will be blocked and / or deleted. Regarding your basic existing rights, we would also like to refer you at this point to § 2 of this data protection declaration.

Due to the further development of our website and offers about it or due to changed legal or official requirements, it may be necessary to change this data protection information.

Last update: May 05, 2023