NOVACREAS — LEGAL
Privacy Policy
1. An Overview of Data Protection
General Information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term "personal data" comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
Data Recording on This Website
Who is the responsible party for the recording of data on this website (i.e., the "controller")?
The data on this website is processed by the operator of the website, whose contact information is available under section "Information about the responsible party (referred to as the 'controller' in the GDPR)" in this Privacy Policy.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form.
Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze your user patterns. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order enquiries.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or erased.
If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Please do not hesitate to contact us at any time if you have questions about this or any other data protection-related issues.
2. Hosting
We are hosting the content of our website at the following provider:
All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter "All-Inkl"). For details, please visit the privacy policy of All-Inkl:
https://all-inkl.com/datenschutzinformationen/
The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website.
If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device. This consent can be revoked at any time.
Data Processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that personal data of our website visitors is processed only based on our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with statutory data protection regulations and this Privacy Policy.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Privacy Policy explains which data we collect as well as the purposes for which we use this data.
We advise you that the transmission of data via the Internet (e.g., through email communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.
Information About the Responsible Party (Controller)
The data processing controller on this website is:
Novacreas
Tatevik Grigoryan
Industriestraße 9
65760 Eschborn
Germany
Phone: +31 6 23421227
Email: info@novacreas.com
The controller is the natural person or legal entity that, alone or jointly with others, determines the purposes and means of the processing of personal data.
Storage Duration
Unless a more specific storage period has been specified in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies.
If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data, such as tax or commercial law retention periods.
General Information on the Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of personal data are processed.
In the case of explicit consent to the transfer of personal data to third countries, processing may also be based on Art. 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your end device, processing is additionally based on Section 25(1) TDDDG. Consent can be revoked at any time.
If your data is required for the performance of a contract or pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.
If processing is necessary to comply with a legal obligation, it is based on Art. 6(1)(c) GDPR.
Processing may also be carried out based on our legitimate interests under Art. 6(1)(f) GDPR.
Recipients of Personal Data
In the course of our business activities, we cooperate with various external parties. Personal data is disclosed only where necessary for contractual performance, compliance with legal obligations, legitimate interests or another applicable legal basis.
When using processors, personal data is disclosed on the basis of a valid data processing agreement. Where joint processing applies, an appropriate joint controller agreement is concluded.
Revocation of Your Consent
Many data processing activities are possible only with your express consent. You may revoke consent at any time. Revocation does not affect the lawfulness of processing carried out before the revocation.
Right to Object (Art. 21 GDPR)
Where personal data is processed based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation.
If you object, we will no longer process the affected personal data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time. Following such an objection, your personal data will no longer be processed for direct marketing.
Right to Lodge a Complaint
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or place of the alleged infringement.
Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or a contract in a commonly used, machine-readable format. Where technically feasible, you may request direct transmission to another controller.
Access, Rectification and Erasure
Within the scope of applicable statutory provisions, you have the right to request information about your personal data, its source, recipients and purposes of processing. You may also request rectification or erasure of your personal data.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data under certain circumstances, including:
- Where you contest the accuracy of your personal data while its accuracy is being verified.
- Where processing is unlawful and you request restriction instead of erasure.
- Where we no longer need the data but you require it for legal claims.
- Where you have objected under Art. 21(1) GDPR while the relevant interests are being assessed.
Where processing has been restricted, the data may generally be processed only with your consent, for legal claims, protection of rights or important public interest reasons, except for storage.
SSL and/or TLS Encryption
For security reasons and to protect confidential information transmitted through this website, we use SSL or TLS encryption.
You can recognize an encrypted connection by the "https://" prefix in your browser's address bar.
4. Recording of Data on This Website
Cookies
Our website uses cookies. Cookies are small data files stored temporarily for the duration of a session or permanently on your device.
Cookies may be placed by us (first-party cookies) or third-party providers (third-party cookies).
Some cookies are technically necessary for website functionality, while others may be used to analyze user behaviour or for marketing purposes.
Where applicable, cookies and similar technologies are used on the basis of Art. 6(1)(f) GDPR or, where consent is required, Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may configure your browser to notify you when cookies are placed, restrict their use or delete them automatically. Disabling cookies may limit certain website functions.
Real Cookie Banner
Our website uses Real Cookie Banner to obtain and document consent for cookies and similar technologies.
The provider is devowl.io GmbH, Tannet 12, 94539 Grafling, Germany.
Real Cookie Banner is installed locally on our servers and stores a cookie in your browser to record your consent preferences.
The data will be retained until deletion is requested, consent is withdrawn or the purpose of storage no longer applies, subject to mandatory statutory retention requirements.
The legal basis for this processing is Art. 6(1)(c) GDPR.
Calendly
You can schedule appointments with us through our website using Calendly.
The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA.
When booking an appointment, the information you provide is used to schedule, conduct and follow up on the appointment.
For further information, please consult Calendly's Privacy Policy:
Appointment data is retained until the purpose of processing no longer applies, subject to applicable statutory retention obligations.
The legal basis for processing is Art. 6(1)(f) GDPR. Where appropriate consent has been obtained, processing may instead be based on Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Data transfers to the United States are supported by applicable transfer mechanisms, including the European Commission's Standard Contractual Clauses where applicable.
Further information:
https://calendly.com/pages/dpa
Calendly is listed under the EU-US Data Privacy Framework. Further information is available at:
https://www.dataprivacyframework.gov/participant/6050
Data Processing Agreement
We have concluded a data processing agreement with Calendly to regulate the processing of personal data in accordance with applicable data protection requirements.
5. Plug-ins and Tools
Google Fonts (Local Embedding)
This website uses Google Fonts to ensure consistent typography. The fonts are installed locally, so no connection to Google's servers is established in connection with the use of these fonts.
For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq
Google's Privacy Policy: