Privacy policy

1. Data controller

The controller within the meaning of the General Data Protection Regulation is:

Email: support@nordgrat.de

2. Privacy contact

If you have questions about privacy or wish to exercise your data protection rights, you can contact the following email address at any time:

support@nordgrat.de

No data protection officer has been appointed.

3. General information about data processing

We process personal data only to the extent necessary to provide this website, handle enquiries, present our products and information, and fulfil legal obligations.

This website provides information about NORDGRAT, our products and offers. No purchase contract is currently concluded directly through this website. Purchases may be made through external providers or platforms, such as Amazon or other linked shops.

4. Website visits and technical data

Technical data may be processed automatically when you visit this website. This may include, in particular:

• • IP address
• • Date and time of access
• • Pages and files accessed
• • Referrer URL
• • Browser type and version
• • Operating system
• • Device type
• • Technical log data
• • Security and error logs

This data is processed to deliver the website, ensure security, analyse errors and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of the website.

5. Hosting and website service providers

This website is provided through Base44. Base44 supplies technical services for website creation, hosting, storage, infrastructure, security and website delivery.

When you visit and use this website, Base44 may process personal data to the extent necessary for its technical operation, security, display and delivery. This may include technical access data, IP addresses, device and browser information, log data and data from forms, where such functions are used.

Base44 may use subprocessors, particularly for hosting, data storage, email delivery, security and infrastructure.

Where Base44 or other service providers process personal data on our behalf, we conclude the necessary data processing agreements where required by law.

Processing by Base44 and its subprocessors may take place outside the European Union or the European Economic Area. In such cases, we ensure that appropriate data protection safeguards are in place, such as adequacy decisions, standard contractual clauses or other appropriate safeguards under the GDPR.

6. Contacting us

If you contact us by email, we process the data you provide to handle your enquiry.

This may include, in particular:

• • Name
• • Email address
• • Telephone number, if provided
• • Content of your message
• • Time of your enquiry
• • Technical transmission data

The data is processed to handle your enquiry.

The legal basis is Article 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures. In all other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of enquiries.

Contact enquiries are deleted once they are no longer required for processing and no statutory retention obligations prevent deletion.

7. Product information and external links

Our website may contain product information, images, descriptions, notices and links to external websites, shops or marketplaces.

Clicking external links takes you away from our website. The respective provider’s privacy information applies to the processing of personal data on external websites.

This applies in particular to links to:

• • Amazon
• • nordgrat.de subpages
• • External shops or platforms
• • Social networks, where linked

Unless expressly stated otherwise, purchases are not made directly through this website. Product prices, availability and details on external platforms may change. The respective external provider’s information is authoritative.

We do not currently use affiliate links. If we use affiliate links in future, we will identify them accordingly.

8. Cookies, local storage and similar technologies

This website uses strictly necessary cookies, local storage entries and similar technologies.

These may be required for:

• • Technical delivery of the website
• • Security
• • Display and layout
• • Cookie or consent status
• • Form functions
• • Protection against misuse

Strictly necessary cookies or similar storage are required for the website to function correctly.

In addition, we only use Base44 Analytics if you have actively consented beforehand.

Base44 Analytics helps us understand how visitors use our website so we can improve content, navigation, loading times, display and technical functions.

In particular, the following data may be processed:

• • Pages visited
• • Time of the visit
• • Technical device and browser information
• • Approximate usage data
• • Referrer information
• • Interactions with the website, where technically supported

We do not collect contact form contents, passwords, payment data or deliberately entered message contents through Base44 Analytics for analytics purposes.

The legal basis for storing or reading analytics cookies or similar analytics technologies on your device is your consent under Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data for analytics purposes is Article 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future using “Change cookie settings”.

Analytics provider: Base44

Base44 may use subprocessors. Where Base44 or its subprocessors process personal data on our behalf, this is based on appropriate data processing agreements where required by law.

Processing by Base44 and its subprocessors may take place outside the European Union or the European Economic Area. In such cases, we ensure that appropriate data protection safeguards are in place, such as adequacy decisions, standard contractual clauses or other appropriate safeguards under the GDPR.

We currently use no marketing cookies, Meta Pixel, retargeting or affiliate tracking cookies.

9. Embedding external content

External content or services may be embedded or linked on this website, such as external shops, maps, videos, social media profiles or other third-party content.

When you access such content or click external links, personal data, particularly your IP address and technical access data, may be transmitted to the respective third-party provider.

We only embed external content where this is necessary for the website’s display, information or functionality, or where you actively access the content concerned.

10. Social media

Where our website contains links to social media profiles, these are generally ordinary external links. Merely visiting our website does not transmit data to the respective social media providers through these links, provided no active plugins are embedded.

You only leave our website when you click a social media link. The respective provider is responsible for data processing there.

11. Disclosure of personal data

We do not share personal data with third parties for advertising purposes.

However, disclosure may occur where necessary:

• • To technically provide the website
• • To handle your enquiry
• • To use hosting, website, email or infrastructure service providers
• • To fulfil legal obligations
• • To enforce or defend legal claims

12. Transfers to third countries

When using hosting, website, email, security or external platform services, personal data may be processed outside the European Union or the European Economic Area.

Where personal data is transferred to third countries, we ensure appropriate data protection safeguards are in place, such as European Commission adequacy decisions, standard contractual clauses or other safeguards provided by law.

13. Retention period

We retain personal data only for as long as required for the respective purposes.

In particular, the following principles apply:

• • Technical log data: only for as long as needed for security, error analysis and operation
• • Contact enquiries: until processing is completed, and afterwards only where statutory retention obligations apply
• • Business correspondence: in accordance with statutory retention periods
• • Data relating to legal claims: for the duration of statutory limitation periods

If there are no statutory retention obligations or legitimate reasons for continued retention, personal data is deleted or anonymised.

14. Rights of data subjects

Under the GDPR, you have the following rights in particular:

• • Right of access
• • Right to rectification
• • Right to erasure
• • Right to restriction of processing
• • Right to data portability
• • Right to object to processing based on legitimate interests
• • Right to withdraw consent with effect for the future
• • Right to lodge a complaint with a data protection supervisory authority

To exercise your rights, you can contact the following email address at any time:

support@nordgrat.de

15. Right to object

If we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.

16. Withdrawal of consent

If processing is based on your consent, you can withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out before withdrawal remains unaffected.

17. Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

The competent authority may in particular be the data protection authority for your place of residence or the supervisory authority responsible for Hamburg.

18. No automated decision-making

This website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

19. Changes to this privacy policy

We may update this privacy policy if our website, services used, legal requirements or technical processes change.