(“proNARO” or “we” or “us”) takes the issue of data protection seriously. This data protection declaration describes how proNARO, as the controller within the meaning of the General Data Protection Regulation (“GDPR”) and the ePrivacy Regulation (“ePrivacy Regulation”), collects and processes personal data and other information about users.
1. Categories of personal data and processing purposes
Metadata
You can use our website or app without providing personal data about yourself. In this case, proNARO only collects the metadata listed below that result from your use:
Originally visited website, date and time of access, transferred data volume, status of transmission, type of web browser, IP address, operating system and interface, language and version of the browser software.
Your IP address will be used to enable its access to the website or app. As soon as your IP address is no longer needed for this purpose, we will shorten your IP address by removing the last octet. The metadata, including your shortened IP address, is used to improve the quality of the services of our website or app by analysing the usage behavior of our users.
Account
If you create an account on our website or in our app, or if you register with an access code provided by proNARO, you may be asked to provide certain personal information about yourself, e.g. name: name, postal address, e-mail address, selected password, telephone number, bank details, credit card details, billing and delivery address, certificate number, tax number, wooden deployments incl. Location coordinates, interest in certain products/services (voluntary), request to receive (voluntary) proNARO processes this personal data in order to provide you with the account functionalities and, where permitted by law, marketing material and evaluating your interests for marketing purposes.
Product orders
When you order a product through our website or app or provide wood, proNARO collects and processes the following personal data about you: your account detail, type and number of products, purchase price, order date, order status, certification status (consisting of certificate information and certification statement), coordinates, product returns, customer service requests.
2. Third party
- Transfer to service providers
proNARO may engage third party service providers acting as processors on behalf of proNARO to provide certain services to proNARO, such as website, marketing or IT support service providers. When providing these services, external service providers may have access to your personal data and, if necessary, process it.
We require these external service providers to take and maintain security measures to ensure the confidentiality and security of your personal data.
- Other recipients
proNARO may transfer – in accordance with applicable data protection law – personal data to law enforcement authorities, government agencies, external legal advisors, external consultants, certification bodies or business partners (e.g. carrier commissioned by proNARO). In the event of a combination of business or importation, personal data may be transferred to third parties who are involved in this merger or transaction.
- International Transfers of Personal Data
The personal data about you personal data that we collect or receive may be transmitted to recipients and processed by recipients who are located within or outside the European Economic Area (” EEA “). These countries include the countries listed under http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index-en.htm, which have an adequate level of data protection from a EU data protection perspective. In some cases, recipients in the USA are certified according to the EU-US Privacy Shield and therefore also have an adequate level of data protection from a EU data protection perspective. Other recipients may be resident in other countries that do not have an adequate level of data protection from an EU data protection point of view. proNARO will take all necessary measures to ensure that transfers to countries outside the EEA are adequately protected in accordance with applicable data protection law. In the case of transfers to countries without an adequate level of data protection, we protect the transfer by means of appropriate guarantees, such as standard contractual clauses adopted by the European Commission or a supervisory authority, an approved code of conduct combined with binding and enforceable obligations of the recipient or approved certification mechanisms combined with binding and enforceable obligations of the recipient. You can request a copy of these appropriate safeguards from us using the contact details provided in section 7 (contact) below.
3. Legal basis for processing
We carry out the processing of your personal data on the basis of one of the following legal bases:
- You have given your consent to the processing of your data for one or more specific purposes;
- the processing is necessary for the performance of a contract to which you are a party or to carry out pre-contractual measures taken at your request;
- the processing is necessary to fulfil a legal obligation to which we are subject;
- the processing is necessary to protect vital interests of you or another natural person;
- the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority vested in which we have been entrusted;
- the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms require the protection of personal data prevail, in particular if you are a child;
- further legal bases for data processing, in particular regulations adopted by EU member states;
We carry out the processing of your sensitive personal data on the basis of one of the following legal bases:
- You have given your express consent to the processing of your sensitive personal data for one or more specific purposes;
- the processing is necessary for proNARO or the data subject to exercise the rights incurred by the labour law and the laws of social security and social protection and the protection of his/her obligations to this effect;
- the processing relates to personal data which the data subject has certainly made public;
- the processing is necessary for the establishment, exercise or defence of legal claims or in the event of acts by the courts in the context of their judicial activity;
the provision of your personal data is necessary due to legal or contractual obligations or is necessary for the conclusion of a contract with us or for the receipt of the services/products you have ordered or voluntarily for you.
If you do not provide any personal data, this may result in disadvantages for you. For example, you may not be able to purchase certain products and services or to sell or make wood ready to proNARO. However, unless otherwise specified, it has no legal consequences for you if you do not provide us with your personal data.
4. What rights do you have and where can you assert them?
If you have given your consent to certain types of collection, processing and use of your personal data, you may revoke this consent at any time with effect for the future. In addition, you can object to the use of your personal data for marketing purposes without incurring further costs in addition to the transmission costs based on the basic tariffs.
According to the applicable data protection provisions, you have the right to (i) request information about your personal data (ii) to request the rectification of your personal data, (iii) request the erasure of your personal data, (iv) to request the restriction of the processing of your personal data, (v) request data portability, (vi) object to the processing of your personal data (including profiling) and (vii) to object (including profiling) (including) profiling (vii)
To exercise their rights, please contact us as stated in section 7 (Contact) below.
In the event of complaints, you also have the right to lodge a complaint with the competent data protection supervisory authority.
5. Cookies and other tracking technologies
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called. Google Analytics uses cookies, which are text files placed on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by selecting the appropriate settings in your browser software:
Cookie settings in Internet Explorer
Cookie settings in Safari web and iOS
However, please note that in this case you may not be able to use all the functions of this website or the proNARO APP to the full extent. You can also collect the data generated by the cookie and related to your use of the website (incl. your IP address) to Google and to prevent the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl-en .
The following cookies are used on this site (www.pronaro.com):
This website uses cookies and similar functions for the processing of terminal device information and personal data. The processing serves the integration of content, external services and elements of third parties, statistical analysis/measurement, personalised advertising and the integration of social media. Depending on the function, data is passed on to third parties and to third parties in countries where there is no adequate level of data protection and is processed by them, e.g. the USA. Your consent is always voluntary, not necessary for the use of our website and can be rejected or revoked at any time on our site.
Technically necessary
Google Web Fonts (local installation)
Publisher
Google Web Fonts / Source Sans 3 by Paul D. Hunt
Description
Google Web Fonts installed Locally on the page
Cookie Consent Manager CCM19
Publisher
Papoo Software & Media
Description
Used to store the cookie consent – which cookies may be set. The status of the cookie settings can be set for you. The data is stored in categories.
Link to privacy statement
https://www.ccm19.de/data protection statement.html
Local Storage:
| Name | Lifetime | Description |
|---|---|---|
| ccm cconsent | 1 year | Used to save the cookie consent agreement, which indicates which cookies can be set. |
Legal basis
Art. 6 para. 1 s. 1 lit. c GDPR
Place of processing
Bonn & Falkenstein, Germany
TYPO3
Publisher
TYPO3 Association
Description
Let Typo3 know if the visitor is logged in to the Typo3 backend and which backend user is used.
Link to privacy statement
https://typo3.org/privacy-policy/
What data is collected?
Browser information; date and time of visit; IP address; device drive system; Referrer URL; Host name of the accessing computer
Purpose of data collection
Advertising; Analysis; Optimization; Delivering Content; Improving Service; Tag Management; Cloud Computing; Website Security; Printing out product and catalog files; Error Analysis
Cookies:
| Name | Lifetime | Description |
|---|---|---|
| fe-typo-user | Session | This cookie is a standard TYPO3 session cookie. |
| be-typo-user | Session | This is used to identify the backend session when a backend user logs on to the frontend or TYPO3 backend. |
| Typo3InstallTool | ||
| be-lastLoginProvider | 3 months | The cookie contains the key of the Typo3 backend login provider used. |
| typo3-login cookiecheck | Session | Check the browser settings related to rendering of Typo3 background pages. |
Legal basis
Consent, Art. 6 para. 1 lit. a GDPR
Place of processing
Switzerland
Other
Google Maps
Publisher
Google Ireland Limited
Description
We have integrated maps of Google Maps to provide you with a better browsing experience on our website.
Link to privacy statement
http://www.google.com/intl/policies/privacy/
What data is collected?
Date and time of visit; location information; IP address; usage data; URL; search terms; location; IP address; use of the embedded map service (click, map view shift, etc.); URLs
Purpose of data collection
Provide content; provision of fonts; improving the service; displaying cards; personalization; content display; social media; website security; cards ads ; improvement of Google products and service ; provision of a market for marked data
Cookies:
| Name | Lifetime | Description |
|---|---|---|
| NID | 15778800 | This cookie stores information about user settings and information about Google Maps. |
Local Storage:
| Name | Lifetime | Description |
|---|---|---|
| goog-pem-mod | persistent | Used to send data about a visitor’s device and behavior to Google Analytics. Track visitors across all devices and marketing channels. |
Legal basis
Consent, Art. 6 para. 1 lit. a GDPR, Art. 49 para. 1 lit. a GDPR
Place of processing
European Union
6. How long do we retain your personal data?
Your personal data will be stored for as long as is necessary in order to provide you with the requested products and services and to deliver your timber deliveries to our customers’ works and to settle accounts for suppliers and customers. As soon as our legal relationship is terminated, we will either delete or anonymise your personal data, unless statutory retention obligations apply (e.g. for tax purposes). If proNARO is permitted to send you marketing material, we will store your contact details and your interest in our products or services for a longer period of time if applicable. In addition, we may be obliged under applicable law to retain certain personal data from you for a period of 10 years from the respective tax year. We shall continue to retain your personal data even after the termination of the contractual relationship, insofar as this is necessary to comply with other applicable laws or regulations or to the extent that we need your personal data to assert, exercise or defend your personal data, but only to know-how is necessary if it is necessary to know-based data. As far as possible, we will limit the processing of your personal data to these limited purposes after termination of the contractual relationship.
7. Contact
Please address any concerns or questions regarding this privacy policy to:
proNARO GmbH, c/o Essity, Sandhofer Str. 176, D-68305 Mannheim, Tel: +49 621 778-3131,
datenschutz(at)proNARO-gmbh.com
The contact details of the data protection officer are as follows:
proNARO GmbH, c/o Essity, Daniel Tusch, Sandhofer Str. 176, D-68305 Mannheim, Daniel.Tusch-proNARO-gmbh.com
Suggested text: Visitor comments may be checked through an automated spam detection service.