Last change 05/24/2018
1. Information on the collection of personal data:
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar s
1.1 Below you will find information on the collection of personal data when you use our website. Personal data is information which relates to you personally, e.g. name, address, email addresses, or user behaviour.
“Controller” in accordance with Art. 4 (7) of the EU General Data Privacy Regulation (GDPR) is
KOTI-NORDHS Borstfabrik AB
602 28 Norrköping,
The Data Protection Officer for NORDHS-KOTI Borstfabrik AB may be reached at the following address:
KOTI-NORDHS Borstfabrik AB,
602 28 Norrköping,
1.2 If you contact us via email or contact form, the data you have provided to us (your email address, possibly your name and your telephone number) will be stored by us to enable us to respond to your questions. The legal basis for this is Art. 6(1)(1)(a) GDPR. If the data serves to fulfil the performance of a contract to which you are a party, or serves for the carrying out of contractual measures, then Art. Art. 6 (1)(b) GDPR also applies as a legal basis. We will delete the data that we receive in this connection when their retention is no longer required, or restrict its processing if there are legal requirements to keep and retain this data. Please note that data transmission over the Internet (for example through the sending of e-mails) may be subject to security gaps. Absolute protection of data from third-party access is impossible.
1.3 To some extent, we use external service providers for processing your data. These have been carefully selected and instructed by us; they are bound by our instructions and monitored on a regular basis.
2. Collection of personal data when you visit our website:
2.1 If the website is used merely for information, i.e. if you are not registering or otherwise submitting data to us, we only collect the personal data that is transmitted to our server by your browser. When you visit our website, we collect the following data:
- web pages accessed,
- date and time of access,
- transmitted data volume,
- notification of successful access,
- browser type and version,
- user’s operating system,
- referrer URL (the web page which directed you to our website),
- IP address
- Internet provider This data is stored in our system’s log files. It is not merged together with any other personal data of the user.
2.2 The legal basis for the collection and storage of data is Art. 6(1)(f) GDPR.
2.3 The collection of this data is necessary for us to be able to display our website to you and to ensure stability and security. Its storage in log files enables the website’s functional capabilities. It also helps us to optimise our website and to ensure the security of our IT systems. We too have a justified interest in processing data according to Art. 6(1)(f) GDPR.
2.4 The data will be deleted once it is no longer needed to achieve the purpose of its collection. In the case of data collection for displaying the website, this occurs when the respective session is completed. If the data is stores in log files, deletion will occur within seven days. Continued storage may be possible, in which case the IP addresses are deleted or masked so that association with a website user is not possible.
2.5 The collection and storage of data described above is essential for the operation of the website. Therefore you do not have the option of objecting. If you do not agree to this, we recommend that you leave the website.
3. Collection of additional personal data through cookies when you visit our website
3.2 There are different types of cookies whose scope and functioning are explained below. “Session cookies” are automatically deleted when you close your web browser. They store what is called a session ID, enabling the association of various browser requests to the shared session. This means that your computer can be recognised when you return to our website. Session cookies are deleted when you log out or close the browser. “Persistent cookies” are automatically deleted after a specified time, which can differ depending on the cookie. You can delete cookies at any time from your browser’s security settings. We use persistent cookies.
4. Use of Google Analytics
They are contained in every page request of a website, and are used to calculate user, session and harvesting data for analytics reports for websites. They generally expire after 2 years. Google Universal Analytics also uses _gid cookies. These store a unique value for every page visited, and updates this information. The information generated by the cookies related to your use of this website is usually transmitted to a Google server in the USA and stored there.
If IP anonymisation has been activated on this website, your IP address will, however, first be truncated by Google within the Member States of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area. Only in exceptional situations will your full IP address be transmitted to a Google server in the US and truncated there. Google will use this information on behalf of this website’s operator to analyse your use of this website, to create reports about website activity, and to provide additional services connected with the website and Internet use to the website operator. Google will not associate your IP address with any other data held by Google.
4.2 You can prevent cookie storage by selecting the appropriate settings in your browser; however, please note that in such cases you might experience limited functionality of this website. You can also prevent the capture of the data related to your use of the website generated by the cookie (including your IP address) on Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
4.3 This website uses Google Analytics with the “_anonymizeIp()” function. The IP addresses are further processed in truncated form, excluding the possibility of their being linked to any individual. If the data collected from you is found to be of a personal nature, it will be removed and deleted immediately.
4.4 We use Google Analytics to analyse the use of our website and regularly make improvements to it. The statistical evaluation obtained helps us to improve our website and make it more interesting for you as user. For exceptional cases in which personal data may be transmitted to the USA, Google is subject to the EU-US Privacy Shield Framework: https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(1)(f) GDPR.
4.6 This website also uses Google Analytics for the device-independent analysis of visitor flows carried out via user ID. You can deactivate this device-independent analysis of your use in your account under “My account” > “Personal info”.
5. Integration of YouTube videos
5.1 We have YouTube videos integrated on our website. These are stored at http://www.YouTube.com and can be played directly from our website. The videos are all integrated in the “expanded data protection mode”, which means that none of your data is transmitted to YouTube if you do not play the videos. The data specified below in 8.2 is transmitted only when you activate a video by clicking the play button. We have no control over this data transmission.
If you prefer that your activity is not associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or the design of its website. Such an analysis is undertaken (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube if you wish to exercise this right.
6. Web fonts
6.1 Google Fonts Our website uses web fonts supplied by Google Inc. (“Google”) for the uniform presentation of fonts. These web fonts are embedded by a server call, usually a Google server in the USA. Information on which of our web pages you have visited is thereby transmitted to the server. Google also stores the browser IP address of the devices of visitors to these web pages.
7. Data protection for applications and application procedures
7.1 When an application is submitted, the personal data you provide is collected and processed by us for the purpose of processing the applications. This processing may also be carried out electronically. This is particularly the case if you send us application documents electronically, for example by e-mail or via a form on the website.
7.2 The legal basis for this use is Art. 6(1)(1)(a) and (b) GDPR.
7.3 If an employment contract is concluded with you, we will store the transmitted data for the purpose of processing the employment relationship in compliance with the statutory provisions. If an employment contract is not concluded, the application documents will be deleted after the two-month period for assertion of any claims under the General Equal Treatment Act (AGG), provided that there are no other legitimate interests of the data controller to the contrary. Other legitimate interest in this sense would be, for example, a burden of proof in legal proceedings under the AGG.
This website uses Google Maps by Google Inc. In using this website, you agree to the capture, processing and use of data collected by Google Inc., their representatives as well as third parties. The terms and conditions for the use of Google Maps can be found at “Nutzungsbedingungen von Google Maps”.
9. Business-Related Analyses by LeadingReports GmbH
We process our customers’ data as part of our contractual services, including the provision of our LeadingReports services (LeadingReports GmbH, Unter den Linden 26, 35410 Hungen, leadingreports.de) for the analysis of business website visitors. The legal basis for processing results from Art. 6 (1) b. GDPR (contractual services) and Art. 6 (1) f. GDPR (business interests), insofar as we use Leading Reports analyses ourselves. LeadingReports analyses are carried out using cookies or local & session storage. By analyzing the data collected and transmitted, we can track the usage behavior of visitors to NORDHS-KOTI Borstfabrik AB -websites. The information refers in particular to the analysis of the various areas of interest on the basis of the use of the respective websites as well as the geographical origin of the visitors and information on these, but only if it concerns business / company data, i.e. no personal data.
The processing of data by LeadingReports GmbH is aimed at the collection of data concerning companies, i.e. not at the processing of personal data. Therefore, the processing of personal data is avoided to the greatest possible extent. Where natural persons are concerned, the following data may be processed: The IP address of the user for direct resolution of company data (automatically collected by request), the language set by the user, the page visited, the page from which the user came (referrer), a pseudonymous user ID (gal-io-cl-uid) to recognize recurring visits; Google’s UTM parameters for possible ad referrals (only stored as “comes from AdWords” or similar), the time of the page visit.
The processed data will not be used for any other purposes than those described here. If IP addresses are recorded, they are anonymised immediately after collection by deleting the last numeric keypad. The servers used for web analysis are operated exclusively on the territory of the Federal Republic of Germany.
The data is processed on the base of an order processing contract pursuant to Art. 28 (3) sentence 1 GDPR. If you do not agree to the processing of your data by LeadingReports GmbH in the future, you can object to the processing by excluding the IP address you use on this website: https://io.leadingreports.de/exclude-ip
10. Newsletter subscription
11. Your Rights
11.1 You have the following rights with regard to our use of your personal data: – Right to information, i.e. you have the right to demand detailed information regarding your stored data. For details, please consult Art. 15 GDPR. – Right to rectification or erasure, i.e. you have the right to demand correction, completion, or deletion of your personal data. For more information please consult Art. 16 and 17 GDPR. – Right to restriction of processing, i.e. limited processing, for example until the accuracy of a claim for correction can be verified, instead of the deletion claim to which you are entitled, if the data is no longer required by us but for certain purposes by you, or if it is not yet clear whether further processing may take place in an individual basis despite an objection to processing (see sub-clause 4), for example due to conflicting interests. For details, please refer to Art. 18 GDPR. – Right to data portability, i.e. the right to be given your personal data in a common format such as a computer file. For details, please consult Art. 20 GDPR.
11.2 You also have the right to file a complaint to a data protection officer (for example the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information, at “www.baden-wuerttemberg.datenschutz.de”) with regard to our processing of your personal data.
11.3 If you have granted consent to the processing of your data, you may revoke this at any time in accordance with Art. 7(3) GDPR. Such a revocation will stop allowing the processing of your personal data starting from the time you have expressed it to us.
11.4 If we base our processing of your personal data on the weighing of interests, you may file an objection to this processing in accordance with Art. 21 GDPR. This is the case if processing is not necessary in particular to fulfil a contract with you, which we present in the following description of functions. When exercising such objection, we request that you present the reasons why we should not process your personal data as we have done. If your objection is justified, we will examine the situation and either stop or adjust data processing or point out to you the reasons why we will continue the processing of your personal data.