Privacy Policy

Date: November 2021

1 General information on data processing

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data privacy regulations and this privacy policy.

While you interact with the website, nooa collects and processes data in order to grant access, improve the user experience and interact with users. This privacy policy describes how nooa collects, uses and passes on data collected via the website and what options you have with regard to this data. For users within the European Union, nooa is the person responsible for processing personal data in accordance with the EU General data privacy Regulation ("GDPR").

Address: nooa GmbH, Rheinkaistraße 1, 68159 Mannheim, Germany. You can send questions about this privacy policy by email to privacy@nooa.app .

2 Rights of data subjects of access, rectification, restriction of processing, erasure and objection

You have the right at any time to receive information about your personal data processed by nooa GmbH within the scope of Art. 15 GDPR in a structured, commonly used, machine-readable format in accordance with Art. 20 GDPR. You also have the right to immediate correction, to restrictions on processing in accordance with Art. 18 GDPR, and, under the conditions described in Art. 17 GDPR, to delete your personal data.

These prerequisites in particular provide for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the member state to which nooa GmbH is subject.

Furthermore, you have the right to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f GDPR, in accordance with Art. nooa will stop processing the personal data unless there are compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

To assert your rights, you can use the contact addresses given above.

You also have the right to contact a competent supervisory authority if you have any complaints. The supervisory authority responsible for Baden-Württemberg is:

The State Commissioner for data privacy and Freedom of Information Baden-Württemberg

Postfach 10 29 32 70025 Stuttgart
Königstraße 10, 70173 Stuttgart
Tel.: 0711/61 55 41-0
Fax: 0711/61 55 41-15
E-mail: poststelle@lfdi.bwl.de Internet:
https://www .baden-wuerttemberg.datenschutz.de

A list of all European data privacy authorities can be found here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

3 External links and services

The website may contain links to external websites and functionalities. If you choose to use these external services, depending on how the services work, you may not only disclose your data to these third parties, but also to their users and the wider public. Since these external websites and services are not operated by nooa, nooa is not responsible for the content or practices of these websites or services. The collection, use and disclosure of your data are subject to the privacy policys of the external websites or services and not this privacy policy.

4 Email contact

4.1 Scope and duration of data processing

You can contact us on the website using the email addresses provided. In this case, the personal data transmitted with the email will be saved. The data is used exclusively for processing the conversation and is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

4.2 Purpose and legal basis of data processing

nooa only processes the data to respond to contact requests. If the user has given his / her consent, the legal basis for processing the data is Article 6 (1) (a) GDPR. The legal basis for processing the data that is transmitted in the course of sending an email is Article 6 (1) lit.f GDPR. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

4.3 Processing of data by third parties

nooa uses the customer relationship management (CRM) HubSpot for email correspondence. In doing so, data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Part of the HubSpot terms of use are so-called EU standard data privacy clauses (Art. 46 Para. 2 S. 1 lit. c GDPR). These should be classified as an appropriate guarantee to protect the transfer and processing of personal data outside the EU.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

5 Contact form

5.1 Scope and duration of data processing

There is a contact form on the website that can be used to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to nooa and saved.

When the message is sent, the following data is saved:

Name of the organization, name of the contact person, email address
IP address of the calling computer, date and time of contact

For the processing of the data, reference is made to this privacy policy as part of the sending process.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

5.2 Purpose and legal basis of data processing

nooa only processes the data to respond to contact requests. If consent has been given, the legal basis for processing the data is Article 6 (1) (a) GDPR. If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

5.3 Processing of data by third parties

nooa uses the customer relationship management (CRM) HubSpot. In doing so, data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

6 Form to receiver further information

6.1 Scope and duration of data processing

There is a contact form on the website that can be used to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to nooa and saved.

When the message is sent, the following data is saved:

Name of the organization, name of the contact person, email address
IP address of the calling computer, date and time of contact

For the processing of the data, reference is made to this privacy policy as part of the sending process.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

6.2 Purpose and legal basis of data processing

6.3 Processing of data by third parties

nooa uses the customer relationship management (CRM) HubSpot. In doing so, data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

7 Form to receive an offer

7.1 Scope and duration of data processing

There is a contact form on the website that can be used to contact us electronically. If you take advantage of this option, the data entered in the input mask will be transmitted to nooa and saved.

When the message is sent, the following data is saved:

Name of the organization, name of the contact person, email address
IP address of the calling computer, date and time of contact

For the processing of the data, reference is made to this privacy policy as part of the sending process.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

7.2 Purpose and legal basis of data processing

7.3 Processing of data by third parties

nooa uses the customer relationship management (CRM) HubSpot. In doing so, data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

8 Use of cookies

8.1 Scope and duration of data processing

nooa uses cookies to make the website simple and user-friendly. Some elements of the website require that the calling browser can also be identified after changing pages.

The following data is stored and transmitted in the cookies:

Language settings
Log-in information
Cookie setting
Search queries
Further information that is required for the provision of the website

The user data collected in this manner is pseudonymised by technical measures. It is therefore not possible to assign the data to the user accessing the site. The data is not stored together with other personal data of the users.

We also use cookies on our website, which enable us to analyse the browsing behaviour of our users. As a result, the following data will be transmitted:

User behaviour on our website
Further information used for marketing purposes

You can find out more about analytics cookies in the section 'Plugins and tools' of this privacy policy.

Cookies are stored on your computer and transmitted from there to nooa. You therefore have full control over the use of cookies. By changing the settings of your Internet browser, the transmission of cookies can be deactivated or restricted and cookies that have already been saved can be deleted.

8.2 Purpose and legal basis of data processing

nooa processes the data only to simplify the use of the website with the help of technically necessary cookies and to make it user-friendly. The data collected by technically necessary cookies are not used to create user profiles. The legal basis for the processing of personal data using technically necessary cookies is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.

9 Hosting and CMS

9.1 Scope and duration of data processing

The servers automatically collect and save information in so-called server log files, which the user's browser automatically transmits when visiting the website. The information stored is:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Date and time of the server request
IP address

This data will not be merged with other data sources.

9.2 Purpose and legal basis of data processing

This data is recorded on the basis of Article 6 (1) (f) GDPR. nooa has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this.

9.3 Processing of data by third parties

The website is hosted on servers by the nooa service provider HubSpot: HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

10 Plugins and tools

10.1 HubSpot CMS

10.1.1 Scope and duration of data processing

nooa uses functions of the content management system (CMS) from HubSpot to cover various aspects of online marketing. These include:

Email marketing (newsletters and automated mailings, e.g. to provide downloads),
Reporting (in particular traffic sources, accesses, etc. ...),
Contact management (especially user segmentation & CRM),
Landing pages and
Contact forms.

A cookie is set so that personal data can be processed, especially the

Activity of the user (in particular which pages have been visited and which elements have been clicked on),
Device and browser information (in particular the IP address and the operating system),
Data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and
Data from advertising partners (in particular pseudonymized user IDs).

10.1.2 Purpose and legal basis of data processing

nooa uses HubSpot to optimize its website and marketing activities. The legal basis for processing users' personal data is the consent of the user in accordance with Art. 6 Paragraph 1.

10.1.3 Processing of data by third parties

Data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

10.2 HubSpot Meetings

10.2.1 Scope and duration of data processing

On the website there is a possibility to automatically book appointments for product demonstrations or welcome talks. For this, nooa uses HubSpot Meetings which uses cookies.

As a result, the following personal data will be processed by HubSpot:

Desired date,
First name,
Last name and
Email address.

For the processing of the data, reference is made to this data protection declaration as part of the sending process.

10.2.2 Purpose and legal basis of data processing

nooa only processes the data to respond to contact requests. The legal basis for the processing of the data is Art. 6 Para. 1 lit. f GDPR. If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

10.2.3 Processing of data by third parties

Data can be transferred to the USA on the servers of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA.

Further information on the processing of the data by HubSpot is available here: https://legal.hubspot.com/de/privacy-policy

10.3 Google Workspace

10.3.1 Scope and duration of data processing

On the website there is a possibility to automatically book appointments for product demonstrations or welcome talks. To manage and hold the booked appointments, nooa uses Google Calendar and Google Meet from Google Workspace by Google LLC. As a result, the following personal data are processed by Google:

Desired date,
First name,
Last name and
Email address.

For the processing of the data, reference is made to this data protection declaration as part of the sending process.

10.3.2 Purpose and legal basis of data processing

10.3.3 Processing of data by third parties

Data can be transferred to the USA on the servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA.

Part of the Google terms of use are so-called EU standard data privacy clauses (Art. 46 Para. 2 S. 1 lit. c GDPR). These should be classified as an appropriate guarantee to protect the transfer and processing of personal data outside the EU.

Further information on the processing of the data by Google is available here:https://policies.google.com/privacy?gl=DE&hl=de

10.4 Google Webfonts

10.4.1 Scope and duration of data processing

nooa uses Google Webfonts from Google LLC. The web fonts are transferred to the browser's cache when the page is called up so that they can be used for the visually improved display of various information. If the browser does not support Google Web Fonts or prevents access, the text is displayed in a standard font. When visiting the site, no cookies are stored by the visitor. Data that is transmitted in connection with the page view is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This allows personal data to be saved and evaluated, above all

The activity of the user (in particular which pages have been visited and which elements have been clicked on) and
Device and browser information (in particular the IP address and the operating system).

The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

10.4.2 Purpose and legal basis of data processing

The use of Google Webfonts serves to present website texts in an appealing way. If the user's browser does not support this function, a standard font will be used by their computer for the display. The legal basis for processing the personal data of the users is nooa's legitimate interest in the appealing presentation of their website according to Art. 6 Para. 1 S.1 lit. f GDPR.10.4.3

10.4.3 Processing of data by third parties

Data can be transferred to the USA on the servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA.

Further information on the processing of the data by Google is available here:https://policies.google.com/privacy?gl=DE&hl=de

10.5 Zoom

10.5.1 Scope and duration of data processing

nooa uses Zoom from Google Webfonts from Zoom Video Communications, Inc. Zoom allows us to schedule and conduct webinars and product demos via our website. The following personal data may be processed:

Profile information
Settings
Registration information
Device information
Product and website usage

The data is not associated with data that may be collected or used in connection with the parallel use of Zoom.

10.5.2 Purpose and legal basis of data processing

We use Zoom to plan and conduct product demonstrations and webinars. The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (a) GDPR.

10.45.3 Processing of data by third parties

Data can be transferred to the USA on the servers of Zoom Video Communications, Inc., 55 Almaden Blvd. Suite 600, San Jose, CA 95113 USA.

Further information on the processing of the data by Zoom is available here:https://explore.zoom.us/de/privacy/