Privacy policy
This privacy policy explains which data is collected on this website and how we process and use this data.
I. Name and address of the controller
The operator of the website and controller within the meaning of the EU General Data Protection Regulation ("GDPR") is
Kusch+Co GmbH
Gundringhausen 5
59969 Hallenberg
Germany
Tel: +49 2984 300-0
E-mail: Sichere E-Mail
II. Name and contact details of the data protection officer
If you have any questions about data protection, please contact our data protection officer at the following e-mail address Sichere E-Mail or the telephone number +49 5769 7312.
If you have any questions about this website, please use our contact form.
III. Purpose of data processing
The purpose of data processing on this website is basically the operation of our website to provide information about our company and products.
To achieve this purpose, we process your data depending on the function used on this website:
IV. Provision of the website and creation of log data
1. Scope and purpose of data processing, storage period
When you visit this website, a connection is established with your browser. The following information collected in the process is stored temporarily in system files and recorded automatically:
- IP address of your device
- date and time of access
- name and URL of files accessed
- website from which access was made or from which you were directed to our site
(referrer URL)
- browser used and
- if applicable, the operating system of your device and the name of your provider.
The aforementioned data is processed by us for the purposes of smooth connection establishment and system security. The resulting connection data is not stored for longer than 60 days. Log data is stored to ensure the functionality of the website. If the website is misused, log data whose further storage is required for evidence purposes will be saved until the incident has been clarified.
2. Legal basis for data processing
When you visit this website, we process the aforementioned data on the basis of our legitimate interests. These are in particular our commercial interest in the provision of this website, information security, the enforcement of our own legal claims and compliance with relevant legal provisions. In doing so, we ensure that the data is only processed in such a way that your fundamental rights and freedoms and interests are not disproportionately affected. The relevant legal basis for this is Article 6(1)(1)(f) GDPR.
V. Use of a consent management service
1. Scope and purpose of data processing
We use the consent management service Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot"). When our website is accessed, the system automatically collects data and information from the computer system of the accessing computer. In particular, the following data is collected by or through the use of the service:
- The IP number of the end user in anonymised form.
- Date and time of consent.
- User agent of the end user's browser.
- The URL from which the consent was sent.
- An anonymous, random and encrypted key.
- The consent status of the end user, which serves as proof of consent.
The service is used to manage consents. This serves to comply with legal obligations, according to which data processing requiring consent may only be carried out via the website if users have given their consent. The service is therefore used to store the consents obtained as well as for administration. This also applies in the event that consent is withdrawn.
The data protection provisions of the data processor can be found here:
https://www.cookiebot.com/en/privacy-policy/
2. Legal basis for data processing
Due to the legal obligation to store the aforementioned data, the legal basis is Article 6(1)(1)(c) GDPR.
3. Storage period, objection and removal options
The consent data (consent given and revocation of consent) is stored for 12 months. The data will then be deleted immediately.
The collection and storage of data is required by law for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
VI. Use of cookies
1. Scope and purpose of data processing
Our website uses so-called cookies. Cookies are data records that are stored on your computer and saved by your browser. They serve to make our website more user-friendly, effective and secure.
2. Legal basis for data processing
If cookies that are not necessary for the operation of the website are used, we ask for your consent in advance. The legal basis for data processing is then Article 6(1)(1)(a) GDPR. If the use of cookies is necessary for the functionality of the website, we use cookies on the basis of our legitimate interests and thus on the basis of Article 6(1)(1)(f) GDPR. Our interest in the technically smooth provision of our website and the services offered through it prevails.
3. Storage duration, objection and removal options
The storage period of the cookies is determined by the information in our Cookie Consent Management Tool. As a rule, they are deleted after one year at the latest.
You can prevent the installation of cookies by selecting the appropriate settings in your browser. However, we would like to point out that in this case you will not be able to use all the functions of this website.
In addition, you have the option at any time to revoke your consent to the storage of cookies that are not required for the operation of the website.
VII. Use of Google Analytics
1. Scope and purpose of data processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Among other things, Google Analytics uses "cookies", data records that are stored on your computer and enable your use of the website to be analysed. It cannot be ruled out that the information generated by the cookie about your use of this website will be transmitted to a Google server in the USA and stored there. IP anonymisation is activated on this website; your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. We have concluded an order processing agreement with Google, and Google guarantees that it will comply with European data protection law. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The user data will be deleted after 14 months.
2. Legal basis for data processing
The legal basis for this processing is Article 6(1)(1)(a) GDPR based on your consent.
3. Objection and removal option
You can revoke your consent at any time with effect for the future and also prevent the use of data by Google by downloading and activating the available browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=en-GB
You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=en
4. Disclosure of personal data
By consenting to the use of Google Analytics, you also consent in accordance with Article 49(1)(1)(a) GDPR that your data may be processed in the USA. If you do not want this, you can select cookies. To do this, you must adapt the content of the cookie declaration.
VIII. Newsletter
1. The Joint Controllers provide the newsletter service to persons that have provided their e-mail address (i.e., its customers, subscribers, trade fair participants). The personal data must be given in order to provide the newsletter service. Failure to do so will result in being unable to send the newsletter.
2. The provision of the newsletter service requires the joint processing of the User’s personal data by Nowy Styl and NOWY STYL. FR S.A.S. with registered office in Saint-Marcellin, Nowy Styl UK Limited with registered office in London, Nowy Styl GmbH with registered office in Ebermannsdorf, Nowy Styl Deutschland GmbH with registered office in Steyerberg and Nowy Styl Hungary Zrt. with registered office in Budapest and the personal data is jointly controlled by the Joint Controllers pursuant to Article 26 of the GDPR. Therefore, the Joint Controllers have entered into the Joint Controllers’ Agreement whereby they have jointly determined relevant roles and responsibilities that are required to comply with the Users’ Personal Data protection and processing requirements.
3. The Joint Controllers have agreed that they shall obtain, via the Website in all its language versions, the consents to the sending of a newsletter and the personal data entered into a newsletter sign-up form, and transfer it to the Joint Controller operating on the Joint Controller’s geographical region, and store the personal data in the database managed and protected by Nowy Styl Sp. z o.o., and send a personalised newsletter depending on a choice made by the User when signing in for newsletter from individual countries. The data is transferred on an ongoing basis from the date of the consent to the sending of a newsletter and the User’s provision of his/her personal data in a newsletter sign-up form throughout the term of the newsletter service or until the date on which the User revokes his/her consent to the sending of a newsletter or objects to the processing of his/her personal data.
4. With regard to the activities carried out by the Joint Controllers, the User has the right to access his / her personal data and demand that it be rectified or erased, the right to limit the processing, the right to data portability, the right to object to data processing and the right to lodge a complaint with the supervisory authority.
5. The User has the right to object at any time to the processing of the Personal Data by the Joint Controllers.
6. Pursuant to Article 26 paragraph 1 of the GDPR, the Joint Controllers designate a contract point the User may refer to on every issue relating to the processing of his / her Personal Data. Nowy Styl sp. z o.o. serves as the contract point. Data subjects may e-mail the contact point at rodo@nowystyl.com or send a traditional letter to the following address: ul. Pużaka 49, 38-400 Krosno, Poland. Notwithstanding this provision, the User may enforce his / her rights under Article 26 paragraph 3 of the GDPR against any Joint Controller jointly liable for the Personal Data processing.
7. Your personal data is processed:
7a. in order to send the newsletter - the legal basis for the processing of personal data is the legitimate interest of the Joint Controllers; i.e. promotion of the products offered by Nowy Styl and individual Joint Controllers (Article 6(1)(f) GDPR);
7b. in the case of providing the User with marketing contents within the newsletter - the legal basis for the processing of personal data, including the User profiling, is the Joint Controllers’ legitimate interest (Article 6(1)(f) GDPR) based on the consent to receive marketing information in the form of a newsletter or, in the case of the Joint Controllers’ customers, based on the intention to maintain the current commercial or business relations;
7c. for analytical and statistical purposes - the legal basis for the processing of personal data is the Joint Controllers’ legitimate interest (Article 6(1)(f) GDPR), consisting in conducting analyses of the Users’ activity on the Website in order to improve the functionalities;
7d. in order to establish and seek claims or defend against claims - the legal basis for the processing of personal data is the Joint Controllers’ legitimate interest consisting in establishing and seeking claims or defending against claims (Article 6(1)(f) GDPR).
IX. Intranet
There is an access area to the intranet of Kusch+Co GmbH. When an intranet account is created, only mandatory data is stored: Company, name and e-mail address of the respective user. Storage takes place exclusively in the administration software intended for the intranet. The data is not stored in any other systems or passed on to third parties. They are only used to assign the individual accounts to the respective users.
X. Use of Fonts.com
1. Scope and purpose of data processing
This site uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the fonts.com servers. In this way, fonts.com becomes aware that our website has been accessed via your IP address.
2. Legal basis for data processing
The use of Fonts.com Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(1)(f) GDPR.
XI. Contact form
1. Scope and purpose of data processing
If you write to us via our contact form, your data from the form will be processed to deal with your enquiry.
2. Legal basis for data processing
The legal basis for the transmission to us is the consent given when sending the data from the contact form in accordance with Article 6(1)(1)(a) GDPR.
3. Objection and removal option
You can revoke your consent at any time with effect for the future. If no retention obligation arises from your enquiry (e.g. in the case of an order), the data will be deleted after three years. Your data will be forwarded internally to the responsible contact person to process your request. Your data will not be passed on to third parties without your consent.
XII. Data transfer to third parties
In order to be able to provide this website, we use separate service providers within the framework of service performance who are obliged to maintain confidentiality and data protection. Data will only be passed on to authorities if overriding legal provisions apply. Data will not be transferred to third countries for processing purposes without your consent.
XIII. Your rights as a data subject
You can exercise your right to information at any time to the extent permitted by law according to Article 15 GDPR, to rectification according to Article 16 GDPR and deletion of data according to Article 17 GDPR. Simply contact us using the channels described above. If you wish your data to be deleted but we are still legally obliged to retain it, access to your data will be restricted. The same applies in the event of an objection. You can exercise your right to data portability in accordance with Article 20 GDPR insofar as the technical possibilities are available to the recipient and to us. You also have the option of lodging a complaint with a data protection supervisory authority at any time. The supervisory authority responsible for you depends on your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of your personal data violates the GDPR.
XIV. Status and updating of the privacy policy
In the course of the further development of our website and the implementation of new legal requirements, new technologies or in order to improve our service for you, changes to this data protection declaration may become necessary. We therefore recommend that you read this privacy policy again from time to time.
Status of this privacy policy: 1st October 2024.