Privacy Policy
The following statement gives you an overview of what personal data NRW.Global Business GmbH (hereinafter NRW.Global Business GmbH, NGB, or “we”) collects during your visit to our sites, for what purpose, and how this data is used.
Personal data processed by NRW.Global Business GmbH because you have provided your personal data in connection with the following options:
Making contact
The website of NRW.Global Business GmbH offers you the opportunity to learn about foreign trade measures, our services, our company and North Rhine-Westphalia as a center of commerce and industry, and to contact us. You have the possibility to contact NRW.Global Business via the contact form, by phone or by e-mail. When contacting us, data such as your name, e-mail address and phone number will be collected. Alternatively, you can contact us via the following email address: nrw@nrwglobalbusiness.com. In this case, we will store the user’s personal data submitted with the email. Without this data being provided, we cannot process your request.
The processing of this data is legally permitted under Article 6(1)(b) of the GDPR as part of pre-contractual measures that are necessary in order to provide the offered service. If the reason for making contact is neither a pre-contractual measure of your own nor a contract that you have already concluded with NRW.Global Business GmbH, we process your personal data on the basis of Art. 6(1)(f) of the GDPR in accordance with our legitimate interest in processing your inquiry in this way. Subsequently, all data will be deleted, provided that it is no longer required for the fulfillment of a contract or pre-contractual measures. In the event that NRW.Global Business GmbH is legally obligated to archive your personal data for purposes such as complying with the retention requirements of the German Commercial Code (HGB) and the German Tax Code (AO), this data will be made unavailable for further processing. After expiration of retention periods, the data will be deleted without objection and in accordance with data protection regulations. This data will not be transferred to a recipient in a third country.
Please refer to the “Rights of the data subject” in the “General data processing principles” section for details regarding your existing rights in relation to us.
Inclusion of other members of the corporate group and representative offices
If the inquiry is related to the activities of subsidiaries or affiliates of, or companies under an agency contract with, NRW.Global Business GmbH, and where this is necessary for processing the inquiry efficiently, we may share your data with the relevant company or representative office. The legal basis for this is Art. 6(1)(f) of the GDPR in conjunction with Recital 48 since we have a legitimate interest in the transfer for internal administrative purposes. In addition, we have entered into EU standard contractual clauses with all of our international offices in accordance with Art. 46(2)(c) of the GDPR.
Exhibitor directory
NRW.Global Business GmbH regularly organizes trade shows and events to provide information about North Rhine-Westphalia as a center of commerce and industry and to give regional companies the opportunity to introduce themselves. Companies participating in trade shows and events, as well as their contact information, are listed in what is known as an exhibitor directory for each show. The personal data being processed may include the name, email address, phone number and photograph (optional) of the company contacts present at the trade show (exhibitors). This data is typically provided to us by the data subjects themselves or by other authorized contacts of the companies during the process of initiating business, and is subsequently entered into the directory. The directory can be accessed by scanning a QR code and provides information on the exhibitors present at the trade show (including company profile, stand number/location, and above-referenced contact details if provided). In this case, we base our processing of personal data on our legitimate interest referred to in Art. 6(1)(f) of the GDPR. We process your data in the context of the exhibitor directory to facilitate communication between companies. It is in our legitimate interest to facilitate business relationships and optimize the exchange of information between contacts. We utilize the Google Slides platform to create the exhibitor directory. During this process, certain personal data of contact people and, if applicable, of employees of the exhibitor companies is transmitted to “Google Slides,” a service provided by Google Ireland Ltd (“Google”), as a processor. It is possible that personal data may be transferred to a third country, in particular to the United States, during this process. To guarantee an appropriate level of data protection, we have entered into standard contractual clauses with Google in accordance with Art. 46(2)(c) of the GDPR.
The personal data collected in the exhibitor directory will be stored permanently and will be available for future contacts and events following the conclusion of the trade show. You have the right to object to this data storage and to request the erasure of your data at any time. Your data will be promptly removed from the directory and will not be further processed after the objection and deletion request.
Please refer to the “Rights of the data subject” in the “General data processing principles” section for your other existing rights.
Personal data that we collect based purely on your visit to our website:
Creation of log files
Every time you access our sites, NRW.Global Business GmbH automatically stores temporary information sent from your browser. The log file documents the browser type/version, operating system used, name and URL of the file accessed, reference URL (the previously visited page), host name of the accessing computer (IP address) and date and time of the server request. This data is not merged with other data sources. It is solely stored and processed for system security and site optimization purposes. The legal basis for this is Art. 6(1)(f) of the GDPR. Our legitimate interest is twofold: to provide you with an optimized online experience and to secure the system. Your personal data will not be transferred to third parties and will be deleted after a period of 28 days.
Please refer to the “Rights of the data subject” in the “General data processing principles” section for your other existing rights.
Use of cookies and other technologies on our website
Cookies
The sites make use of “cookies” in several places. Cookies are small text files that are stored on your computer and saved by your browser. They are used, for example, to determine the use frequency and number of site users and so to improve the user experience and make the site more effective. We use both “session cookies,” which are stored temporarily for the duration of your use of the site and are then automatically deleted, and “persistent cookies.” The content of a persistent cookie is limited to an identifying number used to store information about users who repeatedly visit a site. The purpose of such cookies is to recognize you as a user and, if necessary, to offer you an optimized experience.
Cookies do not cause any damage to your computer and do not contain viruses. You can prevent cookies from being stored on your computer by changing the settings in your browser. If you do not accept the cookies, this may lead to restrictions in the functionality of the sites.
Session Cookies:
The use of session cookies is necessary to provide you with access to the website. This represents a legitimate interest for us. The legal basis for the processing of your personal data using session cookies is Art. 6(1)(f) of the GDPR. You can refuse the use of session cookies, but please note that some features of our site may not be available without cookies. Your personal data is stored only for the duration of your use of the site and will be deleted afterward. Please refer to the “Rights of the data subject” in the “General data processing principles” section for your other existing rights.
Persistent Cookies:
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete cookies at any time using your browser’s security settings. These cookies allow us to track your usage patterns and improve our service to you as a result. They are also used to optimize your browsing experience on our site. A distinction must be made between persistent cookies depending on whether or not they are essential. If they are essential, then they are also based on Art. 6(1)(f) of the GDPR. The use of non-essential cookies is subject to your consent. These cookies are only set if you have actively given your consent. The legal basis for the data processing is Art. 6(1)(a) of the GDPR. You can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal of consent. You can set your internet browser to prevent our cookies from being stored on your device or to delete cookies that have already been stored. If you do not accept cookies, this may lead to restrictions in the functionality of the web pages.
With your consent, we may also integrate cookies from third parties. In this case, the corresponding data packets from third parties will be stored in your browser or transmitted to these third parties. Generally, you can also prevent the use of third-party cookies by making the appropriate settings in your browser. The legal basis for processing your personal data using third-party cookies is Art. 6(1)(a) of the GDPR. Also in this case, you can withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing performed prior to withdrawal based on the consent.
To change your most recent settings, you can access our cookie banner here:
Name | Provider | Information |
|---|---|---|
cc_cookie | rheinisches-revier.com | Saves the user’s cookie consent status for the current domain. Third-country transfer: No Use: Cookie consent status |
GOOGLE ANALYTICS
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user's origin. These data are attributed to the respective user's device.
Additionally, with Google Analytics, we may record your mouse and scroll movements as well as clicks. Furthermore, Google Analytics uses various modeling approaches to complement the collected data and applies machine learning technologies in the data analysis. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide additional services related to website usage and internet use to the website operator. Based on these aggregated reports, no personal reference or device association can be made for us.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is typically transferred to a Google server in the USA and stored there.
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. Consent can be revoked at any time. You can adjust your preferences anytime in the cookie banner settings.
Browser Plugin:
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Google Signals:
We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history, as well as demographic data (visitor data). These data may be used for personalized advertising with the help of Google Signals. If you have a Google account, the visitor data from Google Signals will be linked to your Google account and used for personalized advertising messages. The data is also used to generate anonymized statistics on the user behavior of our users.
We have entered into the EU Standard Contractual Clauses with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
For details, please visit: https://privacy.google.com/businesses/controllerterms/mccs/.
Google is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Any company certified under the DPF commits to adhere to these data protection standards. For more information, please visit the provider's website at the following link: https://www.dataprivacyframework.gov/participant/5780.
Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
Name | Provider | Information |
|---|---|---|
_ga, | rheinisches-revier.com | Collects statistics on the user’s visits to the website. (Google Analytics)
Legal basis: Art. 6(1)(a) GDPR Category: Statistics For the cookie provider’s privacy policy, go to: https://www.nrwglobalbusiness.com/privacy-policy Third-country transfer: Yes Duration: _ga: 2 years
Use: _ga: Unique visitor ID |
GOOGLE MAPS
On our website, we use Google Maps to display various locations (e.g., different companies, universities, construction sites, and more). This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google." When you access the Google Maps component embedded on our website, Google stores a cookie on your device through your internet browser. To provide the service, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA. The legal basis is Art. 6 para. 1 lit. a) GDPR. Data transfer only takes place if you have previously clicked on the notice box to activate the Maps API.
By establishing this connection to Google, Google can determine which website your request was sent from and to which IP address the directions should be transmitted. The use of Google Maps and the information obtained via Google Maps is subject to Google’s Terms of Service https://policies.google.com/terms?gl=US&hl=en and the Google Maps Terms and Conditions https://www.google.com/intl/en_us/help/terms_maps.html. Furthermore, Google offers additional information at https://adssettings.google.com/authenticated and https://policies.google.com/privacy.
General data processing principles (recipients, security, rights of data subjects, controller, DPO)
Recipients of personal data
NRW.Global Business GmbH will only transfer personal data to recipients who need it for the performance of legitimate tasks.
If we use external service providers and they receive personal data for these purposes, we ensure that we select partners who have implemented suitable technical and organizational measures and with whom we sign the requisite agreements so that the data is processed in accordance with applicable data protection regulations and the protection of the data subject’s rights is guaranteed.
We may share personal information with:
- Our affiliates, that is: subsidiaries and representative offices
- Business partners who need the data to perform their functions, such as payment service providers/banks, postal/parcel services, commercial agents, our data protection officers and other external advisors, etc.
- Collection agencies in order to collect receivables
- Authorities and companies as part of updates or to fulfill legal notification obligations (e.g., social security administration, tax authorities, police and public prosecutor’s offices, supervisory authorities, road traffic offices, credit agencies)
- Other third parties who are authorized to receive the transferred data based on consent given by the data subject or by law (e.g., lawyers, liquidators)
Security
NRW.Global Business GmbH cannot guarantee the security of data sent over the internet. Messages sent by email are not encrypted. It is therefore possible that third parties may gain access to this information. For this reason, we recommend sending confidential information by regular mail only.
Controller
The controller, as defined in the General Data Protection Regulation, is:
NRW.Global Business GmbH
Völklinger Str. 4
40219 Düsseldorf
Germany
Data erasure / storage period
Your personal data will be erased as soon as the purpose for which it was stored no longer applies. Data may be stored for a longer period if this is required by European or national legislation in EU regulations, laws, or other regulations to which NRW.Global Business GmbH is subject. The data will also be erased at the end of a retention period stipulated by the above standards unless it is necessary to continue retaining the data for the purpose of concluding or fulfilling a contract.
Rights of the data subject
If your personal data is being processed, you are a data subject under the GDPR and you have the rights described below.
Under Art. 15 of the GDPR, you have the right to request information about your personal data that we process. To make it easier for us to gather the necessary data, we ask that you be as precise as possible in your request for information.
If the information about you is not (or no longer) accurate, you can request a correction pursuant to Art. 16 of the GDPR. If your data is incomplete, you can request that it be completed.
Subject to the conditions set out in Art. 17 of the GDPR, you have the right to request the erasure of your personal data.
Subject to the provisions of Art. 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.
The right to data portability set out in Art. 20 of the GDPR enables you to obtain your personal data that you have provided to us in a structured, commonly used and machine-readable format.
Art. 21 of the GDPR gives you the right to object, at any time, to the processing of data concerning you for reasons relating to your particular situation.
Withdrawal of consent: You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing performed prior to withdrawal based on the consent.
We do not use automated decision-making as described in Art. 22 of the GDPR when processing your personal data.
To exercise your rights, please contact the above controller, who will also be responsible for enforcing your rights. You may also contact the data protection officer directly, especially in the event that your request requires a higher level of confidentiality:
Data protection officer for NRW.Global Business GmbH
c/o migosens GmbH
Wiesenstr. 35
45473 Mülheim an der Ruhr
Germany
dsb-nrwglobalbusiness@dsb24.net
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2–4
40213 Düsseldorf
Germany
Phone: +49 (0) 211/38424-0
poststelle@ldi.nrw.de
Our social media pages
NRW.Global Business maintains professional company profiles on various social networks that are accessible to the public. We use them to, among other things, publish and distribute content, offers, and product recommendations from our company and to help us engage directly with our customers and prospects.
The use of any of these networks initiates a variety of data processing operations. This information is processed even if you do not have a profile on that network. If you visit one of our profiles, your personal data will be processed and possibly stored not only by us, but also by the operator of the applicable network. Examples of personal information include your name, age, email address, photos, and other information that you voluntarily share on the networks, as well as information about your usage behavior and interactions with the content of the company profile. In some circumstances, your IP address may also be collected. You are not required to provide any personal information to visit our company profiles. However, this may be necessary to use certain features of our profiles (such as commenting on posts or contacting us).
NRW.Global Business GmbH has no influence on the data processing operations triggered by the operators in response to your visit to the social networks, which may differ from one network to the next and are not necessarily transparent to us (the setting of cookies, for example). For more information regarding the collection and storage of your personal data, as well as the purpose, nature, and extent of the processing, please refer to the privacy policies of the individual social network operators. You can find them at:
You can find the privacy policy of YouTube, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, at: https://policies.google.com/privacy?hl=en&gl=en
You can find the privacy policy of LinkedIn, operated by LinkedIn Ireland Limited Company, Wilton Place, Dublin 2, Ireland, at: www.linkedin.com/legal/privacy-policy
If you use our social media pages to get in touch with us (e.g., by sending us a private message, by commenting on, sharing, or responding to posts), we will process the data you provide to us solely for the purpose of contacting you and will not combine it with other data we hold. Consequently, the legal basis for collecting the data is Art. 6(1)(b) of the GDPR. If the reason for making contact is neither a pre-contractual measure of your own nor a contract that you have already concluded with NRW.Global Business GmbH, we process your personal data on the basis of Art. 6(1)(f) of the GDPR in accordance with our legitimate interest in processing your inquiry in this way.
Your personal data will be erased as soon as the purpose for which it was stored no longer applies or if you request that we erase it. Data may be stored for a longer period if this is required by European or national legislation in EU regulations, laws, or other regulations to which NRW.Global Business GmbH is subject. The data will also be erased at the end of a retention period stipulated by the above standards unless it is necessary to continue retaining the data for the purpose of concluding or fulfilling a contract. Please refer to the privacy policies of each of the social networks mentioned above for information on how long they store your personal information.