Personal Data Protection Policy

PERSONAL DATA PROTECTION POLICY

INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any information that can personally identify you.

1.2 The data controller of this website, in accordance with the General Data Protection Regulation (GDPR), is Noumaca. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string ‘https://’ and the padlock symbol in your browser's address bar.

DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website purely for informational purposes – that is, without registering or providing us with any information – we only collect the data your browser transmits to our server (known as 'server log files'). When you access our website, we collect the following data, which is technically necessary to display the site properly:

  • Website visited

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Source/referrer from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (where applicable: anonymized)

The processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not transmitted or used in any other way. However, we reserve the right to review server logs later if there are concrete indications of unlawful use.

COOKIES

To make your visit to our website more attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some cookies are deleted at the end of the browser session (so-called session cookies). Others remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they may collect and process specific user information, such as browsing and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie.

In some cases, cookies simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for future visits). If personal data is also processed via cookies implemented by us, the processing is carried out in accordance with Article 6(1)(b) GDPR to fulfill the contract or Article 6(1)(f) GDPR to protect our legitimate interest in the best possible functionality and customer-friendly website design.

We may work with advertising partners who help make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your device when you visit our site (third-party cookies). If we work with such partners, you will be informed individually and separately in the sections below about the use of these cookies and the extent of data collected.

Please note that you can configure your browser to notify you about cookie settings and to decide individually whether to accept or reject cookies in certain cases or in general. Each browser has a different way to manage cookie settings. You can find help for each browser at the following links:

Please note that disabling cookies may affect the functionality of this website.

CONTACTING US

Personal data is collected when you contact us (e.g., via contact form or email). The data collected via the contact form is shown in the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry, for establishing contact, and for related technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If the contact is intended to enter into a contract, an additional legal basis for the processing is Article 6(1)(b) GDPR.

Your data will be deleted after the inquiry has been fully processed, provided that it is clear from the circumstances that the issue has been conclus

  1. PROCESSING OF DATA WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

    In accordance with Article 6(1)(b) of the GDPR, personal data will be collected and processed further if you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen in the respective input forms. Your customer account can be deleted at any time by sending a message to the contact address mentioned above for the data controller.

    We store and use the data you provide to fulfill the contract. After the contract has been fulfilled or your customer account has been deleted, your data will be restricted from further use and blocked for the duration of retention periods required under tax and commercial laws, after which it will be deleted, unless you have expressly consented to further use of your data or if we are otherwise legally allowed to continue processing it. We will inform you below about the permitted use of data.

    USE OF YOUR DATA FOR DIRECT MARKETING

    6.1 Email Newsletter Subscription
    If you subscribe to our email newsletter, we will send you regular information about our offers. The only required information for newsletter delivery is your email address. All other information is voluntary and is used to personalize communication.

    We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you a newsletter by email if you have explicitly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a link.

    By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to the newsletter, we store your IP address provided by the Internet Service Provider (ISP), as well as the date and time of registration.

    9) USE OF SOCIAL MEDIA PLUGINS

    9.1 Facebook Plugin Using Shariff Solution
    Additional customs and/or import fees are not included in the price and are the customer’s responsibility.

    Our website uses so-called social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

    To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only via an HTML link. This kind of integration ensures that no direct connection is made with Facebook’s servers when you visit a page of our website that contains such buttons. Only when you click on the button does a new browser window open, displaying the Facebook page where you can interact with the plugins (if necessary, after logging in).

    Facebook Inc., located in the USA, is certified under the EU-U.S. Privacy Shield agreement, which ensures compliance with the level of data protection applicable in the EU.

    The purpose and scope of the data collection and further processing and use of the data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, can be found in Facebook's privacy policy:
    🔗 https://www.facebook.com/policy.php

    9.2 Google+ Plugin Using Shariff Solution
    Our website also uses social plugins (“plugins”) from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

    To enhance data protection, these buttons are not fully embedded as plugins but only as HTML links. This prevents any automatic connection to Google+ servers when visiting a page on our website containing such buttons. Only by clicking the button will a new browser window open to Google+, where you can then interact with the plugins (if logged in).

    Google LLC, located in the USA, is certified under the EU-U.S. Privacy Shield agreement, ensuring compliance with the level of data protection applicable in the EU.

    For more details on data collection, processing, and your privacy options, please consult Google’s privacy policy:
    🔗 https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin via Shariff Solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To enhance data protection when you visit our website, these buttons are not fully integrated as plugins, but only via an HTML link. This integration ensures that no connection to Instagram’s servers is established when you open a page on our website that contains such buttons. Only when you click the button will a new browser window open, directing you to Instagram’s page where you can interact with the plugins (if necessary, after logging in).

Instagram LLC, based in the USA, is certified under the EU-U.S. Privacy Shield agreement, which ensures compliance with EU data protection standards.

The purpose and scope of the data collection and the further processing and use of data by Instagram, as well as your rights and privacy settings, can be found in Instagram’s Data Policy:
🔗 https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 Google DoubleClick

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to serve relevant ads to users, improve campaign performance reports, or prevent users from seeing the same ads repeatedly. Google uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from appearing more than once. The processing is based on our legitimate interest in optimal marketing of our website under Article 6(1)(f) GDPR.

DoubleClick may also use cookie IDs to track conversions related to ad requests. For example, this happens if a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence on the scope and further use of the data collected by Google and inform you to the best of our knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered or logged in to Google, it is possible that Google will obtain and store your IP address.

If you wish to opt out of this tracking process, you can disable conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com or via this page:
🔗 https://www.google.de/settings/ads

Alternatively, visit the Digital Advertising Alliance website at www.aboutads.info to manage cookie preferences.

Please note that disabling cookies may limit the functionality of this website.

Google LLC is certified under the EU-U.S. Privacy Shield agreement, ensuring compliance with the level of data protection applicable in the EU.

For more information on Google DoubleClick’s data practices, please visit:
🔗 https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking

This website uses the online advertising program Google AdWords and, within its framework, the conversion tracking service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google AdWords to promote our products on external websites using advertising materials (known as Google AdWords). We can measure the effectiveness of individual ads and campaigns to assess performance. Our goal is to show you relevant ads and to make our website more interesting to you while ensuring a fair advertising cost structure.

A conversion tracking cookie is set when a user clicks on a Google AdWords ad. This cookie is a small text file stored on the user's device and typically expires after 30 days. If the user visits a certain page within the validity period, Google and the site can recognize that the user clicked an ad and was redirected. Each AdWords customer receives a unique cookie, which prevents cross-tracking between different advertisers. These cookies do not store personally identifiable information. If you wish to opt out, you can disable this cookie in your browser settings.

Google LLC is certified under the EU-U.S. Privacy Shield.

Google Analytics (incl. Universal Analytics)

This website uses Google Analytics, a web analytics service that uses cookies to analyze website usage. Data is generally transmitted to and stored on a Google server in the USA.
We use the extension “_anonymizeIp()”, which ensures that IP addresses are anonymized before processing. This means the IP address is shortened and cannot directly identify the user. The data is processed in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in analyzing user behavior to improve our site and marketing.

Google does not combine the anonymized IP address with other data.
Users can prevent the storage of cookies by adjusting browser settings or by installing the Google Analytics opt-out browser add-on available here:
🔗 https://tools.google.com/dlpage/gaoptout

Google LLC is certified under the EU-U.S. Privacy Shield.

Google’s Universal Analytics allows cross-device tracking by assigning users a unique ID. This ID enables Google to associate sessions and interactions across different devices. Users can disable this feature in their Google Account settings.

More info on Universal Analytics:
🔗 https://support.google.com/analytics/answer/2838718

12) RETARGETING / REMARKETING / TARGETED ADVERTISING

Facebook Custom Audiences via Pixel

This website uses the Facebook Pixel by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, it allows tracking of user behavior after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes, and to optimize future advertising efforts.

The data collected is anonymous to us—meaning we cannot use it to identify individual users. However, Facebook stores and processes the data, allowing it to be linked to your Facebook profile. Facebook may use this data for its own advertising purposes in accordance with its data usage policy:
🔗 https://www.facebook.com/about/privacy/

You may allow Facebook and its partners to display ads both on and off Facebook. A cookie may also be stored on your device for these purposes. This data processing only occurs with your explicit consent under Article 6(1)(a) GDPR.

Consent for Facebook Pixel use may only be given by users over the age of 13. If you are younger, please obtain permission from your legal guardian.

Facebook Inc., based in the United States, is certified under the EU-U.S. Privacy Shield, ensuring compliance with EU data protection standards.

To disable cookie usage, configure your internet browser to prevent cookies from being stored on your device or to delete cookies that have already been stored. However, disabling all cookies may limit some website functions.

Google AdWords Remarketing

We also use Google AdWords Remarketing features to advertise this website in Google search results and on third-party websites. This is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in your device’s browser, which enables interest-based advertising using a pseudonymous cookie ID based on your page visits.

Processing is based on our legitimate interest in optimized marketing as per Article 6(1)(f) GDPR.

Further data processing only takes place if you have consented to Google linking your browsing history across the web and apps with your Google Account and using information from your account to personalize ads. In this case, if you are logged into Google while visiting our site, Google uses your data in combination with Google Analytics data to build and define audiences for remarketing across devices. Google temporarily links this data to create audiences.

You can permanently disable Google Ad settings using a browser plugin:
🔗 https://www.google.com/settings/ads/onweb/

Or visit the Digital Advertising Alliance website:
🔗 www.aboutads.info
You can also configure your browser to notify you before setting cookies and decide on a case-by-case basis whether to allow them. Refusing cookies may limit the functionality of our website.

Google LLC is certified under the EU-U.S. Privacy Shield, ensuring GDPR-compliant data protection.

More information and Google’s advertising privacy policy:
🔗 https://www.google.com/policies/technologies/ads/

13) DATA SUBJECT RIGHTS

13.1 Applicable data protection law grants you the following comprehensive rights regarding the processing of your personal data:

  • Right of access (Article 15 GDPR): You have the right to obtain information about your personal data we process, the purposes of processing, categories of data processed, recipients or categories of recipients, retention period or criteria used to determine it, your rights (rectification, erasure, restriction, objection, complaint), the source of your data (if not collected directly from you), any automated decision-making (including profiling), and data transfer to third countries including safeguards in accordance with Article 46 GDPR.

  • Right to rectification (Article 16 GDPR): You have the right to have inaccurate or incomplete personal data corrected without undue delay.

  • Right to erasure (Article 17 GDPR): You have the right to request deletion of your personal data if the conditions under Article 17(1) GDPR are met. This does not apply if processing is necessary for exercising freedom of expression, compliance with a legal obligation, reasons of public interest, or for the establishment, exercise, or defense of legal claims.

  • Right to restriction of processing (Article 18 GDPR): You may request restriction if:

    • you contest the accuracy of the data,

    • processing is unlawful and you oppose erasure,

    • we no longer need the data but you require it for legal claims,

    • you objected to processing under Article 21(1) while we assess whether our legitimate grounds override yours.

  • Right to notification (Article 19 GDPR): If you have exercised your rights to rectification, erasure, or restriction, we are obliged to notify all recipients to whom your data was disclosed—unless this proves impossible or involves disproportionate effort. You have the right to be informed of those recipients.

  • Right to data portability (Article 20 GDPR): You have the right to receive your data in a structured, commonly used, machine-readable format or request its transmission to another controller where technically feasible.

  • Right to withdraw consent (Article 7(3) GDPR): You have the right to withdraw your consent at any time with future effect. Upon withdrawal, we will delete the relevant data unless further processing can be based on another lawful basis. Withdrawal does not affect processing done before consent was withdrawn.

  • Right to lodge a complaint (Article 77 GDPR): If you believe your data is being processed in violation of the GDPR, you may lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, workplace, or the place of the alleged infringement, without prejudice to other remedies.

13.2 RIGHT TO OBJECT

If we process your personal data based on our overriding legitimate interest within the meaning of a balancing of interests, you have the right to object to this processing at any time with effect for the future, for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the relevant data. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

14) RETENTION PERIOD OF PERSONAL DATA

The retention period of personal data is determined based on the respective statutory retention periods (e.g., those under commercial or tax law). After the expiration of these periods, the corresponding data is routinely deleted, provided that it is no longer necessary for fulfilling or initiating a contract and/or we no longer have a legitimate interest in retaining it.