Privacy policy

Language: This is a convenience translation of our German Datenschutzerklärung. The German version is the legally binding one; in the event of any discrepancy, the German text prevails. References to statutes are references to German and European law.

Introduction and general information

Thank you for your interest in our website. Protecting your personal data matters a great deal to us. Below you will find information on how we handle the data collected through your use of our website. Your data is processed in accordance with the statutory data protection rules.

Controller within the meaning of the GDPR

notivia GmbH
Am Hohengeren 2
70188 Stuttgart, Germany
Email: service@notivia.de

Definitions

Our privacy policy is meant to be simple and understandable for everyone. As a rule, this privacy policy uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are set out in Art. 4 GDPR.

Access to and storage of information on terminal equipment

Using our website may involve access to information (e.g. your IP address) or the storage of information (e.g. cookies) on your terminal equipment. Such access or storage may be accompanied by further processing of personal data within the meaning of the GDPR.

Where such access to information or such storage of information is strictly necessary for the technically error-free provision of our services, it takes place on the basis of Section 25(1) sentence 1 and (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).

Where such an operation serves other purposes (e.g. tailoring our website to user needs), it takes place pursuant to Section 25(1) TDDDG only with your consent under Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future. In these cases, the requirements of the GDPR and of the Federal Data Protection Act (BDSG) additionally apply to the processing of your personal data.

Further information on the processing of your personal data and on the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Web hosting

This website is hosted on our own servers located in Germany. Personal data collected in the course of using this website is stored on those servers. This primarily concerns the following data: IP addresses, contact enquiries, meta and communication data, website access data and other data generated via a website.

We collect the data listed above in order to ensure a smooth connection to the website and the technically error-free provision of our services. Processing this data is strictly necessary in order to make the website available to you. The legal basis for processing this data is our legitimate interest in the correct presentation and functioning of our website pursuant to Art. 6(1)(f) GDPR.

Server log files

When you access our website, it is technically necessary for data to be transmitted from your internet browser to our web server. The following data is recorded during an active connection for the purpose of communication between your browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (HTTP status)
  • Browser and operating system used
  • Full IP address of the requesting computer
  • Volume of data transferred

We collect this data in order to ensure a smooth connection to the website and the technically error-free provision of our services. The log files also serve to evaluate system security and stability and for administrative purposes. The legal basis for processing this data is our legitimate interest in the protection and functioning of our website pursuant to Art. 6(1)(f) GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored temporarily on the web server (for approximately 30 days) and then deleted.

Cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your terminal equipment either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your browser deletes them automatically.

Cookies serve a variety of functions. Many cookies are technically necessary, because certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to analyse user behaviour or to display advertising.

Data processing through the use of strictly necessary cookies takes place on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the technically error-free provision of our services. Details of the specific processing purposes and legitimate interests can be found in the descriptions of the individual processing operations in this privacy policy.

Personal data is processed through the use of other cookies only on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future. Where cookies are used for analysis and optimisation purposes, we will inform you separately within this privacy policy and obtain your consent pursuant to Art. 6(1)(a) GDPR.

You can configure your browser so that

  • you are informed when cookies are set,
  • cookies are allowed only on a case-by-case basis,
  • the acceptance of cookies is refused for certain cases or in general,
  • cookies are deleted automatically when the browser is closed.

Cookie settings for the respective browsers can be managed via the following links:

  • Google Chrome
  • Mozilla Firefox
  • Microsoft Edge
  • Safari
  • Opera

You can also manage the cookies of many companies and functions used for advertising individually. To do so, use the relevant user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called „do not track“ function. When this function is enabled, your browser signals to advertising networks, websites and applications that you do not wish to be „tracked“ (e.g. for behaviour-based advertising). Information and instructions on how to configure this function are available from your browser provider via the following links:

  • Google Chrome
  • Mozilla Firefox
  • Microsoft Edge
  • Safari
  • Opera

In addition, you can block the loading of certain scripts by default. The browser add-on „NoScript“ allows JavaScript, Java and other plug-ins to run only on trusted domains of your choice. Information and instructions on this function are available from the respective browser provider (for Mozilla Firefox, for example, at https://addons.mozilla.org/en-US/firefox/addon/noscript/).

Please note that disabling cookies may limit the functionality of our website.

Changing your cookie settings

You may withdraw your consent to the use of cookies or adjust your cookie settings at any time. To do so, open the cookie settings again via the corresponding link on our website.

Contact form, email and telephone

If you contact us via our contact form, by email or by telephone, the data you provide (e.g. your name, email address and telephone number as well as the content of your enquiry) is stored by us in order to handle the enquiry and in case of follow-up questions. Providing a valid email address and your name is necessary in order to process the enquiry; providing a telephone number is voluntary.

This data will under no circumstances be passed on to third parties without your consent.

The legal basis for processing this data is our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). Where your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR additionally applies as the legal basis.

Your data will be deleted once your enquiry has been dealt with conclusively, unless statutory retention obligations prevent this. You may object at any time to the processing of your personal data that is based on Art. 6(1)(f) GDPR.

Registration of a customer account

You have the option of setting up a customer account in our online shop in order to purchase digital products. When you register and set up your customer account, we collect and use the following personal data:

  • First and last name and form of address
  • Email address
  • Postal address
  • Password
  • (For business customers, additionally the company name)
  • Date and time of registration

You may also provide further information voluntarily (e.g. a VAT identification number in the case of business customers). Mandatory information required for the purposes of registration is marked with an asterisk as a required field in the input form.

The legal basis for processing data in order to provide the customer account and to process orders is Art. 6(1)(b) GDPR (performance of a contract).

The legal basis for processing voluntary information is your consent pursuant to Art. 6(1)(a) GDPR. Your data will be deleted as soon as the user account on our website is deleted and no statutory retention obligations remain. You can arrange for changes to and/or the deletion of your customer account, including the data you have provided, at any time by notifying the controller named above.

Subscription management

If you obtain service subscriptions through our offering, you have the option of managing those subscriptions yourself in your customer account. The following personal data is processed in the course of this subscription management:

  • First and last name
  • Email address
  • Customer number
  • Payment information

The legal basis for processing the personal data required for subscription management is Art. 6(1)(b) GDPR. The legal basis for processing voluntary information is your consent pursuant to Art. 6(1)(a) GDPR.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; „Google“), in order to analyse the use of the website.

Google Analytics 4 uses cookies. The information collected by these cookies about your use of the website (including the IP address of your device, truncated in its final digits, see below) is generally transmitted to and stored on a Google server. Information may also be transmitted to servers of Google LLC in the United States, where it is processed further.

When Google Analytics 4 is used, the IP address transmitted by your device is by default and automatically collected and processed only in truncated form, so that the information collected cannot be related directly to an individual. This automatic anonymisation is carried out by Google truncating the IP address transmitted by your device within member states of the European Union or in other states party to the Agreement on the European Economic Area.

On our behalf, Google uses this and other information to analyse your use of the website, to compile reports on your website activity and usage behaviour, and to provide us with further services connected with your use of the website and of the internet. The truncated IP address transmitted by your device in the course of Google Analytics 4 is not combined with other Google data. The data collected in the course of using Google Analytics 4 is retained for 2 months and then deleted.

By means of a special function, the so-called „demographic characteristics“, Google Analytics 4 additionally allows statistics to be compiled on the age, gender and interests of website users, based on an analysis of interest-based advertising and incorporating third-party data. This makes it possible to define and distinguish groups of website users for the purpose of targeting marketing measures at specific audiences. The data collected via the „demographic characteristics“ cannot be attributed to any specific person, and therefore not to you either. This demographic data is retained for 2 months and then deleted.

All of the processing described above, in particular the setting of Google Analytics cookies in order to store and read information on the device you are using, takes place only if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 is not used during your visit.

In connection with this website, the „user IDs“ function is also used as an extension of Google Analytics 4. By assigning individual user IDs, we can obtain cross-device reports from Google Analytics (so-called „cross-device tracking“). This means that if you have set up a personal account when using this website and log in with your credentials on different devices – subject to your consent (Art. 6(1)(a) GDPR) – Google Analytics 4 can analyse your usage behaviour across devices. Among other things, the data collected in this way shows on which device you first clicked on an advertisement and on which device the corresponding conversion took place.

We have concluded a data processing agreement with Google for the use of Google Analytics 4, under which Google is obliged to protect the data of our website users and not to pass it on to third parties.

Because Google may transfer personal data to affiliated companies and sub-processors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection afforded by the GDPR. For the United States, an adequacy decision of the EU Commission under Art. 45(1) GDPR exists for companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and thereby undertakes to comply with adequate data protection standards, which you can verify at the following link: https://www.dataprivacyframework.gov/s/participant-search.

For potential transfers to other third countries outside the EU and the EEA for which no adequacy decision of the EU Commission exists, we have agreed so-called standard data protection clauses with Google pursuant to Art. 46(2)(c) GDPR. These oblige Google to process the data in line with the European level of data protection.

Further legal information on Google Analytics 4 (including a copy of the standard contractual clauses mentioned) is available at: https://policies.google.com/privacy.

Details of the processing triggered by Google Analytics 4 and of how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites.

Google Tag Manager

Our website uses Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“). This service allows website tags to be managed through a single interface. Google Tag Manager only implements tags. This means that no cookies are set and only the user’s IP address is transmitted to Google in order to load the service. Google Tag Manager triggers other tags, which may in turn collect data. However, Google Tag Manager does not access that data. If tracking has been deactivated at domain or cookie level, that deactivation remains in place for all tracking tags implemented with Google Tag Manager.

We use Google Tag Manager on the basis of your consent (Art. 6(1)(a) GDPR). Because it is possible for Google to transfer personal data to affiliated companies and sub-processors in countries outside the EU and the EEA, further safeguards are required in order to ensure the level of data protection required by the GDPR. For the United States, an adequacy decision of the EU Commission under Art. 45(1) GDPR exists for companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and thereby undertakes to comply with adequate data protection standards (see the list of participants).

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have agreed standard data protection clauses with Google pursuant to Art. 46(2)(c) GDPR. These oblige Google to process the data in line with the European level of data protection.

Google Ads

On our website we use Google Ads, a service provided by Google Ireland Limited (Google Building Gordon House, Barrow St, Dublin 4, Ireland; „Google“). We use Google Ads for marketing and optimisation purposes, in particular in order to present you with advertisements that are relevant and of interest to you.

Where you have given us your consent to this pursuant to Art. 6(1) sentence 1(a) GDPR, Google Ads enables us to draw attention to our offerings on external websites. This allows us to see how successful individual advertising measures are.

The advertising material is delivered via so-called ad servers operated by Google. For this purpose we use so-called ad server cookies, which allow certain parameters for measuring success (such as the display of advertisements or user clicks) to be measured.

If you reach our website via a Google advertisement, Google Ads stores a cookie on your computer. These cookies generally expire after 30 days and are not intended to identify you personally. The analysis values generally stored in connection with this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (an indication that the user no longer wishes to be addressed). These cookies allow Google to recognise your web browser.

If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer (that is, we) can see that the user clicked on the advertisement and was forwarded to our site. A different cookie is assigned to each Ads customer. Cookies therefore cannot be tracked across the websites of different Ads customers. We ourselves neither collect nor process personal data in the course of the advertising measures described. We receive only statistical analyses from Google. These analyses allow us to see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify you on the basis of this information.

Because of the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence over the scope or the further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can attribute the visit to your user account. Even if you are not registered with Google or not logged in, it is possible for Google to obtain and store your IP address.

Because Google may transfer personal data to affiliated companies and sub-processors in countries outside the EU and the EEA, additional safeguards are required in order to ensure the European level of data protection. For the United States, an adequacy decision of the EU Commission under Art. 45(1) GDPR exists for companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under this framework and thereby undertakes to comply with adequate data protection standards (see the list of participants).

For transfers to other third countries outside the EU and the EEA without an adequacy decision, we have agreed standard data protection clauses with Google pursuant to Art. 46(2)(c) GDPR. These oblige the recipient of the data to process the information in line with the European level of data protection.

Further information on Google’s use of data, on settings and objection options, and on data protection is available on the following Google web pages:

  • Google privacy policy: https://policies.google.com/privacy?hl=en&gl=en
  • Google advertising statistics: https://services.google.com/sitestats/en.html

You can prevent the installation of cookies for Google Ads by deleting cookies that are already present and disabling the storage of new cookies in your browser settings. Please note that in this case you may not be able to use all the functions of our website in full. You can also prevent the storage of cookies by configuring your browser to block cookies from the domain “www.googleadservices.com”: https://www.google.com/settings/ads (please note: this setting is deleted if you delete your cookies). You can also opt out of interest-based advertising via the page http://optout.aboutads.info (this setting, too, is reset if you delete your cookies).

Google Fonts

On our website we use Google Fonts, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“). Google Fonts allows us to embed external typefaces. For this purpose, the required typefaces are loaded from our web server into your browser cache when you access our website. This is necessary so that your browser can also display our text in a visually improved form. If your browser does not support this function, a standard typeface from your computer is used for display.

The typefaces are hosted locally by us and are not loaded from an external provider (Google). This does, however, require your IP address to be processed, because your browser transmits it to our server in order to retrieve the typeface.

We use Google Fonts for optimisation purposes, in particular in order to make the use of our website more visually appealing and more user-friendly for you. In this respect, the legal basis for the data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Affiliate programmes

On our website we use affiliate marketing measures. Affiliate marketing is an internet-based form of distribution that enables commercial website operators, so-called merchants or advertisers, to display advertising (often remunerated through click or sale commissions) on third-party websites – that is, on the websites of distribution partners, the so-called affiliates or publishers. Via the respective affiliate network, the merchant provides advertising material (e.g. banners or other suitable advertising material), which an affiliate then embeds on its own websites or promotes through other channels (e.g. keyword advertising or email marketing).

We embed links from the following affiliate platforms and providers on our website:

  • Affise
  • Rakuten
  • Belboon
  • Tradedoubler
  • Adcell
  • Webgains
  • Appwiki
  • Impact
  • FinanceAds
  • CJ
  • Accountable
  • Proton
  • Kape
  • Partnerize
  • TradeTracker

In affiliate marketing, affiliate networks act as the interface between merchants and distribution partners (affiliates).

As part of their services, affiliate networks set tracking cookies on the terminal equipment of users who visit or use the websites or other online offerings of the affiliates, in order to document transactions (e.g. leads or sales). These tracking cookies store information about when particular advertising material was clicked from a device. The cookies also contain an individual identifier (a sequence of digits) which cannot be traced back to the individual user and which documents the advertiser’s partner programme, the publisher and the time of the user’s action (click or view). In doing so, the networks also collect information about the device from which a transaction is carried out (e.g. operating system, browser). The purpose of this storage is to settle commissions between the merchant and the affiliate, which is handled via the affiliate network.

The services named above (including cookies and similar technologies) are used only on the basis of your consent pursuant to Section 25(1) TDDDG. Any subsequent processing of your personal data then takes place on the basis of your consent pursuant to Art. 6(1) sentence 1(a) GDPR.

Through the embedding of the links named above on our website, data is transferred to the respective providers and processed there for as long as is necessary to achieve the stated purposes.

The affiliate marketing platforms and providers are embedded on our website merely as a link to the corresponding websites. Only when you click on the relevant link is user information transferred to the respective provider. For information on how your personal data is handled when you use these external websites, please refer to the privacy policies of the providers you have chosen.

Use of payment service providers

On our website we offer you the option of completing your payment using the following payment methods: PayPal, credit card (Visa, Mastercard, Maestro, American Express), SEPA direct debit, Google Pay and Apple Pay. In all cases, payment is processed by the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg („PayPal“), to whom we pass on the data you provide in the course of the payment process.

Depending on the payment method you have chosen, the data required for processing is transmitted to PayPal and, where applicable, to other payment service providers involved in the transaction (e.g. the credit card clearing institution). This concerns in particular the following data:

  • First and last name
  • Billing address
  • Email address
  • Payment information (e.g. credit card details or bank account details)
  • Invoice amount and transaction number
  • Information about your order

Transmitting this data is necessary in order to verify your identity and process the payment. The legal bases for processing your data in the course of payment processing are Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (our legitimate interest in secure and efficient payment processing).

Without the provision of your personal data, payment cannot be carried out using the chosen payment method. You are free to choose a different payment method if you do not wish your data to be transmitted to the respective payment service provider.

For certain payment methods (e.g. payment by direct debit), PayPal may carry out a credit check in order to establish your ability to pay. For this purpose, PayPal may pass on your data (name, address, where applicable date of birth, and bank account details) to credit agencies. We have no influence over this process and receive only the result (e.g. whether the payment can be carried out, has been declined, or requires review).

Please note that, in data protection terms, PayPal acts as a controller in its own right when processing payments. Further information on data processing by PayPal can be found in PayPal’s privacy policy.

External links

Our online presence contains links to external websites, in particular to social networks, online marketplaces and review and price comparison platforms (e.g. Twitter, Facebook, YouTube, Xing, LinkedIn, eBay, eKomi, idealo). These are embedded on our website merely as external links. If you click on such a text or image link, you are forwarded directly to the page of the respective third-party provider. Only through this forwarding is user data transferred to the respective provider. For information on how your personal data is handled when you use these external websites, please refer to the privacy notices of the third-party providers you use.

Disclosure of data and recipients

As a matter of principle, your personal data is not transmitted to third parties, except in the following cases:

  • where we have expressly informed you of this in the description of the relevant processing operation,
  • where you have given your express consent (Art. 6(1) sentence 1(a) GDPR),
  • where disclosure is necessary in order to assert, exercise or defend legal claims under Art. 6(1) sentence 1(f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
  • where there is a statutory obligation to disclose the data under Art. 6(1) sentence 1(c) GDPR, or
  • where disclosure is necessary under Art. 6(1) sentence 1(b) GDPR in order to perform contractual relationships with you.

In addition, we use external service providers (processors) to deliver our services. We have selected these providers carefully, placed them under contractual obligations (pursuant to Art. 28 GDPR) and review them regularly. They are bound by our instructions and will not use the data for any other purpose. These are, for example, service providers for hosting, for sending emails, or for the maintenance and support of our IT systems. The data is not passed on to any other third parties.

Data security

In accordance with Art. 32 GDPR, and taking into account the state of the art, the cost of implementation, the nature, scope and purposes of the processing as well as the varying likelihood and severity of the risk, we take appropriate technical and organisational measures in order to ensure a level of protection appropriate to the risk.

For security reasons and in order to protect the transmission of confidential content (such as orders or enquiries), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with “https://” and a padlock symbol is displayed.

Retention period for personal data

The period for which personal data is stored is determined by the applicable statutory retention periods (e.g. retention periods under commercial and tax law). Once the relevant periods have expired, the data is deleted as a matter of routine, provided it is no longer required for the performance or formation of a contract and/or we no longer have a legitimate interest in continued storage. Where your data is no longer required for these purposes, or where you have exercised your right of withdrawal or objection, the data is likewise deleted.

Your rights

Below we inform you of the rights that applicable data protection law grants you in relation to us with regard to the processing of your personal data:

  • Right of access (Art. 15 GDPR): You have the right to request information about the personal data of yours that we process. This includes information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period (or the criteria for determining it), the existence of a right to rectification, erasure or restriction of processing or to object to processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data (where it was not collected by us) and the existence of automated decision-making including profiling and – where applicable – meaningful information about the details thereof.
  • Right to rectification (Art. 16 GDPR): You have the right to request without undue delay the rectification of inaccurate personal data, or the completion of incomplete personal data, stored by us.
  • Right to erasure (Art. 17 GDPR): You have the right to request the erasure of the personal data stored by us, unless the processing is necessary for one of the following reasons: for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data where one of the following conditions is met: you contest the accuracy of the data (for a period enabling us to verify its accuracy); the processing is unlawful but you oppose erasure; we no longer need the data but you require it for the establishment, exercise or defence of legal claims; or you have objected to the processing pursuant to Art. 21 GDPR (for as long as it has not yet been established whether our legitimate grounds override yours).
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where this is technically feasible.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, your place of work or our company’s registered office.
  • Right to withdraw consent given (Art. 7(3) GDPR): You have the right to withdraw consent once given to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without undue delay, unless another legal basis applies to processing without consent. Important: the withdrawal of consent does not affect the lawfulness of processing carried out up to the point of withdrawal.

Right to object

Where we process your personal data on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation.

If you exercise your right to object, we will cease the processing of your data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your objection is directed against processing for the purposes of direct marketing, you have a general right to object without stating a particular situation. In that case we will cease the processing of your data concerned immediately.

If you wish to exercise your right of withdrawal or your right to object, an informal notification to us is sufficient (e.g. by email to support@notivia.de).

Statutory obligations

The provision of personal data may be required by law or by contract (e.g. in order to decide on the conclusion of a contract, to perform a contract or to carry out pre-contractual measures). As a matter of principle, you are not obliged to provide us with personal data. However, without this data we may in some circumstances be unable to conclude a contract with you or to carry out certain pre-contractual measures.

Automated decision-making

Automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.

Reservation of the right to make changes

We reserve the right to adapt or update this privacy policy as required, in compliance with the applicable data protection provisions. This allows us to bring it into line with current legal requirements and to reflect changes to our services, for example when new services are introduced. The current version of the privacy policy applies to your visit.

Version of this privacy policy: 2 November 2025

Back