Skip to Content

NORIQA GmbH privacy policy

This data protection declaration informs you transparently about which personal data we process on this website, for what purposes this happens and what rights you have.

1. Controller and data protection contact

NORIQA GmbH
Mörikestr. 9
75447 Sternenfels
Germany

Managing Director: Michael Tron
Phone: +49 (0)155 69436970
E-mail: info@noriqa.de

Michael Tron is your contact for data protection inquiries. A data protection officer has not been appointed as there is currently no legal obligation to appoint one.

2. Hosting and server logs

We operate this website on a server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. There is a contract with Hetzner for order processing in accordance with Art. 28 DSGVO.

When you access the website, the server processes in particular the IP address, date and time, address accessed, amount of data transferred, referrer, browser and operating system. Processing is required for delivery, stability, error analysis, and attack defense.

Legal basis: Art. 6 Paragraph 1 Letter f DSGVO. Our legitimate interest lies in the secure and functional operation of the website. Server logs are generally deleted after 14 days, unless a security-related incident requires longer storage for investigation and legal prosecution.

3. Odoo

Website, contact management and newsletter are provided with a Odoo installation operated by NORIQA itself. Odoo does not automatically receive access to the data stored in our installation. The data is on the server provided by Hetzner.

4. Contact and project enquiries

If you contact us via the form, by email or by telephone, we will process the information you provide. This may include name, contact details, company, project type, project status, budget, timeline and your message.

We use the data to classify and answer your inquiry and to carry out pre-contractual communication. Mandatory fields are required so that we can process the request sensibly; Without this information, processing may not be possible.

Legal basis: Art. 6 Para. 1 lit. b DSGVO for pre-contractual measures and Art. 6 Para. 1 lit. f DSGVO for other business communication. Our legitimate interest lies in the structured processing of serious inquiries.

If no order is concluded, we generally delete pure inquiry data six months after communication has been completed. If an inquiry is required to be retained as a commercial or business letter, a period of six years applies. Data can also be stored until the statutory limitation periods have expired if this is necessary to assert, exercise or defend legal claims.

5. Newsletters

If you subscribe to our newsletter, we process your email address as well as proof of registration and confirmation. Registration takes place using the double opt-in procedure: the subscription only becomes active after confirmation of the email sent to your address.

Legal basis: Art. 6 Paragraph 1 Letter a DSGVO. You can withdraw your consent at any time using the unsubscribe link in the newsletter or by email info@noriqa.de revoked with effect for the future.

We store the shipping data during the subscription. We generally retain proof of consent as proof of legal registration for up to three years after revocation or termination of the subscription. The newsletter is sent via the self-operated Odoo installation.

6. Cookies and consent management

This website uses technically necessary cookies and local browser storage for language, session, time zone and your privacy choices. Optional statistical services and external media will only be activated with your prior consent.

Legal basis: § 25 Para. 2 No. 2 TDDDG and, insofar as personal data is processed, Art. 6 Para. 1 lit. f DSGVO for necessary technologies. We base optional technologies on Section 25 Paragraph 1 TDDDG in conjunction with Article 6 Paragraph 1 Letter a DSGVO.

You can find all names, purposes and terms as well as your selection, which can be changed at any time, at Cookie settings.

7. Google Analytics 4 and Google Tag Manager

If you consent to the “Statistics” category, we use Google Analytics 4 and Google Tag Manager, services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager manages the integrated measurement tags; Google Analytics helps us understand how the website is used and which content and contact channels should be improved.

In particular, pages accessed, referrers, campaign parameters, first landing page, approximate region, device type, browser information, time and duration of use as well as interactions such as section views, scroll depth, contact, newsletter and CTA actions can be processed. We do not transmit any content you enter into contact or newsletter fields to Google. Google Analytics uses pseudonymous identifiers in the cookies _ga and _ga_*. After your consent, we will also save the first source, campaign and landing page in the local browser storage noriqa_attribution_v1, so that related visits can be evaluated. Google Analytics does not log or store IP addresses.

Legal basis: your consent, which can be revoked at any time, in accordance with Section 25 Paragraph 1 TDDDG in conjunction with Article 6 Paragraph 1 Letter a DSGVO. Without consent, the services remain blocked. You can change your selection at any time Cookie settings change; If you revoke your consent, we will remove the accessible analytics cookies.

The retention of user and event-related data in our Google Analytics property is set to 14 months and will not be extended with new activity. Google signals, personalized advertising, and optional data sharing for modeling, technical support, and recommendations are disabled.

Google may also process data on servers outside the European Union and the European Economic Area, particularly in the USA. Google LLC is certified according to the EU-US Data Privacy Framework; In addition, the data processing conditions applicable to Google provide suitable guarantees for third-country transfers.

Meta Pixel, LinkedIn Insight Tag, embedded YouTube videos and Google Maps are currently not used.

8. Social media and external links

There are currently no official social media profiles of NORIQA linked on this website. Future profile links are normal external links: only when you click on such a link will the platform be accessed. The respective platform operator is generally responsible for the processing there.

9. Recipients and transfers to third countries

Within the NORIQA GmbH only people who need it for the stated purposes are granted access. Hetzner processes hosting data as a processor. Additional recipients will only be added if this is required by law, necessary to fulfill the contract or covered by effective consent.

If you consent to Google Analytics, a third-country transfer can take place as described in Section 7. Contact form and newsletter content is not transmitted to Google.

10. Further storage periods

Invoices and accounting records are retained for eight years. Commercial and business letters are stored for six years. Rolling technical backups are generally overwritten after 30 days at the latest. If legal retention requirements apply or if longer storage is necessary for legal defense, the data concerned will be blocked until this period expires and then deleted.

11. Your rights

In accordance with the legal requirements, you have the right to information, correction, deletion, restriction of processing, data portability and objection. You can revoke your consent at any time with effect for the future. To exercise your rights, simply send a message to info@noriqa.de.

You can also complain to a data protection supervisory authority. The following is regularly responsible for the NORIQA GmbH: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, www.baden-wuerttemberg.datenschutz.de.

12. Right to object

If we process data on the basis of Article 6 Paragraph 1 Letter f DSGVO, you can object at any time for reasons arising from your particular situation. We will then no longer process the data concerned unless there are compelling legitimate reasons or reasons for legal action that conflict with this.

13. Security and automated decision-making

The website is provided exclusively encrypted via HTTPS. We do not make solely automated decisions or carry out profiling based on the data collected via the website.

14. Version and updates

As of July 15, 2026. We update this statement if the services used, data processing or legal requirements change.