Personal data (hereinafter referred to as "data") are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there. This data protection declaration applies to the use of the website at the address vitracom.de. For linked contents of other providers, the data protection declaration deposited on the linked website is authoritative.
In accordance with Art. 4 No. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.
I. Information about us as the responsible party
II. rights of users and data subjects
III. Information on data processing
Vitracom GmbH
Axel Stephan and Ralph Majer
Steinhäuserstr. 9
76135 Karlsruhe (Germany)
Phone: 0721/627679-0
Fax: 0721/627679-0
Email: info@vitracom.de
Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstrasse 45
58097 Hagen (NRW)
Phone: +49 (0)2331/356832-0
Email: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu
With regard to the data processing described in more detail below, users and data subjects have the right to
1. to confirmation as to whether data relating to them is being processed, to information on the data processed, to further information on the data processing and to copies of the data (cf. also Art. 15 DSGVO);
2. correction or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
3. immediate erasure of the data concerning them (cf. also Art. 17 of the GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17(3) of the GDPR, restriction of processing in accordance with Art. 18 of the GDPR;
4. to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
5. to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 DSGVO. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 DSGVO, users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) DSGVO. In particular, an objection to data processing for the purpose of direct advertising is permitted.
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any legal obligations to retain data and no other information is provided below on individual processing procedures.
For technical reasons, in particular to ensure a secure and stable internet presence, data is transmitted by your internet browser to us or to our web space provider (www.hetzner.de). This data is stored in so-called server log files. These so-called server log files include the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which our website is used.
The data collected in this way is temporarily stored, but not together with other data about you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data is deleted again after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.
a) Session cookies / session cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit b) DSGVO, insofar as these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, cookies from partner companies with which we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website.
Please refer to the following information for details on this, in particular the purposes and legal basis of the processing of such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific Internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.
If you contact us via the contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for the processing and answering of your enquiry - without the provision of this data we cannot answer your enquiry or at best only to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.
Your data will be deleted as soon as your enquiry has been finally answered and there are no legal obligations to retain data, e.g. for the subsequent processing of a contract.
We use Google Analytics on our website. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through the certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function enables Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the internet.
Google states that it will not associate your IP address with any other data. Google also provides further information on data protection law at https://www.google.com/intl/de/policies/privacy/partners, including information on how to prevent the use of data.
In addition, Google offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de, along with further information on this. This add-on can be installed with the usual Internet browsers and offers you further control over the data that Google collects when you call up our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Of course, you can also find out whether and which other web analytics services we use in this privacy policy.
We offer you the opportunity to register for our free newsletter via our website.
We use CleverReach, a service of CleverReach® GmbH & Co. Mühlenstraße 43, 26180 Rastede, Germany, hereinafter referred to as "CleverReach".
Through certification in accordance with the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active, CleverReach guarantees that the data protection requirements of the EU are also complied with when processing data in the USA. In addition, CleverReach offers further data protection information at https://www.cleverreach.com/de... you register for our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by CleverReach. In addition, your IP address and the date and time of your registration will be stored. In the course of the further registration process, your consent to the sending of the newsletter is obtained, the content is described in detail and reference is made to this data protection declaration.
The newsletter subsequently sent via CleverReach also contains a so-called tracking pixel, also known as a "web beacon". With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any links contained in the newsletter. In addition to other technical data, such as the data of your IT system and your IP address, the processed data is stored so that we can optimise our newsletter offer and respond to the wishes of our readers. The data is thus used to increase the quality and attractiveness of our newsletter offer.
The legal basis for the dispatch of the newsletter and the analysis is Art. 6 Para. 1 lit. a.) DSGVO.
In accordance with Art. 7 Para. 3 DSGVO, you can revoke your consent to the sending of the newsletter at any time with effect for the future. To do so, you simply need to inform us of your revocation or click on the unsubscribe link contained in each newsletter.
In our website, we use the advertising component Google AdWords and the so-called conversion tracking. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through the certification according to the EU-US Privacy Shield ("EU-US Privacy Shield") https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
We use conversion tracking for the targeted advertising of our offer. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you click on an ad placed by Google, the conversion tracking we use saves a cookie on your terminal device. These so-called conversion cookies lose their validity after 30 days and do not serve to identify you personally.
If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate the fact that you have clicked on one of our ads placed with Google and that you have subsequently been redirected to our website.
Google uses the information collected in this way to create statistics for us about visits to our website. In addition, this provides us with information about the number of users who clicked on our ad(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.
You can also prevent or restrict the installation of cookies using the appropriate settings in your internet browser. At the same time, you can delete cookies already stored at any time. However, the steps and measures required for this depend on your specific Internet browser used. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers the following website
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
https://www.google.de/policies/privacy/
Google also offers further information on this topic and in particular on the possibilities of preventing the use of data.
We offer you the opportunity to apply to us via our website. In the case of these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.
The legal basis for this processing is § 26 para. 1 p. 1 BDSG in conjunction with. Art. 88 para. 1 DSGVO.
If an employment contract is concluded after the application process, we will store the data you provided during the application in your personnel file for the purpose of the usual organisational and administrative process - of course in compliance with the more extensive legal obligations.
The legal basis for this processing is also § 26 para. 1 p. 1 BDSG in conjunction with. Art. 88 para. 1 DSGVO.
If an application is rejected, we automatically delete the data provided to us two months after notification of the rejection. However, the deletion does not take place if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the obligation to provide evidence according to the AGG.
In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in the legal defence or enforcement.
If you expressly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO by making a declaration to us with effect for the future.
We use Pipedrive as our CRM tool to process and store contact data.
When contacting us (via contact form or email), the user's details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. In order to be able to process and answer your request and messages as quickly as possible, we have connected our contact form with our customer relationship management tool ("CRM tool") Pipedrive. The data transmitted when filling out the form is transferred to Pipedrive and stored there on Pipedrive servers.
We use the CRM system Pipedrive of the provider Pipedrive OÜ on the basis of our legitimate interests (efficient and fast processing of user enquiries, existing customer management, new customer business), a private limited company established under the laws of the Republic of Estonia, with the address Paldiski mnt 80, Tallinn, 10617, Estonia, registered in the Estonian Commercial Register under the code 11958539, and a subsidiary of Pipedrive US. Pipedrive's privacy policy is available here: https://www.pipedrive.com/en/privacy.
We also disclose personal data in response to official and/or court orders. We do not disclose personal data beyond what is stated in this data protection declaration.
Your rights to information, correction, blocking, deletion and objection:
You have the right to obtain information about your personal data stored by us at any time. You also have the right to have your personal data corrected, blocked or, apart from the mandatory data storage for business processing, deleted. Please contact our data protection officer for this purpose. You will find the contact details at the bottom of this page.
To ensure that a blocking of data can be taken into account at any time, this data must be kept in a blocking file for control purposes. You can also request the deletion of data, unless there is a legal archiving obligation. If such an obligation exists, we will block your data upon request. You can make changes or revoke consent by notifying us accordingly with effect for the future.
Users have the following rights regarding their collected data:
Information about the data stored, the purpose of the data processing, the type of categories of personal data that are processed, to whom the data are/were disclosed, if applicable, how long the data are to be stored and what rights the data subjects are entitled to.
You have the right to have inaccurate personal data stored by us relating to you corrected. You also have the right to have us complete an incomplete data record stored by us.
You may request that we erase personal data relating to you if (1) the data has been processed unlawfully, (2) the purpose for which the data was collected has been achieved, (3) you have withdrawn your consent to data processing and there is no other legal basis for the processing, (4) we are subject to a legal obligation to erase the data (5) you are under 16 years of age or (6) you have objected to the processing and there are no overriding legitimate grounds for the processing on our part.
You may request us to restrict processing in the following cases. In these cases, we will place a blocking notice on the data and not process it any further. (1) If you dispute the accuracy of the personal data for the duration of our review. (2) If you have requested deletion and we cannot or may not carry out deletion. (3) If you require the data for the assertion of claims, but we would be obliged to delete the data because the purpose of the processing has been achieved. (4) If you have objected to the processing and a final decision has not yet been made.
Pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
Pursuant to Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future.
If you have given us your consent to the processing of personal data, you can revoke this consent at any time. Please address your revocation to the above-mentioned data or by e-mail to: datenschutz@gdi-mbh.eu.
Insofar as your personal data are processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation.
If you wish to exercise your right of withdrawal or objection, contact us here: https://vitracom.de/en/contact/
In accordance with Art. 77 DSGVO, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our office / company headquarters for this purpose.
If you have any questions about data protection, please write us an e-mail or contact our data protection officer directly:
Mr. Dipl. Inform. Olaf Tenti
GDI - Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstr. 45
58095 Hagen
Email: datenschutz(at)gdi-mbh.eu
Tel.: + 49 (0) 2331 / 35 68 32 - 0
Fax: + 49 (0) 2331 / 35 68 32 - 1
You have the right to lodge a data protection complaint with the supervisory authorities. The supervisory authority responsible for us is the State Commissioner for Data Protection of North Rhine-Westphalia. The complaint can be lodged with any supervisory authority, irrespective of the jurisdiction.
We reserve the right to amend this data protection declaration from time to time so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.