Data protection
We only process personal data (hereinafter mostly referred to as "data") to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there. This privacy statement applies to the use of the website at vitracom.de. For linked content from other providers, the privacy statement on the linked website is decisive.
According to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or linking, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. In addition, we inform you below about the third-party components we use for optimization purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as responsible parties
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as responsible parties
The responsible provider of this website in terms of data protection law is:
Vitracom GmbH
Ralph Majer
Steinhäuserstr. 9
76135 Karlsruhe
Deutschland
Phone +49 721 509 574 20
E-Mail: info@vitracom.de
The provider’s data protection officer is:
Mr Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstraße 45
58097 Hagen (NRW)
Phone: +49 (0)2331/356832-0
E-Mail: datenschutz@gdi-mbh.eu
Internet: www.gdi-mbh.eu
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
1. to confirmation as to whether data concerning them is being processed, to information about the data being processed, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
2. to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
3. to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary pursuant to Art. 17 Para. 3 GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
4. to receive the data concerning them and provided by them and to transmit this data to other providers/persons responsible (see also Art. 20 GDPR);
5. to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17 (1) and 18 of the GDPR. However, this obligation does not apply if this notification is impossible or involves disproportionate expenditure. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, an objection to data processing for the purposes of direct advertising is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no statutory retention periods that prevent the deletion of the data and no other information is provided below regarding individual processing procedures..
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider (www.hetzner.de) through your Internet browser. These so-called server log files collect, among other things, the type and version of your Internet browser, the operating system, the website from which you accessed our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of each access, and the IP address of the Internet connection from which you access our Internet presence.
The data collected in this way will be stored temporarily, but not together with other data about you.
This storage is carried out on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data will be wholly or partially exempt from deletion until the incident has been finally resolved.
Cookies
a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are saved on your device by the Internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 (1) lit b.) GDPR, provided that these cookies process data for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your Internet browser, these session cookies are deleted.
b) Third-party cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysis or the functionality of our website.
For details, in particular the purposes and legal basis for processing such third-party cookies, please see the information below.
c) Possibility of removal
You can prevent or restrict the installation of cookies by adjusting the settings on your Internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required to do this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation for your Internet browser, or contact the manufacturer or support. However, in the case of so-called Flash cookies, processing cannot be prevented via the browser settings. Instead, you must change the settings on your Flash player. The steps and measures required to do this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation for your Flash player, or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website are fully usable.
Contact requests / contact options
If you contact us via the contact form or email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request - without providing it, we cannot answer your request or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 (1) lit. b) GDPR.
Your data will be deleted if your request has been conclusively answered and there are no statutory retention periods that prevent deletion, such as in the case of any subsequent contract processing.
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through certification under the EU-US Privacy Shield (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active , Google guarantees that EU data protection regulations are also adhered to when processing data in the USA.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or EEA.
The data collected in this way is then used by Google to provide us with an evaluation of visits to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it will not associate your IP address with other data. In addition, Google provides further data protection information for you at https://www.google.com/intl/de/policies/privacy/partners , including information on how to prevent data usage.
In addition, Google offers a so-called deactivation add-on with further information at https://tools.google.com/dlpage/gaoptout?hl=de . This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google records when you visit our website. The add-on tells the Google Analytics JavaScript (ga.js) that information about visits to our website should not be sent to Google Analytics. However, this does not prevent information from being sent to us or to other web analysis services. Of course, you can also find out whether and which other web analysis services we use in this privacy policy.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that we can use to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It is only used to manage and display the tools integrated through it. However, the Google Tag Manager records your IP address, which can also be transferred to Google's parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on his website. If consent has been requested, processing will take place exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.
YouTube
We use YouTube on our website. This is a video portal of YouTube LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
Through certification under the EU-US Privacy Shield (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active , Google and thus also its subsidiary YouTube guarantee that the EU data protection regulations are also adhered to when processing data in the USA.
We use YouTube in connection with the "Extended Data Protection Mode" function to be able to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "Extended Data Protection Mode" function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this “Extended Data Protection”, a connection to the YouTube server in the USA will be established as soon as you access one of our websites on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will record and process at least your IP address, the date and time, and the website you visited. In addition, a connection is established to Google's "DoubleClick" advertising network.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze usage behavior, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by changing the settings in your Internet browser. You can find more information about this above under "Cookies".
Google provides further information about the collection and use of data as well as your rights and protection options in the privacy policy available at https://policies.google.com/privacy .
Google AdWords with conversion tracking
We use the advertising component Google AdWords and the so-called conversion tracking on our website. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Through certification under the EU-US Privacy Shield (“EU-US Privacy Shield”) https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active , Google guarantees that EU data protection regulations are also adhered to when processing data in the USA.
We use conversion tracking to promote our offer in a targeted manner. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad placed by Google, the conversion tracking we use will save a cookie on your device. These so-called conversion cookies expire after 30 days and are not used to personally identify you.
If the cookie is still valid and you visit a specific page on our website, both we and Google can evaluate that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.
Using the information collected in this way, Google compiles statistics for us about visits to our website. We also receive information about the number of users who clicked on our ad(s) and the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.
You can also prevent or restrict the installation of cookies by making the appropriate settings in your Internet browser. At the same time, you can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Furthermore, Google also offers
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this topic and in particular on the options for preventing the use of data.
Online job applications / publication of job advertisements
We offer you the opportunity to apply to us via our website. With these digital applications, your applicant and application data will be collected and processed electronically by us to handle the application process.
The legal basis for this processing is Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Art. 88 Paragraph 1 GDPR.
If an employment contract is concluded after the application process, we will store the data you submitted during the application process in your personnel file for the purposes of the usual organizational and administrative process – of course in compliance with any further legal obligations.
The legal basis for this processing is also Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Art. 88 Paragraph 1 GDPR.
If an application is rejected, we automatically delete the data sent to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the burden of proof under the AGG.
The legal basis in this case is Art. 6 Para. 1 lit. f) GDPR and Section 24 Para. 1 No. 2 BDSG. Our legitimate interest lies in the defense and enforcement of legal rights.
If you expressly consent to your data being stored for a longer period, e.g. for your inclusion in an applicant or prospective customer database, the data will be further processed based on your consent. The legal basis is then Art. 6 Para. 1 lit. a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR by notifying us with effect for the future.
Odoo
We use Odoo as our ERP tool for processing and storing contact data, managing orders and invoicing.
When you contact us (via contact form or email), the user's details are stored for the purpose of processing the contact request and handling it in accordance with Article 6 (1) (b) GDPR. In order to be able to process and answer your inquiries and messages as quickly as possible, we have linked our contact form to our customer relationship management tool ("CRM tool") in Odoo. The data transmitted when filling out the form is transferred to Odoo and stored there on Odoo's servers.
We use the Odoo ERP system from the provider Odoo S.A. on the basis of our legitimate interests (efficient and fast processing of user inquiries, existing customer management, new customer business, business processing) of a limited liability company founded under the law of Belgium with the address: Chaussée de Namur, 40 1367 Grand Rosière, Belgium.
Further data transfers
We also pass on personal data in response to official and/or judicial instructions. Personal data will not be passed on beyond what is stated in this privacy policy.
Your rights to information, correction, blocking, deletion and objection You have the right to receive information about your personal data stored by us at any time. You also have the right to correction, blocking or, apart from the mandatory data storage for business transactions, deletion of your personal data. Please contact our data protection officer for this purpose. You will find the contact details at the bottom.
In order to ensure that data can be blocked at any time, this data must be kept in a blocking file for control purposes. You can also request that the data be deleted, provided there is no legal obligation to archive it. If such an obligation exists, we will block your data on request. You can make changes or revoke your consent by notifying us accordingly, with effect for the future.
Information / rights of data subjects
Users have the following rights with regard to the data we collect from you:
Information (Art. 15 GDPR):
Information about the data stored, the purpose of the data processing, the type of categories of personal data being processed, to whom the data may be passed on, how long the data will be stored and what rights the data subjects are entitled to.
Correction (Art. 16 GDPR):
You have the right to have any inaccurate personal data concerning you stored by us corrected. You also have the right to have us supplement an incomplete data set stored by us.
Deletion (Art. 17 GDPR):
You can request that we delete the personal data concerning you if (1) the data was processed unlawfully, (2) the purpose for which the data was collected has been achieved, (3) you have withdrawn your consent to data processing and there is no other legal basis for the processing, (4) we are subject to a legal obligation to delete the data, (5) you are under 16 years of age or (6) you have objected to the processing and there are no overriding legitimate reasons for the processing on our part.
Restriction of processing (Art. 18 GDPR):
You can request that we restrict processing in the following cases. In these cases, we will mark the data with a blocking notice and not process it any further. (1) If you dispute the accuracy of the personal data for the duration of our review. (2) If you have requested deletion and we cannot or are not allowed to delete it. (3) If you need the data to assert claims, but we would be obliged to delete it because the purpose of the processing has been achieved. (4) If you have objected to the processing and no final decision has yet been made.
Data portability (Art. 20 GDPR):
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party.
Revocation of a consent given:
in accordance with Art. 7 Para. 3 GDPR, to revoke your consent once given to us at any time. This means that we may no longer continue the data processing that was based on this consent in the future.
If you have consented to us processing personal data, you can revoke your consent at any time. Please send your revocation to the details provided above or by email to: datenschutz@gdi-mbh.eu
Right to object to processing (Art. 21 GDPR):
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation. If
you would like to exercise your right of withdrawal or objection, contact us.
Complaint to a supervisory authority:
according to Art. 77 GDPR, you can complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our office / company headquarters.
Questions to the Data Protection Officer
If you have any questions about data protection, please send us an email or contact our data protection officer directly:
Herr Dipl. Inform. Olaf Tenti
GDI - Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstr. 45
58095 Hagen
Email: datenschutz(at)gdi-mbh.eu
Phone: + 49 (0) 2331 / 35 68 32 - 0
Fax: + 49 (0) 2331 / 35 68 32 - 1
Right to complain to data protection authorities
You have the right to lodge a complaint with the supervisory authorities regarding data protection. The supervisory authority responsible for us is the State Commissioner for Data Protection of North Rhine-Westphalia. The complaint can be lodged with any supervisory authority, regardless of jurisdiction.
Changes to our privacy policy
We reserve the right to occasionally adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.