1) information on the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is VERITAS DATA GmbH, Fasanenweg 27, 64753 Brombachtal, Germany, Tel.: 06151 9503850, Fax: 06151 9503856, e-mail: info@veritas-data.de. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The responsible party has appointed a data protection officer, who can be reached as follows: "Caroline Böhm, c/o VERITAS DATA GmbH, Fasanenweg 27, 64753 Brombachtal, +49 6151 / 950 3850, datenschutz@veritas-data.eu".
1.4 This website uses SSL or TLS encryption for security reasons and for the protection of the transfer of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can see an encrypted connection on the string "https://" and the lock icon in your browser line.
2) Data collection when you visit our website
In the mere informational use of our website, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server LogFiles"). When you visit our website, we collect the following information, which is technically necessary for us to display the website:
- Our visited website
- Date and time at time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address Used (if applicable: in anonymous form)
Processing is carried out in accordance with article 6 (1) lit. F DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server logfiles retrospectively, should give specific indications of illegal use.
(3) cookies
In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data and IP address values, on an individual scale. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 (1) lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
We may cooperate with advertising partners who help us to make our internet offer more interesting for you. For this purpose, when you visit our website, cookies from partner companies are also stored on your hard drive (third-party cookies). If we cooperate with designated advertising partners, you will be informed individually and separately about the use of such cookies and the amount of information collected within the following paragraphs.
Please note that you can set your browser to be informed about the setting of cookies and to decide on their acceptance individually or to exclude the acceptance of cookies for certain cases or in general. Each browser is different in the way it manages the cookie settings. This is described in the Help menu of each browser, which tells you how to change your cookie settings. You can find them for the respective browsers under the following links:
Microsoft Edge: https://support.microsoft.com
Firefox: https://support.mozilla.org
Chrome: http://support.google.com
Safari: https://support.apple.com
Opera: http://help.opera.com
Please note that if cookies are not accepted, the functionality of our website may be restricted.
4) Contact
When contacting us (e.g. via contact form or e-mail), personal data will be processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account
Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent necessary in each case if you provide us with this data when opening a customer account. Which data is required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible person. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
6) Data processing for order Processing
6.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period of time within the scope of our legal information obligations pursuant to Art. 6 (1) lit. c DSGVO by suitable means of communication (e.g. by mail or e-mail). Your contact data will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
6.2 Use of payment service providers (payment services)
– PayPal
In case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Purchase on account" or "instalment payment" via PayPal, we will pass your payment data to PayPal (Europe) S.A.R.L. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), next. The transfer shall be made in accordance with article 6 (1) lit. (b) DSGVO and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "instalment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information can contain probability values (score values). As far as score values flow into the result of the creditworthiness information, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. Please refer to PayPal's privacy policy for further information on data protection, including the credit bureaus used: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may at any time object to this processing of your data by a message to PayPal. However, PayPal may still be entitled to process your personal data, if this is necessary for the contractual payment processing.
7) Page functionalities
7.1 - Microsoft Teams
We use the service "Microsoft Teams " of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter "Microsoft Teams") to conduct online meetings, video conferences and/or webinars.
In the case of the use of Microsoft Teams, different data is processed. The scope of the processed data depends on the data you provide before or during participation in an online meeting, video conference or webinar. In the context of using Microsoft Teams, data of the communication participants is processed and stored on Microsoft Teams servers. This data may include, in particular, your login data (name, email address, phone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). Furthermore, visual and auditory contributions of the participants as well as voice inputs in chats can be processed.
When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) a DSGVO. Consent given can be revoked at any time with effect for the future.
Otherwise, the legal basis for data processing when conducting online meetings, videoconferences or webinars is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in the effective conduct of the online meeting, webinar or videoconference. For more information on data usage by Microsoft Teams, please see the Microsoft Teams privacy policy at. https://privacy.microsoft.com
7.2 Shopvote graphics
For the display of our ShopVote seal and the possible collected and/or aggregated evaluations, we have included ShopVote graphics on this website.
This serves to protect our legitimate interests in an optimal marketing of our offer according to Art. 6 para. 1 p. 1 lit. f DSGVO, which prevail in the context of a balancing of interests. The ShopVote graphics and the services advertised with them are an offer of Blickreif GmbH, Schulstraße 46, 80634 Munich.
When calling the ShopVote graphics, the Web server automatically stores a so-called server logfile, which e.g. Contains your IP address, the date and time of the call, the amount of data transferred and the source of the call (Access data) and documents the retrieval. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit. Other personal data are not collected or stored by the ShopVote graphics.
7.3 Applications for job advertisements by e-mail
On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us with all personal data required for a well-founded and informed assessment and selection together with their application by e-mail.
The information required includes general personal information (name, address, telephone or electronic contact) and specific evidence of the qualifications required for the job. If necessary, health-related information may also be required which, in the interest of social protection, must be given special consideration in the applicant's person under labour and social law.
The components that an application must contain in order to be considered and the form in which these components must be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. In the event of queries arising in the course of processing the application, we will either use the e-mail address provided by the applicant with his/her application or a telephone number provided.
The legal basis for this processing, including contacting us for queries, is generally Art. 6 (1) lit. b DSGVO (for processing in Germany in conjunction with Section 26 (1) BDSG), in terms of which going through the application process is considered to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application procedure, processing will take place in accordance with Art. 9 para. 2 letter b. DSGVO, so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this respect.
The processing of special categories of data may also be based cumulatively or alternatively on Art. 9 para. 1 lit. h DSGVO if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, for health or social care or for the administration of health or social care systems and services.
If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws his application prematurely, his data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months after a corresponding notification. This period shall be determined on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our duty to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 Para. 1 lit. b DSGVO (for processing in Germany in conjunction with Section 26 Para. 1 BDSG) for the purposes of implementing the employment relationship.
7.4 Google reCAPTCHA
On this website we use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining individual ownership on the Internet and the prevention of abuse and spam.
For the visual design of the captcha window, Google uses "Google Fonts", i.e. fonts loaded from the Internet by Google. There is no processing of information other than that mentioned above, which is already transmitted to Google via the functionality of ReCaptcha.
The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.
For more information on Google reCAPTCHA and Google's privacy policy, please see: https://www.google.com
For the transfer of data from the EU to the USA, Google invokes so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
8) Rights of the data subject
8.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:
- Right to information according to Art. 15 DSGVO;
- Right to rectification pursuant to Art. 16 DSGVO;
- Right to erasure according to Art. 17 DSGVO;
- Right to restriction of processing pursuant to Art. 18 DSGVO;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability according to Art. 20 DSGVO;
- Right to revoke consent given in accordance with Art. 7 (3) DSGVO;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
8.2 Right to Object
If we process your personal data in the context of a balancing of interests based on our predominantly legitimate interest, you have the right at any time, for reasons arising from your particular situation, to violate this processing Appeal with effect for the future.
If you make use of your right to object, we will terminate the processing of the data concerned. However, further processing is reserved if we can prove compelling reasons for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if the processing of the assertion, exercise or defence of Legal claims.
If your personal data are processed by us in order to run direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. You can exercise the opposition as described above.
If you make use of your right to object, we will terminate the processing of the data concerned for direct advertising purposes.
9) Duration of the storage of personal data
The duration of the storage of personal data is measured according to the respective legal basis, the purpose of processing and - if relevant - additionally according to the respective legal retention period (e.g. commercial and tax retention periods).
If personal data are processed on the basis of an express consent pursuant to Art. 6 para. 1 lit. a DSGVO, these data are stored until the data subject revokes his consent.
If there are legal storage periods for data which are processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b DSGVO, these data will be routinely deleted after expiry of the storage periods if they are no longer necessary for the fulfilment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, these data are stored until the data subject exercises his right of objection according to Art. 21 para. 1 DSGVO, unless we can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims.
If personal data are processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, these data are stored until the data subject exercises his right of objection pursuant to Art. 21 para. 2 DSGVO.
Furthermore, unless otherwise indicated in the other information contained in this statement on specific processing situations, personal data stored shall be erased when they are no longer necessary for the purposes for which they were collected or otherwise processed.
