Datenschutz

datenschutzerklärung

 

1. General Notes and Principles of Data Processing

 

We are delighted that you are visiting our website. The protection of your privacy and the safeguarding of your personal data, commonly referred to as personal information, when using our website is important to us.

Personal data, as defined in Art. 4 No. 1 GDPR, includes all information relating to an identified or identifiable natural person. This includes information such as your first and last name, address, telephone number, email address, as well as your IP address.

Data for which no reference to your person can be established, such as through anonymization, are not considered personal data. Processing (e.g., collection, storage, retrieval, querying, use, transmission, deletion, or destruction) as per Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be observed.

Here you will find information about the handling of your personal data when visiting our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

 

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot take responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please inform yourself directly on these websites about the handling of your personal data by these companies. 

 

2. Responsible Party

 

Responsible for the processing of personal data on this website is:

Vacid GmbH

Dauchinger Straße 58-62

78056 Villingen-Schwenningen

Authorized Managing Director: Zoran Karanovic

 

3. Provision and Use of the Website/Server Log Files

 

a) Nature and Scope of Data Processing

When you use this website without otherwise transmitting data to us (e.g., through registration or use of the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including: 

  • IP address
  • Date and time of the request
  • Name and URL of the accessed file
  • Website from which the access originates (referrer URL)
  • Access status/HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system

b) Purpose and Legal Basis

This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves the legitimate interests of our company. 

c) Storage Duration

Once the aforementioned personal data are no longer required to display the website, they will be deleted. The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may occur in individual cases if required by law.

 

  1. Use of Cookies

 

a) Nature, Scope, and Purpose of Data Processing

We use cookies. Cookies are small files that are sent by us to the browser of your end device during your visit to our website and stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you revisit our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. Through cookies, we can make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (such as country and language settings). If third parties process information via cookies, they collect the information directly through your browser. However, cookies do not cause any harm to your end device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

 

Temporary Cookies/Session Cookies

We use so-called temporary cookies or session cookies on our website, which are automatically deleted as soon as you close your browser. Through these types of cookies, it is possible to capture your session ID. This allows various requests from your browser to be assigned to a common session, and it is possible to recognize your end device during subsequent visits to websites.

Persistent Cookies

We use so-called persistent cookies on our website. Persistent cookies are cookies that are stored in your browser for a longer period and can transmit information. The respective storage period varies depending on the cookie. You can delete persistent cookies independently via your browser settings.

Third-Party Cookies

We use analytical cookies to monitor anonymized user behavior on our website.

Furthermore, we use advertising cookies. These cookies enable tracking of user behavior for advertising and targeted marketing purposes.

Social media cookies allow you to establish a connection to your social networks and share content from our website within your networks.

Browser Settings Configuration

Most web browsers are preset to automatically accept cookies. However, you can configure your respective browser to only accept certain cookies or even no cookies at all. However, we would like to point out that in this case you may not be able to use all functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to configure your browser to notify you before cookies are stored. Since different browsers may vary in their respective functionalities, we ask you to consult the help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require the storage of a persistent cookie on your computer. If you subsequently delete this cookie, you will need to disable it again.

b) Legal Basis

Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to use cookies based on a notice provided by us on the website ("cookie banner"), the legal basis is additionally Art. 6 para. 1 lit. a) GDPR 

c) Storage Duration

 

Once the data transmitted to us via cookies are no longer necessary for the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.

 

  1. Data Collection for Pre-contractual Measures and Contractual Performance

 

a) Nature and Scope of Data Processing

In the pre-contractual phase and upon contract conclusion, we collect personal data about you. This includes, for example, your first and last name, address, email address, telephone number, or bank details.

b) Purpose and Legal Basis of Data Processing

We collect and process this data exclusively for the purpose of contract performance or to fulfill pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. If you have additionally given consent, the legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration

The data will be deleted as soon as they are no longer necessary for the purpose of processing.

Furthermore, there may be legal retention obligations, such as commercial or tax retention obligations according to the Commercial Code (HGB) or the Tax Code (AO). If such obligations to retain exist, we will block or delete your data at the end of these retention obligations.

  1. Order Form

 

On our website, there is an order form available that can be used for electronic pre-orders.

a) Nature and Scope of Data Processing

Our data collection is limited to the following data:

  • First and last name
  • Telephone number
  • Email address
  • Account details
  • Product name

b) Purpose and Legal Basis

The purpose of data processing is to be able to process your order properly.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of data is necessary for the performance of a contract or is required for the implementation of pre-contractual measures requested by the data subject.

c) Storage Duration

The data will be deleted as soon as they are no longer needed to achieve the purpose of processing.

Furthermore, there may be legal retention obligations, such as commercial or tax retention obligations according to the Commercial Code (HGB) or the Tax Code (AO). If such obligations to retain exist, we will block or delete your data at the end of these retention obligations.

  1. Registration Option

a) Nature and Scope of Data Processing

On our website, you can register. When you register, we collect and store the data you enter into the input mask (e.g., last name, first name, email address). There is no disclosure to third parties. 

b) Purpose and Legal Basis of Data Processing 

Your registration is necessary for the use of certain content and services on our website or for the performance of a contract or the implementation of pre-contractual measures. After registration, you are free to modify or completely delete the personal data provided during registration from the data stock of the data controller.

The legal basis for processing is Art. 6 para. 1 lit. a) GDPR in case of consent. If your registration serves the preparation of a contract, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.

c) Storage Duration

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

 

  1. Data Transmission

 We only disclose your personal data to third parties if:

a) You have given your explicit consent pursuant to Art. 6 para. 1 lit. a) GDPR. 

b) This is legally permissible and necessary for the performance of a contractual relationship with you or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b) GDPR.

c) There is a legal obligation for disclosure pursuant to Art. 6 para. 1 lit. c) GDPR.

We are legally obliged to transmit data to public authorities, such as tax authorities, social security institutions, health insurance companies, supervisory authorities, and law enforcement agencies. 

d) The disclosure pursuant to Art. 6 para. 1 lit. f) GDPR is necessary to protect legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data.

e) We, pursuant to Art. 28 GDPR, use external service providers, so-called data processors, who have been obligated to handle your data carefully.

We use such service providers in the following areas: 

  • IT
  • Logistics
  • Telecommunication

When transferring to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the European Commission has confirmed an adequate level of protection or where we ensure careful handling of personal data through contractual agreements or other appropriate guarantees.

 

  1. Job Application Option

a) Nature and Scope of Data Processing 

You can apply on our website or by email. When you apply, we collect and store the data you enter into the input mask or send us via email. 

b) Purpose and Legal Basis 

We process your data solely for the purpose of processing your application. There is no disclosure to third parties. The legal basis for processing is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG, and additionally Art. 6 para. 1 lit. b) GDPR.

If you give us consent to include you in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) GDPR. 

c) Storage Duration

If we cannot offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account § 61b para. 1 ArbGG in conjunction with § 15 AGG. The start of the period is the receipt of the rejection letter.

If you have given us consent to include you in our applicant pool, we will store your data for a maximum of two years.

d) Data Disclosure

Your data will only be accessed by the entities involved in the decision-making process (responsible personnel or specialist departments, management, works council).

 Additionally, we are obligated to transmit your data to public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

Other recipients of data may be those entities for which you have given us consent to transfer data.

 

  1. Comment Function

 

a) Nature and Scope of Data Processing 

You can comment on posts on our website. When you comment, we collect and store the data you enter into the input mask. In addition to the comments you leave, information about the time of comment submission and possibly the username (pseudonym) you chose will be stored and published. Furthermore, the IP address assigned by the Internet service provider (ISP) of the data subject is stored. There is no disclosure to third parties.

b) Purpose and Legal Basis

The data you provide (e.g., IP address) is collected for security reasons and in case the data subject violates the rights of third parties or posts unlawful content through a comment.

There is no disclosure of this collected personal data to third parties unless such disclosure is required by law or serves the legal defense of the data controller.

The legal basis for processing the personal data transmitted when using the comment function is Art. 6 para. 1 lit. a) GDPR, provided you have given consent. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Another legal basis is Art. 6 para. 1 lit. f) GDPR.

We have a legitimate interest in processing if third-party rights are violated or unlawful content is posted. This serves the security in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.).

c) Storage Duration

The comments and associated data (e.g., IP address) are stored on our website until the commented content is completely deleted or the comments need to be deleted for legal reasons.

 

  1. Contact Form

a) Nature and Scope of Data Processing

On our website, we offer you the option to contact us via a provided form. As part of submitting your request via the contact form, your consent to this privacy policy is referred to for obtaining your consent.

When you use the contact form, the following personal data provided by you will be processed:

  • Salutation
  • First name
  • Last name
  • Title
  • Company
  • Industry
  • Position
  • Street
  • Street number
  • Postal code
  • City
  • Country
  • Email address
  • Phone number
  • Subject

b) Purpose and Legal Basis

The provision of your email address serves the purpose of sending you a response via email to your inquiry. When using the contact form, your personal data will not be disclosed to third parties.

The legal basis for processing is consent pursuant to Art. 6 para. 1 lit. a) GDPR, based on the voluntary and revocable consent declaration provided by you as follows:

c) Storage Duration

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer exists (e.g., after completing the processing of your inquiry).

This is without prejudice to mandatory legal provisions – in particular retention periods under commercial or tax law.

 

  1. Contact via Email

 

a) Nature and Scope of Data Processing

You can contact us via email. Our data collection is limited to the email address of the email account you use to contact us and any personal data you voluntarily provide during the contact process. 

b) Purpose and Legal Basis

The purpose of data processing is to be able to respond to your concerns appropriately. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in processing the above-mentioned personal data to handle your concerns appropriately.

c) Storage Duration

 The duration of the storage of the data mentioned above depends on the background of your contact. Deletion of your personal data occurs regularly if the purpose of the communication ceases to exist, and storage is no longer necessary. This can result, for example, from processing your request.

 

  1. Newsletter

a) Nature and Scope of Data Processing

On our website, you have the option to subscribe to a free regular email newsletter. To send you the newsletter regularly, we need your email address.

We use the so-called double opt-in procedure for newsletter dispatch.

This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive newsletters from us by clicking on a corresponding link. 

This ensures that only you, as the owner of the specified email address, can register for the newsletter. Your confirmation must be made promptly upon receipt of the confirmation email, as otherwise, your newsletter registration will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter into the input mask (e.g., last name, first name, email address). 

When registering for the newsletter, we also store your IP address as well as the date and time of registration as provided by your internet service provider (ISP) to prevent potential misuse of your email address at a later date. Additionally, for control purposes, we store the date and time of clicking on the confirmation link and the IP address provided by your ISP in the confirmation email (double opt-in email). 

b) Purpose and Legal Basis

The data collected from you when registering for the newsletter will be used exclusively for the purpose of advertising through the newsletter.

The processing of your email address for newsletter dispatch is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 no. 3 UWG, based on the voluntary and revocable consent declaration provided by you as follows:

Furthermore, the processing is based on Art. 6 para. 1 lit. f) GDPR due to legitimate interests of documenting the required consent.

 c) Storage Duration

 Your email address will be stored as long as you have subscribed to the newsletter. After unsubscribing from the newsletter dispatch, your email address will be deleted unless you have expressly consented to further use of your data.

 

  1. Tracking and Analytics Tools

 For an exact overview of the web analysis and social media tools we use, please refer here.

 

  1. Data Security and Security Measures

 We are committed to protecting your privacy and treating your personal data confidentially. To this end, we implement extensive technical and organizational security measures, which are regularly reviewed and adjusted to technological progress.

 

This includes, among other things, the use of recognized encryption methods (SSL or TLS). Data disclosed without encryption, for example, if transmitted via unencrypted email, may potentially be intercepted by third parties. We have no control over this. It is the responsibility of the respective user to protect the data provided by them through encryption or other means against misuse.

 

  1. Changes to the Privacy Policy

We reserve the right to update this statement at any time as needed.

 

  1. Your Rights

 

Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 of the GDPR. You can contact the responsible party (Section 2) regarding this matter. 

Right to Withdraw Your Consent to Data Processing According to Art. 7 (3) Sent. 1 GDPR

 You can revoke your consent to the processing of your personal data at any time with future effect. However, the legality of processing carried out before the revocation will not be affected.

 

  1. Right to Information According to Art. 15 GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data and further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

 

  1. Right to Rectification and Completion According to Art. 16 GDPR 

You have the right to immediately request the correction of incorrect data. Taking into account the purposes of processing, you have the right to request the completion of incomplete data.

 

  1. Right to Erasure ("Right to Be Forgotten") According to Art. 17 GDPR

You have the right to erasure if processing is not necessary. This is the case, for example, when your data is no longer necessary for the original purposes, you have revoked your consent to data processing, or the data has been processed unlawfully.

 

  1. Right to Restriction of Processing According to Art. 18 GDPR

You have the right to restrict processing, e.g., if you believe that personal data is incorrect.

 

  1. Right to Data Portability According to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

 

  1. Right to Object According to Art. 21 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of certain personal data concerning you. In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

 

  1. Automated Individual Decision-Making, Including Profiling, According to Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, except in the cases mentioned in Art. 22 GDPR.

There is no automated decision-making based solely on automated processing – including profiling.

 

  1. Complaint to a Data Protection Supervisory Authority According to Art. 77 GDPR

Additionally, you can lodge a complaint at any time with a data protection supervisory authority, for example, if you believe that the processing of data does not comply with data protection regulations.