Data Protection

Information on data protection

As the person whose personal data is being processed, you are the data subject. Below, we would like to inform you about the processing of your personal data and give you an overview of the accompanying rights.

We exclusively process your personal data in compliance with the regulations of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (FDPA). In addition, we do not process more data than absolutely necessary and, if possible, anonymously.

 

1.    Who is responsible and who can I contact?

We – VNG AG – process your personal data and are therefore controllers. You can reach us at the following address:

VNG AG
Braunstraße 7
04347 Leipzig
Tel.: +49 341 443-0
Fax: +49 341 443-1500
info@vng.de

If you have any questions about the information mentioned here, you can reach our occupational Data Protection Officer with the following contact details:

VNG AG
Data Protection Officer
P. O. Box 24 12 63
04332 Leipzig
datenschutzbeauftragter@vng.de

 

2.    What personal data do we process?

We collect personal data from you in the scope of the use of this website. In particular this includes: personal details (e.g. name, address, contact details, sex), company affiliation and position within the company, your IP address and other data comparable with the named categories.

During the use of this website access data (URL of the website from which the file is requested, name of the accessed file, date and time of the request, volume of data transmitted, the status of access, the browser you used for the purpose of access and the IP address) will be stored. 

 

3.    What do we use cookies for?

Cookies are text files, which are placed on your terminal to help the website analyze how users use the site. Most of the cookies we use are so-called “session-cookies”. They are deleted automatically after your visit. Other cookies are saved on your terminal until you delete them. Those cookies allow us to recognize your browser on your next visit. 
The use of cookies, which are not necessary for the basic functionality of this website,  only if you have given consent first. By clicking the respective button within the information about data privacy on this website, you give your explicit consent (so-called “opt-in procedure”). Please note that you may not be able to use this website if you refuse to give your consent for the use of cookies. 
Visiting the website requires the placement of technically necessary cookies (essential cookies). Among them are the session-cookies.

 

4.    What is etracker?

On this website we use the services of etracker GmbH, Hamburg, Germany to analyze usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. etracker cookies do not contain any information that could identify a user.

The data generated with etracker is processed and stored by etracker solely in Germany by our commission and is thus subject to strict German and European data protection laws and standards. In this regard, etracker was checked, certified and awarded with the data protection seal of approval.

As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key with which, however, no connection to any specific person can be made with. etracker does not use it for any other purpose, combine it with other data or pass it on to third parties.

Further information on data protection with etracker can be found here.

 

5.    How about YouTube?

This website uses YouTube plugins. YouTube is operated by Google. 

If you have agreed to the loading of a YouTube video by clicking on the corresponding button, a connection to the YouTube servers will be established and those will receive information on which sites you visited. 

If you are logged in with your YouTube account while you are visiting our website, YouTube can assign your surfing behavior to your personal profile. You can prevent that by logging off from your YouTube account. 

Further information about the handling of user data can be found in YouTubes privacy statement.

 

6.    And Twitter?

To display tweets from our Twitter account we incorporated a so called “Twitter-Widget” into our website. 

If you have agreed to the loading of content from Twitter by clicking on the corresponding button a connection to Twitter will be established to provide log data. Furthermore, a cookie will be placed on your computer.

According to Twitter they start deleting, removing identification or gathering data after ten days at the maximum, though this process might take up to one week. Here you can find further information. 

 

7.    Where we do we get this data from?

We process personal data which you provide us with while using this website or by other means. In addition, data of interested parties who contact us will be processed.

 

8.    Why do we process your data and on what legal basis?

There are several bases for processing your personal data:

  • Your personal data is processed on the basis of your consent. Your data is exclusively processed within the scope of the consent provided, and only for the purposes that you consented to. For instance, those purposes are the consignation of information material, the placement of technically not necessary cookies and information about and invitations to events.
  • In order to fulfil our non-contractual obligations to you, we must process your data. Data processing takes place to carry out pre-contractual measures at the request of the interested party. Namely this means the processing for the purposes of applications.
  • If necessary, we process your personal data beyond the actual fulfilment of contractual or legal obligations to safeguard justified interests of us or third parties. The reasons for such processing are for example intra-corporate statistical purposes and the optimization of our online offer and our website and the organization of events.

 

9.    Who receives your data?

Within the company, only those bodies will be given access to your data who need it to fulfil our legal and contractual obligations.

Your personal data will also be passed on to service providers (above all processors) and vicarious agents. These are IT supporters and service providers, but also in some cases event agencies and print shops. Such a transfer takes place on the basis of justified interests or your consent.

Your data will not be sold or capitalized otherwise.

 

10.    How long will your data be saved?

We process and save your personal data for as long as it is necessary. Specifically, this means that we will usually save your data for 30 days.

If the collection fulfilled the basic purpose, then the data will be regularly deleted, unless limited further processing is required. This includes, for example, the fulfilment of commercial and tax law retention periods (German commercial code, regulation of taxation, anti-money laundering law – retention for up to ten years) and the maintenance of evidence in the scope of the legal statute of limitations regulations (up to 30 years – regular statute of limitations is three years).

 

11.    What rights do you have as data subject?

As data subject you have various rights: 

  • The right to information (Art. 15 GDPR)
  • The right to amendment (Art. 16 GDPR) 
  • The right to deletion (Art. 17 GDPR)
  • The right to the limitation of processing (Art. 18 GDPR) 
  • The right to data transferability (Art. 20 GDPR) 
  • The right to object (Art. 21 GDPR) 
  • The right to withdraw consent provided (Art. 7 para. 3 GDPR)
  • The right to complain to a supervisory authority (Art. 77 GDPR)

Your rights are subject to some legal exceptions. For example, your rights are limited on the basis of research and statistics purposes (sect. 27 para. 2 FDPA) or due to archiving purposes in the public interest (sect. 28 paragraph 2 and 3 FDPA). Further exceptions are amongst others: sect. 34 and 35 FDPA and Art. 17 para. 3 GDPR.

You can find extensive information on your right to object in accordance with Art. 21 GDPR at the end of the section “Your rights to object”.

Furthermore, in the case that your personal data is collected on the basis of your consent, you have the right to withdraw this consent at any time. However, it should be noted that such a withdrawal is only effective in future, and the processing that has occurred until then remains lawful.

 

12.    Are you obliged to provide us with your personal data?

In the scope of your enquiry, we require the data which is necessary to process your enquiry and the data which we are legally obliged to collect.

As a rule, without this data, we are not in a position to process your enquiry or contact you.

 

13.    Is there an automated decision?

Ultimately, no automated decision takes place. If we do use such a procedure in exceptional cases, we will inform you separately in advance if this is legally required.

 

14.    Information in the case of change of purpose

If there is a change in the reason for processing your personal data, we will of course inform you immediately.


YOUR RIGHTS TO OBJECT

 

1.    Right to object relating to individual case

We have already informed you about the right to object in accordance with Art. 21 GDPR. Specifically, this means that you have the right to object to the processing of your personal data at any time, for reasons that arise from your particular situation. The requirement for this is that the data processing is in the public interest or is taking place on the basis of a weighing up of interests (Art. 6 para. 1 letter e or f GDPR). This also applies to corresponding profiling.

If you make an objection against the processing of your personal data, we will no longer process it. Unless we can prove necessary, legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to enforce, practice or defend legal claims.

 

2.    Right to object to processing for purposes of direct advertising

In accordance with Art. 21 para. 2 GDPR, you as data subject have a separate right to object if your personal data is used for direct advertising. This also applies for profiling if it relates to direct advertising.

If you make use of this right to object, we as controllers will no longer process your data for this purpose.

 

3.    Who should I send my objection to?

The objection does not require any particular form and, where possible, should be sent to:

VNG AG
P. O. Box 24 12 63
04347 Leipzig
datenschutzbeauftragter@vng.de