Data protection

Information on data protection

As the person whose personal data is being processed, you are the data subject. Below, we would like to inform you about the processing of your personal data and give you an overview of the accompanying rights.

We exclusively process your personal data in compliance with the regulations of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (FDPA). In addition, we do not process more data than absolutely necessary and, if possible, anonymously.

By clicking on the button “accept” you confirm, that you acknowledge the following data privacy statement and that you consent to the processing of your personal data in the context of the use of this website as well as to the placement of the necessary cookies.

1.    Who is responsible and who can I contact?
We – VNG Handel & Vertrieb GmbH – process your personal data and are therefore controllers. You can reach us at the following address:

VNG Handel & Vertrieb GmbH
Braunstraße 7
04347 Leipzig

Telephone: +49 341 443-1910
Fax: +49 341 443-2912
Email: kontakt@vng-handel.de

If you have any questions about the information mentioned here, you can reach our occupational Data Protection Officer with the following contact details:

VNG Handel & Vertrieb GmbH
Data Protection
Officer Braunstraße 7
04347 Leipzig

datenschutz@vng-handel.de

2.    What personal data do we process?
We collect personal data from you in the scope of the use of this website.

During the use of this website access data (URL of the website from which the file is requested, name of the accessed file, date and time of the request, volume of data transmitted, the status of access, the browser you used for the purpose of access and the IP address) will be stored.

If you contact us by e-mail, contact form or in any other way, the information you provide will be stored for the purpose of processing the request. In particular this in-cludes: personal details (e.g. name, address, contact details, sex), company affiliation and position within the company, your IP address and other data comparable with the named categories.

3.    What do we use cookies for?
Cookies are text files, which are placed on your terminal to help the website analyze how users use the site. Most of the cookies we use are so-called “session-cookies”. They are deleted automatically after your visit. Other cookies are saved on your terminal until you delete them. Those cookies allow us to recognize your browser on your next visit.

We use cookies only if you have given consent first. By clicking the respective button within the information about data privacy on this website, you give your explicit consent (so-called “opt-in procedure”). Please note that you may not be able to use this website if you refuse to give your consent for the use of cookies.

4.    What is etracker?
On this website we use the services of etracker GmbH, Hamburg, Germany to analyze usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. etracker cookies do not contain any information that could identify a user.

The data generated with etracker is processed and stored by etracker solely in Ger-many by our commission and is thus subject to strict German and European data protection laws and standards. In this regard, etracker was checked, certified and awarded with the data protection seal of approval.

As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key with which, however, no connection to any specific person can be made with. etracker does not use it for any other purpose, combine it with other data or pass it on to third parties.

Further information on data protection with etracker can be found here.

5.    For what do we use Conversion Tracking?
This website also uses the Google Conversion Tracking. Google Adwords places a cookie on your computer if you came to our website via a Google advertisement. These cookies persist for only 30 days and do not serve for personal identification. If the user visits certain pages of the Adwords-customer and the cookie has not yet expired, Google and the customer can detect that the user clicked on the ad and was forwarded to this site. Every Adwords-customer gets a different cookie. Cookies can therefore not be tracked via the websites of Adwords-customers. Information gathered by means of the conversion cookies serve for creating conversion statistics for Adwords-customers who decided to use conversion tracking. Adwords-customers are informed about the total number of users that clicked on the ad and were forwarded to a site with a conversion tracking tag. However, they do not get any information that could identify the user. For Google’s data privacy on conversion tracking see here.

6.    What about sharing?
You have the possibility to share specific content via our website with social media. Therefore, we use the Drupal Plugin AddToAny – Bookmark & Share.

Within this plugin personal data will only be collected if you use the various social media. To use those, you need to have a user account and log in with your personal login details. The responsibility for the social media is not with us but with the respective operators. For the usage of social media, we therefore refer you to their privacy statements.

AddToAny does not store personal data. We do not receive personal data from AddToAny resulting from the usage of the share button.

7.    How about YouTube?
This website uses YouTube plugins. YouTube is operated by Google.

When you visit on of our sites that uses the YouTube plugin, a connection to the YouTube servers will be established and those will receive information on which sites you visited.

If you are logged in with your YouTube account while you are visiting our website, YouTube can assign your surfing behavior to your personal profile. You can prevent that by logging off from your YouTube account.

Further information about the handling of user data can be found in YouTubes privacy statement.

8.    And Twitter?
To display tweets from our Twitter account we incorporated a so called “Twitter-Widget” into our website.

While using our website a connection to Twitter will be established to provide log data. Furthermore, a cookie will be placed on your computer.

According to Twitter they start deleting, removing identification or gathering data after ten days at the maximum, though this process might take up to one week. Here you can find further information.

9.    Where we do we get this data from?
We process personal data which you provide us with while using this website or by other means. In addition, data of interested parties who contact us will be processed.

10.    Why do we process your data and on what legal basis?
There are several bases for processing your personal data:

  • Your personal data is processed on the basis of your consent. Your data is exclusively processed within the scope of the consent provided, and only for the purposes that you consented to. For instance, those purposes are the consignation of information material, the placement of necessary cookies and information about and invitations to events.
  • In order to fulfil our non-contractual obligations to you, we must process your data. Data processing takes place to carry out pre-contractual measures at the request of the interested party. Namely this means the processing for the purposes of applications.
  • If necessary, we process your personal data beyond the actual fulfilment of contractual or legal obligations to safeguard justified interests of us or third parties. The reasons for such processing are for example intra-corporate sta-tistical purposes and the optimization of our online offer and our website.

11.    Who receives your data?
Within the company, only those bodies will be given access to your data who need it to fulfil our legal and contractual obligations.

Your personal data will also be passed on to service providers (above all processors) and vicarious agents. These are IT supporters and service providers. Such a transfer takes place on the basis of justified interests or your consent.

As part of using YouTube and Twitter your data will be transferred to the USA. Both companies are certified by the Privacy Shield and therefore ensure European data protection standards.

Your data will not be sold or capitalized otherwise.

12.    How long will your data be saved?
We process and save your personal data for as long as it is necessary. Specifically, this means that we will save your data for 30 days.

If the collection fulfilled the basic purpose, then the data will be regularly deleted, unless limited further processing is required. This includes, for example, the fulfilment of commercial and tax law retention periods (German commercial code, regula-tion of taxation, anti-money laundering law – retention for up to ten years) and the maintenance of evidence in the scope of the legal statute of limitations regulations (up to 30 years – regular statute of limitations is three years).

13.    What rights do you have as data subject?
As data subject you have various rights:

  • The right to information (Art. 15 GDPR)
  • The right to amendment (Art. 16 GDPR)
  • The right to deletion (Art. 17 GDPR)
  • The right to the limitation of processing (Art. 18 GDPR)
  • The right to data transferability (Art. 20 GDPR)
  • The right to object (Art. 21 GDPR)
  • The right to withdraw consent provided (Art. 7 para. 3 GDPR)
  • The right to complain to a supervisory authority (Art. 77 GDPR)

Your rights are subject to some legal exceptions. For example, your rights are limited on the basis of research and statistics purposes (sect. 27 para. 2 FDPA) or due to archiving purposes in the public interest (sect. 28 paragraph 2 and 3 FDPA). Further exceptions are amongst others: sect. 34 and 35 FDPA and Art. 17 para. 3 GDPR.

You can find extensive information on your right to object in accordance with Art. 21 GDPR at the end of the section “Your rights to object”.

Furthermore, in the case that your personal data is collected on the basis of your consent, you have the right to withdraw this consent at any time. However, it should be noted that such a withdrawal is only effective in future, and the processing that has occurred until then remains lawful.

14.    Are you obliged to provide us with your personal data?
In the scope of your enquiry, we require the data which is necessary to process your enquiry and the data which we are legally obliged to collect.

As a rule, without this data, we are not in a position to process your enquiry or contact you.

15.    Is there an automated decision?
Ultimately, no automated decision takes place. If we do use such a procedure in exceptional cases, we will inform you separately in advance if this is legally required.

16.    Information in the case of change of purpose
If there is a change in the reason for processing your personal data, we will of course inform you immediately.

17.     Newsletter
With your consent, you can subscribe to our newsletter, which informs you about our offers.

For the registration we use the so-called double opt-in process. After you have registered, we will send you an e-mail to the e-mail address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your data will be deleted automatically. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and to be able to clarify a possible misuse of your personal data.

The only requirement for receiving the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 s. 1 lit. a GDPR.

You can withdraw your consent at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter, by e-mail to kontakt@vng-handel.de or by sending a message to the contact data specified in the imprint.

 

Your rights to object

1.    Right to object relating to individual case
We have already informed you about the right to object in accordance with Art. 21 GDPR. Specifically, this means that you have the right to object to the processing of your personal data at any time, for reasons that arise from your particular situation. The requirement for this is that the data processing is in the public interest or is taking place on the basis of a weighing up of interests (Art. 6 para. 1 letter e or f GDPR). This also applies to corresponding profiling.
If you make an objection against the processing of your personal data, we will no longer process it. Unless we can prove necessary, legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to enforce, practice or defend legal claims.

2.    Right to object to processing for purposes of direct advertising
In accordance with Art. 21 para. 2 GDPR, you as data subject have a separate right to object if your personal data is used for direct advertising. This also applies for pro-filing if it relates to direct advertising.
If you make use of this right to object, we as controllers will no longer process your data for this purpose.

3.    Who should I send my objection to?
The objection does not require any particular form and, where possible, should be sent to:

VNG Handel & Vertrieb GmbH
Data Protection Officer
Braunstraße 7
04347 Leipzig

datenschutz@vng-handel.de


Processing personal data on the basis of the EU General Data Protection Regulation

VNG Handel & Vertrieb GmbH processes personal data on the basis of the EU General Data Protection Regulation (GDPR). The following information provides an overview of the processing of these personal data by us and the rights resulting from data protection law.

General information on data protection