With the following information, we would like to give you, as a “data subject,” an overview of the collection, use and processing of your personal data by us and your rights under the data protection laws. In principle, it is possible to use our web pages without entering personal data. However, if you want to make use of the special services of our company via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain your consent.The processing of personal data, such as your name, address, or e-mail address, is always in line with the General Data Protection Act (GDPR), and in accordance with the data protection regulations applicable to the Vignold GmbH. As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can have security gaps, such that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone or by regular mail.
The controller within the meaning of the GDPR is:
Vignold GmbH, Balcke-Dürr-Allee 1
Tel +49 2102 944-4
Fax ++49 2102 944-944
Represented by: Managing directors: Jörg Poplawsky
- DATA PROTECTION OFFICER
You can reach the data protection officer as follows:
audatis Consulting GmbH, Leopoldstr. 2-8, 32051 Herford, Germany
You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection.
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (in so-called “server log files”). Each time you or an automated system access a page, our website collects a range of general data and information. This general data and information is stored in the server’s log files. The following can be recorded: browser types and versions used, the operating system used by the accessing system, the website from which an accessing system arrives at our website (the so-called “referrer”),
the sub-websites that are accessed via an accessing system on our website, the date and time of an access to the website, an Internet protocol address (IP address), the Internet service provider of the accessing system. When using such general data and information, we do not draw any conclusions about your person. Rather, such information is needed to deliver the contents of our website correctly, to optimize the contents of our website and the advertising for it, to ensure the permanent operability of our IT systems and the technology of our website and to provide law enforcement authorities with the information necessary for prosecution in case of a cyber attack.
As such, the data and information collected will be used by us for statistical purposes only and with the aim of increasing the data protection and data security of our company, in order to ensure an optimal level of protection for the personal data we process. The data of the server log files is stored separately from any personal data provided by a data subject and are automatically erased after 7 days.
The legal basis for the data processing is Art. 6 (1)(1)(f) of the GDPR. Our justified interest follows from the data collection purposes listed above.
4.1. GOOGLE ANALYTICS
On our websites, we use Google Analytics, a web analytics service provided by Google, Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter, “Google”). In this connected, pseudonymized usage profiles are created and cookies are used (see no. 4). The information generated by the cookie about your use of this website such as
- Browser type/version,
2. Operating system used,
3. Referrer URL (the previously visited page),
4. Host name of the accessing computer (IP address),
5. Time of the server request,
- CONTENTS OF OUR WEBSITE
When contacting us (for example, via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you, and the associated technical administration. The legal basis for processing the data is our justified interest in responding to your request pursuant to Art. 6 (1)(f) of the GDPR. If your contact has the goal of the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1)(1)(f) of the GDPR. Your data will be erased after final processing of your request; this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention duties to the contrary.
General information about cookies
Information that is related to the specific end device used is stored in the cookie. However, this does not mean that we thereby gain direct knowledge of your identity.
The data processed by cookies is necessary for the aforementioned purposes, to protect our justified interests and those of third parties in accordance with Art. 6 (1)(1)(f) of the GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or a message always appears before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.
- ADOBE TYPE KIT
8. Service provider
We use the “HubSpot” inbound marketing tool on our website, which is provided by HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141 United States. HubSpot is a web-based all-in-one marketing software program that serves to implement and control inbound marketing. It helps us to arouse your interest in our products. The central element of HubSpot is the user-related personal profiles. A personal contact is created within HubSpot as soon as a previously anonymous website visitor fills out a HubSpot form. At this moment, a contact will be created based on your e-mail address. HubSpot is used for the purpose of individualizing the advertising approach and for market research purposes. These collections represent a justified interest within the meaning of Art. 6 (1)(1)(f) of the GDPR. With your consent, you also agree to the performance measurement (tracking) of our advertising measures. We have also concluded an order processing contract with HubSpot and fully implement the strict requirements of the German data protection authorities when using HubSpot. Data transfer to the USA is carried out in accordance with the EU Commission’s Implementing Decision (EU) 2016/1250 (Privacy Shield).
The data processing is based on your consent (Art. 6 (1)(a) of the GDPR). You can revoke this consent at any time. The lawfulness of the data processing operations already carried out will remain unaffected by the revocation.
We will store the data you provide to us for the purpose of using our marketing services (newsletters, ebooks, whitepapers, etc.). You can object to this at any time and your data will be erased from our servers and Hubspot’s servers.
9. SENDING OF NEWSLETTER
You can subscribe to a newsletter from us on our website. If you do so, the personal data you provided when registering will be transmitted by your browser to HubSpot, our marketing service provider, which also supports us within the framework of subscriptions and the sending of newsletters, and stored in its information technology systems. Your IP address and time of registration are also stored. We have access to and can process the information and personal data that is stored at HubSpot with regard to the subscription along with the sending of newsletters. With your consent, you also agree to the performance measurement (tracking) based on your data.
The personal data you enter will be stored until your subscription with us is canceled. We do not combine such personal data with other data sources. You are not obligated to provide this personal data, but the subscription to our newsletter is not possible without providing it.
9.1 NEWSLETTERS TO EXISTING CUSTOMERS
If you provided us with your e-mail address when purchasing services or downloading our marketing services, we reserve the right to regularly send you offers for similar services by e-mail. In accordance with § 7 (3) of the German Act on Unfair Competition (Gesetz gegen den unlauteren Wettbewerb), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our justified interest in personalized direct advertising in accordance with Art. 6 (1)(f) of the GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mail. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time, with effect for the future, by notifying the controller named at the beginning. You will only incur transmission costs in accordance with the base rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
10. USE OF OUR MARKETING SERVICES
If you wish to use our marketing services, such as downloading ebooks, whitepapers, guides, or registering for video sessions, webinars, etc., the personal data required for this purpose will be requested from you and transmitted to our marketing service provider, Hubspot. Your IP address and time of registration are also stored. You are not obligated to provide this personal data, however, the request for downloads and free consultations within the scope of our marketing services is then not possible.
11. YOUR RIGHTS AS A DATA SUBJECT
If you wish to make use of your rights as defined below, please contact our data protection officer at any time.
11.1. RIGHT TO CONFIRMATION
As a data subject, you have the right to request confirmation from us as to whether personal data concerning you is being processed.
11.2 RIGHT TO ACCESS – ART. 15 OF THE GDPR
As a data subject, you have the right to receive from us at any time, free of charge, access regarding the personal data stored about you, along with a copy of such data.
11.3 RIGHT OF RECTIFICATION – ART. 16 OF THE GDPR
You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.
11.4 ERASURE – ART. 17 OF THE GDPR
You have the right to demand that we erase the personal data concerning you without delay, provided that one of the grounds provided for by law applies and insofar as the processing is not required.
11.5 RESTRICTION OF PROCESSING – ART. 18 OF THE GDPR
You have the right to demand that we restrict processing if one of the statutory conditions is met.
11.6 DATA PORTABILITY – ART. 20 OF THE GDPR
You have the right to receive the personal data concerning you, which has been provided to us by you, in a structured, commonly used and machine-readable format. You also have the right to transfer such data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1)(a) of the GDPR or Art. 9 (2)(a) of the GDPR or on a contract pursuant to Art. 6 (1)(b) of the GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, in exercising your right to data portability under Article 20 (1) of the GDPR, you have the right to have the personal data transmitted directly from one controller to another, to the extent that this is technically feasible and provided that it does not adversely affect the rights and freedoms of others.
11.7 OBJECTION UNDER ART. 21 OF THE GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1)(e) (data processing in the public interest) or (f) (data processing on the basis of a balancing of interests) of the GDPR.
This also applies to profiling based on these provisions within the meaning of Art. 4 (4) of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling justified grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of the establishment, exercise or defense of legal claims.
In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to our processing of your data for direct marketing purposes, we will no longer process the personal data for such purposes.
In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You are free to exercise your right to object in the context of the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
11.8 REVOCATION OF A CONSENT UNDER DATA PROTECTION LAW
You have the right to revoke consent to the processing of personal data at any time with effect for the future.
12. ROUTINE STORAGE, ERASYRE AND BLOCKING OF PERSONAL DATA
We process and store your personal data only for the period of time necessary to achieve the purpose of the storage or to the extent that this has been provided for by legal regulations to which our company is subject.
If the purpose of storage is rendered inapplicable or if a prescribed storage period expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions.
Duration of the storage of personal data
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of this period, the corresponding data will be routinely erased, provided that it is no longer required to fulfill a contract or to initiate a contract.