Privacy Policy – VMT Homepage

Privat Policy

We welcome you to our websites and are pleased that you are interested in our company. The protection of your personal data is important to us. We therefore conduct our activities in accordance with the applicable legal provisions on the protection of personal data and data security. Below, we would like to inform you about which data relating to your visit is used and for what purposes.

Controller responsible for processing under the GDPR

The controller within the meaning of the General Data Protection Regulation and other data protection laws applicable in the Member States of the European Union, as well as other provisions of a data protection nature, is:

VM Trading GmbH
Industriestrasse 10
91637 Woernitz
Email: info@vm-trading.com

Data Protection Officer

Nils Möllers, Keyed GmbH
Siemensstraße 12
48341 Altenberge
Email: info@keyed.de

What is personal data?

The term “personal data” is defined in the German Federal Data Protection Act and the EU General Data Protection Regulation. It refers to any information relating to an identified or identifiable natural person. This includes, for example, your legal name, address, telephone number or date of birth.

Scope of anonymous data collection and processing

Unless otherwise stated in the sections below, no personal data is generally collected, processed or used when you use our websites. However, through the use of analytics and tracking tools, we receive certain technical information based on the data transmitted by your browser, such as the browser type and version, the operating system used, the websites visited on our website, including the duration of your visit, and the website visited previously. We evaluate this information solely for statistical purposes.

Relevant legal bases for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing the personal data.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. The same applies to processing operations that are necessary in order to take steps at the request of the data subject prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
Where the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.

Use of cookies

The website of VM Trading GmbH uses cookies. Cookies are data that are stored by the Internet browser on the user’s computer system. When a page is accessed, the cookies may be transmitted to that page and thus make it possible to assign the user. Cookies help make websites easier for users to use.

You can object to the use of cookies at any time by changing the relevant settings in your Internet browser. Cookies that have already been set can be deleted. Please note that if cookies are disabled, you may not be able to use all the functions of our website to their full extent.

The user data collected in this way is pseudonymized by technical means. As a result, it is no longer possible to assign the data to the user accessing the website. The data is not stored together with other personal data of the users.

When our website is accessed, users are informed about the use of cookies for analytics purposes by means of an information banner and referred to this Privacy Policy. The banner also explains how the storage of cookies can be prevented through the browser settings.

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR. Where the user has given the relevant consent, the legal basis for the processing of personal data using cookies for analytics purposes is Article 6(1)(a) GDPR. Please refer to our cookie banner and the information contained in this Privacy Policy for details of whether, and to what extent, cookies are used on our website.

Creation of log files

Each time the website is accessed, VM Trading GmbH automatically collects data and information. These data and information are stored in the server’s log files. The data are also stored in the log files of our system. The data is not stored together with other personal data of the user.

The following data may be collected:

Information about the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
The date and time of access
Websites from which the user’s system reaches our website (referrer)
Websites accessed by the user’s system through our website

Retention period for personal data

Personal data is stored for the duration of the applicable statutory retention period. Once this period has expired, the data is routinely deleted unless they are still required for the initiation or performance of a contract.

Contact options

The websites of VM Trading GmbH contain a contact form that can be used to contact us electronically. Alternatively, you can contact us using the email address provided. If the data subject contacts the controller responsible for processing through one of these channels, the personal data transmitted by the data subject is automatically stored.

The data are stored solely for the purpose of processing the request or contacting the data subject. The data are not disclosed to third parties.

Where the user has given consent, the legal basis for processing the data is Article 6(1)(a)GDPR. The legal basis for processing data transmitted while sending an email is Article 6(1)(f) GDPR. If the purpose of the email contact is to conclude a contract, an additional legal basis for processing is Article 6(1)(b) GDPR.

The data are deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. In the case of personal data from the contact form and data sent by email, this is the point at which the relevant conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

A live chat can also be used on the website. This gives website visitors the opportunity to contact us quickly and easily and to receive a short-term response. If you use the chat, we store the information you provide, such as the chat history, your name, the reason for your request and your IP address. These data are used to provide the service, ensure security, for marketing and profiling purposes, for service agreements with third parties, and to handle claims and legal obligations.

The legal basis for processing your personal data is Article 6(1)(a) GDPR. The data are deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. In addition, the data are deleted if you exercise your right to erasure under Article 17(1) GDPR.

You have the right to withdraw your consent at any time; see Article 7(3), first sentence, GDPR. This may be done informally and without stating reasons and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

HubSpot

Description and purpose

We use HubSpot, HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland, for our contact form and also use a plug-in for the live chat function. This is an integrated software solution that enables us to cover various aspects of our online marketing. These include, among other things:

Email marketing, including newsletters and automated mailings, such as the provision of downloads
Social media publishing and reporting
Reporting, such as traffic sources and access data
Contact management, such as user segmentation and CRM
Landing pages and contact forms

Our registration service enables visitors to our website to learn more about our company, download content and provide their contact details and other demographic information. This information, together with the content of our website, is stored on the servers of our software partner HubSpot. We may use it to contact visitors to our website and to determine which of our company’s services may be of interest to them.

All information collected by us is subject to this Privacy Policy. We use all information collected solely to optimize our marketing activities.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR, namely consent for the live chat, newsletter and further performance measurements, and Article 6(1)(f) GDPR. Our legitimate interest in using this service is to optimize our customer service and manage our contact details.

Recipients

The recipient of your personal data is HubSpot, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.

Transfers to third countries

It cannot currently be ruled out that personal data may be transferred to the United States of America. Since 10 July 2023, an adequacy decision, the EU-US Data Privacy Framework, has been in place for the United States. HubSpot Inc., the parent company, has obtained the relevant certification under the EU-US Data Privacy Framework. Accordingly, an adequacy decision applies to transfers to the United States to HubSpot Inc.

Retention period

The data are deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. In addition, the data are deleted if you exercise your right to erasure under Article 17(1) GDPR.

Withdrawal and objection

Where processing is based on Article 6(1)(a) GDPR, you have the right to withdraw your consent at any time; see Article 7(3), first sentence, GDPR. This may be done informally and without stating reasons and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Where processing is based on Article 6(1)(f) GDPR, you have the right under Article 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, your personal data will no longer be processed for this purpose.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://legal.hubspot.com/privacy-policy

Routine erasure and restriction of personal data

The controller processes and stores personal data of the data subject only for as long as this is necessary to achieve the purpose of storage. Data may also be stored if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.

As soon as the purpose of storage ceases to apply or a retention period prescribed by the provisions referred to above expires, the personal data is routinely restricted or deleted.

Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

Right of access under Article 15 GDPR

You may request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request access to the following information from the controller:

the purposes for which the personal data are processed;
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the envisaged period for which the personal data concerning you will be stored or, where that is not possible, the criteria used to determine that period;
the existence of a right to request rectification or erasure of personal data concerning you, a right to request restriction of processing by the controller, or a right to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
any available information as to their source, where the personal data are not collected from the data subject;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

Right to rectification under Article 16 GDPR

You have the right to obtain from the controller the rectification and/or completion of inaccurate or incomplete personal data concerning you. The controller must carry out the rectification without undue delay.

Right to erasure under Article 17 GDPR

You may request that the controller erase your personal data without undue delay, and the controller is obliged to erase this data without undue delay where one of the following grounds applies:
The personal data concerning you is no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
The personal data concerning you has been unlawfully processed.
The personal data concerning you must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Where the controller has made the personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase them, the controller shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply to the extent that processing is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defense of legal claims.

Right to restriction of processing under Article 18 GDPR

You may request restriction of the processing of your personal data under the following conditions:

you contest the accuracy of your personal data, for a period enabling the controller to verify the accuracy of the personal data;
1. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
1. the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defense of legal claims; or
1. you have objected to processing pursuant to Article 21(1) GDPR, pending the verification of whether the legitimate grounds of the controller override your grounds.

Where the processing of your personal data has been restricted, these data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

Where you have obtained restriction of processing under the conditions set out above, you will be informed by the controller before the restriction of processing is lifted.

Right to notification under Article 19 GDPR

If you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about those recipients.

Right to data portability under Article 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where:

the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and
the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object under Article 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.

The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

You have the possibility, in the context of the use of information society services and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

Right to withdraw consent under Article 7(3) GDPR

You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority under Article 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

is necessary for entering into, or performance of, a contract between you and the controller;
is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or
is based on your explicit consent.

However, these decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures have been taken to safeguard your rights and freedoms and your legitimate interests.

With regard to the cases referred to in points a and c, the controller shall implement suitable measures to safeguard your rights and freedoms and your legitimate interests, which must include at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

Embedding of third-party services and content

Description and purpose

It may happen that content from third parties, such as videos, fonts or graphics from other websites, is embedded within this online offering. This always presupposes that the providers of this content, hereinafter referred to as “third-party providers”, can see the users’ IP addresses. Without the IP address, they would not be able to send the content to the browser of the relevant user. The IP address is therefore required to display this content.

We endeavor to use only content whose respective providers use the IP address solely to deliver the content. However, we have no influence over whether third-party providers store the IP address, for example for statistical purposes. To the extent that this is known to us, we will inform users accordingly.

We use these integrations to provide and improve our online offering.

Legal basis

The legal basis for embedding third-party services and content is Article 6(1)(f) GDPR. Our overriding legitimate interest lies in presenting our online presence appropriately and providing user-friendly and economically efficient services. Please refer to the respective providers’ privacy information for further details.

Contractual or statutory obligation to provide personal data

The provision of personal data is neither required by law nor by contract and is not necessary to enter into a contract. You are also not obliged to provide the personal data. However, failure to provide the data may mean that you cannot use this function, or cannot use it to its full extent, in certain circumstances.

Transfers of data to third countries

The controller may transfer personal data to a third country. In principle, the controller can ensure an adequate level of protection for the processing by means of various appropriate safeguards.

Data may be transferred based on an adequacy decision, binding corporate rules, approved codes of conduct, standard data protection clauses or an approved certification mechanism pursuant to Article 46(2)(a)-(f) GDPR.

Where the controller transfers data to a third country on the legal basis of Article 49(1)(a) GDPR, you will be informed here about the possible risks of transferring data to a third country.

There is a risk that the third country receiving your personal data may not provide a level of protection equivalent to that applicable to personal data in the European Union. This may be the case, for example, if the European Commission has not adopted an adequacy decision for the relevant third country or if certain agreements between the European Union and the relevant third country are declared invalid.

Certain third countries may present risks to the effective protection of EU fundamental rights due to the use of surveillance laws, for example the United States. In such a case, it is the responsibility of the controller and the recipient to assess whether the rights of data subjects in the third country enjoy a level of protection equivalent to that in the Union and whether those rights can also be effectively enforced.

However, the level of protection for natural people guaranteed throughout the Union by the General Data Protection Regulation must not be undermined when personal data are transferred from the Union to controllers, processors or other recipients in third countries or to international organizations. This also applies where personal data are subsequently transferred from a third country or an international organization to controllers or processors in the same or another third country, or to the same or another international organization.

Additional website functions

IONOS WebAnalytics

Description

On our website, we use IONOS WebAnalytics, a service provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Data are collected using a pixel stored locally on the web server.

This is not conventional user tracking and no profiles are created. To protect personal data, WebAnalytics does not use cookies. The visitor’s IP address is transmitted when a page is accessed, anonymized immediately after transmission and processed without any reference to an individual. IONOS does not store personal data of website visitors, meaning that no conclusions can be drawn about individual visitors.

The following data are collected:

Referrer, meaning the website visited previously
Requested website or file
Browser type and browser version
Operating system used
Device type used
Time of access
IP address in anonymized form, used only to determine the location from which access took place

Legal basis

The legal basis for processing your personal data is Article 6(1)(f) GDPR. Our overriding legitimate interest lies in improving our offering and statistically evaluating the website.

Recipients

The recipient of your personal data is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

Transfers to third countries

Your personal data are not transferred to a third country. However, we are aware of our responsibility and regularly review the framework conditions and legal changes. If a transfer to a third country takes place, we will update this information as soon as possible.

Retention period

Objection

Under Article 21(1) GDPR, you have the right to object to the processing of your personal data at any time. If you exercise this right, your personal data will no longer be processed for this purpose.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-11-ionos-produktes/webanalytics/
https://whstatic.ionos.com/help/WebAnalytics/DE/d850791.html

Google Analytics

Description and purpose

This website uses the service “Google Analytics”, provided by Google LLC, to analyses how users use the website. The service uses “cookies”, which are text files stored on your device. First-party cookies are used for this purpose. With a first-party cookie, the user can only be recognized by the website from which the cookie originates and not across multiple domains.

The information collected by the cookies is generally sent to and stored on a Google server in the United States. Google Analytics may be used on this website with the code added to ensure anonymized collection of IP addresses, known as IP masking.

Please also note the following information concerning the use of Google Analytics: The users’ IP addresses are truncated within the Member States of the European Union and the European Economic Area. This truncation removes the personal reference from your IP address. For EU citizens, the IP address is also used only to derive location data and is then deleted.

You also have the option of enabling or disabling the collection of detailed location and device data for individual regions, using the tracking settings. Google Signals can also be disabled to prevent an association with a Google Account, and personalized ads can be disabled.

Under the data processing agreement concluded between the website operator and Google LLC, Google uses the information collected to evaluate website use and website activity and to provide services connected with the use of the Internet.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfers to third countries

The personal data are transferred to the United States. The transfer is subject to appropriate safeguards pursuant to Article 46 GDPR. For this purpose, we have concluded standard contractual clauses with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural people and ensure the protection of personal data.

Retention period

Withdrawal

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://support.google.com/analytics/answer/6004245?hl=de
https://policies.google.com/privacy?hl=de&gl=de

Google Tag Manager

Description and purpose

We use Google Tag Manager on our website, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager enables us to manage website tags through an interface. It is a cookie-free domain that does not collect personal information, but it can trigger other tags that collect data.

Google pseudonymizes the data, and the IP address transmitted by your browser in the context of Google Analytics is not combined with other data held by Google.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfers to third countries

The personal data are transferred to the United States. The transfer is subject to appropriate safeguards pursuant to Article 46 GDPR. For this purpose, where necessary, we have concluded appropriate safeguards within the meaning of Article 46(2) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural people and ensure the protection of personal data.

Retention period

Withdrawal

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://policies.google.com/privacy?hl=de&gl=de

Google Fonts

Description and purpose

We use Google Fonts, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These web fonts are integrated by means of a server request when you visit our websites, and the IP addresses of the browsers of the end devices are stored.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfers to third countries

However, the service is hosted locally.

Retention period

Withdrawal

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://www.google.com/policies/privacy

Google Maps

Description and purpose

This website uses the Google Maps API provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to display geographical information visually. When Google Maps is used, Google also collects, processes and uses data concerning visitors’ use of the Maps functions on the websites.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfers to third countries

Retention period

Withdrawal

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual or statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://policies.google.com/privacy?hl=de&gl=del

Zoom

Description and purpose

The Zoom tool is used on our website to conduct telephone conferences, video conferences and/or webinars, collectively referred to as “online meetings”. Various types of data are processed when Zoom is used. The scope of the data also depends on which data you disclose before or during your participation in an online meeting. To participate in an online meeting, you must at least provide your name in order to enter the “meeting room”.

The following additional personal data may be processed:

User details:

First name and surname
Telephone number, optional
E-Mail address
Password, if single sign-on is not used
Profile picture, optional
Department, optional

Meeting metadata:

Topic
Description, optional
Participants’ IP addresses
Device and hardware information

If recordings are made, optional:

MP4 file of all video, audio and presentation recordings
M4A file of all audio recordings
Text file of the online meeting chat

If dialing in by telephone:

Details of the incoming and outgoing telephone number
Country name
Start and end time
Other connection data may also be stored, such as the IP address of the device

Text, audio and video data:

You may have the option of using chat, question or poll functions in an online meeting. The text entries you make are processed to display them in the online meeting and, where applicable, to record them.

To enable video display and audio playback, data from the microphone of your end device and, where applicable, from a video camera connected to the end device are processed for the duration of the online meeting. You can switch off or mute the camera or microphone at any time using the Zoom applications.

Legal basis

For employees of the controller, Section 26 of the German Federal Data Protection Act (BDSG), as amended, is the legal basis for processing the data.

If data are collected when Zoom is used that are an essential part of using the service, and there is no employment relationship between the data subject and the controller, the legal basis for processing is Article 6(1)(f) GDPR. In these cases, our interest lies in conducting online meetings effectively.

For other participants in online meetings, where the meetings are conducted in the context of contractual relationships, Article 6(1)(b) GDPR is the legal basis for processing.

Recipients

The recipient of your personal data is Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.

Transfers to third countries

Retention period

Objection

Where your personal data is processed on the basis of the legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right under Article 21(1) GDPR to object to the processing of your personal data at any time. If you exercise this right, your personal data will no longer be processed for this purpose.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://zoom.us/de-de/privacy.html

Microsoft Teams

Description and purpose

We use Microsoft Teams to create and manage appointments. Microsoft Teams makes these processes easier and faster. The data subject, such as a customer, prospective customer or third party, can independently choose between different subject areas and arrange an appointment with a suitable contact person.

Legal basis

The legal basis for processing your personal data is Article 6(1)(b) GDPR. In all other cases, the legal basis is Article 6(1)(f) GDPR. Our overriding legitimate interest lies in enabling the rapid and straightforward coordination of appointments to clarify various matters.

Recipients

The recipient of your personal data is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Transfers to third countries

The use of the service may result in personal data being transferred to a third country. In the event of a transfer of personal data, the provider ensures the level of protection required by the GDPR by complying with Articles 44 et seq. GDPR.

If no adequacy decision exists for the third country in which the data importer is established, the transfer is subject to appropriate safeguards. If you have any questions, please contact our Data Protection Officer.

Retention period

Objection

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://privacy.microsoft.com/de-de/privacystatement

Hu-manity.co

Description and purpose

On our website, we use the consent management solution “Cookie Notice & Compliance” provided by Hu-manity Rights, Inc. The service is used to obtain, manage and document users’ consent to the use of cookies and comparable technologies.

This ensures that only cookies and tracking technologies to which the user has expressly consented are used. To store your privacy settings and consent decisions, information such as your consent preferences, timestamps, browser information, IP address and other technical usage data may be processed.

The data is used to ensure the functionality of the consent management system and to enable compliance with statutory documentation obligations.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is Hu-manity Rights, Inc., USA. In addition, service providers may be engaged to provide technical services for operating the platform.

Transfers to third countries

Retention period

Withdrawal

You have the right to withdraw your consent at any time; seeArticle 7(3), first sentence, GDPR. This may be done informally and without stating reasons and will take effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://hu-manity.co/privacy-policy/

TOUCH ME SOFT D.O.O.

Description and purpose

On our website, we use wpDataTables, a WordPress plug-in provided by TOUCH ME SOFT D.O.O. (Melograno Venture Studio), to display and manage tables, data views and charts.

The plug-in is used to structure and visualize information on our website. While using the plug-in, technical data such as IP address, browser information, device type, operating system, usage data and other information necessary to provide the content may be processed. If analytics or tracking functions of the plug-in are activated, additional usage data may be collected.

Legal basis

The legal basis for processing your personal data is Article 6(1)(a) GDPR.

Recipients

The recipient of your personal data is TOUCH ME SOFT D.O.O., Velisava Vulovića 18, Belgrade, Serbia. In addition, service providers may be engaged to provide technical services for operating the platform.

Transfers to third countries

As part of providing the service, personal data may be transferred to service providers used by wpDataTables outside the European Union. The transfer is subject to appropriate safeguards pursuant to Article 46 GDPR. For this purpose, we have concluded standard contractual clauses with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural people and ensure the protection of personal data.

Retention period

Withdrawal

Further information can be found above in this Privacy Policy under “Rights of the data subject”.

Contractual and statutory obligation

There is no contractual or statutory obligation to provide the data.

Further privacy information

Further information on the processing of your personal data can be found here:
https://wpdatatables.com/privacy-policy/

Job applications, including apprenticeships and vacancies

By submitting an application to us, applicants consent to the processing of their data for the purposes of the application procedure in accordance with the type and scope described in this Privacy Policy.

The legal basis for processing applicant data is Article 88 GDPR, Section 26 of the German Federal Data Protection Act (BDSG), as amended, and Article 9(2)(b) GDPR.

Where special categories of personal data within the meaning of Article 9(1) GDPR are voluntarily disclosed during the application procedure, their processing is additionally carried out based on Article 9(2)(b) GDPR, for example health data such as severe disability status or ethnic origin.

Where special categories of personal data within the meaning of Article 9(1) GDPR are requested from applicants during the application procedure, their processing is additionally carried out based on Article 9(2)(a) GDPR, for example health data where these are required for the performance of the job.

If provided, applicants may submit their applications to us using an online form on our website. The data are transmitted to us in encrypted form in accordance with the state of the art.

Applicants may also submit their applications to us by email. Please note, however, that emails are generally not sent in encrypted form and that applicants must arrange for encryption themselves. We therefore cannot accept responsibility for the transmission route of the application between the sender and its receipt on our server. We therefore recommend using an online form or sending the application by post instead.

Applicants continue to have the option of sending their application to us by post rather than submitting it via the online form or by email.

In the event of a successful application, we may further process the data provided by applicants for the purposes of the employment relationship. Otherwise, if the application for a position is unsuccessful, the applicants’ data will be deleted.

Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The data will be deleted after a period of six months so that we can answer any follow-up questions relating to the application and comply with our obligations to provide evidence under the General Equal Treatment Act.

Invoices relating to the reimbursement of any travel expenses are archived in accordance with tax law requirements.

Data recipients

Where legally permitted or required, or where you have given your consent, we also disclose your personal data to other recipients who provide services to us. We limit the disclosure of your personal data to what is necessary.

In some cases, our service providers receive your personal data as processors and are then strictly bound by our instructions when handling your personal data, pursuant to a data processing agreement under Article 28 GDPR. In other cases, the recipients process your data independently after we have transmitted it to them.

The following categories of service providers and recipients may receive your data:

Providers of email marketing services via newsletters
Providers of hosting services for operating our servers
Service providers in the field of applications who assist in selecting applicants
Service providers for development work, including the programming, development, maintenance and support of software applications
Postal service providers
External legal advisers
Marketing agencies and website support providers
Other IT service providers, such as IT system houses
Other services and tools

The service providers commissioned by us must comply with strict confidentiality requirements. They receive only the access to your data that is necessary to perform their assigned tasks.

If there is a suspicion of a criminal offence, data may be disclosed to law enforcement authorities.

Security

We have implemented extensive technical and organizational safeguards to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

Our security procedures are regularly reviewed and adapted to technological developments. In addition, data protection is continuously ensured within our organization through ongoing audits and optimization of our data protection organization.

Final provisions

VM Trading GmbH reserves all rights to make changes and updates to this Privacy Policy.