Privacy policy of VENTIS AG

General information

The following information provides a simple overview of how personal data is processed when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in the data protection information below. 

It goes without saying that the protection of your personal data and fair and transparent data processing are important to us. Below we provide you with the information pursuant to Art. 13 and 14 GDPR that you need to check and exercise your data protection rights. As the website operator, we are the controller within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) for this website and the associated data processing. Comprehensive information about our organization can be found in the imprint.

 

The following data protection information is divided into the following sections:

I. Details of the person responsible

II Data processing on our website

III Data processing within the scope of our business services

IV. Rights of data subjects

 

I. Details of the person responsible

Responsible for data collection:

VENTIS Holding AG
Oranienburger Straße 3
10178 Berlin
E-mail:ventis

Phone: +49 (0) 30 880 358 0

Data Protection Officer:

GFAD Datenschutz GmbH
Data Protection Officer
Huttenstraße 34/35
10553 Berlin
E-Mail: datenschutz@gfad.de

Phone: +49 (0) 30 269 111 1

Table of contents

Every visitor has the right to make individual cookie settings. Use the banner at the beginning of your visit or this button:

[borlabs-cookie type="btn-consent-preferences" title="individual cookie setting"/]

II Data processing on our website

Data security on our website

We use a valid, state-of-the-art SSL certificate to ensure the security of our website. A website encrypted with SSL transmits personal data to the server in encrypted form so that it is impossible for third parties to intercept or read it. A certificate verifies our identity. Depending on your browser, you can recognize that a secure connection exists by the display of a lock symbol. You can view our online proof of identity by clicking on the lock symbol. By encrypting the transmission, you can assume that the data you enter is adequately protected against unauthorized access during transmission in accordance with the state of the art.

Protection of minors

Our services are generally aimed at adults. Persons under the age of 18 may not transmit any personal data to us without the consent of their parents or legal guardians.

Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.

We, or our hosting service provider on our behalf, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR. The data processing of our hosting service provider takes place within the framework of an order processing contract in accordance with Art. 28 GDPR.

Provision of the website and log files

The entry of personal data is not necessary for the purely informational use of our website, i.e. if you do not transmit information to us in any other way.

Nevertheless, every time our website is accessed, personal data is automatically collected by the system of the accessing computer or the user's terminal device, which your browser transmits to our server. The following data, which is technically necessary for us to display our website to you, is collected by us:

  • Information about the browser type and version used
  • The IP address of the user
  • The operating system of the user's device
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • The previous website from which the user arrives at our website
  • Operating system and its interface
  • Language and version of the browser software

The legal basis for the temporary storage of this data in so-called log files is our legitimate interests as the responsible website operator pursuant to Art. 6 para. 1 lit. f. GDPR. GDPR, to ensure the technical presentation, stability and security of the website.

The temporary storage of the user's IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must necessarily remain stored for the duration of the session. The above-mentioned data is stored in the log files in order to ensure the functionality of our website. In addition, we use this data to optimize the website and to ensure the security of our information technology systems (e.g. attack detection). The data is not analyzed for marketing purposes in this context. The above-mentioned data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible if there are indications of an illegal attack on our systems.

Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which certain information flows to the place that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall. The legal basis for the use of cookies is our legitimate interest in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR to design and optimize our website in a user-friendly manner.

This website uses the following types of cookies, the scope and function of which are explained below:

Transient cookies

These cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. These cookies are technically necessary for the optimization and presentation of the website. The session cookies are deleted when you log out or close the browser.

Persistent cookies

These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time. To save the language setting, we use cookies that are technically necessary on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR to optimize the user-friendliness of our website. The cookie expires automatically after one year.

Flash cookies

The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your end device. These objects store the required data independently of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox(https://addons.mozilla.org/de/firefox/addon/betterprivacy/ ) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually.

Third party cookies

For the further development and improvement of our online offer (reach measurement, website analysis, website optimization, marketing), we use third-party services that also use cookies on the legal basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Further information on the third-party services we use on our website is listed separately below as part of our privacy policy. If user consent is obtained, the processing is carried out on the legal basis of Art. 6 para. 1 lit. a GDPR.

Prevention of cookies

You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of this website.

Borlabs Cookie

This website uses the consent management tool Borlabs Cookie, a service of Borlabs, Rübenkamp 32, 22305 Hamburg, Germany, which sets a technically necessary cookie(borlabs-cookie) to store your cookie consents on the basis of legitimate interests for obtaining and managing consents in accordance with Art. 6 para. 1 lit. f GDPR.

The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.

Website analysis

We use various services for the purpose of analyzing and optimizing our websites, which are described below. For example, we can analyze how many users visit our site, which information is most in demand or how users find the offer. Among other things, we collect data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our services in a user-friendly way. The data collected is not used to personally identify individual users. Only pseudonymous data is collected. The legal basis for this is Art. 6 para. 1 f GDPR. We understand the optimization of our website as a legitimate interest, your fundamental rights and freedoms do not outweigh our interest, as we inform you comprehensively about the data collection in our privacy policy and you have the option of opting out at any time (via link or browser settings). In addition, we only use pseudonymous tracking.

Hotjar

Use of Hotjar:

We use the service "Hotjar" (Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta) to better understand the behavior of our website visitors and to optimize our offer. Hotjar sets cookies that enable us to analyze the use of our website. The data collected by Hotjar, such as mouse movements, clicks, scrolling behavior and the anonymized IP address, are stored on servers within the EU.

Purpose of data processing:

Hotjar helps us to improve the user experience by providing us with records of visitor behavior and aggregated reports. This information is used exclusively for analysis purposes and helps us to identify possible problems or optimization potential on our website.

Legal basis:

The data is processed on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analyzing and improving the user-friendliness of our website.

Right to object:

If you do not want your data to be collected by Hotjar, you can deactivate this via the following link: https://www.hotjar.com/policies/do-not-track/.

 

Monsterinsides

Use of Monsterinsides:

We use the tool "Monsterinsides" (Monsterinsides GmbH, Musterstraße 1, 12345 Musterstadt, Germany) to gain insights into user behavior on our website. Monsterinsides collects information about the use of our website in order to provide us with analyses and reports. This data is processed anonymously and is not used to identify individual users.

Purpose of data processing:

The data collected with Monsterinsides is used to analyze and improve our online offerings. The findings help us to improve the functionality and user-friendliness of the website.

Legal basis:

The data is processed in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in understanding the behavior of visitors and optimizing the website accordingly.

Right of objection:

You can object to the collection of your data by Monsterinsides at any time by [insert link to Monsterinsides opt-out page].

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc,(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) The use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyze the activities of a user across devices.

Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 para. 1 f GDPR. The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month. You can find more information on terms of use and data protection at www.google.com/analytics/terms/de.html or at policies.google.com

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the tools.google.com/dlpage/gaoptout. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set:

Deactivate Google Analyticsdeactivate

For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland has been the provider of the service and the responsible "Data Controller" under data protection law since January 22, 2019. In order to provide the service, it may be necessary for the information generated by the cookie about the use of this website to be transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA in the USA and stored there. The USA is considered by the European Court of Justice to have an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

 

Data protection and data security in Google Analytics

The EU standard contractual clauses have been agreed with Google for the transfer of data to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The IP anonymization function is activated as an additional protective measure.

If the Google Analytics service is only activated with the consent of the user, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transfer to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. Any consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

In addition, Google Analytics and Google Analytics 360 have been certified in accordance with the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world. The certification applies to the systems provided by Google Analytics and Google Analytics 360.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will process this information on behalf of the operator of this website for the purpose of evaluating your use of the website statistically, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The controller uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if access to our Internet pages is from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

 

Browser add-on

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on available at the following link to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout

Objection to data collection

If you do not want your website activity to be available to Google Analytics, you can install the browser add-on to deactivate Google Analytics via the following link https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be set which prevents the collection of your data on future visits to this website by the Java Script (gtag.js, ga.js, analytics.js and dc.js) executed on websites from sharing activity data with Google Analytics. You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245

Google Ads

We use "Google Ads" (formerly Google Adwords) on our website if you have consented to activation via the content banner.

Google Ads uses cookies to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). If you reach our website via a Google ad, Google will place a cookie on your device. This cookie is used by Google to create visit statistics for our website. This cookie loses its validity after thirty days and is not used to identify the user. As a website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The following data is processed:

- Usage behavior

- IP address

- Opt-out information (marker that the user no longer wishes to be contacted)

The legal basis for this is your consent, which you may have given us via our consent banner. (Art. 6 para. 1 lit. a GDPR) This consent can be revoked at any time by adjusting the cookie settings.

Provider:

Google Ads is an online advertising program of Google Ireland Limited ("Google")

Gordon House,
Barrow Street,
Dublin 4,
Ireland

Google processes data on servers in the USA. Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.

You can deactivate interest-based ads at http://optout.aboutads.info. However, this setting will be deleted if you delete your cookies.

You can deactivate the setting of cookies in the settings of your web browser and thus generally prevent their use by services and plugins.

 

 

Optimonster

We use the technology of the provider Optinmonster on our website if you have consented to activation via the consent banner.

Optinmonster uses cookies to provide overlays (pop-ups) with additional offers (such as newsletter registration). The information collected via the Optimonster plugin is not stored by Optinmonster on its own servers, but is forwarded directly to us. Personal data is only collected through an active action. (e.g. registration for the newsletter via the pop-up)

The following data is processed:

- IP address

- E-mail address (when registering for the newsletter

The legal basis for this is your consent, which you may have given us via our consent banner. (Art. 6 para. 1 lit. a GDPR) This consent can be revoked at any time by adjusting the cookie settings.

Provider:

Retyp LLC (Optinmonster)
3701 Savoy Ln
West Palm Beach, FL 33417, USA

Optinmonster processes data on servers in the USA.

Further information and the applicable data protection provisions of Optinmonster can be found at https://optinmonster.com/privacy/.

Order data processing

Furthermore, we have concluded a so-called order data processing agreement with Optinmonster. This is a contract in which Optinmonster undertakes to protect the data of our users, to process it on our behalf in accordance with their data protection regulations and, in particular, not to pass it on to third parties.

You can deactivate the setting of cookies in the settings of your web browser and thus generally prevent their use by services and plugins.

 

 

Cookies for marketing purposes

We use cookies for marketing purposes in order to target our users with interest-based advertising. In addition, we use cookies to limit the likelihood of an advertisement being displayed and to measure the effectiveness of our advertising measures. This information may also be shared with third parties, such as ad networks. The legal basis for this is Art. 6 para. 1 f GDPR. There is a legitimate interest in direct marketing for the purposes pursued with the data processing. You have the right to object at any time to the processing of your data for the purpose of such advertising. For this purpose, we provide you with opt-out options for the respective services below. Alternatively, you can prevent the setting of cookies in your browser settings. If these services are only activated with the consent of the user, the processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

Double Click

We also use Double Click, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, "Google") and Google Ireland Limited. Double Click uses cookies to place user-based advertisements to protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The cookies recognize which ad has already been placed in your browser and whether you have accessed a website via a placed ad. The cookies do not collect any personal information and cannot be associated with such information. If the Double Click service is only activated with the consent of the user, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transmission to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland has been the provider of the service and the responsible "Data Controller" under data protection law since January 22, 2019. In order to provide the service, it may be necessary for the information generated by the cookie about the use of this website to be transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA in the USA and stored there. The EU standard contractual clauses have been agreed with Google for the transfer of data to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

If you do not want this, you can prevent the cookies required for these technologies from being saved, for example via your browser settings. In this case, your visit will not be included in the user statistics. You also have the option of selecting the types of Google ads or deactivating interest-based ads on Google via the ad settings. Alternatively, you can deactivate the use of cookies by third-party providers by calling up the deactivation help of the network advertising initiative. However, we and Google will continue to receive statistical information about how many users have visited this site and when. If you do not wish to be included in these statistics either, you can prevent this with the help of additional programs for your browser (e.g. with the Ghostery add-on).

Facebook Custom Audiences

As part of usage-based online advertising, the Custom Audiences product from Facebook (Facebook Custom Audiences1601 S. California Avenue, Palo Alto, CA, 94304, USA) is also used on the website. In principle, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes. A Facebook cookie is set in the process. Information about your activities on the website (e.g. surfing behavior, subpages visited, etc.) is recorded. Your IP address is stored and used for the geographical targeting of advertising.

Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer in accordance with Art. 6 para. 1 lit. f GDPR and for these purposes. If this service is only activated with the consent of the user, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transmission to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. The EU standard contractual clauses have been agreed with Facebook for the transfer of data to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion").

Further information about the purpose and scope of data collection and the further processing and use of the data, as well as the privacy settings, can be found in Facebook's privacy policy at https://www.facebook.com/policy.php. Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section: https://www.facebook.com/business/help/651294705016616.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative(http://optout.networkadvertising.org/) and additionally the US website(http://www.aboutads.info/choices) or the European website(http://www.youronlinechoices.com/uk/your-ad-choices/).

Facebook Connect

We offer you the option of registering for our service with Facebook Connect. To register, you will be redirected to the Facebook page where you can log in with your user data. This will link your Facebook profile and our service. Through this link, we automatically receive information from Facebook Inc. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We offer this registration option on the basis of our legitimate interests in a user-friendly registration option in accordance with Art. 6 para. 1 lit. f GDPR.

If you decide to register with Facebook Connect and click on the "Login with Facebook" / "Connect with Facebook" button, you will be automatically redirected to the Facebook platform. There you can log in with your user data. This will link your Facebook profile with our website or our services. This link gives us access to your data stored on Facebook. These are above all

  • Facebook name
  • Facebook profile and cover picture
  • Facebook cover picture
  • E-mail address stored with Facebook
  • Facebook ID
  • Facebook friends lists
  • Facebook Likes ("Like" information)
  • Birthday
  • Gender
  • Country
  • Language
  • This data is used to set up, provide and personalize your account.

To do this, Facebook uses cookies to validate your account and to determine when you are logged in so that we can make it easier for you to access Facebook products and provide you with the right experience and features. For more information, please refer to the Facebook Terms of Use and the Facebook Privacy Policy. You can find these at: https: //de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms

The EU standard contractual clauses have been agreed with Facebook for the transfer of data to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

If the Facebook connect service is only activated with the consent of the user, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transmission to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

LinkedIn Analytics and LinkedIn Ads

We use the conversion tracking technology and the retargeting function of LinkedIn Corporation Inc, Sunnyvale, California, USA on our website on the basis of our legitimate interests in displaying personalized advertisements in accordance with Art. 6 para. 1 lit. f GDPR. If the service is activated by the user's consent, the processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR. Consent that has been given can be revoked with effect for the future by making the appropriate cookie settings.

For the provision of the service in the EEA, the data controller is LinkedIn Ireland Unlimited Company. Nevertheless, data is transferred to the USA for the provision of the service. The EU standard contractual clauses, which constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR, have been contractually agreed for this purpose. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

If this Linkedin service is only activated by the user's consent, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transmission to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings

LinkedIn relies on standard contractual clauses approved by the European Commission as a legal instrument for data transfers from the European Union. As explained in the FAQ document on EU data protection rules, these clauses are contractual obligations that require companies to protect privacy and data security when transferring personal data (e.g. between LinkedIn Ireland Unlimited Company or its customers and LinkedIn Corporation). The LinkedIn companies follow standard contractual clauses to ensure that the data flows required to provide, maintain and develop our services are legally secure.

With the help of this technology, visitors to this website can be shown personalized advertisements on LinkedIn. Furthermore, it is possible to create anonymous reports on the performance of the advertisements and information on website interaction. For this purpose, the LinkedIn Insight tag is integrated on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

In LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy you will find further information on data collection and data use as well as the options and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate data collection at any time by clicking on the following link: https://www.linkedin.com/psettings/enhanced-advertising.

Maps Google Maps

To make it easier for you to find the location of our organization, we have integrated map material from the Google Maps service of Google LLC into our website via an API for the visual display of geographical information in interactive maps on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. In order to display the content in your browser, Google must receive your IP address, otherwise Google would not be able to display this integrated content to you. Google receives this via an interface (API) and/or via cookies that are set by Google. In addition, to the best of our knowledge, the use of Google Maps results in the following additional data being transmitted to Google LLC. transmitted:   

  • Date and time of the visit to the website in question,
  • Internet address or URL of the website accessed,
  • IP address

For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland has been the responsible "data controller" since 22.01.2019. The data is therefore processed on servers within the EEA. Nevertheless, it may be necessary for the provision of the service that data is transmitted to the parent company "Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA".

The EU standard contractual clauses have been agreed with Google for the transfer of data to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

If the Google Maps service is only activated with the consent of the user, the processing is carried out in accordance with the consent given pursuant to Art. 6 para. 1 lit. a GDPR and for data transmission to the USA pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

When you visit the website, Google receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google account before activating Google Maps. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information at https://accounts.google.com/ and https://policies.google.com/privacy?hl=de  

Vimeo video platform

Our website embeds videos from Vimeo, which is operated by Vimeo LLC, 555 West 18th Street, New York 10011 ("Vimeo").

The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo profile or are not currently logged in to Vimeo. Vimeo's video service is therefore used on our website to protect our legitimate interests in the context of public relations work in accordance with Art. 6 para. 1 lit. f GDPR. If this service is activated by the user's consent, the processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by making the appropriate cookie settings.

This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins, for example by clicking the "Vimeo" button, this information is also transmitted directly to an Instagram server and stored there. The EU standard contractual clauses have been agreed for data transfers to third countries. The EU standard contractual clauses constitute a guarantee of an adequate level of EU data protection in accordance with Art. 46 GDPR. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

The information will also be published on your Vimeo account and displayed to your contacts there.

If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

Further information can be found in Vimeo's privacy policy (https://vimeo.com/privacy).

Google reCAPTCHA

Google reCAPTCHA is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which allows website operators to check whether a user on their site is a human or a bot. This is intended to ensure that no bots interact automatically on the website.

We use Invisible reCAPTCHA V3 on our website, which means that the user no longer has to perform any action themselves. Google checks in the background of the page itself whether the user is a human or a bot. To do this, Google processes cursor movements and the user's IP address. Google reCAPTCHA also processes information on the:

  • Page that integrates reCAPTCHA,
  • IP address of the user,
  • language set in the browser,
  • Screen and window resolution,
  • Time zone and
  • Installation of browser plugins.

The purpose of reCAPTCHA is to check whether data is entered on our websites (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (IP address, time spent on the website by the website visitor and mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are informed that an analysis is taking place as part of the data protection information.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.

As the website operator, we have a legitimate interest in protecting our website from abusive automated spying and SPAM. The Google reCAPTCHA security tool is a technical measure to ensure the security of processing in accordance with Art. 32 GDPR.

Further information about Google reCAPTCHA and Google's privacy policy can be found at the following links https://www.google.com/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

For Google services within the EEA and Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland has been the responsible data controller since January 22, 2019. The processing and provision of the service is generally carried out by Google Ireland Limited as its own controller and within the EEA.

To ensure the service, data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To ensure an appropriate level of data protection for the transfer of data to Google LLC in the USA, the EU standard contractual clauses are contractually agreed. In addition, the transfer is necessary to fulfill a contract concluded with Google for the provision of this service in the interest of the user and the controller as website operator, to protect against abusive automated spying and spam in accordance with Art. 49 para. 1 lit. c GDPR.

If you do not want Google to collect, process or use data about you via our website, you can delete or block cookies in your browser settings.

Social media buttons

So-called social bookmarks (e.g. from Facebook, Twitter and Xing) are integrated on our website. Social bookmarks are Internet bookmarks with which users of such services can collect links and news items. These are only integrated on our website as links to the corresponding services. After clicking on the integrated graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers.

This is done on the legal basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR to share content with other users as part of our public relations work. Data transfers to third countries are carried out on the basis of the contractually agreed EU standard contractual clauses, which constitute a guarantee of an adequate level of data protection in the EU in accordance with Art. 46 GDPR.

If you activate these, you will be redirected to the provider's website and the corresponding user information will be passed on. The responsibility for the processing of personal data lies with the provider of the service as the controller in accordance with Art. 4 No. 7 GDPR.

If you are logged into your account on one of these social networks while using our site and wish to share our content, this information will be linked to your respective account. As the operator, we have no influence on the data that is transmitted to the corresponding servers via plug-ins. As a rule, the IP address is transmitted.

For further information on the handling of your data, please refer to the privacy policy of the respective provider:

Facebook: https://de-de.facebook.com/full_data_use_policy

Instagram: https://de-de.facebook.com/help/instagram/519522125107875

You Tube: https://policies.google.com/privacy?hl=de

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Perspective Funnel

Provision of the online offer

We use an external service provider for the provision of our online offer: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter referred to as "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to facilities in the United States of America, as Perspective uses sub-processors based in the USA. As the Commission of the European Union has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the sub-processors.

I. Description and scope of data processing

Perspective processes your data for us so that we can provide you with our online services. For this purpose, your IP address is automatically transmitted to Perspective in order to transmit the content and functions of our online services to your browser or device.

The following data can be collected:

Information about the browser type and version used

The operating system of your computer

The internet service provider you use

The IP address of your end device

Date and time of your access to the funnel

Websites from which you came to our website ("referrer")

II Legal basis for data processing

Perspective stores the data mentioned under I. in so-called log files. This is done to ensure

to ensure a smooth connection to the website,

to ensure a comfortable use of our website,

the evaluation of system security and stability and

for other administrative purposes.

The temporary storage of the IP address by the system is also necessary to enable the website to be delivered to your computer. For this purpose, the IP address of your computer must remain stored for the duration of the session.

 

Our legitimate interest in data processing also lies in these purposes. The legal basis for data processing is therefore Art. 6 para. 1 sentence 1 lit. f GDPR.

III Duration of the processing

The personal data processed by Perspective will be deleted as soon as they are no longer required for the purpose for which they were collected:

In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the IP address is stored in log files, this is the case after 7 days at the latest.

IV. Rights of data subjects

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR.

Because data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR). Since the collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of our website, you should not be able to object in most cases.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Contact and request management

We use an external service provider to provide contact, inquiry or application forms: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter referred to as "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States of America because Perspective uses sub-processors based in the USA. As the Commission of the European Union has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the sub-processors.

I. Description and scope of data processing

When you use Perspective's contact, inquiry or application forms, the following data is transmitted to Perspective's servers:

Date and time of access

Websites from which you came to our website ("referrer")

Context information (e.g. button clicks on the pages, selections made on the pages)

Contents of all completed text fields (e.g. contact details, such as your name or address, or other personal data, depending on the question shown in the specific text field)

Files uploaded by you

II Purpose Legal basis for data processing

‍‍The purpose of this data processing is to ensure the communication you have recorded.

The processing of your data from contact, inquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. If a contract is initiated via an inquiry form, the legal basis is also Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of data in an application form may be Art. 88 GDPR in conjunction with 26 BDSG in addition to Art. 6 para. 1 sentence 1 lit. f GDPR.

III Duration of the processing

‍Your personal data will be retained for as long as it is necessary to fulfill the purpose of processing or until you withdraw your consent. Exceptions to this principle are data that Perspective must retain due to legal obligations. These include, for example, retention obligations under commercial and tax law. These retention periods are - currently - up to ten years

IV. Rights of data subjects

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR.

You can withdraw your consent to data processing at any time by sending us an informal message (e.g. by email). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Contact (contact requests, real estate offers) with VENTIS & CH2 AG

You can ask us questions and send us messages via the contact form, our e-mail address or by telephone. In these cases, the personal data of the sender, i.e. the user, transmitted with the inquiry will be stored. In this context, we would like to point out that the transmission of unencrypted e-mails poses certain security risks, as unauthorized access cannot be ruled out. The processing of this data, which is transmitted in the course of sending an inquiry, is carried out on the legal basis of Art. 6 para. 1 lit. f. GDPR. GDPR of our legitimate interests to answer your request satisfactorily. If the request is aimed at the fulfillment of an existing or conclusion of a new contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b. for the initiation and fulfillment of a contract. If consent is given, the processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR. The processing of this personal data serves us solely to process the contact. Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective request has been answered and the conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no contract has been concluded. Inquiries about the contractual relationship are stored for the duration of the existing contractual relationship.

All personal data stored in the course of contacting us will be deleted in this case, provided that there are no legal retention periods to the contrary.

Newsletter dispatch

You can subscribe to our newsletter to receive information on current offers, product news etc. This may include offers from the VENTIS Group. This may also include offers from the VENTIS Group.

Advertising information will only be sent to your e-mail address as part of our newsletter if you have consented to the use of your e-mail address. You can of course withdraw your consent to the sending of newsletters at any time by clicking on the unsubscribe link in the newsletter or by informing us of your wish to unsubscribe atventis.

We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided, in which we ask you to confirm that you wish to receive the newsletter. In addition, we store the IP addresses used and the times of registration and confirmation. This enables us to verify your registration and, if necessary, clarify any possible misuse of your personal data by third parties.

Shipping service provider

The newsletter is sent using the mailing service provider "MailChimp", a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: mailchimp.com/legal/privacy/. The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR and an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR. For data transfers to third countries, the EU standard contractual clauses have been agreed, which constitute a guarantee of an adequate level of data protection in accordance with Art. 46 GDPR. We would like to inform you that the USA is currently not a safe third country within the meaning of EU data protection law according to ECJ case law. Due to the surveillance laws in the USA, US service providers may be obliged to hand over personal data to security authorities without data subjects being able to appeal against this. It can therefore not be ruled out that US authorities, such as intelligence agencies, may process, evaluate and permanently store your data on the servers of US service providers for surveillance purposes. We have no influence on these processing activities.

The mailing service provider may use the recipients' data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the mailing and presentation of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Newsletter tracking

In order to better understand how our newsletter is used, we evaluate your user behavior when sending the newsletter based on our legitimate interests in optimizing the newsletter in accordance with Art. 6 para. 1 lit. f GDPR. By subscribing to the newsletter, you consent to the sending of the newsletter and evaluation in accordance with Art. 6 para. 1 lit. a GDPR. For this analysis, the emails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and thus enable us to evaluate your user behavior. This is done by using web beacons that are assigned to your e-mail address and linked to a unique ID. Links received in the newsletter also contain these.

The data is collected exclusively in pseudonymized form, i.e. the IDs are not linked to your other personal data, and direct personal references are excluded.

You can object to this tracking at any time by clicking on the unsubscribe link provided in every email. Please note that you will then no longer be able to receive the newsletter. The information will be stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.

Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

Data processing at trade fairs

If you provide us with your contact details at the trade fair, e.g. by giving us your business card, taking part in a competition or registering for our newsletter, we will record this data in our CRM system. We use your data to contact you as requested, to establish a business relationship and to send you information material (Art. 6 para. 1 lit. a, b and f GDPR).

Career

You can apply to one of our companies electronically, in particular via e-mail atventis. Your details will only be used to process your application.

Please note that unencrypted e-mails are not transmitted with access protection.

If you have applied for a specific position and it has already been filled or we consider you to be equally or even more suitable for another position, we would like to forward your application within the company. Please let us know if you do not agree to your application being forwarded.

Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent to store your data for longer or a contract has been concluded. The legal bases are therefore Art. 6 para. 1 a, b and f GDPR and § 26 BDSG.

Recipients of the data or categories of recipients

Within our organization, access to your data is granted to those departments that require it to fulfil contractual and legal obligations.

External service providers (processors)

Your data will be passed on to our IT and software service providers for maintenance and support to assist us in providing our services.

Your personal data is processed by contracted service providers as part of order processing in accordance with Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests or if another legal basis permits this. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (EU adequacy decision) or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Data transfer to the USA

Among other things, services from companies based in the USA are integrated on our website. If these services are active, your personal data may be transferred to the US servers of the respective companies. We would like to inform you that the USA is currently not a safe third country within the meaning of EU data protection law according to the case law of the European Court of Justice. Due to the surveillance laws in the USA, US service providers may be obliged to disclose personal data to security authorities without data subjects being able to appeal against this. It can therefore not be ruled out that US authorities, such as intelligence agencies, may process, evaluate and permanently store your data on the servers of US service providers for surveillance purposes. We have no influence on these processing activities.

 

III Data processing within the scope of our business services

Contractual services with business partners

We process the data of our contractual partners and interested parties as well as clients, suppliers, service providers and customers in accordance with Art. 6 para. 1 lit. b. GDPR. GDPR in order to provide them with our contractual or pre-contractual services. The data processed in this context, the type, scope and purpose and the necessity of their processing are determined by the underlying contractual relationship. The processed data includes the master data of our contractual partners (e.g. names and addresses), contact data (e.g. email addresses and telephone numbers) as well as contract data (e.g. services used, contract content, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history). In principle, we do not process special categories of personal data unless these are part of commissioned or contractual processing. We process data that is necessary for the establishment and fulfillment of contractual services and point out the necessity of their disclosure, unless this is evident to the contractual partners. Disclosure to external persons or companies only takes place if it is necessary within the framework of a contract. When processing the data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements.

As part of the use of our online services, we may store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests in protecting users against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c. GDPR.

The data is deleted when it is no longer required to fulfill contractual or statutory duties of care and to deal with any warranty and comparable obligations. Otherwise, the statutory retention obligations apply.

Direct advertising

If we receive your e-mail address and postal address when a contract is concluded, we may process this data in order to inform you in future by e-mail and post about our own similar product and service offers. If you no longer wish to receive advertising information by e-mail or post, you can object to the use of your contact data for advertising purposes at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. You can send your objection by post or e-mail to the following contact addresses.

VENTIS Holding AG
Oranienburger Straße 3
10178 Berlin

E-mail:ventis

Recipients of the data or categories of recipients

Within our organization, access to your data is granted to those departments that require it to fulfil contractual and legal obligations.

External service providers (processors)

Your data will be passed on to service partners, e.g. IT and software service providers for maintenance and support, in order to support us in providing our services.

Your personal data is processed by contracted service providers as part of order processing in accordance with Art. 28 GDPR.

Other service providers, partners and third parties

We may work with other partners if this is necessary to fulfill our service offerings or if we are legally obliged to disclose data. These may be the following partners or third parties:

  • Credit institutions and payment service providers
  • Credit agencies
  • Support call center
  • Disclosure to public bodies (e.g. tax offices, authorities) or by court order
  • Advertising agencies
  • Document shredding company, logistics
  • Advice and consulting, auditor
  • Insurances
  • Utilities, cable network operators
  • (Heat) metering services
  • Law firms and competent jurisdiction
  • Notary's offices
  • Property management
  • Agents and operators of commercial/residential condominiums for the purpose of letting and brokerage
  • Craft businesses, architectural offices, service companies

We attach great importance to processing your data within the EU. However, we may use service providers who operate outside the EU. In these cases, we ensure that an adequate level of data protection is established before your personal data is transferred. This means that a level of data protection comparable to the standards within the EU is achieved via EU standard contracts or an EU adequacy decision.

Origin of the personal data

We process personal data that we receive as part of our business relationship. In addition, we process personal data that we have legitimately received from other companies in our group of companies or from other third parties (e.g. credit agencies) (e.g. for the execution of orders, for the fulfillment of contracts or on the basis of consents given by you) to the extent necessary for the provision of our services and for the fulfillment of contracts. We also process personal data that we have legitimately obtained from publicly accessible sources (e.g. commercial and association registers, press, media) and are permitted to process.

Categories of personal data

We process the following categories of personal data about you:

Personal master data (name, address and other contact data, date of birth), order and contract data (e.g. delivery order), payment data, data from the fulfillment of our contractual obligations, advertising and sales data, documentation data (data from consulting and service discussions) and comparable data.

Storage of the data

Where necessary, we process and store personal data for the duration of the business relationship. This also includes the initiation and execution of a contract. The personal data required for warranty and guarantee claims will be stored for the duration of such claims. We also store personal data insofar as we are legally obliged to do so. Corresponding proof and retention obligations arise from the German Commercial Code and the German Fiscal Code. The retention and documentation periods specified there are six years in accordance with commercial law requirements pursuant to Section 257 HGB and up to ten years due to tax requirements pursuant to Section 147 AO. We delete personal data of the data subject as soon as the purpose of storage no longer applies and statutory retention periods do not prevent deletion.

IV. Rights of data subjects

Rights of the data subjects

If a user's personal data is processed, the user is a "data subject" within the meaning of the GDPR. They have the following rights vis-à-vis us as the controller:

  • Right to information
  • Right to rectification
  • Right to restriction of processing
  • Right to erasure
  • Right to information
  • Right to data portability
  • Right of objection
  • Right to revoke the declaration of consent under data protection law
  • Right to lodge a complaint with a data protection supervisory authority

Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if the legal requirements are met, a right to rectification, blocking or erasure of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we generally need time to check this. You have the right to request the restriction of the processing of your personal data for the duration of the review.
  • If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection in accordance with Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Rights in data processing according to the legitimate interest

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e GDPR (data processing in the public interest) or on Art. 6 para. 1 lit. f GDPR (data processing to safeguard a legitimate interest). This also applies to profiling based on this provision. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Rights in direct advertising

If we process your personal data for direct marketing purposes, you have the right under Art. 21 (2) GDPR to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for the purposes of direct marketing, we will no longer process your personal data for these purposes. The objection can be made informally and should preferably be addressed to: VENTIS Holding AG Oranienburger Straße 3, 10178 Berlin, e-mail:ventis

Legal or contractual provisions for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In order to conclude a contract, it is necessary for you to provide us with personal data. Without this data, we will generally have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it. If there is a legal obligation to provide the data, you are obliged to provide us with personal data. Before the data subject provides personal data, the data subject can contact our data protection officer. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

Automated decision-making and implementation of profiling

In principle, we do not use exclusively automated decision-making including profiling within the meaning of Art. 22 GDPR to establish and conduct a business relationship.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Changes to the privacy policy

This data protection declaration is continuously adapted in the course of the further development of the Internet or our offer. We will announce any changes on this page in good time. This page should be accessed regularly to keep up to date with the current status of our data usage provisions. (Current status: January 2024)