Data protection statement
Protecting your personal data
Protecting your personal data is very important to us. So we take great care to comply with all data protection legislation that applies in Germany.
Collection, processing and using your personal data
We use electronic data processing systems to help us provide services to our customers.
We collect and store the personal data that you have provided (e.g. your name, postal address, e-mail address, telephone number, payment details etc). For technical reasons, we also collect the IP addresses of visitors to our website.
We process and use the personal data we collect for the following purposes: to provide the services that you have requested (GDPR Article 6 (1) (b)); to process your inquiries (GDPR Article 6 (1) (b)); to carry out credit checks on you (given your express consent to do so) if you wish us to provide services in advance of payment (for example, in the case of purchases made on account) (GDPR Article 6 (1) (a)); for invoicing purposes (GDPR Article 6 (1) (b)); for our own marketing activities (GDPR Article 6 (1) (a) and (f)); to ensure we comply with legal requirements, in particular our obligation under Section 257 of the German Commercial Code (HGB) to maintain certain records (GDPR Article 6 (1) (c)); and to assert (legal) claims (GDPR Article 6 (1) (f)).
For the purposes set out above, we also reserve the right to share your personal data as necessary with affiliated companies and subcontractors located inside the European Union and other states party to the Agreement on the European Economic Area, in particualr our advertising agency, Interton-1 EOOD, of Uliza Oborishte 122, 8000 Burgas, Bulgaria, and Hetzner Online GmbH, of Industriestr. 25, 91710 Gunzenhausen, who operate the server for our website “www.vautidgroup.com” – on our behalf at their data center in Germany. Information entered into our online contact form can be transmitted to us securely via SSL/HTTPS protocol. A list of our group companies can be found at https://www.vautidgroup.com/en/company/vautid-group-and-locations/.
Our subcontractors and affiliated companies are obliged to treat your personal data confidentially and, based on the location of the company´s headquarters, to use it in compliance with German and European data protection legislation, and only to provide the services requested.
To enable us to deliver the goods you have ordered, we also pass on the delivery address and consignee details that you have provided to our subcontract parcel delivery firm, courier or forwarder. If you are not the consignee, you have an obligation to obtain the consignee´s agreement that we may process their personal data before you release their personal data to us. If the goods you order are not manufactured by ourselves, we will share the delivery address and consignee details that you have provided with our supplier, who will share this information with their own subcontract parcel delivery firm, courier or forwarder.
With the above exceptions, the personal data we store will only be disclosed to third parties if:
- we have your specific authorization (GDPR Article 6 (1) (a));
- we are legally obliged to do so (GDPR Article 6 (1) (c)); or
- if such disclosure is necessary to assert or protect our rights (GDPR Article 6 (1) (f)).
If you share with us any third party´s personal data, especially data relating to your employees or consignees of goods that you have ordered, you have an obligation to obtain the third party´s agreement that their data can be processed in accordance with this Data Protection Statement before releasing said data to us. By sharing a third party´s personal data with us, you are also confirming that the third party had agreed their data can be processed in accordance with this Data Protection Statement.
Subject to your express agreement, we may also use the personal data we hold to keep you informed about the products and services we offer. We will only send you marketing material by e-mail if you have given us your express agreement to do so under a “double-opt-in” process. You can be confident that we will not sell your personal data to any third party or make it available to the market in any other way.
If you access our website from sonemone else´s computer, we strongly recommend that you clear all cookies after leaving the site, to avoid any misuse of your personal date.
Use of the Google Analytics web analysis service
Our website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”. These are text files which are stored on your computer and make it possible to analyze how you use the website. Usually, information collected by these cookies on your use of our website is transmitted to and stored on a Google Server in the USA. However, because IP anonymization is activated on our website, Google first of all truncates your IP address within the European Union and other states party to the Agreement on the European Economic Area. Only in exeptional circumstances would the full IP adress be transmitted to a Google Server in the USA and be truncated there. On behalf of the operator of this website, Google uses this information to evaluate your usage of this website, to produce reports regarding activity on this website, and to provide the website operator with other services related to the use of this website and of the internet. The IP address from your browser that is transferred as part of the Google Analytics package is not matched or merged with any other Google data. You can set your browser to prevent cookies from being stored; however we must point out that doing so could mean that you will not be able to use all the features of this website to their fullest extent. In addition, you can prevent Googel from capturingand precessing data collected by cookies relating to your usage of this website (including your IP address) by downloading and installing a browser add-on available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Furthermore, you can prevent Google Analytics from collecting data relating to this website by clicking on the following link in your browser to set an opt-out cookie: Revoke from data collection. If you clear your cookies and want to continue to prevent Google from collecting data, you will need to click on this link again.
The Browser Plug-Ins provided by Google do not work with browsers on smartphones and tablets
The cookie opt-out option that Google Analytics offers as a browser plug-in only works on desktop computers. On mobile devices such as smartphones and tablets, suitable options for declining tracking cookies can be found in the settings for the pre-installed operating system. Alternatively, users can obtain and customize browser applications from third-party providers. To learn about this in detail, please follow the instructions specific to your device or those provided by the application manufacturer.
Retention periods for personal data
To comply with our obligations under Section 257 of the German Commercial Code (HGB), we retain personal data collected during order processing for 10 years after the last invoice or credit note was presented to you. If you have not settled all due demands for payment within this 10-year period, we will retain your personal data until all our demands for payment have been paid. Personal data that we collect in the context of addressing inquiries will be retained by us for 6 years from the date of our response to the inquiry (Section 257 (4) of the German Commercial Code (HGB)).
You can, at any time, find out about the personal data we store about you, or request an amendment or correction to that data, by sending an e-mail to firstname.lastname@example.org. We will process your request promptly.
Naturally, you may also e-mail email@example.com to demand that we delete all personal data that we hold about you (as per GDPR Article 17) or place restrictions on the processing of the personal data that we hold about you (as per GDPR Article 18). We will then take prompt action to delete, or place processing restrictions on, the personal data that we hold about you. However, we will only delete or place processing restrictions on the personal data that we hold about you after all existing contractual commitments have been fulfilled and any matters of legal nature between us have been resolved Data can only be deleted if we no longer have any legal obligations to retain said data. Please note: once data has been deleted or data processing restrictions have been implemented, we will no longer have access to the information you provided and may be unable to address any pending inquiries. if we are legally obliged to retain your personal data, it will be marked as confidential and will no longer be used for communication purposes.
If we process your personal data, you are entitled to demand we provide a copy of this data in writing or in digital format as a CSV file. We will provide the first copy and send it to you (or to a third party nominated by you) free of charge.
If you have agreed to your personal data being processed and we still have this data stored, we will make it available to you (or to a third party nominated by you) on request in CSV file format.
Under Article 77 (1) of the GDPR, if you are of the opinion that data relating to you has been processed in breach of said regulations, you, as the affected party of a data processing operation, have the right to appeal to a supervisory authority. This is without prejudice to any other right of appeal or legal remedy you may have. This applies especially in the member State where you reside, work or where the alleged infringement took place.
If the data is processed on the basis of permission granted by you (in particular for the purpose of carrying out credit checks or, where applicable, sending you newsletters), you can withdraw this permission at any time.
Under Article 21 of the GDPR, you have the right to object to your data being processed for direct marketing purposes, profiling for direct marketing purposes, or for the purposes of safeguarding our legitimate interests or those of third parties in accordance with GDPR Article 6 (1) (f). If you notify us that you object to your data being processed for the purposes of safeguarding our legitimate interests or those of third parties in accordance with GDPR Article 6 (1) (f), we will cease processing your data unless we can demonstrate compelling and legitimate grounds for not doing so, especially if you have not yet settled all outstanding demands for payment. We will discontinue processing your data for direct marketing purposes or for direct marketing profiling purposes on receipt of your objection.
If you have any queries relating to data protection, kindly e-mail them to firstname.lastname@example.org. We will be pleased to answer your questions free of charge. Of course, you may also contact the data controller by fax or post instead of e-mail.
Modifications to this Data Protection Statement
In view of ongoing developments in the electronic data processing area, we reserve the right to modify this Data Protection Statement as necessary. We will notify you of any changes to this Data Protection Statement by written communication to one of the contact addresses provided by you.
We only offer our products and services to users who are at least 16 years old.
The data controller (for the purposes of data protection legislation) is:
Telefax: +49 711 4420 – 39
Silvia Escher, Data Protection Responsible
Phone: +49 711 4404 – 181