Data protection

Data Protection Declaration

The protection of your personal data is very important to us. With the following remarks about data protection, we would like to inform you about which data are gathered and processed from your visit to our website and for what purpose they are utilised.

Responsible office and data protection officer

va-Q-tec AG
Alfred-Nobel-Straße 33
97080 Würzburg
Phone +49 (0) 931 / 35-942-0
Fax +49 (0) 931 / 35942-10
E-mail info@va-q-tec.com

If you have any questions regarding data protection, you can contact our data protection officer by email: dataprotection@va-q-tec.com.

 

Your rights as a data subject

You have the right to obtain information (Art. 15 EU-DS-GVO) at any time, free of charge about personal data we have stored. In addition, you can contact us at any time regarding your rights to correction (Art. 16 EU DS-GVO), restriction (Art. 18 EU DS-GVO), deletion (Art. 17 EU DS-GVO) and data transferability (Art. 20 EU DS-GVO).

You also have the right to object to data processing (Art. 21 EU-DS-GVO).

If you have given your consent to the usage of your data on our website, you can revoke this consent free of charge with effect in the future.

To assert these rights, please contact: dataprotection@va-q-tec.com. The same applies if you have any questions about our data processing.

Furthermore you have the right of complaint to a data protection supervisory authority. Please note the following in connection with rights of objection: In case we process your data to protect legitimate interests, you can object to this processing at any time for personal reasons. We will then no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and liberties or the processing serves to assert, exercise or defend legal claims.

 

Aims and legal basis of data processing

When processing your personal data, the provisions of the EU-DS-GVO and all other valid data protection regulations are observed. The legal basis for data processing is derived in particular from Art. 6 EU-DS-GVO.

We use your data for business initiation, to fulfill contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen customer relations, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection permission. Before consent is granted, we will inform you about the purpose of data processing and your right of revocation. 

 

Disclosure to third parties

We only pass on your data to third parties within the framework of the legal regulations or with the appropriate consent. Otherwise, your data is not be passed on to third parties, unless we are obliged to do so by mandatory legal provisions (passing on to external parties), such as supervisory authorities or law enforcement agencies.

 

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill their contractual and legal obligations. In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers.

 

Secure transmission of your data

In order to protect the data stored at our company in the best possible way against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.
The data exchange from and to our website is always encrypted. We offer HTTPS as a transmission protocol for our website, always using the latest encryption protocols. In addition, there is the possibility of using alternative communication channels (e.g. by post).

 

Third country transfer / Third country transfer intention

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the execution of the contractual obligation, if it is required by law or if you have given us your consent. 

 

Data storage duration

We store your data as long as they are needed for the respective processing purpose. Please note that numerous retention periods require that data is (must be) still stored. This applies in particular to storage obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further storage obligations, the data will be routinely deleted once the purpose has been achieved. In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

 

Obligation to provide data

Various personal data are necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. This also applies to the use of our website and the various functions it provides. We have summarized the details for you in the point above. In certain cases data must also be collected or made available due to legal regulations. Please note that it is not possible to process your request or to carry out the underlying contractual relationship without providing this data. 

 

Categories, sources and origin of data

Which data we process is determined by the respective context: This depends on the circumstances, e.g. whether an inquiry is entered into our contact form, whether you send us an application or file a complaint.

Please note that we may also provide information for special processing situations separately in an appropriate place, e.g. when uploading application documents or submitting a contact request.

 

Server log files (Art. 6 Par. 1 lit. f EU-DS-GVO)

We collect the following data, which your internet browser transmits to us:

  • Browser type and version
  • Operating system in use
  • Web page from which you visit us (referrer URL)
  • Web page you visit
  • Date and time of your access
  • Your Internet Protocol (IP) address

This data is stored separately and will not be merged with other data you may have provided. A conclusion on certain persons is thereby excluded.

We use the information from the server log files only for statistical reasons to optimize our website.

 

Contact form (Art. 6 Par. 1 lit. a, b EU-DS-GVO)

On our website, we offer you the option to send us queries by email or via a contact form. We store the information for the purposes of processing your contact. Data are not transmitted to third parties.

The principle of data economy and data avoidance is observed, as you only have to provide the data that we need to contact you. These are your e-mail address, your name, a topic to be selected and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data are voluntary fields and can be entered optionally (e.g. to answer your questions more individually).

In order to protect the security and confidentiality of your data in the best possible way, we implement appropriate security measures. Your request will be transmitted to us in encrypted form.

 

Newsletter (Art. 6 Par. 1 lit. a EU-DS-GVO)

We offer you the opportunity to order a newsletter. For this service we require your email address.

You can register for a newsletter in our Investor Relations section as well. Here, we additionally need your first and family names, as well as your professional role, in order to personally address you in this newsletter and provide you with information in accordance with your requirements.

In both cases, no further data are gathered. The data are utilized only to send newsletters and are not passed on to third parties. As soon as you have registered for the newsletter, we send you a confirmation email with a link to the registration confirmation.

You can unscribe the newsletter at any time by revoking your consent. You can find a corresponding link to the possibility of cancellation in each newsletter we send to you. We then immediately delete your data in connection with the dispatch of the newsletter.

 

Registration function

Online job application (Art. 6 Par. 1 lit. a, b EU-DS-GVO)

By registering via our application portal, you submit your personal data to us for use within a specific application process. Your data will be stored and processed on the systems of our software partner Haufe-umantis AG.

Confidentiality and data protection in handling personal data are important to us and our software partner Haufe-umantis AG. To ensure the confidentiality of your application we have organized the processing and storage of your personal data and have taken the necessary technical measures. All employees of our human resources department and our software partner have been personally committed to maintain confidentiality regarding personal data. The data transfer is secured as it is carried out with an automatically activated 128bit encryption. In all other respects, data handling is carried out according to the general current standards of data security.

Exclusively for the purpose of your application, we store the title, surname, first name, date of birth, e-mail address and telephone numbers in the applicant database. These mandatory details are marked with an asterisk. We also record your cover letter, curriculum vitae, application photo, submitted job references and professional qualifications, training qualifications and further education qualifications. We will only evaluate, process and forward this data internally within this procedure. Only our employees in the human resources department and the persons responsible for selection at va-Q-tec AG have access to the stored data. Under no circumstances will we pass on your data to companies or persons outside our company or use them for other purposes. Without the possibility of inference to individual persons, we can process the data for statistical purposes. (Art. 6 para. 1 lit. f EU-DS-GVO).

You can request information in written form about the data stored about you. Please address this inquiry to our human resources department. At your request we will delete your electronically stored data at any time.

With the start of your employment, your personal data will be added to your personnel file. We delete the stored data of applicants not considered about 3 months after completion of the application procedure (profile and application). We will not inform you separately about the deletion of this data. If we are unable to offer you a suitable position within the scope of your application, we reserve the right to assign your application to the talent pool after receiving the appropriate consent. In this case, you can request the immediate deletion of your data at any time. Applications that we have assigned to the talent pool will be deleted after 12 months.

 

Hyperlinks to other providers

Our website contains – clearly recognizable – links to the Internet presences of other companies. As far as links to websites of other providers are available, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of these sites is always responsible for the contents of these sites.

The linked pages were checked for possible violations of law and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements of the law, such links will be removed immediately.

 

Automated individual case decisions

We do not use entirely automated processing to make a decision.

 

Cookies (Art. 6 Par. 1 lit. f EU-DSG-VO)

The website utilises so-called cookies in several places. They serve to make our services more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard disk). Due to our legitimate interest (Art. 6 Par. 1 lit. f EU-DS-GVO) we use technically necessary cookies, which are essential for the operation of the website and to ensure its functionality. Depending on the purpose, these are stored permanently – even after the end of the session – (so-called persistent cookies, e.g. opt-out) or are deleted when the browser is closed (so-called session cookies – these are only valid for one browser session).

In addition, we set further cookies with your consent. These cookies enable us to analyze how users use our website. This allows us to design the website content according to the needs of our visitors. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it, for example, depending on the thematic interests of the user. The legal basis for this is your consent (Art. 6 Par. 1 lit. a EU-DS-GVO).

If you have given your consent to this, you can revoke it as a matter of course at any time without giving reasons via our cookie settings.

Most web browsers accept cookies automatically. Of course, you can also deactivate, restrict or delete cookies on your end device manually via the settings of your browser or software-supported.

Please note: If you deactivate the setting of cookies, not all functions of our website may be completely usable.

 

Creation of user profiles respectively the use of purely functional cookies (Art. 6 Par. 1 lit. a EU-DS-GVO)

We use the following tools and services on our website:

Use of Google Analytics

On our website we use the tracking tool Google Analytics from Google Ireland Limited.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

In case of activation of IP-anonymization on this website, your IP-address will be shortened by Google within member states of the European Union or in other states of the agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

The legal basis for the processing of your personal data is based on your consent according to art. 6 par. 1 letter a. EU-DS GVO. You can revoke your consent.
The purpose of the processing of your personal data by the Google Analytics service is to analyze the interaction of our website visitors with our website. By evaluating the data obtained here, we can optimize our offer and increase user-friendliness.
We delete or anonymize the data collected by Google Analytics as soon as they are no longer required for our purposes. This is the case after 26 months.

Use of Google-Maps (Art. 6 Par. 1 S. 1 lit. a EU-DS-GVO)

On our website we use Google Maps (API) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). To protect your privacy, Google Maps is disabled the first time you enter this website. A direct connection to the servers of Google is only established when you activate Google Maps independently (consent pursuant to Art. 6 para. 1 lit. a DSGVO).

You can revoke your consent. This prevents your data from being transmitted to Google the very first time you enter the site. After activation, Google Maps will save your IP address. This is usually transferred to a Google server in the USA and stored there. Google is a certified participant in the EU-US Privacy Shield Framework and has committed itself to handling all personal data contained in the Privacy Shield Framework in accordance with the principles of the Privacy Shield Framework.

For more information on how we handle user data, please refer to Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Use of Google reCaptcha (Art. 6 Par. 1 S. 1 lit. f EU-DS-GVO)

We use Google reCaptcha to determine whether a human or computer is making a particular entry in our newsletter registration form. Google uses the following data to determine whether you are a human or a computer: IP address of the terminal device used, the web page you visit on our site and on which the captcha is integrated, the date and duration of your visit, the identification data of the type of browser and operating system used, the Google account if you are logged in at Google, mouse movements on the reCaptcha areas.

The legal basis for the described data processing is Art. 6 Par. 1 lit. f DS-GVO. We have a predominantly legitimate interest in the use of this tool in order to ensure the security of our websites, to protect ourselves from automated input (such as bot attacks) and to ensure exclusively private, non-commercial use by human users. To opt-out of this, please contact Google at this link.

Use of Campaign Manager (formerly DoubleClick by Google)

This website uses the online marketing tool Campaign Manager from Google. Google Campaign Manager is a program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Campaign Manager uses cookies to present you relevant advertisements. In this process, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads have been shown in your browser and which ads have been viewed. The use of cookies only enables Google and its partner websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for evaluation and stored there. Google observes the data protection regulations of the “Privacy Shield” agreement and is registered with the “Privacy Shield” program of the US Department of Commerce.

The use of Google Campaign Manager is based on your consent in accordance with Art. 6 Para. 1 lit. a. EU-DS-GVO, which you can revoke at any time.

Further information on Campaign Manager is available at https://www.google.de/doubleclick and on data protection at Google in general https://www.google.de/intl/de/policies/privacy.

YouTube Platform

The embedding on YouTube is done by the technical process of so-called framing. Framing is the process of simply inserting an HTML link provided by YouTube into the code of a website to create a playback frame on the third-party site, allowing the video stored on YouTube servers to be played back.

We use the framing codes generated by YouTube in the so-called “extended privacy mode”. According to the information provided by the YouTube platform, the cookie activity and the resulting data collection is only linked to the use of the playback function of the video itself. In this context, data collection through mere use of the website with framed content is prohibited.

To protect your data, we use a so-called two-click solution. All YouTube content is deactivated by default and is only loaded and displayed from the YouTube servers after clicking the “Activate content” button. With this click you agree that your IP address is transferred to YouTube and that the provider sets cookies in your browser. For your convenience, we will remember your consent for 30 days via a so-called Local Storage object that we store in your browser.

LinkedIn Ads / LinkedIn Analytics

We use “LinkedIn Ads” on our website, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as: “LinkedIn”). LinkedIn Ads stores and processes information about your user behavior on our website. LinkedIn Ads uses cookies, which are small text files that are stored locally in the cache of your web browser on your end device and which enable an analysis of your use of our website.

We use LinkedIn Ads for marketing and optimization purposes,  particularly to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our services and make them more interesting for you as a user. The use of LinkedIn Ads is based on your consent, which you can revoke at any time here https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We would point out that in the case of a revocation you may not be able to use all functions of our Internet presence to their full extent.

LinkedIn has subjected itself to the Privacy-Shield-Agreement between the European Union and the USA and is certified. LinkedIn thereby undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

For more information about the third party’s privacy practices, please visit the following website: https://www.linkedin.com/legal/privacy-policy

 

Social Media

Social Plugins of social networks

No social plugins are active on our website.

Links to social media

On our website you will find links to the social media services of Instagram, Twitter and LinkedIn. You can recognize links to the social media services by the respective company logo. If you follow these links, you will reach the company website of va-Q-tec AG at the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This will transmit to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the social media service provider. These are for example:

  • Address of the website where the activated link is located
  • Date and time when the website was accessed or the link was activated
  • Information about the browser and operating system used
  • IP  address

If you are already logged in to the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and perhaps even your real name from the data transmitted and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account by logging out of your user account first.

The servers of the Social Media Services are located in the USA and other countries outside the European Union. The data can therefore be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to a data protection law which generally does not protect personal data to the same extent as it is the case in member states of the European Union.

Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. Further information on the use of your data by the social media services integrated on our website can be found in the privacy policy of the respective social media service.

Appearance in our social media

The va-Q-tec AG maintains various appearances in social media, currently on Facebook, Instagram, Twitter and LinkedIn. As far as we have control over the processing of your data, we ensure that the applicable data protection regulations are observed.

In the following, you will find the most important information on data protection law with regard to our social media appearances.

Name and address of the person responsible for the holding

Responsible for the company’s web presence in terms of the EU Data Protection Regulation (EU-DS-GVO) and other data protection regulations is va-Q-tec AG and

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Instagram (Facebook Ireland Ltd. 4, Grand Canal Square, Dublin 2, Ireland)
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
  • Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

You use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

We would furthermore point out that your data may be processed outside the European Union. With regard to the US providers certified under the “Privacy-Shield”, we would inform you that these providers thereby undertake to comply with the data protection standards of the EU.

We maintain the fan sites in order to communicate with visitors to these sites and to inform them about our offers.

In addition, we collect data for statistical purposes in order to be able to further develop and optimize the contents and to make our services more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) is processed by the social networks and made accessible to us. We have no influence on the generation and presentation of this data.
Moreover, your personal data is processed by the social media providers, but also by va-Q-tec AG, for market research and advertising purposes. Therefore, it is possible that user profiles are created based on your usage behavior and the resulting interests. This allows, among other things, the placement of advertisements within and outside the platforms that correspond to your interests. For this purpose, cookies are usually stored on your computer. Irrespective of this, data that is not collected directly on your end devices can also be stored in your user profiles. The storage and analysis also takes place across devices. This applies in particular, but not exclusively, if you are registered as a member and logged on to the respective platforms.

We do not collect or process any other personal data.

The processing of your personal data by the va-Q-tec AG is based on our legitimate interest in effective information and communication according to Art. 6 par. 1 sentence 1 lit. f. EU-DS-GVO.

If you are asked for your consent to data processing, i.e. if you give your consent by confirming a button or similar (opt-in), the legal basis for processing is Art. 6 par. 1 sentence 1 lit. a., Art. 7 EU-DS-GVO.

Your rights / possibility of objection

If you are a member of a social network and do not want the network to collect information about you through our site and link it to your stored membership data at the respective network, you have to

  • log out of the respective network before you visit our fan page
  • delete the cookies present on the device and
  • exit and restart your browser

Please note that this procedure must be carried out separately for each end device.

After a new login, you will once again be recognizable to the network as a specific user.

For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information:

In total, you are entitled to the above-mentioned rights regarding the processing of your personal data.

Since the company va-Q-tec AG does not have full access to your personal data you should contact the social media providers directly when asserting your rights, since they each have access to the personal data of their users and can take appropriate measures and provide information.

Naturally, if you still need help, we will do our best to support you. Please contact dataprotection@va-q-tec.com.