Data Protection vitero GmbH

Version of: September 2024

The following Data Protection Information applies to the use of our online content [www.vitero.com] (hereinafter referred to as “website”). We at vitero GmbH respect your privacy and take the protection of your personal data very seriously. Your personal data are collected and processed in compliance with the applicable data protection require­ments, especially the data protection laws of the Federal Republic of Germany and the General Data Protection Regulation (GDPR).

The internet presence of vitero GmbH contain links to websites of third parties (external links). Liability for these websites resides with their respective operators. If you notice that links on our website refer to Internet sites whose content violates applicable law, please inform us by emailing info@vitero.de.

1. Controller and data protection officer

The controller for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR is
vitero GmbH
Breitwiesenstr. 7
70565 Stuttgart, Germany
Phone: +49 (0) 711 / 686 89 88-0
E-mail: info@vitero.de

If you have any questions about data protection, you can contact our data protection officer and our specialist staff by e-mail at datenschutz@vitero.de or by post at PROLIANCE GmbH, www.datenschutzexperte.de, Leopoldstr. 21, 80802 Munich. (When contacting us by post, please state the company to which your enquiry relates).

2. For what purposes are your personal data processed, and on what legal basis?

a) When you visit our website

When you view our website, the browser used on your terminal device auto­matically sends information to our website’s server. This information is stored temporarily in a so-called log file. The following information is collected in the process without your intervention and stored until automatic erasure:

  • the IP adress of the querying terminal device,
  • the date and time of the access,
  • the name and URL of the retrieved file,
  • the website from which the access occurred (referrer URL),
  • information about the browser used and, if applicable, the operating system of your computer and name of your access provider.

We process the above-named data for the following purposes:

  • ensuring that the connection to the website is established smoothly
  • ensuring convenient use of our website
  • analyzing system security and stability
  • ensuring IT security and IT operation
  • advertising our own web seminar content and the products of vitero GmbH.

The legal basis for the data processing is Article 6(1) sentence 1 point (b) or (f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the collec­ted data for the purpose of drawing conclusions about your identity. In addition, we use cookies and analysis services during your visit to our website. You can find more detailed explanations of this in sections 3 and 5 of this Data Protection Information.

b) When you contact us, e. g. by email or contact form

Personal data are collected if you contact our company. When the contact form provided on our website is used, the nature and scope of the data collected are obvious from the contact form itself; when you contact us by other means (e. g., email), you determine the nature and scope of the data you send us yourself in the message you send. The data are used exclusively for the purposes of communication, the processing of your request, and the associated technical administration. The data processing for the purpose of contacting us takes place in accordance with Article 6(1) sentence 1 points (a) and (b) GDPR on the basis of the consent you volun­tarily give or in order to meet our (pre)contractual obligations. The personal data collected by us are deleted automatically once the request you make has been taken care of, insofar as the matter has been conclusively resolved and no statutory retention obligations oppose the deletion (Article 6(1) point (c) GDPR). The email address is stored exclusively for correspon­dence with you and is not shared with third parties.

c) Participation in webinars and online events

Personal data are collected if you register for webinars and/or other online events of our company. When the contact form provided on our website is used, the nature and scope of the personal data collected are obvious from the form itself. The data are used exclusively for the purposes of communication and the asso­ciated necessary technical admini­stration. Data processing for the purposes of participation in our online events takes place in accordance with Article 6(1) sentence 1 points (a) and (b) GDPR on the basis of the consent you voluntarily give or in order to allow the participation you request. The personal data collected by us are deleted automatically after your participation, insofar as you do not want to be contacted further and no statutory retention obligations oppose the deletion (Article 6(1) point (c) GDPR). The email address is stored exclusively for correspon­dence with you and is not shared with third parties.

d) Free trial version

If you register for the free trial version, we need your data to create a user account and to manage your access. You can find out more about this in our data protection information – available at https://www.vitero.com/contract.

Since this is basically a processing of personal data on behalf of the controller in accordance with Art. 28 GDPR (order processing), the contracting parties must conclude an agreement in accordance with the currently valid model agreement for order data processing (available at https://www.vitero.com/contract).

In addition, we use your data to provide you with the necessary information, to ask about your experience with the vitero software and, if necessary, to introduce you to the features of the software.

The following data is processed for this purpose:

  • First and last name, e-mail, company, department, position and country

It is not possible to use the free trial version without processing your data. The legal basis for this processing of personal data for pre-contractual and contractual purposes is Art. 6 para. 1 lit. b GDPR.

If we are not able to convince you with our software and you do not become a customer, we will automatically delete your data after the free trial expires.

e) Job applications

You can apply by email for open positions we advertise or on your own initiative. The exclusive purpose of collecting your data is processing appli­cations, i. e. selecting the applicants for the purpose of poten­tially establishing an employment relationship. As a general rule, your data are only shared with the company-­internal positions responsible for the specific appli­cation process and with employees of the corresponding departments of our company. Your application data are not used or shared with third parties beyond this. If we cannot offer you a position that currently needs to be filled, but your profile could be of interest for positions to be filled in the future, we store your application data for twelve months, insofar as you have given us your express consent to store and use your data. You can withdraw your application at any time if you are no longer interested in the position. Your application will then no longer be considered in the further applicant selection process. Once the applicant selection process ends, or if you withdraw your application, your data are deleted in accordance with the applicable legal requirements.

f) Subscribing to and reading newsletters

To receive a newsletter from vitero GmbH, it is necessary to provide your email address and your first and last name. Before the newsletter is sent, you must confirm that we should activate the newsletter service for you through a so-called double opt-in procedure. You then receive a confirmation and automation email from us in which we ask you to click the link in the email to confirm that you want to receive our newsletter. Sendinblue is used as newsletter software. Your data will be transmitted to Sendinblue GmbH. Sendinblue is prohibited from selling your data and using it for purposes other than sending news­letters. Sendinblue is a German, certified provider, which has been selected in accordance with the requirements of the General Data Protection Regulation and the German Federal Data Protection Act. You can find more information here: de.sendinblue.com/informationen-newsletter-empfaenger/. You can withdraw your consent to receive the newsletter at any time, thereby unsubscribing from the newsletter.

We store the registration data as long as they are needed in order to send the newsletter. We store the record of the registration and the sending address as long as an interest exists in proving that consent was given originally, which is normally at most three years in accordance with the limitation periods for claims under civil law.

The legal basis for sending the newsletter is your consent in accordance with Article 6(1) sentence 1 point (a) in connection with Article 7 GDPR. The legal basis for recording the registration is our legitimate interest in proving that the newsletter was sent with your consent. You can cancel the registration at any time without incurring costs other than the transmission costs according to the basic rates. Communication in text form through the contact data in section 1 (e. g., email, fax, or letter) suffices for this purpose. You will also find an “unsubscribe” link in every newsletter, of course.

3. Cookies

We use so-called session cookies in order to optimise the user-friendliness of our website. A session cookie is a small text file which is sent from the respective servers when an Internet site is visited and is temporarily stored on your hard drive. This file as such contains a so-called session ID through which the various queries of your browser can be asso­ciated with the same session. They allow your computer to be recognised if you return to our web­site. These cookies are deleted once you close your browser. They serve to store information tempo­rarily, e. g. for statistical analyses or for the purpose of managing the connection during your visit to our website.

We also use persistent cookies (also small text files that are stored on your terminal device) to a small extent, which remain on your terminal device and allow us to recognise your browser the next time you visit. These cookies are stored on your hard drive and are deleted automatically after a set time period. Their lifespans range from one month to 10 years. They allow us to present our content to you in a more user-friendly, effective, and secure manner and show you information specifically tailored to your interests, for example.

Our legitimate interest in the use of cookies in accordance with Article 6(1) sentence point (f) GDPR consists in making our website more user-friendly, effective, and secure.

The cookies store the following data and information, for example:

  • login information
  • language settings
  • search terms entered
  • information about the number of views of our website and the use of individual functions of our Internet presence.

When the cookie is activated, it is assigned an identification number; your personal data are not associated with this identification number. Your name, IP address, or similar data that would make it possible to associate the cookie with you are not stored in the cookie. On the basis of the coo­kie, we receive only pseudonymised information, for example about which pages of our website are visited, what products/services are viewed, etc.

You can configure your browser in such a way that you are informed in advance about the setting of cookies and can decide in individual cases whether to exclude the acceptance of cookies for specific cases or in gene­ral, or to completely prevent cookies. This may restrict the functionality of the website.

Possibility of objection: If you do not want cookies to be used or want to delete existing cookies, you can disable and remove them through your Internet browser. You can find more information on deleting or blocking cookies in the help files of your browser or on the Internet, e. g. with search queries such as “disable cookies” or “delete cookies” (instruc­tions for deletion in Microsoft Internet Explorer, in Mozilla Firefox, in Safari, in Google Chrome).

Adjust Cookie settings

4. Vimeo

We use the provider Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA, for the integration of videos.

Loading and playing a Vimeo video only takes place after you have given your consent; the legal basis for the processing of your data is then Art. 6 para. 1 lit. a GDPR.

Vimeo receives the following personal data:

  • IP address,
  • Date/time of your visit,
  • Website from which you start the video.

We have integrated our Vimeo videos with the extended data protection mode. This means that cookies for recording user behaviour are only set when the video is loaded and played. We have no knowledge of and no influence on the possible collection and use of your data by Vimeo. Further information on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy

5. YouTube

We use the video platform YouTube, which is operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, for the integration of videos.

Loading and playing a YouTube video only takes place after you have given your consent, the legal basis for the processing of your data is then Art. 6 para. 1 lit. a GDPR.

YouTube receives the following personal data:

  • IP address,
  • Date/time of your visit,
  • Website from which you start the video.

Normally, your IP address is sent to YouTube and cookies are installed on your computer when you access a page with embedded videos. However, we have integrated our YouTube videos with the extended data protection mode. This means that cookies for recording user behaviour are only set when the video is played.

We have no knowledge of and no influence on the possible collection and use of your data by YouTube. Further information on the handling of user data can be found in Google’s privacy policy at: https://policies.google.com/privacy

6. Social media links

Social networks (e.g. Xing, LinkedIn and YouTube) are only integrated on our website in the form of a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

LinkedIn: https://de.linkedin.com/legal/privacy-policy
XING: https://privacy.xing.com/de/datenschutzerklaerung
YouTube: https://policies.google.com/privacy

7. Google Tag Manager

Wir setzen auf unserer Website den Google Tag Manager ein. Anbieter ist die Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Der Google Tag Manager ist ein Tool, mit dessen Hilfe wir Tracking- oder Statistik-Tools und andere Technologien auf unserer Website einbinden können. Der Google Tag Manager selbst erstellt keine Nutzerprofile, speichert keine Cookies und nimmt keine eigenständigen Analysen vor. Er dient lediglich der Verwaltung und Ausspielung der über ihn eingebundenen Tools. Durch die Verwendung des Google Tag Managers wird eine Nutzung unserer Website effizienter und schneller, da durch die Verwaltung der korrekten Tags beschleunigt wird.

Der Google Tag Manager erfasst Ihre IP-Adresse, die auch an das Mutterunternehmen von Google in die USA übermittelt werden, in der kein mit der EU vergleichbares angemessenes Datenschutzniveau besteht. Daher besteht für Sie ein Risiko eines Zugriffs von staatlicher Stelle auf diese Daten. Rechtsgrundlage für diese Datenverarbeitung ist Ihre Einwilligung gem. Art. 6 Abs. 1 lit. a DSGVO; Ihre Einwilligung ist jederzeit widerrufbar, indem Sie die Cookie-Einstellungen aufrufen.

Adjust Cookie Settings

8. Google Consent Mode

Our website uses Google Consent Mode, a function of Google, to ensure compliance with data protection regulations and cookie consent regulations. Google Consent Mode allows us to honour the consent preferences of our users, particularly in relation to the use of Google Analytics and Google Ads.

Google Consent Mode works by collecting information about whether you have consented to the use of cookies and other tracking technologies on our website. Based on this information, Google Analytics will collect and send data from your current session or not.

We use Google Consent Mode in the ‘Basic’ setting variant, so that only tracking technologies are used if you have previously consented to the use of cookies. If you have not given your consent, no information about your online activities will be passed on to Google Analytics or Google Ads.

9. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Google Analytics uses cookies to help the website analyse how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of ‘events’. Events may include: page views, first visit to the website, start of the session, interactions with the website, file downloads, adverts viewed/clicked on, language setting, your approximate location (region), your IP address (in abbreviated form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), your internet provider and the referrer URL (via which website/advertising medium you came to this website).

On behalf of the operator of this website, Google will use this information to analyse your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR; your consent can be revoked at any time by accessing the cookie settings.

Adjust cookie settings

10. Google Ads Conversion Tracking

This website also uses Google con­version tracking. In this process, Google Ads sets a cookie on your computer if you have reached our website through a Google ad. These cookies expire after 30 days and do not serve to identify you personally. If the user visits particular pages of the website of the Google Ads customer and the cookie has not yet expired, Google and the customer can see that the user has clicked the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Thus, cookies can­not be tracked across the websites of Google Ads customers. The infor­mation obtained through the con­version cookie is used to compile conversion statistics for Google Ads customers who have decided to use conversion tracking. The Google Ads customers learn the total number of users who have clicked their ad and have been redirected to a page with a conversion tracking tag. However, they receive no information that could be used to identify the user personally. If you do not want to participate in the tracking process, you can refuse to allow a cookie, which is necessary for this purpose, to be set, for example through a browser setting that disables auto­matic setting of cookies in general. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain “www.googleadservices.com”. You can find Google’s statement on data protection for conversion tracking here.

11. Your rights as the data subject

You have the right to obtain infor­mation at any time at no cost about the processing of your stored perso­nal data, the right to withdraw your consent under data protection law, the right to have the personal data concerning you transferred in a machine-readable format, and the right to rectification (if the stored data are incorrect or no longer current) or erasure of these data (“right to be forgotten”). If erasure is exceptionally not possible due to other legal requirements, the data will be locked so they are only available for the legal purpose. Furthermore, you can have the processing of your data restricted and object to the data processing in accordance with Article 6(1) point (e) or (f) GDPR. You also have the right to lodge a complaint with a supervisory authority, in parti­cular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement if you are of the opinion that the processing of personal data concerning you is unlawful.

12. Duration of storage

Unless something to the contrary is communicated or indicated, we only store personal data as long as is nece­ssary in order to fulfill the purposes pursued, or as long as we have a legitimate interest in further storage.

In all other cases, we delete your data, with the exception of such data as we must continue to store in order to comply with statutory retention periods (e.g., under tax law or commer­cial law). They are then deleted after the statutory retention period expires.

13. Right to withdraw/​right to object

Insofar as your personal data are processed on the basis of legitimate interests as per Article 6(1) sentence 1 point (f) GDPR, you have the right to object in accordance with Article 21 GDPR to processing of your personal data if grounds exist based on your particular situation, or if the objection is against direct advertising. In the latter case, you have a general right to object, which we honor without the need to indicate a particular situation. If you would like to exercise your right to withdraw or object, it suffices to send an email to datenschutz@vitero.de.

14. Further information

Your trust is important to us. There­fore, we will be happy to provide you information about the processing of your personal data. Please direct your questions to datenschutz@vitero.de.