Privacy Policy

We are very pleased about your interest in our company. Data protection is of particularly high importance to the management of VERANTEC GmbH & Co. KG. The use of the VERANTEC GmbH & Co. KG website is generally possible without providing any personal data. However, if a data subject wishes to use special services provided by our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to VERANTEC GmbH & Co. KG. By means of this privacy policy, our company would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy informs data subjects about their rights.

As the controller responsible for processing, VERANTEC GmbH & Co. KG has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed through this website. Nevertheless, internet-based data transmissions may generally contain security gaps, meaning absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.

1. Definitions

The privacy policy of VERANTEC GmbH & Co. KG is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the public, customers, and business partners alike. To ensure this, we would first like to explain the terminology used.

Within this privacy policy, we use, among others, the following terms:

a) Personal Data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b) Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for processing.

c) Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

d) Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.

e) Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.

f) Pseudonymization

Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

2. Name and Address of the Controller

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member States of the European Union, and other provisions related to data protection is:

VERANTEC GmbH & Co. KG

An der Spielleite 5

97294 Unterpleichfeld

Germany

Phone: 093679877950

Email: info@verantec.de

Website: www.verantec.de

3. Cookies

The websites of VERANTEC GmbH & Co. KG use cookies. Cookies are text files that are stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters that allows websites and servers to assign the cookie to the specific internet browser in which it was stored. This enables visited websites and servers to distinguish the individual browser of the data subject from other internet browsers containing different cookies. A specific internet browser can therefore be recognized and identified via the unique cookie ID.

Through the use of cookies, VERANTEC GmbH & Co. KG can provide users of this website with more user-friendly services that would not be possible without the use of cookies.

By means of a cookie, the information and services on our website can be optimized in the interest of the user. Cookies enable us, as already mentioned, to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to re-enter login data each time they visit the website because this is handled by the website and the cookie stored on the user’s computer system.

The data subject may prevent the setting of cookies through our website at any time by means of a corresponding setting in the internet browser used and may thus permanently object to the setting of cookies. Furthermore, cookies already set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject disables the setting of cookies in the browser used, not all functions of our website may be fully usable.

4. Collection of General Data and Information

The website of VERANTEC GmbH & Co. KG collects a series of general data and information whenever a data subject or automated system accesses the website. This general data and information is stored in the server log files.

The following may be collected:

1. Browser types and versions used
2. The operating system used by the accessing system
3. The website from which an accessing system reaches our website (so-called referrer)
4. The subpages accessed on our website
5. Date and time of access to the website
6. Internet Protocol address (IP address)
7. Internet service provider of the accessing system
8. Other similar data and information used for security purposes in the event of attacks on our information technology systems

When using this general data and information, VERANTEC GmbH & Co. KG does not draw any conclusions about the data subject. Rather, this information is needed to:

• Deliver the contents of our website correctly
• Optimize the contents of our website and advertising
• Ensure the long-term functionality of our IT systems and website technology
• Provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack

This anonymously collected data and information is therefore statistically evaluated by VERANTEC GmbH & Co. KG with the aim of increasing data protection and data security within our company and ensuring an optimal level of protection for the personal data processed by us. The anonymous data from the server log files is stored separately from all personal data provided by a data subject.

5. Registration on Our Website

The data subject has the option to register on the controller’s website by providing personal data. Which personal data is transmitted to the controller is determined by the respective input form used for registration.

The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for transfer to one or more processors, such as parcel service providers, who also use the personal data exclusively for internal purposes attributable to the controller.

By registering on the website, the IP address assigned by the internet service provider (ISP), the date, and the time of registration are also stored. This data is stored because it is the only way to prevent misuse of our services and, if necessary, enables the investigation of criminal offenses committed. In this respect, the storage of this data is necessary to secure the controller. This data is generally not disclosed to third parties unless there is a legal obligation to disclose it or the disclosure serves criminal prosecution.

The registration of the data subject by voluntarily providing personal data serves the purpose of enabling the controller to offer the data subject content or services that can only be offered to registered users due to the nature of the matter. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from the controller’s database.

The controller shall provide any data subject at any time upon request with information about which personal data concerning the data subject is stored. Furthermore, the controller shall correct or delete personal data at the request or indication of the data subject, provided there are no statutory retention obligations preventing this. All employees of the controller are available to the data subject as contact persons in this context.

6. Contact Possibility via the Website

The website of VERANTEC GmbH & Co. KG contains information required by law that enables quick electronic contact with our company as well as direct communication with us, including a general electronic mail address (email address).

If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data voluntarily transmitted to the controller is stored for the purpose of processing or contacting the data subject. This personal data is not passed on to third parties.

7. Routine Erasure and Blocking of Personal Data

The controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or insofar as this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.

If the storage purpose ceases to apply or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or erased in accordance with legal requirements.

8. Rights of the Data Subject

a) Right to Confirmation

Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether personal data concerning them is being processed.

b) Right of Access

Every data subject has the right to obtain free information at any time about the personal data stored concerning them and a copy of this information.

c) Right to Rectification

Every data subject has the right to request the immediate correction of inaccurate personal data concerning them.

d) Right to Erasure (“Right to be Forgotten”)

Every data subject has the right to request the immediate deletion of personal data concerning them if one of the legal reasons under Article 17 GDPR applies.

e) Right to Restriction of Processing

Every data subject has the right to request restriction of processing if one of the legal requirements under Article 18 GDPR applies.

f) Right to Data Portability

Every data subject has the right to receive personal data concerning them in a structured, commonly used, and machine-readable format and to transmit this data to another controller.

g) Right to Object

Every data subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them pursuant to Article 6(1)(e) or (f) GDPR.

h) Automated Individual Decision-Making, Including Profiling

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

i) Right to Withdraw Consent

Every data subject has the right to withdraw consent to the processing of personal data at any time.

9. Data Protection in Applications and the Application Process

The controller collects and processes personal data of applicants for the purpose of handling the application process. Processing may also take place electronically, particularly when an applicant submits application documents electronically, for example via email or a web form.

If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal regulations.

If no employment contract is concluded, the application documents will automatically be deleted two months after notification of the rejection decision, provided no other legitimate interests of the controller oppose deletion.

10–15. Social Media, Analytics & Third-Party Services

This website may integrate components and services from third-party providers including:

• Facebook
• Google Analytics
• Google+
• Google Ads
• Instagram
• YouTube

These services may collect, process, and store personal data such as IP addresses, browser information, user interactions, and usage behavior.

Further information regarding the collection and processing of data by these providers can be found in their respective privacy policies.

16. Legal Basis for Processing

Processing operations are based on Article 6 GDPR. Depending on the type of processing, this may include:

• Consent of the data subject
• Performance of a contract
• Compliance with legal obligations
• Protection of vital interests
• Legitimate interests pursued by the company

17. Legitimate Interests Pursued by the Controller

Where processing is based on Article 6(1)(f) GDPR, our legitimate interest is the conduct of our business activities for the benefit of all employees and shareholders.

18. Duration for Which Personal Data Is Stored

Personal data is stored for the duration required by statutory retention periods. After expiry of these periods, the corresponding data is routinely deleted unless it is still required for contract fulfillment or initiation.

19. Legal or Contractual Requirements for Providing Personal Data

The provision of personal data may be legally required or arise from contractual obligations. Failure to provide personal data may result in the inability to conclude a contract with the data subject.

20. Existence of Automated Decision-Making

As a responsible company, we do not use automated decision-making or profiling.

This privacy policy was generated using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH in cooperation with Cologne-based IT and data protection lawyer Christian Solmecke.