Privacy policy

General Information

With the following information, we would like to provide you with an overview of how we process your personal data when using the VISPIRON SYSTEMS websites at https://www.vispiron.systems and inform you about your data protection rights. The use of our pages is generally possible without entering personal data. However, if you wish to use specific services or other interaction options with us, the processing of personal data may become necessary. For example, if you send us messages, use blog functions, or subscribe to a newsletter, data must be transmitted and exchanged with various systems and servers. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain your consent. Some subdomains and services of our website are partially managed and provided through other CMS tools. As the responsible party, we always strive to ensure the most comprehensive protection of personal data processed via this website with up-to-date technical and organizational measures, just as we place great importance on security and data protection in our other processing activities. Nevertheless, internet-based data transmissions can generally have security vulnerabilities, meaning that absolute protection against unauthorized access by third parties cannot be guaranteed. For this reason, you are free to contact us by phone or mail and transmit personal data to us through these means.

 

Controller and Service Provider

VISPIRON SYSTEMS GmbH
Joseph-Dollinger-Bogen 28
80807 München
Further contact details and information can be found in our legal notice.

 

Data Protection Officer

If you have any questions regarding data processing or data protection at VISPIRON SYSTEMS GmbH, you can contact our Data Protection Officer at any time. You can reach them by postal mail at the above address (please mark the envelope with ‘Attn: Data Protection Officer’) or by email at: datenschutz@vispiron.de.

 

Legal Basis

Article 6(1)(a) DSGVO (in conjunction with Section 25(1) TDDG) serves as the legal basis for processing activities where we obtain consent for a specific processing purpose, particularly for access to end devices.

If the processing of personal data is necessary for the performance of a contract to which you are a party, such as processing operations required for ordering and delivering goods or for other services, the processing is based on Article 6(1)(b) DSGVO. The same applies to processing operations necessary for pre-contractual measures, such as inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as compliance with tax obligations, the processing is based on Article 6(1)(c) DSGVO.

Finally, processing operations may be based on Article 6(1)(f) DSGVO. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not override these interests.

 

Transfer of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

  • you have given your explicit consent for this in accordance with Article 6(1)(a) DSGVO,
  • the transfer is permissible under Article 6(1)(f) DSGVO to safeguard our legitimate interests, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
  • there is a legal obligation for the transfer under Article 6(1)(c) DSGVO, or
  • it is legally permissible and necessary under Article 6(1)(b) DSGVO for the performance of contractual relationships with you.

As part of the processing activities described in this privacy policy, personal data may be transferred to the USA. Companies in the USA only have an adequate level of data protection if they are certified under the EU-US Data Privacy Framework, and thus the adequacy decision of the European Commission pursuant to Article 45 DSGVO applies. We have explicitly identified such service providers in this privacy policy. To protect your data in all other cases, we have entered into data processing agreements based on the European Commission’s standard contractual clauses. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent under Article 49(1)(a) DSGVO may serve as the legal basis for the transfer to third countries. This does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision pursuant to Article 45 DSGVO.

 

Technology

SSL/TLS Encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as contact inquiries you send to us as the operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser’s address bar. We use this technology to protect the data you transmit.

 

Data collection when visiting the website

When you use our website for informational purposes only, meaning without registering or otherwise transmitting information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). Each time you access a page on our website, either manually or through an automated system, a series of general data and information is collected. This general data and information is stored in the server’s log files. The following may be collected:

  • The browser types and versions used
  • The operating system used by the accessing system
  • The website from which an accessing system reaches our website (so-called referrer)
  • The subpages accessed via an accessing system on our website
  • The date and time of access to the website
  • An Internet Protocol (IP) address, and
  • the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your identity. Instead, this information is needed to:

  • deliver the content of our website correctly
  • optimize the content of our website and its advertising
  • ensure the long-term functionality of our IT systems and the technology of our website, and
  • provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack

The data and information collected are therefore evaluated statistically and with the aim of increasing data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The data in the server log files are stored separately from any personal data provided by the data subject.

The legal basis for data processing is Article 6(1)(f) DSGVO. Our legitimate interest arises from the purposes for data collection listed above.

 

Hosting by Timme Hosting

We host our website with Timme Hosting GmbH & Co. KG, Ovelgönner Weg 43, 21335 Lüneburg, Germany (hereinafter referred to as Timme Hosting). When you visit our website, your personal data (e.g., IP addresses in log files) is processed on Timme Hosting’s servers. The use of Timme Hosting is based on Article 6(1)(f) DSGVO. We have a legitimate interest in ensuring the most reliable presentation, provision, and security of our website.

We have entered into a Data Processing Agreement (DPA) pursuant to Article 28 DSGVO with Timme Hosting. This is a data protection legally required contract that ensures Timme Hosting processes the personal data of our website visitors only in accordance with our instructions and in compliance with the DSGVO. The management of the servers is carried out by us. Timme Hosting is authorized to determine the server location through third-party providers, such as Hetzner, within the EU.

Timme Hosting’s privacy policy: https://timmehosting.de/datenschutz.

 

jsDelivr

Our website integrates components of jsDelivr, operated by the provider Prospect One, Królewska 65A/1, PL-30-081 Kraków, Poland. We use the open-source service jsDelivr on our website to deliver content to users’ devices as quickly and technically flawlessly as possible. jsDelivr is a Content Delivery Network (CDN) that distributes the content of our website across various servers to ensure optimal global accessibility. A CDN typically uses servers that are geographically close to the respective website user. Therefore, it can be assumed that users within the EU are served content via servers located within the EU.

To provide the content, jsDelivr collects user data such as IP addresses. According to the provider, jsDelivr does not use cookies or similar tracking technologies but is solely necessary for the technical purposes mentioned above.

The data processing is based on your consent pursuant to Article 6(1)(a) DSGVO.

jsDelivr’s privacy policy: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

 

General information about cookies

We use cookies on our website. These are data records containing information that your browser automatically creates and stores on your IT system or device (laptop, tablet, smartphone, etc.) when you visit our site. The cookie stores information related to the specific device being used. However, this does not mean that we can directly identify you through this information.

The use of cookies serves, on the one hand, to make the use of our services more convenient for you. For example, we use session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted after you leave our site. Additionally, we use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, predefined period. If you visit our site again to use our services, it will automatically recognize that you have already been here and recall the inputs and settings you made, so you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you. These cookies allow us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period. The specific storage duration of the cookies can be found in the settings of our consent tool.

 

Instructions for Avoiding Cookies in Common Browsers

Through the settings of your browser, you can delete cookies, allow only selected cookies, or completely disable cookies at any time. For more information, please visit the support pages of the respective providers:

Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

 

Legal basis for the use of cookies

The data processed through cookies, which are necessary for the proper functioning of the website, are required to safeguard our legitimate interests as well as those of third parties in accordance with Article 6(1)(f) DSGVO. For all other cookies, your consent has been obtained via our opt-in cookie banner in accordance with Article 6(1)(a) DSGVO.

 

Usercentrics (Consent Management Tool)

We use the consent management tool “Usercentrics” provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This service enables us to obtain and manage the consent of website users for data processing. Usercentrics collects data generated by end users who use our website. When an end user provides consent, the following data is automatically logged by Usercentrics:

  • Browser information
  • Date and time of access
  • Device information
  • URL of the visited page
  • Geographical location
  • Page path of the website
  • Consent status of the end user, which serves as proof of consent

The consent status is also stored in the end user’s browser, allowing the website to automatically read and comply with the user’s consent for all subsequent page requests and future user sessions for up to 12 months. Consent data (consent and withdrawal of consent) is stored for three years. This retention period corresponds to the regular statute of limitations under Section 195 of the German Civil Code (BGB). The data is then immediately deleted or provided to the responsible party upon request in the form of a data export.

The functionality of the website cannot be guaranteed without the described processing. Users do not have the option to object as long as there is a legal obligation to obtain user consent for certain data processing activities (Article 7(1), Article 6(1)(c) DSGVO).

Usercentrics is the recipient of your personal data and acts as a data processor on our behalf. Detailed information about the use of Usercentrics can be found at: https://usercentrics.com/privacy-policy/

When you contact us (e.g., via contact form or email), personal data will be collected. The specific data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis for processing the data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) DSGVO. If your contact aims at concluding a contract, an additional legal basis for processing is Article 6(1)(b) DSGVO.

Your data will be deleted once your inquiry has been fully resolved, provided that the circumstances indicate that the matter in question has been conclusively clarified and there are no statutory retention obligations that prevent deletion.

We offer users on our blog, which we operate via HubSpot, the opportunity to leave individual comments on specific blog posts. Additionally, we maintain a topic-specific blog on technical project management as well as sustainable energy and electromobility to inform our audience about these specific areas.

A blog is a publicly accessible portal hosted on a web server, where we post articles or share thoughts in so-called blog posts. Blog posts can generally be commented on by third parties unless we disable this function for specific posts.

If you leave a comment on the blog published on this website, the comment you provide, along with the time of submission, the username you choose, and the email address you provide, will be stored and may be published. Additionally, the IP address assigned to you by your Internet Service Provider (ISP) will also be logged. The storage of the IP address is carried out for security reasons and in case your comment infringes on the rights of third parties or contains unlawful content. The storage of this personal data is therefore in our legitimate interest to exculpate ourselves in the event of a legal violation. This constitutes a legitimate interest within the meaning of Article 6(1)(f) DSGVO.

The personal data collected will not be shared with third parties unless such disclosure is required by law or serves our legal defense.

We also protect form submissions technically, including through the use of Google’s reCAPTCHA function.

We collect and process the personal data of applicants for the purpose of managing the application process. Processing may also occur electronically, particularly if you submit your application documents to us electronically, for example, via email, web forms, or third-party platforms.

If we conclude an employment or service contract with an applicant, the transmitted data will be stored for the purpose of managing the employment relationship in compliance with legal requirements. If no contract is concluded with the applicant, the application documents will be automatically deleted two months after the rejection decision is communicated, provided that no other legitimate interests on our part oppose the deletion. Such a legitimate interest could, for example, be the need to provide evidence in a procedure under the General Equal Treatment Act (AGG).

The legal basis for processing application data is the necessity for pre-contractual measures related to the employment relationship pursuant to Article 6(1)(b) DSGVO. Additionally, if consent has been provided, the legal basis is Article 6(1)(a) DSGVO (e.g., for the voluntary retention of application data based on explicit consent). This consent can be withdrawn at any time with future effect.

Application data is shared within our company only with individuals involved in processing your application, typically from the HR department and the relevant specialist department.

For our application process, we use an externally hosted professional HR platform provided by Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany. Through this platform, we can manage and integrate job offers on our website and other channels. We have entered into a Data Processing Agreement (DPA) with Personio. This is a data protection agreement required by law to ensure that Personio processes the personal data of our applicants only in accordance with our instructions and in compliance with the DSGVO.

Detailed information about data processing when visiting or being redirected to their platform is provided in separate privacy notices. Personio’s privacy policy can be found here:
https://www.personio.de/datenschutzerklaerung/.

Newsletter

On our website, you have the opportunity to subscribe to newsletters from VISPIRON. The personal data transmitted to us when ordering the newsletter is determined by the input form used for this purpose.

We regularly inform our customers and business partners about our offers via a newsletter. You can only receive our company’s newsletter if you have a valid email address and have registered for the newsletter. For legal reasons, a confirmation email will be sent to the email address you initially provided for the newsletter subscription using the double opt-in procedure. This confirmation email is used to verify whether you, as the owner of the email address, have authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by your Internet Service Provider (ISP) to the IT system you used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace any (potential) misuse of your email address at a later date and therefore serves our legal protection.

The personal data collected during newsletter registration is used exclusively for sending our newsletter. Additionally, newsletter subscribers may be informed via email if this is necessary for the operation of the newsletter service or registration, such as in the case of changes to the newsletter offer or technical adjustments.

The personal data collected as part of the newsletter service will not be shared with third parties. You can cancel your subscription to our newsletter at any time. The consent to store personal data that you have provided for the newsletter can be withdrawn at any time. For the purpose of withdrawing consent, a corresponding link is included in every newsletter. Additionally, you can unsubscribe from the newsletter directly on our website or notify us in another way.

The legal basis for sending the newsletter is your explicit consent pursuant to Article 6(1)(a) DSGVO.

 

Whitepapers

On our website, you have the opportunity to request whitepapers from VISPIRON. The personal data transmitted to us when requesting a whitepaper is determined by the input form used for this purpose.

We provide our customers and business partners with informative whitepapers that describe a specific topic, problem, or solution in detail. You can only receive such whitepapers from our company if you have a valid email address and have registered to receive them. For legal reasons, a confirmation email will be sent to the email address you initially provided for the whitepaper request using the double opt-in procedure. This confirmation email is used to verify whether you, as the owner of the email address, have authorized the receipt of the whitepaper.

When requesting a whitepaper, we also store the IP address assigned by your Internet Service Provider (ISP) to the IT system you used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace any (potential) misuse of your email address at a later date and therefore serves our legal protection.

The personal data collected during the whitepaper request is used exclusively for sending the whitepaper. Additionally, whitepaper recipients may be informed via email if this is necessary for sending the whitepaper or registration, such as in the case of technical adjustments.

The personal data collected as part of the whitepaper request will not be shared with third parties. The consent to store personal data that you have provided for the whitepaper request can be withdrawn at any time. For the purpose of withdrawing consent, a corresponding link is included in every email.

The legal basis for sending whitepapers is your explicit consent pursuant to Article 6(1)(a) DSGVO.

We use HubSpot for sending newsletters. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. Email: hubspotgermany@hubspot.com. HubSpot is a service that allows, among other things, the organization and analysis of newsletter distribution. The data you enter for the purpose of subscribing to the newsletter is stored on HubSpot’s servers within the EU.

If you do not wish to have your data analyzed by HubSpot, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Additionally, you can unsubscribe directly on our website. You can withdraw your consent at any time with future effect. You can also prevent the processing by unsubscribing from the newsletter. Furthermore, you can prevent the storage of cookies by adjusting your web browser settings. Please note that these measures may result in some functions of our website no longer being available.

With the help of HubSpot, we can analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links were clicked, if any. This allows us to determine which links are particularly popular. Additionally, we can track whether certain predefined actions were taken after opening or clicking the newsletter (conversion rate). For instance, we can see whether you interacted with the content of the newsletter after clicking on it.

HubSpot also enables us to categorize newsletter recipients into different groups (so-called “clustering”). For example, newsletter recipients can be divided based on their areas of interest. This allows us to tailor newsletters more effectively to specific target groups.

Detailed information about HubSpot’s features and data protection can be found at the following link: https://legal.hubspot.com/de/privacy-policy.

The data processing is based on your consent pursuant to Article 6(1)(a) DSGVO. You can withdraw this consent at any time. The legality of the data processing operations already carried out remains unaffected by the withdrawal.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and HubSpot’s servers after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

We offer you the opportunity to schedule appointments with us through various interfaces. For appointment scheduling, we use the HubSpot CRM Meeting Tool, which helps us simplify and automate the appointment booking process. The provider is HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot CRM).

To schedule an appointment, you enter the requested data and your preferred date into the designated form. The data you provide will be used for planning, conducting, and, if necessary, following up on the appointment. The appointment data is stored on the provider’s servers for us.

The data you enter will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory legal provisions – particularly retention periods – remain unaffected.

The use of HubSpot CRM is based on Article 6(1)(f) DSGVO. The website operator has a legitimate interest in efficient customer management and communication. If consent is requested, the processing is carried out exclusively on the basis of Article 6(1)(a) DSGVO; consent can be withdrawn at any time.

We have entered into a Data Processing Agreement (DPA) with HubSpot CRM. Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.

HubSpot’s privacy policy can be found here: https://legal.hubspot.com/de/privacy-policy.

To communicate with you on social networks and inform you about our services, we maintain our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered by your visit, as defined in Article 26 DSGVO. We are not the original provider of these pages but use them within the scope of the possibilities offered by the respective providers.

We would like to point out that your data may also be processed outside the European Union (EU) or the European Economic Area (EEA). This use may involve data protection risks for you, as it may be more difficult to enforce your rights (e.g., access, deletion, objection, etc.), and processing on social networks often occurs directly for advertising purposes or to analyze user behavior by the providers, which we cannot influence. If usage profiles are created by the provider, cookies are often used, or the usage behavior is linked to your own member profile on the social networks.

The described processing of personal data is carried out in accordance with Article 6(1)(f) DSGVO based on our legitimate interest and the legitimate interest of the respective provider to communicate with you in a contemporary manner and inform you about our services. If you are required to give consent to data processing as a user with the respective providers, the legal basis is Article 6(1)(a) DSGVO in conjunction with Article 7 DSGVO.

Since we do not have access to the providers’ data inventories, we recommend that you exercise your rights (e.g., access, rectification, deletion, etc.) directly with the respective provider. Below, we provide further information about the processing of your data on the social networks we use:

 

Facebook
Joint controller for data processing in Europe:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy: https://www.facebook.com/about/privacy

 

LinkedIn
Joint controller for data processing in Europe:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy

 

LinkedIn Plugin

We have integrated components of LinkedIn Corporation on this website. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and establish new business relationships. The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For data protection matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time you access a page on our website that contains a LinkedIn component (LinkedIn Plugin), this component causes the browser you are using to download a corresponding representation of the component from LinkedIn. Further information about LinkedIn plugins can be found at https://developer.linkedin.com/plugins.

As part of this technical process, LinkedIn is informed about which specific subpage of our website you visited. If you are logged into LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website you are visiting each time you access our website and for the entire duration of your visit. This information is collected by the LinkedIn component and assigned to your LinkedIn account by LinkedIn. If you click on a LinkedIn button integrated into our website, LinkedIn assigns this information to your personal LinkedIn user account and stores this personal data.

LinkedIn receives information via the LinkedIn component that you have visited our website whenever you are logged into LinkedIn at the time of accessing our website, regardless of whether you click on the LinkedIn component or not. If you do not want this information to be transmitted to LinkedIn, you can prevent the transmission by logging out of your LinkedIn account before accessing our website.

As part of processing via LinkedIn, data may be transferred to the USA and Singapore. This US company is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures. Furthermore, the security of the transfer is regularly ensured through so-called Standard Contractual Clauses, which guarantee that the processing of personal data is subject to a level of security equivalent to that of the DSGVO. If the Standard Contractual Clauses are insufficient to establish an adequate level of security, consent pursuant to Article 49(1)(a) DSGVO will be obtained from you.

The processing of personal data via social media buttons occurs exclusively with your explicit consent in accordance with Article 6(1)(a) DSGVO. LinkedIn offers the option to unsubscribe from email messages, SMS messages, and targeted ads, as well as to manage ad settings, at https://www.linkedin.com/psettings/guest-controls.

LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy.

LinkedIn’s applicable privacy policy can be found at https://www.linkedin.com/legal/privacy-policy.
LinkedIn’s cookie policy can be found at https://www.linkedin.com/legal/cookie-policy.

LinkedIn Pixel (Insight Tag)

This website uses LinkedIn Insights provided by LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (LinkedIn). With explicit consent, user behavior can be tracked. This process is used to evaluate the effectiveness of advertisements for statistical and market research purposes and can help optimize future advertising campaigns. Through the LinkedIn Pixel, we receive detailed information about the interests of our product users, such as job titles, employers, or the industries they work in.

When visiting the website, the following data may be processed by the LinkedIn Pixel:

  • IP address
  • Interactions on our website (e.g., page views, clicks, conversions)
  • Browser type/version
  • Operating system used
  • Referrer URL (previously visited page)
  • Time of the server request

Direct identifiers are automatically removed from the data set by LinkedIn within seven days, and the data is deleted after 180 days. The storage duration of cookies can be found in our consent solution. The data is stored and processed by LinkedIn, making it possible to link it to the respective user profile. These processing operations occur exclusively with explicit consent pursuant to Article 6(1)(a) DSGVO.

LinkedIn is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures. Further information and LinkedIn Pixel’s privacy policy can be found at: https://de.linkedin.com/legal/privacy-policy.

 

Meta Pixel

This website uses the “Facebook Pixel” provided by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Meta”). With explicit consent, user behavior can be tracked after they have viewed or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimize future advertising campaigns.

When visiting the website, the following data may be processed by the Meta Pixel:

  • IP address
  • Device information
  • Browser history
  • Interactions on our website (e.g., page views, clicks, conversions)

The data is stored and processed by Meta, making it possible to link it to the respective user profile. Meta may use the data for its own advertising purposes in accordance with Meta’s Data Use Policy (https://www.facebook.com/about/privacy/). This allows Meta and its partners to display advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

The collected data is stored by Meta for 180 days and then deleted unless the website is revisited by the user. These processing operations occur exclusively with explicit consent pursuant to Article 6(1)(a) DSGVO.

Meta is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

 

Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4) on our websites, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymized user profiles are created, and cookies (see “Cookies”) are used. The information generated by the cookie about your use of this website may include:

  • A short-term collection of the IP address without permanent storage
  • Location data
  • Browser type/version
  • Operating system used
  • Referrer URL (previously visited page)
  • Time of the server request

The pseudonymized data may be transmitted to and stored on a server in the USA. The information is used to evaluate website usage, compile reports on website activities, and provide other services related to website and internet usage for market research and demand-oriented website design.

These processing operations occur exclusively with explicit consent pursuant to Article 6(1)(a) DSGVO. Google’s default data retention period is 14 months. Personal data is otherwise retained as long as necessary to fulfill the processing purpose and is deleted once it is no longer required.

Google LLC, as a US company, is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures. Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

 

Google Analytics Remarketing

We use Google Remarketing services on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing is a feature of Google Ads that allows companies to display advertisements to internet users who have previously visited their website.

The purpose of Google Remarketing is to display interest-based advertisements. Google Remarketing enables us to show advertisements tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on the user’s IT system. This cookie allows Google to recognize visitors to our website when they subsequently visit websites that are also part of the Google advertising network.

These processing operations occur exclusively with explicit consent pursuant to Article 6(1)(a) DSGVO. Google LLC is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures. Further information on Google Remarketing can be found at: https://www.google.de/intl/de/policies/privacy/.

 

Hotjar

This website uses Hotjar, provided by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

Hotjar is a tool for analyzing user behavior on this website. Hotjar allows us to record mouse and scroll movements and clicks, among other things.

These processing operations occur exclusively with explicit consent pursuant to Article 6(1)(a) DSGVO. Further information on Hotjar’s privacy policy can be found at: https://www.hotjar.com/legal/policies/privacy/.

Google Ads (AdWords) Remarketing/Retargeting

We have integrated Google Ads on this website. The service provider for Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Through Google Ads, we advertise this website in Google search results and on third-party websites. For this purpose, Google places a cookie in your browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.

Further data processing only occurs if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you view on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target audiences.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO.

Google LLC, as a US company, is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

For more information and Google’s privacy policy regarding Google Ads, please visit: https://www.google.com/policies/technologies/ads/.

 

Google AdSense

We have integrated Google AdSense on this website. The service provider for Google AdSense is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google AdSense is an online service that facilitates the placement of advertisements on third-party websites. Google AdSense uses an algorithm to select advertisements displayed on third-party websites based on their content. Google AdSense also enables interest-based targeting of internet users through the creation of individual user profiles.

The purpose of Google AdSense is to integrate advertisements on our website.

Google AdSense places a cookie on your IT system. This cookie allows Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, to analyze the use of our website. Each time you access a page on our website that contains a Google AdSense component, your browser is automatically prompted by the respective Google AdSense component to transmit data to Alphabet Inc. for the purpose of online advertising and commission settlement.

As part of this technical process, Alphabet Inc. gains knowledge of personal data, such as your IP address, which Alphabet Inc. uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements. Google AdSense also uses so-called web beacons. A web beacon is a small graphic embedded in websites to enable log file recording and analysis, which allows statistical evaluations.

Through the embedded web beacon, Alphabet Inc. can determine whether and when a website was accessed by your IT system and which links were clicked. Web beacons are used, among other things, to evaluate visitor traffic on a website.

Through Google AdSense, personal data and information, including the IP address, are transmitted to Alphabet Inc. in the USA and stored there. Alphabet Inc. may share this personal data collected through the technical process with third parties.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO and Section 25(1) TTDSG (German Telecommunications-Telemedia Data Protection Act), which governs the use of cookies and other tracking technologies.

Alphabet Inc. is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

You can withdraw your consent at any time via the cookie settings on our website.

For more information about Google AdSense and data protection, please visit:
Google AdSense Privacy Policy and Google Privacy Policy.

 

Google Ads with Conversion Tracking

We have integrated Google Ads on this website. The service provider for Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an internet advertising service that allows advertisers to display ads in Google search results and the Google advertising network.

Google Ads enables advertisers to define specific keywords in advance, which trigger the display of an ad in Google’s search results only when a user retrieves a keyword-relevant search result. In the Google advertising network, ads are distributed to topic-relevant websites using an automated algorithm and based on the predefined keywords.

The purpose of Google Ads is to promote our website by displaying interest-based advertisements on third-party websites and in Google’s search results, as well as displaying third-party advertisements on our website.

If you access our website via a Google ad, Google places a so-called conversion cookie on your IT system. A conversion cookie expires after 30 days and is not used to identify you. If the cookie has not expired, it allows us and Google to track whether specific subpages, such as the shopping cart of an online shop, were accessed on our website.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users referred to us via Ads ads, to assess the success or failure of the respective Ads ad, and to optimize our Ads ads for the future.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO.

Google LLC is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

For more information about Google Ads and data protection, please visit: https://www.google.de/intl/de/policies/privacy/.

 

Google Ads – Additional Information on Consent Mode

Under the Digital Markets Act, Google is required to obtain user consent before processing user data for personalized advertising. Google complies with this requirement through the “Consent Mode.”

We use the simple implementation method of Google’s Consent Mode. Only if you provide your consent for the use of Google Ads will a connection to Google be established, a Google code executed, and the above-described processing carried out. If you refuse consent, Google will only receive information that no consent was given. The Google code will not be executed, and no Google Ads cookies will be set.

Google reCAPTCHA

We use the reCAPTCHA function on this website. The service provider for Google reCAPTCHA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The reCAPTCHA function is primarily used to distinguish whether an input is made by a natural person or abusively through automated or machine processing. The service also involves the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO.

Google LLC, as a US company, is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

 

Google Tag Manager

We use the Google Tag Manager service on this website. The service provider for Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This tool allows “website tags” (i.e., keywords embedded in HTML elements) to be implemented and managed via an interface. Using Google Tag Manager, we can automatically track which button, link, or personalized image you clicked on and record which content on our website is of particular interest to you.

The tool also triggers other tags that may, in turn, collect data. Google Tag Manager does not access this data. If you have disabled tracking at the domain or cookie level, this setting will remain in effect for all tracking tags implemented with Google Tag Manager.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO.

Google LLC, as a US company, is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

Further information about Google Tag Manager and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

 

HubSpot CRM System

We use the CRM software provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA (“HubSpot”). HubSpot is a CRM software solution for managing customer relationships and includes the following features:

  • Deal management, lead management, and task management
  • Email tracking and notifications
  • Email templates and appointment scheduling
  • Document sharing
  • Online appointment booking system
  • Telephony solutions such as automatic call recording and logging

All departments (including marketing, sales, customer service, and online and offline retail) work together using this software.

The provider of HubSpot necessarily gains access to the aforementioned data as part of our data processing agreement (Article 28 DSGVO) with HubSpot. This may include names, addresses, email addresses, and phone numbers. As a result, personal data may also be processed in a third country (outside the EU and EEA).

If consent is obtained, processing is based exclusively on Article 6(1)(a) DSGVO. The legal basis for using HubSpot in the context of contractual relationships is Article 6(1)(b) DSGVO. In all other cases, the legal basis for processing your personal data is Article 6(1)(f) DSGVO, as we have a legitimate interest in effectively coordinating internal and external communication and managing customer relationships.

To the extent that HubSpot processes personal data in connection with its own legitimate business operations, HubSpot acts as an independent data controller and is responsible for complying with applicable laws and obligations as a data controller.

HubSpot is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

HubSpot’s privacy policy can be found at: https://legal.hubspot.com/de/privacy-policy.

 

Use of WPML (WordPress Multilingual Plugin)

Our website uses the WordPress plugin WPML (WordPress Multilingual Plugin) provided by OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong, to provide multilingual content. WPML uses an essential cookie to store the language setting selected by the user. This cookie is necessary to ensure the correct display of the website in the chosen language and to save the user’s preferred language. WPML does not store any additional personal data.

Processing is based on Article 6(1)(f) DSGVO (legitimate interest), as the use of the plugin is necessary to provide a user-friendly display of our content in different languages.

Further information about WPML’s data processing can be found at: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/.

 

YouTube (Videos)

We have integrated components of YouTube on this website. The service provider for YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube is an internet video portal that allows video publishers to upload video clips for free and other users to view, rate, and comment on them for free. YouTube permits the publication of all types of videos, including complete films, TV shows, music videos, trailers, and user-generated content.

Each time you access a page on our website that contains a YouTube component (YouTube video), your browser is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube.

If you are logged into YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting. This information is collected by YouTube and Google and assigned to your YouTube account.

These processing operations occur exclusively with your explicit consent pursuant to Article 6(1)(a) DSGVO.

Google LLC, as a US company, is certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 DSGVO exists, allowing the transfer of personal data without additional guarantees or measures.

YouTube’s privacy policy can be found at: https://www.google.de/intl/de/policies/privacy/.

Your Rights as a Data Subject

Right to Confirmation – You have the right to request confirmation from us as to whether personal data concerning you is being processed.

Right of Access pursuant to Article 15 DSGVO – You have the right to obtain, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data, in accordance with legal provisions.

Right to Rectification pursuant to Article 16 DSGVO – You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Right to Erasure pursuant to Article 17 DSGVO – You have the right to request that we delete personal data concerning you without undue delay, provided that one of the legally stipulated reasons applies and the processing or storage is not required.

Right to Restriction of Processing pursuant to Article 18 DSGVO – You have the right to request the restriction of processing from us if one of the legal conditions is met.

Right to Data Portability pursuant to Article 20 DSGVO – You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO or on a contract pursuant to Article 6(1)(b) DSGVO and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) DSGVO, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

Right to Object pursuant to Article 21 DSGVO – You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, which is based on Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) DSGVO. This also applies to profiling based on these provisions as defined in Article 4(4) DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

In individual cases, we process personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such marketing purposes. This also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Additionally, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Right to Withdraw Consent under Data Protection Law – You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data. A list of contact details for data protection officers in the federal states and supervisory authorities for the non-public sector, as well as in other countries, can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information (BfDI) under “Addresses and Links.”

 

Automated Decision-Making & Profiling

We do not use profiling as defined in Article 22 DSGVO in connection with the use of our websites.

 

Storage, Deletion, and Blocking

We process and store your personal data only for the period necessary to achieve the storage purpose or as required by the legal provisions to which our company is subject. If the storage purpose ceases to apply or a legally prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of the period, the corresponding data will be routinely deleted, provided it is no longer required for the fulfillment of a contract or the initiation of a contract.

 

Further Data Protection Questions

If you have further questions, comments, or other inquiries regarding your personal data that are not answered here, please contact us using our contact details.

 

Disclaimer Regarding Translations

This document is a translation of the original German version. It is provided for informational purposes only and is not legally binding. In the event of any discrepancies or inconsistencies between the German version and this translation, the German version shall prevail. VISPIRON SYSTEMS GmbH assumes no liability for errors or omissions in the translation.