Data Privacy Policy

1) Information about the collection of personal data and contact details of the controller

1.1) We are delighted that you are visiting our website and we would like to thank you for your interest. Below, we would like to inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2) The controller responsible for data processing on this website in terms of the General Data Protection Regulation (GDPR) is VTA Software & Service GmbH, An der Landwehr 2, 45883 Gelsenkirchen, Germany, tel.: +49 209 9515 400, fax: +49 209 9515 425, email: info@vta-software.de. The person responsible for the processing of personal data is any natural or legal person who decides, alone or together with others, on the purposes and means of processing personal data.

1.3) For security reasons and to protect the transfer of personal data and other confidential content (e.g. orders or queries to the controller), this website uses SSL and TLS encryption. You can recognise an encrypted connection if you see the character string “https://” and the lock symbol in your browser title bar.

1.4) Data Protection Officer
Statutory data protection officer
We have appointed a data protection officer for our company.

GiT Systems GmbH
Claus Büse
Ludwig-Erhard-Str. 3
45891 Gelsenkirchen
Telefon: +49 (0) 209 70 90 0
E-Mail: datenschutz@vta-software.de

2) Data collection when using our website

When you merely use our website for information purposes, e.g. if you do not register or send us any information, we will only collect the data that your browser transmits to our server (so-called server log files). When you access our website, we will collect the following data, which is technically necessary for us in order to display the website to you:

Our visited website
Date and time of access
Amount of sent data in bytes
Source/reference from which you reached our website
Browser used
Operating system used
IP address used (if applicable, in anonymised form)

The processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to subsequently check the server log files should there be specific indications of unlawful use.

3) Cookies

In order to make visiting our website attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are deposited on your end device. Some of the cookies we use are deleted again after the end of the browser session (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third-party providers) to recognise your browser again the next time you visit (persistent cookies). When cookies are placed, they individually collect certain user information such as browser and location data, as well as IP address values. Persistent cookies are automatically erased after a given length of time, which may vary depending on the cookie.

If personal data is also processed by cookies implemented individually by us, the processing will take place in accordance with Art. 6(1)(f) GDPR for the safeguarding of our legitimate interests in the best possible functionality of the website and a customer-friendly, effective design of the site visit.

Under certain circumstances, we work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies will also be placed on your hard drive in this case when you visit (cookies from third-party providers). If we work together with the above-mentioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the respectively collected information within the below paragraphs.

Please note that you can set your browser so that you will be informed about the placing of cookies and decide individually to accept them for certain cases or exclude them completely. Every browser has different cookie setting configurations. This is described in the help menu of every browser, which will explain to you how you can change your cookie settings. You will find them for the respective browser under the following links:

Internet Explorer: windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: support.google.com/chrome/bin/answer.py

Safari: support.apple.com/kb/ph21411

Opera: help.opera.com/Windows/10.20/de/cookies.html

Please note that not accepting cookies may restrict the functionality of our website.

4) Making contact

When establishing contact with us (e.g. via the contact form or email), personal data will be collected. Which data that is collected in a particular contact form can be seen in the respective contact form. This data will be used solely for the purpose of responding to your concern or stored and used for contacting you or for the associated technical administration. The legal basis for the data processing is our legitimate interest in responding to your concern in accordance with Art. 6(1)(f) GDPR. If you contact us in order to enter into a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be erased after the subsequent processing of your query; this is the case if the circumstances indicate that the issue has been resolved and provided that no statutory retention obligations contradict it.

5) event photography

In the context of events, photographs may be taken by a photographer in order to report on the event afterwards in the press, on our website and on our channels on the social media platforms LinkedIn, Facebook and Instagram.

5.1) Purposes and legal basis of processing

Your image recordings will be processed exclusively for the purposes stated above - press and online coverage of the event.

We also process your data in the context of images documenting our event on the basis of our legitimate interest to report on our event. The legal basis for this is Article 6 (1) (f) GDPR.

5.2) Recipients of your data and data transfer to third countries

The recordings are stored within VTA Software & Service GmbH and potentially at service providers used by VTA S&S. They are also processed on the channels used for publication.

In the context of storing your data, we use Microsoft 365, a service of Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland (hereinafter "Microsoft Ireland"). Microsoft Ireland is a subsidiary of Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052-6399, USA (hereinafter "Microsoft"). We cannot exclude that your data will be transmitted to Microsoft servers in the USA.

Please note that an adequate level of data protection within the meaning of Art. 45 GDPR cannot currently be guaranteed in the USA. Possible risks of processing your data in the USA are that access to your data by governmental authorities, such as security authorities and/or intelligence services cannot be excluded and that your data may be processed by these entities without your knowledge and without an enforceable legal remedy.

Any data transfers to the U.S. will be made on the basis of Article 46(2)(c) GDPR and will be subject to the EU Standard Contractual Clauses entered into between Microsoft Ireland and Microsoft (available at www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA).For more information about data protection at Microsoft, please visit: learn.microsoft.com/en/compliance/regulatory/gdpr

5.3) Duration of storage of personal data

We will process the recordings made until you revoke your consent or object to the processing of your data and then delete them immediately, but no later than 3 years after collection.

Important notice: Information on the Internet is accessible worldwide and can be found using search engines and linked to other information, from which personality profiles can be created under certain circumstances. Information published on the Internet, including photos, can easily be copied and processed. There are specialized archiving services whose aim is to permanently document the state of certain websites on specific dates. This may mean that information published on the Internet can still be found elsewhere even after it has been deleted from the original site.

Please note that our Internet pages and social media profiles are also accessible to search engines. You must therefore expect that your image will also be found by search engines.

6) Tools and other

6.1) Google Maps

On our website, we use Google Maps (API) by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for the presentation of interactive (land) maps for the visual depiction of geographical information. When using this service, our location will be shown to you and any journey will be made easier.

When you access the subpages in which the Google Maps map is included, information about your use of the website (e.g. your IP address) will be sent to Google servers in the USA, where it will be stored. This takes place regardless of whether Google provides a user account via which you are logged into or whether there is no user account. If you are logged into Google, your data will be directly matched with your account. If you do not want your profile to be matched by Google, you must log out before activating the button. Google will store your data (even that of users who are not logged in) as a user profile and analyse it. Such an analysis will take place in accordance with Art. 6(1)(f) GDPR in particular on the basis of the legitimate interests of Google in the inclusion of personalised advertisements, market research and/or the needs-based design of its website. You have a right to object to the formation of these user profiles, for assertion of which you should contact Google.

If you do not agree to the future transmission of your data to Google during the use of Google Maps, there is also the opportunity to completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and therefore also the map display on this website can then not be used.

The Google terms and conditions of use can be seen at www.google.de/intl/de/policies/terms/regional.html; the additional terms and conditions of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html.

Detailed information about data privacy in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): www.google.de/intl/de/policies/privacy/.

7) Rights of the data subject

7.1) The applicable data protection law grants you comprehensive rights against the data controller regarding the processing of your personal data (information and intervention rights), about which we would like to inform you below:

Right of access in accordance with Art. 15 GDPR: You have the right in particular to information about your personal data that is processed by us, the purposes of the processing, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration and criteria for setting storage durations, the existence of a right to rectification, erasure, restriction of processing, objection to the processing, to lodge a complaint with a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of an automated decision-making process including profiling and, if applicable, meaningful information about the involved logic and the consequences concerning you plus the intended effects on such processing, as well as a right to be informed which guarantees exist in accordance with Art. 46 GDPR in the case that your data is forwarded to third countries.
Right to rectification in accordance with Art. 16 GDPR: You have the right to the immediate rectification of incorrect data and/or completion of your incomplete data stored by us.
Right to erasure in accordance with Art. 17 GDPR: You have the right to demand the erasure of your personal data should the prerequisites under Art. 17(1) GDPR exist. However, this right does not exist if the processing is necessary to exercise the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to demand the restriction of processing of your personal data, as long as the accuracy of your data in dispute is being examined, if you reject the erasure of your data due to unauthorised data processing and request the restriction of processing of your data instead, if you require your data for the establishment, exercise or defence of legal claims, once we have achieved our objective and no longer require this data, or if you have submitted an objection for reasons of your specific situation, as long as it has not yet been determined whether our legitimate reasons override yours.
Right to be informed in accordance with Art. 19 GDPR: If you have asserted the right to the rectification, erasure or restriction of processing against the controller, it is obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or associated with disproportionate effort. You have the right to be informed about these recipients.
Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or demand its transmission to another controller, provided that this is technically feasible.
Right to withdraw consent in accordance with Art. 7(3) GDPR: At any time, you have the right to withdraw consent once given to the processing of data, with future effect. In the event of a withdrawal, we will erase your data immediately, unless further processing can be grounded in a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up until the point of withdrawal.
Right to lodge a complaint in accordance with Art. 77 GDPR: If you are of the opinion that the processing of your personal data violates the GDPR, you have the right – irrespective of any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, particularly in the member state of your place of residence, your workplace or the place of the supposed violation.

7.2) RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CARRY OUT FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTH PROTECTING FOR THE PROCESSING AND THEY OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND BASIC FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO CARRY OUT DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT ADVERTISING. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

8) Storage duration for personal data

The duration of storage of personal data is measured on the basis of the respective statutory retention period (e.g. commercial or tax law retention periods). After the expiry of this time period, the concerned data is routinely erased if it is no longer required for the performance or conclusion of a contract and/or we have no legitimate interest in continued storage.

9) Collection and use of personal data in application processes

It is important to the company to guarantee the best possible protection of your personal data. All personal data that is collected and processed by us as part of an application is protected by technical and organisational measures against unauthorised access and manipulation.

Your data will be collected for the occupation of vacancies in the entire group of companies. By entering your data, you declare your consent to the use of your data in all companies affiliated with the business in accordance with corporate law.

Our social media appearances

This privacy policy applies to the following social media presence

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.

We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875.

XING

We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.