Privacy policy

I. General information

Contact details of the person responsible
VERMAY GmbH

Zeppelinstraße 8
50259 Pulheim
Telephone: 02234 - 379449-0
Fax: 02234 - 379449-30
e-mail: info@vermay.de

II Specific information on the collection of personal data

1. Visit to the website
   
   
   1. Purpose of data collection and processing
      
      Each time a user accesses a page of our website and each time a file stored on the website is called up, access data is stored in a log file. Internet presence, access data about this process is stored in a log file. stored. Each data record consists of:
      
      (1) of the page from which the file was requested,
      (2) the name of the file,
      (3) the date and time of the request,
      (4) the amount of data transferred,
      (5) the access status (file transferred, file not found, etc.),
      (6) a description of the type of operating system and web browser used,
      (7) the client IP address.
      
      The client IP address is used for the purpose of transmitting the requested data; it is deleted anonymised by deleting the last block of digits (Ipv4) or the last octet (Ipv6) after the technical last octet (Ipv6) is anonymised.
      
      
   2. Duration of storage
      
      The data is stored each time a user accesses a page of our website and each time our website is accessed. website and are deleted as soon as they are no longer required for the purpose for which they were no longer required for the purpose of collection, which is the case when the visitor leaves our website.
      
      
   3. Legal basis
      
      The temporary storage of the aforementioned data takes place on the legal basis of Art. 6 para. 1 lit. f of the para. 1 lit. f EU General Data Protection Regulation (hereinafter "GDPR"). The legitimate interest lies in the provision of our website.
      
      
   4. Possibility of objection and removal
      
      The data subject may object to the processing.
      
      
2. Contract execution
   
   
   1. Purpose of data collection and processing
      
      Name, address(es), bank details, e-mail address, telephone or fax number, client IP address at the time of submitting a contractual declaration are collected, stored and processed solely for the purpose of and processed solely for the purpose of establishing or executing the contract, which includes in particular the billing and processing of the contract.
      
      The personal data will only be passed on to third parties if this is necessary for the purpose of necessary for the purpose of contract fulfilment, for example when commissioning a shipping company or the utilisation of a payment service provider.
      
      
   2. Duration of storage
      
      The data is deleted as soon as it is no longer required for the purposes for which it was collected or otherwise they were collected or otherwise processed are no longer required. This period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was was collected.
      
      
   3. Legal basis
      
      The aforementioned data is stored on the legal basis of Art. 6 para. 1 lit. b and lit. c GDPR. lit. c DSGVO.
      
      
   4. Possibility of objection and removal
      
      As there are legally standardised retention periods here and the data must remain stored and processed for the must remain stored and processed, it is not possible to object or delete the data.
      
      
3. E-mail, fax or telephone contact
   
   
   1. Purpose of data collection and use
      
      A user can contact us by e-mail (also by contact form), fax or telephone. contact us. We store the data transmitted to us and provided by the data subject for the purpose of processing the enquiry. These data are name, address, e-mail address, telephone and/or fax number fax number, date and time of the enquiry and the description of the request, if applicable Contract data if the enquiry is made in the context of entering into or processing a contract. The data will not be passed on to third parties. They are used to process the contact enquiry of the person concerned.
      
      
   2. Duration of storage
      
      As soon as the data are no longer necessary to achieve the purpose, they are deleted, which is the case is the case when the conversation has been conclusively settled and the facts of the case have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to Section 147 of the German Fiscal Code (AO) and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar calendar year in which the data was collected.
      
      
   3. Legal basis
      
      The storage of the aforementioned data takes place on the legal basis of Art. 6 para. 1 lit. a GDPR only after prior consent in the context of the enquiry, according to Art. 6 para. 1 lit. b GDPR in the context of the initiation or fulfilment of a contract or in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest of the interest of the controller is to be able to process the contact request and to prevent prevent misuse of the contact request. The revocation of consent, which is possible at any time The withdrawal of consent, which is possible at any time, does not affect the lawfulness of the processing of the personal data carried out on the basis of the consent until revocation.
      
      
   4. Possibility of objection and removal
      
      The data subject has the option at any time to revoke the consent he or she has given to the data processing and to object to the storage. The data stored for the process will be deleted. If a contract has been concluded, the above applies under Section II.2. applies.
      
      
4. Cookies
   
   a) Purpose of data processing
   In order to technically enable the visit to our website, we transmit so-called cookies to the end device of the data subject. Cookies are small text files that can be used to identify the data subject's end device, usually by recording the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the end device used - without interfering with the operating system - it is recognised again and enables us to make any default settings immediately available. We use this information to customise our website and the services offered to your needs and to speed up your visit to our website.
   
   The personal data is passed on to third-party providers to analyse the use of our website, insofar as this is necessary for the purposes of the analysis. If cookies are used for tracking purposes, we will inform you about this separately in this privacy policy.
   
   b) Duration of storage
   The storage period of the various cookies varies, but is a maximum of two years. They are stored on your local end device, not on our server, which is why the actual deletion period depends on how your browser software is configured. Please refer to the operating instructions of your browser software to find out how you can delete cookies set by us on a case-by-case basis or automatically.
   
   c) Legal basis
   Absolutely necessary cookies are based on the legal basis of Art. 6 para. 1 lit. f GDPR to enable the visit to our website; in particular, some functions on our website cannot be used without cookies, as otherwise the user and the settings already made would not be recognised when changing pages, language settings would be lost and searches could not be carried out.
   
   The use of non-essential cookies (such as marketing, statistics or third-party cookies) is based on consent given via the cookie banner on our website and on the legal basis of Art. 6 para. 1 lit a. GDPR and for the transfer of data to third countries on Art. 49 para. 1 sentence 1 lit. a GDPR.
   
   d) Possibility of prevention
   The data subject can block the use of cookies in the end device used or delete them after use. However, individual functions of our website may then not be usable. How cookies can be blocked and cookies already stored can be deleted can be found in the instructions for the browser software.
   
   
5. Google Maps
   
   a) Purpose of data processing
   We use the map service Google Maps from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
   When you call up the map service by clicking on "Activate map", Google's web server automatically saves your IP address, location data, a description of the type of operating system, web browser and end device used, the date and time of the pages called up and the page from which the file was requested. The data is used to provide the map service on our website.
   For details, please refer to Google's privacy policy at the following Internet address https://policies.google.com/privacy
   
   b) Duration of storage
   This access data is not analysed by us and is automatically overwritten no later than seven days after the end of your visit to the site. Google stores the data for 6 - 24 months according to its own information.
   
   c) Legal basis
   Processing is carried out on the legal basis of Art. 6 para. 1 lit. a GDPR only with prior consent.
   
   d) Possibility of prevention
   The data subject can block the use of cookies in the end device used or delete them after use. However, the map material on our website may then not be usable. How cookies can be blocked and cookies that have already been saved can be found in the instructions for the browser software.
   
   
6. YouTube using a 2-click plugin
   
   a) Purpose of data processing
   We use the YouTube embedding function to display and play videos from the provider "YouTube", YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which is represented by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
   
   When a page with a YouTube video is called up, initially only a still image stored on our server is displayed. As soon as the user clicks on this image, a connection to the YouTube servers is established - similar to a link - which is assigned to the user's personal profile and communicates the pages visited on the website if the user is logged in with their YouTube account. The link can be prevented by logging out of the YouTube account before clicking on the link.
   
   Under https://adssettings.google.com/authenticated you will find an opt-out function.
   You can find more information about YouTube's and Google's privacy policies at the following Internet addresses
   https://policies.google.com/technologies/ads?hl=de
   https://policies.google.com/privacy
   
   b) Duration of storage
   Information on data protection and the storage of personal data on "YouTube" can be found in the provider's privacy policy at https://www.google.de/intl/de/policies/privacy.
   
   c) Legal basis
   Processing is carried out on the legal basis of Art. 6 para. 1 lit. a GDPR only with prior consent.
   
   d) Possibility of prevention
   The data subject can block the use of cookies in the end device used or delete them after use. However, individual functions of the website may then not be usable. How cookies can be blocked and cookies already stored can be deleted can be found in the instructions for the browser software.
   
   
7. Google Analytics
   
   
   1. Purpose of data processing
      The client IP address is collected to use the Google Analytics service. This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses so-called "cookies", text files that are stored on the end device of the data subject and that enable the use of the website to be analysed. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, the IP address of the person concerned will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse the use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
      
      
   2. Duration of storage
      As soon as the data is no longer necessary to achieve the purpose, it is deleted, which is the case when the anonymisation, which takes place within the European Union, has been completed. This takes less than a second. The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 12 months. Data that has reached the end of its retention period is automatically deleted once a month. Further information can be found at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.
      
      
   3. Legal basis
      The aforementioned data is stored on the legal basis of Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the fact that we are able to analyse the use of the website by all users in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.
      
      
   4. POSSIBILITY OF OBJECTION AND CANCELLATION
      The data subject may refuse the use of cookies by selecting the appropriate settings on their browser, however please note that if you do this you may not be able to use the full functionality of this website. The data subject can also prevent Google from collecting the data generated by the cookie and relating to the use of the website (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link [http://tools.google.com/dlpage/gaoptout?hl=de]. As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future: Deactivate Google Analytics
      
      
8. WordFence Security
   
   a) Purpose of data processing
   
   We use the "Wordfence Security" service, which is operated by Defiant Inc, 800 5th Ave, Suite 4100, Seattle, WA 98104, USA, to secure our online offering. The website uses the plug-in to protect against viruses and malware and to defend against attacks by computer criminals. The plugin uses cookies to recognise whether the visitor is a human or a robot. IP addresses are stored on the Wordfence servers to protect against brute force and DDoS attacks or comment spam. IP addresses categorised as harmless are placed on a white list.
   
   b) Legal basis
   
   The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) GDPR. Wordfence Security secures our website and thus protects visitors to the website from viruses and malware. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The Live Traffic View option (real-time live traffic) of the plugin is switched off as it is not mandatory. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
   https://www.wordfence.com/help/general-data-protection-regulation/.
   
   Further information on the collection and use of data by Wordfence Security can be found in Defiant's privacy policy: https://www.wordfence.com/privacy-policy/.
   
   c) Possibility of prevention
   
   The data subject can block the use of cookies in the end device used or delete them after use. However, individual functions of our website may then not be usable. How cookies can be blocked and cookies already stored can be deleted can be found in the instructions for the browser software.
   
   
9. Borlabs
   
   a) Purpose of data processing
   
   This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent. For this purpose, we use a tool from a third party provider Borlabs GmbH, Rübenkamp 32 22305 Hamburg.
   At the following Internet address you will find further information about the Borlabs privacy policy
   https://de.borlabs.io/datenschutz/.
   
   The borlabs-cookie cookie stores the consent you gave when you entered the website. website. If you wish to revoke this consent, simply delete the cookie in your browser. your browser. When you re-enter/reload the website, you will be asked for your cookie consent again. consent again. The following information is stored in the borlabs-cookie cookie: Cookie Runtime, cookie version, domain and path of the WordPress website, consent, UID. The UID is an ID that is randomly generated after consent in the cookie box and stored in the borlabs-cookie is stored. If the Essential cookies cookie group is selected, no UID is generated. A UID is generated when other cookie groups are selected.
   
   b) Duration of storage
   
   We only process the data that is transmitted to us by the third-party provider on behalf of the customer to us for the purpose of contract fulfilment. In this respect, the information on the duration of storage as stated above for the keyword "contract fulfilment".
   
   c) Legal basis
   
   The legal basis for the processing is Art. 6 para. 1 lit. c GDPR, as the data collected in this way is of relevance under data protection law and therefore necessary to fulfil our obligation under the GDPR. are required.
   
   d) Possibility of prevention
   
   The data subject can block the use of cookies in the end device used or delete them after use. delete them after use. Under certain circumstances, however, individual functions of our website not be usable. How cookies can be blocked and cookies that have already been saved deleted can be can be found in the instructions for the browser software.
   
   

III Rights of the data subject

If "personal data" is processed by the user on our website, the data subject (data person concerned (data subject) has the following rights vis-à-vis the controller in accordance with the GDPR.

1. Right to information in accordance with Art. 15 GDPR
   
   The data subject has the right to the following information:
   
   
   1. the purposes of processing;
      
   2. the categories of personal data that are processed;
      
   3. the recipients or categories of recipients to whom the personal data have been or will be have been or will be disclosed, in particular to recipients in third countries or international organisations or international organisations;
      
   4. where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
      
   5. the existence of the right to request from the controller rectification or erasure of personal erasure of personal data concerning him or her or restriction of processing by the controller or a right to object to such processing;
      
   6. the existence of a right of appeal to a supervisory authority;
      
   7. where the personal data are not collected from the data subject, any available available information about the origin of the data;
      
   8. the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
      
   9. If personal data is transferred to a third country or to an international organisation organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
      We provide the data subject with a copy of the personal data that is the subject of the processing. of the processing. For any further copies requested by the data subject, the controller may the controller may charge a reasonable fee based on the administrative costs.
      
      
2. Right to rectification in accordance with Art. 16 GDPR
   
   The data subject shall have the right to obtain from the controller without undue delay the rectification of of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the purposes of the processing, the data subject shall have the right to have incomplete personal data completed personal data, including by means of providing a supplementary statement.
   
   
3. Right to erasure in accordance with Art. 17 GDPR
   
   The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her personal data concerning him or her to be erased without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:
   1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise were processed are no longer necessary;
      
   2. the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing; or the processing;
      
   3. the data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing the data subject objects to the processing pursuant to Art. 21 (2) GDPR;
      
   4. the personal data have been processed unlawfully;
      
   5. the erasure of personal data is necessary for compliance with a legal obligation in accordance with Union or Member State law to which the controller is subject; or is subject to;
      
   6. the personal data have been collected in relation to the offer of information society services information society services offered in accordance with Art. 8 para. 1 GDPR.
      
      
4. Right to restriction of processing in accordance with Art. 18 GDPR
   
   The data subject shall have the right to obtain from the controller restriction of processing where one of the following processing if one of the following conditions is met:
   
   1. the accuracy of the personal data is contested by the data subject, and the accuracy of the personal data is contested by the data subject, for a period enabling the to verify the accuracy of the personal data,
      
   2. the processing is unlawful and the data subject opposes the erasure of the personal personal data and instead requests the restriction of the use of the personal data; or use of the personal data;
      
   3. the controller no longer needs the personal data for the purposes of the processing, but the data subject purposes, but the data subject requires the personal data for the establishment, exercise or defence of defence of legal claims, or
      
   4. the data subject has objected to processing pursuant to Art. 21 (1) GDPR as long as it has not yet been established whether the legitimate grounds of the controller outweigh those of the data subject.
      
      
5. Right to information in accordance with Art. 19 GDPR
   
   If the data subject has requested the controller to rectify their personal data a rectification pursuant to Art. 16 GDPR, an erasure pursuant to Art. 17 (1) GDPR or a restriction of processing in accordance with Art. 18 GDPR, and the controller has disclosed all recipients to whom the personal data of the data subject have been disclosed the request of the data subject (unless this was impossible or would involve a disproportionate impossible or would involve disproportionate effort), the data subject has the right to be informed by the to be informed of the recipients by the controller.
   
   
6. Right to data portability Art. 20 GDPR
   
   The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller in a structured, commonly used and machine-readable format and has the right to transmit those data to another and he or she shall have the right to transmit those data to another controller without hindrance from us, where by us, provided that
   
   
   1. the processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
      
   2. the processing is carried out using automated procedures. This must not adversely affect the rights and freedoms of other persons. When exercising the right to data portability in accordance with paragraph 1, the data subject has the right to have the personal data transmitted directly from us to another controller, where technically feasible. controller, insofar as this is technically feasible. The exercise of the right to data portability does not affect the right to erasure pursuant to Art. 17 GDPR remains unaffected. The right to data portability does not apply to processing that is necessary for the necessary for the performance of a task carried out in the public interest or in the exercise of official exercise of official authority vested in the controller.
      
      
7. Right to object pursuant to Art. 21 GDPR
   
   The data subject has the right, on grounds relating to his or her particular situation, to to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. profiling based on these provisions.
   We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the legitimate grounds for the processing which override the interests, rights and freedoms of the data rights and freedoms of the data subject or the processing serves the establishment, exercise or defence defence of legal claims.
   Where personal data are processed for direct marketing purposes, the data subject shall have the right to right to object at any time to the processing of personal data concerning him or her for the purpose of such for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If the data subject objects to the processing for the purposes of purposes of direct marketing, the personal data will no longer be processed for these purposes. Consent given by the data subject can be revoked at any time. However, the collection and The collection and processing carried out up to this point in time remains lawful.
   
   
8. Automated decisions in individual cases incl. profiling in accordance with Art. 22 GDPR
   
   The data subject has the right not to be subject to a decision based solely on automated processing - including processing, including profiling, which produces legal effects concerning him or her or similarly significantly which produces legal effects concerning him or her or similarly significantly affects him or her. This does not apply if the decision
   
   
   1. is necessary for the conclusion or fulfilment of a contract between the data subject and us is necessary,
      
   2. is authorised by Union or Member State law to which we are subject and such legislation contains appropriate measures to safeguard the rights and freedoms as well as the freedoms and legitimate interests of the data subject, or
      
   3. with the express consent of the data subject.
      These decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and legitimate interests of the data person have been taken.
      In the cases referred to in points a) and c), we shall implement suitable measures to safeguard the data and freedoms and the legitimate interests of the data subject, including at least the right to obtain the right to obtain human intervention on our part, to express his or her point of view and to contest the decision. position and to contest the decision.
      
      
9. Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
   
   Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her Member State of his or her habitual residence, place of work or place of the alleged infringement infringement if the data subject considers that the processing of personal data relating to him or her personal data concerning him or her infringes this Regulation.
   The supervisory authority to which the complaint has been submitted shall inform the complainant about the status and outcome of the complaint, including the possibility of a judicial legal remedy pursuant to Art. 78 GDPR.
   
   
10. Right to effective judicial remedy pursuant to Art. 79 GDPR
    
    Without prejudice to any available administrative or extrajudicial remedy, including the right to lodge a judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, the right to an effective judicial remedy if he or she considers that his or her rights under this Regulation have been rights to which he or she is entitled under this Regulation have been infringed as a result of the processing of their personal data in breach of this Regulation.
    For actions against us or against a processor, the courts of the Member State in which we or the processor in which we or the processor have a place of business. Alternatively, such actions may such actions may also be brought before the courts of the Member State in which the data subject is place of residence, unless we or the processor is an authority of a Member State acting in the an authority of a Member State acting in the exercise of its public powers

Privacy policy provided by:

Law firm for media, IT & advertising