Privacy Statement

Privacy Statement

of

ViGEM GmbH
Zeppelinstraße 2, 76185 Karlsruhe, Germany

We appreciate your visit to our website and your interest in our company. In doing so, we respect your privacy and ensure the privacy of your personal data by processing your personal data in accordance with the terms of this Privacy Policy and applicable data protection laws.
You can visit our website without telling us who you are. In order to display our website, you are only obliged to provide the data transmitted by your browser to our server (see "Log files"). Other personal data about you will only be retained if you enter it voluntarily on the website, or if you use the corresponding functions, e.g., by making entries in our contact form.

Newsletter and Contact

If you subscribe to our electronic newsletter (ViGEM TECHINFO), you consent to the storage of the data marked with an asterisk for the purpose of sending the newsletter (Art. 6 para. 1 sentence 1 lit. a GDPR). This data will not be passed on to third parties. For sending the newsletter, we use a technical service provider who processes data on our behalf. A revocation of your newsletter consent for the future and thus the termination of the TECHINFO subscription is possible for you at any time.

You may enter your personal data on our website to contact us. It is only mandatory to enter the data in those fields marked with an asterisk. Specifying additional data may be helpful in processing your request but it is not mandatory (voluntary information). These data are used and stored with your consent for the purpose of processing your message (Art. 6 para. 1 sentence 1 lit. a GDPR). 

In certain fields, we process your personal data with the help of a ticket system (e.g. ViGEM Service Desk, return form with repair order) and use corresponding service providers for this purpose within the scope of a so-called order processing. In the event of data transfers to third countries, this is based on EU standard contractual clauses.

myViGEM

In order to register for our myViGEM customer portal, it is necessary to fill in the fields marked with an asterisk. Specification of further data is optional, but not required for registration with the portal. We process the data on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR for the purpose of provid-ing better customer service. You can have your user account deleted at any time by sending an email to the contact address listed under "The Controller" at the end of this Privacy Policy.

ViGEM Service Desk

You may contact our ViGEM Service Desk for technical support. To create a support ticket, you must register an account by entering an e-mail address and a password. Please note that communication in this context can also take place via this e-mail address. The legal basis for this data processing is Art. 6 (1) sentence 1 lit. b GDPR if a contractual relationship exists with us, otherwise Art. 6 (1) sentence 1 lit. f GDPR. You can have this account deleted at any time by sending an email to the contact address listed at the end of this Privacy Statement under "The Controller".

We appointed the company Atlassian Atlassian B.V., Singel 236 1016 AB, Amsterdam, Netherlands as a processor to process the support tickets on our behalf.

Use of Leadfeeder (Dealfront)

Our website uses the technologies of Dealfront (Dealfront Finland Oy as part of Dealfront Group GmbH) to analyze visitor behavior. In this process, the IP address of a visitor is processed. This processing has the purpose of helping us understand which businesses (B2B) are visiting our site, by enriching IPs with associated information such as the company name or industry code.
To do this, at the beginning of the visitor’s session, their IP address and corresponding session data is matched against a large whitelist of known companies.
To increase data protection of our visitors we have turned on “IP address anonymisation”, so that only shortened values instead of the actual IP addresses will be stored. If the feature is on, we will not store the actual IP address anywhere in our systems, including logs. This anonymisation makes it impossible to connect outside IP address information later, preventing identification of an individual person.
Whenever we process website traffic data, this processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR) in optimizing our products, services, sales and marketing. To prevent this processing activity, you (website visitor) may install and configure appropriate ad-blockers or use no-script-plugins in your browser. The data will be deleted as soon as it is no longer required for its intended purposes. Statutory retention obligations can lead to a longer retention period of the data in question.

Cookies

Unsere Website verwendet Cookies und ähnliche Technologien (z. B. Local Storage), um grundlegende Funktionen bereitzustellen, Einstellungen zu speichern und – nach Ihrer Einwilligung – die Nutzung unserer Seiten statistisch auszuwerten.

Technisch notwendige Cookies setzen wir ein, damit die Website ordnungsgemäß funktioniert (z. B. für Seitennavigation, Formularschutz, Sitzungsverwaltung sowie zur Speicherung Ihrer Datenschutz‑/Cookie-Einstellungen im Consent‑Banner). Diese Cookies sind für den Betrieb erforderlich und können nicht deaktiviert werden. Rechtsgrundlage ist § 25 Abs. 2 TTDSG (unbedingt erforderlich) i. V. m. Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an einem sicheren und funktionsfähigen Webauftritt).

Optionale Cookies (z. B. für Statistik) setzen wir ausschließlich nach Ihrer Einwilligung über den Consent‑Manager „we_cookie_consent“ (TYPO3). Rechtsgrundlage ist § 25 Abs. 1 TTDSG i. V. m. Art. 6 Abs. 1 lit. a DSGVO. Ihre Einwilligung können Sie jederzeit mit Wirkung für die Zukunft widerrufen und Ihre Auswahl anpassen – öffnen Sie dazu die Cookie‑Einstellungen über das auf der Website bereitgestellte Consent‑Banner bzw. den entsprechenden Link/Schalter.

Wir verwenden Google Analytics zur Reichweiten- und Nutzungsanalyse ohne Einsatz des Google Tag Managers. Statistik‑Cookies, die im Zusammenhang mit Google Analytics gesetzt werden, werden erst nach Ihrer Einwilligung aktiviert. Details zur Datenverarbeitung durch Google Analytics (z. B. Art der erhobenen Daten, IP‑Anonymisierung, Empfänger, etwaige Drittlandübermittlungen, Speicherfristen) finden Sie im gesonderten Abschnitt „Webanalyse: Google Analytics“ dieser Datenschutzerklärung.
Sie können Cookies zudem generell über die Einstellungen Ihres Browsers löschen oder blockieren. Bitte beachten Sie, dass die Deaktivierung technisch notwendiger Cookies die Funktionalität der Website einschränken kann.

Google Analytics

We use Google Analytics on our website for audience reach and usage analysis—without using Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Purpose: Statistical evaluation of website usage, optimization of content and technical processes, audience measurement.

Legal basis: The storage/retrieval of information on your device (e.g., via cookies) is carried out on the basis of § 25 (1) TTDSG exclusively with your consent through our consent manager “we_cookie_consent” (TYPO3). We base the subsequent processing of personal data on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie settings (consent banner/link on the website).

Scope of processing / categories of data:
Usage data (e.g., pages viewed, click paths, scroll and event data), technical metadata (e.g., browser and device information, screen resolution, language settings), approximate location data (based on anonymized IP/geo data), referrer URL, as well as pseudonymous identifiers (e.g., client/user ID). This does not allow us to directly identify individuals.

IP anonymization:
The IP address is anonymized (IP masking) before being stored or transmitted. This only allows rough geolocation; full IP addresses are not persisted.

Cookies and similar technologies:
Google Analytics uses—only after consent—cookies or comparable identifiers, e.g.:

• _ga (recognition; storage duration: up to 2 years)
• _gid (distinguishing users; storage duration: 24 hours)
• _ga_<container-id> (session/event association; storage duration: up to 2 years)

Retention period:
We have set the retention period for analytics/usage data to 2 years (24 months). Cookie-based identifiers, where set, are also stored for up to 2 years, unless you withdraw your consent earlier or delete cookies in your browser.

Recipients / third-country transfers:
Processing is carried out by Google on behalf of ViGEM; a data processing agreement including EU Standard Contractual Clauses (SCC) is in place. A transfer to the USA may occur. Google LLC is also certified under the EU–U.S. Data Privacy Framework (DPF). Further information can be found in Google’s Privacy Policy and the information on Google Analytics:

• Privacy Policy: policies.google.com/privacy
• Information on privacy in Google Analytics: support.google.com/analytics/answer/6004245

Withdrawal / opt‑out:
You can change or withdraw your consent at any time via the cookie settings (consent banner/link on the website). Additionally, you can install the Google Analytics Opt-out Browser Add-on to generally prevent data collection by Google Analytics on websites:
https://tools.google.com/dlpage/gaoptout?hl=de

LinkedIn Insight Tag (Marketing/Retargeting)

We use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, on our website. The Insight Tag enables conversion tracking, website retargeting, and aggregated reports on the demographic characteristics of our website visitors. 

Processed Data & How It Works
When you visit our pages, LinkedIn and others may collect the URL, referrer URL, IP address, device/browser (user agent), and timestamp. The IP address is truncated or—if necessary for cross-device tracking—hashed; direct LinkedIn identifiers are removed within 7 days; remaining pseudonymized data is deleted after 180 days at the latest. Optionally, the “Website Actions” feature records limited interactions (e.g., button clicks). Personal data of individual members is not disclosed to us; analyses are performed on an aggregated basis.

Legal Basis & Terms of Use
We will only use the Insight Tag after obtaining your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG). No corresponding cookies or identifiers will be set without your consent. You may revoke your consent at any time with future effect via the cookie settings link. 

Data Transfers to Third Countries

LinkedIn bases its international data transfers on, among other things, the European Commission’s Standard Contractual Clauses (SCCs) and participates in the EU-US Data Privacy Framework. For more information on data transfers and data protection at LinkedIn, please visit: www.linkedin.com/help/linkedin/answer/a1343190/ (EU/EEA, UK, CH data transfers). 

Note on Sensitive Data
The Insight Tag is not used on pages that process sensitive information (e.g., health or financial data).

Applications

You can apply to us by mail, e-mail or directly via our website. You must provide the data marked with an asterisk as mandatory information. The provision of further personal data may be helpful for the processing of your application, but is not mandatory (voluntary information). The legal basis for data processing is Art. 6 (1) lit. b GDPR and § 26 (1) German Federal Data Protection Act/BDSG (initiation of an employment relationship). You have the option of sending us your application documents such as CV, proof of qualifications, etc. confidentially by e-mail. Alternatively, you can also send us these documents directly with the online application via the internet in encrypted form by transmitting the relevant files to us via the website. If you choose to send us your application documents by e-mail, please note that for technical reasons we cannot guarantee confidentiality during electronic transmission.

Your data will be treated as strictly confidential in our company and will be processed exclusively for the purpose of handling your application. Your data will not be used for any other purpose or passed on to third parties unless you expressly agree to this (consent). Application documents are stored for the duration of the employment relationship in compliance with statutory retention periods. In the event of rejection, we delete application documents no later than four months after rejection or return non-electronic documents to you.

Log files

Each time you access our site, we collect the following data about your computer: The IP address of your computer, the request of your browser and the time of this request. It also records the status and amount of data transferred as part of this request, plus product and version information about your browser and your computer’s operating system. We track from which website our site is accessed. Your computer’s IP address is stored only for the period in which you use our website and then is immediately deleted or anonymised via abbreviation. The remaining data is stored for a limited period of time. We use this data for the operation of our website, in particular to detect and eliminate errors in the website, to determine utilisation of the website and to make adjustments or improvements (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR).

Web analytics

Our legitimate interest encompasses continuous improvement of our website, we use the AWStats and Analog tools to analyse website visits. We process the type of browser used and the version of the browser (if provided by the user), the operating system, the date and time of the server request, the time spent on the website and the previously-visited website (if provided by the user). We also process the IP address, which is however anonymised by exchanging the last digits. We process the data in order to obtain statistical evaluations about the use of our website and to improve the website based on these evaluations. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Fan pages

In order to provide up-to-date information to customers, partners or other interested parties we also operate "fan pages", in addition to our own website, on the following social networks: Facebook, LinkedIn, XING, YouTube, Kununu, Yourfirm, Stepstone, Indeed.

Data processing takes place here by the provider of the social media platform. Data processing outside the European Union cannot be excluded. The provider of the platform provides us aggregated usage data if necessary, but we do not have access to personal data, if you only visit the fan page.

The legal basis for this data processing is Art. 6 para 1 lit. f GDPR. In the case of consent in the form of an opt-in ("check mark", "activate button") or any other form of obtaining consent, the legal basis is given by Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time, non-retroactively, without stating any reasons to the person to whom it has been given.

Since data processing is performed by the platform provider, we recommend that you refer to the respective platform provider for your data rights pertaining to access, correction, erasure, data portability and objection, in the context of visiting our fan page. Of course we will support you in exercising your rights if necessary.

In addition, cookies may be set on your device. For purposes and legal basis regarding the use of cookies, see "Cookies" in this Privacy Policy or in the privacy policy of the platform provider.

Further information is available under the following links:

• Facebook: Facebook Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook Ireland“). According to Facebook, when you visit our Facebook fan page, per-sonal data is processed as follows: https://www.facebook.com/legal/terms/information_about_page_insights_data. For further information please visit: https://www.facebook.com/legal/terms/page_controller_addendum
• YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.com/policies/privacy/partners/?hl=de
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; http://www.linkedin.com/legal/privacy-policy.
• XING SE, Dammtorstraße 30, 20354 Hamburg, https://privacy.xing.com/de/datenschutzerklaerung.
• Kununu: New Work SE, Dammtorstraße 30, 20354 Hamburg; https://privacy.xing.com/de/datenschutzerklaerung.
• yourfirm GmbH, Welfenstr. 22, 81541 München; https://www.yourfirm.de/datenschutz/.
• StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf; https://www.stepstone.de/Ueber-StepStone/Rechtliche-Hinweise/datenschutzerklaerung/.
• Indeed Ireland Operations Limited, 124 St. Stephen’s Green, Dublin 2, Ireland; https://hrtechprivacy.com/de/brands/about-indeed#privacypolicy.

Revocation of consent

Insofar as you have given us consent (e.g. within the framework of an enquiry via our contact form or in another context), you can revoke it at any time with effect for the future.

Objection to data processing

Insofar as we base the processing of your personal data on the balancing of interests (acc. to Art. 6 para. 1 sentence 1 lit. f GDPR), you can object to the processing. In the event of any such disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the event that your objection is legitimate, we will examine the situation and either discontinue or modify our data processing or point out to you our compelling and legitimate reasons on which we will continue the data processing.

You may object at any time to the processing of your personal data for advertising purposes.

You can send your revocation or objection using the contact data for the “The Controller".

Your rights

You have the following rights with respect to your personal data:

• Right to access, concerning whether we are processing data about your person. If we are processing data about you, you have the right to obtain information about the nature and circumstances of the data processing (Art. 15 GDPR),
• Right to rectification of incorrect data (Art. 16 GDPR) or right to erasure of your data, provided that the requirements of Art. 17 para. 1 GDPR are met,
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to the processing under the above-mentioned conditions (Article 21 GDPR),
• Right to data portability under the conditions of Art. 20 GDPR.

The Controller

ViGEM GmbH, Zeppelinstraße 2, D-76185 Karlsruhe, Germany, tel.: +49 (0)721.90990-500; fax: +49 (0)721.90990-699; email: visions @vigem .de

Data Protection Officer: E-mails to datenschutzanfragen @vigem .de or via our postal address c/o "Data Protection Officer".

As of February 20th 2024