Data protection declaration
Contact data for our Data Protection Officer:
– Data Protection Officer –
Use of the website:
Our offer is expressly not orientated towards underage persons.
All data received and processed within this online offer is treated confidentially acc. GDPR and is not transferred to third parties.
Surfing on our website without stating personal data
The use of our website without personal data is possible outside the password-protected VEKA AG-Partner area.
We will then only find out
The name of the Internet site or file called up and the time it is called up or downloaded
The domain via which you reached our website
The transmitted data volume
Whether the call-up or download was successful.
The data is exclusively used for administration, optimisation of the Internet offer and for processing inquiries.
The IP address can be considered personal data, because, under certain conditions, it is possible to obtain the identity of the owner of the Internet access used by using the information of the respective Internet provider.
The IP address is only analysed in case of attacks against our Internet infrastructure. In this case, we have an authorised interest in terms of Art. 6 Para. 1 f) GDPR to process the IP address. This authorised interest arises from the need to defend against an attack on the Internet infrastructure, to investigate the source of the attack in order to bring proceedings against the responsible person under criminal and civil law, and to effectively prevent further attacks.
The IP address is deleted if we can exclude the possibility that it has been used in an attack against our Internet infrastructure did not occur. This deletion occurs regularly after seven days.
Furthermore, we record from which domains our web visitors come. We also analyse this data in order to recognise trends and statistics, but we subsequently delete this data again.
This site uses “Cookies” and in some areas “Active X Controls”.
In addition, this website contains links to other websites. The legal owner of this site shall not be held responsible for the data protection provisions or the content of these websites. If you have questions or comments regarding our data protection practice, then please contact us under firstname.lastname@example.org.
You can prevent storage of the Cookies through the appropriate settings in your browser software; however, this may lead to the fact that you may not be able to use all functions of this website to their full extent.
Surfing on our website with the statement of personal data
If you voluntarily provide us with personal data (e.g. name, address or email address) on our website or within the scope of registration for the VEKA AG-Partner area, then this data shall not be transferred to third parties without your express permission or legal authorisation. If you register for the VEKA AG-Partner area, then a contract comes into effect between us regarding the storage and provision of the respective profile.
In this case, we process your data based on Article 6 b) of the GDPR or the fulfilment of a contract existing between us, or acc. Article 6 a) GDPR based on the consent provided by you. The processing occurs for the fulfilment of contractual performance, payment processing, for the delivery of contractually ordered products and services, for transmission of your address data to logistics companies for the delivery of goods, and for sending interesting information regarding products and actions. Your data is transferred within our premises to order processing or persons involved in decision-making. A transfer to third parties over and above this which is not covered by legislative necessity shall only occur subject to your express consent. Automatic decision-making does not occur.
We only process your data if this is required for the fulfilment of our contract or the applicable legal regulations or due to the reason for your data transfer. We do not independently delete the personal data stored by you in the VEKA AG-Partner area. However, you have the possibility to change individual data in your profile at any time. We shall undertake complete deletion of the personal data stored within the scope of your profile on request via email (stating your user name) to email@example.com, if the continued storage of this data is not permitted due to further statutory exemptions. Business documents are stored according to the statutory retention periods and are subsequently deleted compliant with data protection.
Use of external service providers
We work together with service providers who process certain data on our behalf. This occurs exclusively in harmony with the respective valid data protection laws. In particular, we have concluded an agreement with our service providers regarding data processing under contract which satisfies the requirements of Article 28 of the GDPR. No data is transmitted to unsafe third countries or supranational or intergovernmental agencies.
According to the GDPR, you have the following rights:
+ Right to information regarding the processing of your data
You have the right to demand information regarding whether personal data pertaining to you is processed by VEKA AG, and, if yes, which personal data pertaining to you is processed by VEKA AG. You have the right to the following information:
The processing purposes
The categories of your personal data being processed
The recipients or categories of recipients to whom your personal data has been disclosed or is still disclosed
If possible, the planned duration for which your personal data will be stored, or if this is not possible, the criteria for the determination of this duration
If your personal data has not been collected from you yourself, all available information regarding the origin of the data
The existence of automated decision-making including profiling according to Article 22 of the GDPR and — at least in these cases — pertinent information regarding the logic involved and the scope and aspired effects of such processing for you.
We will provide you with a copy of the personal data which is the subject of the processing. If we have substantiated doubts, then we will request additional information for confirmation of the identity of the person affected.
+ Right of correction
You have the right to request from us the correction of incorrect personal data pertaining to you. Under consideration of the purposes of the processing, you have the right to request the completion of incomplete personal data — also by way of a supplementary declaration.
+ Right of deletion
Deletion of your personal data occurs if you assert a claim for deletion and no statutory retention rights or obligations contradict this. Furthermore, we always delete your personal data if the data is no longer required for the fulfilment of the purpose associated with the storage or if the storage is not permissible for other legal reasons, and if the deletion does not contradict the statutory retention periods.
+ Right of limitation of processing
You are entitled to request a limitation of the processing of your personal data if the personal data is not accurate, and this for the duration which enables VEKA AG to check the accuracy of the personal data. If the processing is unlawful and you refuse the deletion of the personal data, and instead request the limitation of the use of your personal data from us, then we shall comply with your request. The deletion of data also does not occur if we require it for the assertion, exercising or defence of our own legal claims, or if you have objected to the processing acc. Article 21 Paragraph 1 GDPR, provided it is not yet established whether the entitled reasons given by VEKA AG outweigh your reasons.
+ Right to appeal against processing
You have the right to appeal at any time against the processing of your personal data which occurs due to Art. 6 of the GDPR. VEKA AG shall not process your personal data any more in case of an appeal, unless we can verify compelling legitimate reasons for the processing which outweigh the interests, rights and freedoms of the affected persons, or the processing serves the assertion, exercising or defence of legal claims.
+ Right of data portability
You have the right to receive the personal data pertaining to you which you have provided to us in a structured, conventional and machine-readable format, and to transmit this data to another responsible person without obstruction by us. The prerequisite is that the processing is based on consent acc. Art. 6 or Art. 9 of the GDPR or on a contract, and that the processing occurs with the assistance of an automated procedure. Furthermore, you have the right to personal data being directly transmitted by VEKA AG to another responsible agency, provided this is technically feasible.
+ Right of revocation of your stated consent with effect for the future
A revocation of your stated consent may occur at any time with effect for the future. No fees are incurred in case of a revocation, an objection or information. Please direct the revocation via email to firstname.lastname@example.org.
+ Right of complaint to the data protection supervisory authority
Should you be of the opinion that the processing of your personal data infringes on data protection provisions, then you have the right, acc. Article 77 GDPR, to file a complaint with the supervisory authority responsible for your federal state at any time.
Further data protection declarations regarding third party services used within the scope of our website:
Data protection declaration for the Facebook plugin (“Like”)
This website uses plugins from the provider Facebook.com, which are provided by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. We hereby inform users of our website, on which the Facebook plugin (“Like” button) is installed, that the plugin creates a connection to Facebook, whereby a transmission to your browser is executed so that the plugin can appear on your website. Furthermore, through its use, data is transferred to the Facebook server which contains information regarding your website visits on our homepage. For Facebook users who are logged in, this has the consequence that the usage data is assigned to your personal Facebook account. As soon as you actively use the Facebook plugin as a logged-in Facebook user (e.g. by clicking the “like” button or using the comment function), then this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account beforehand. Further information regarding data usage by Facebook can be found in the data protection regulations on Facebook under de-de.facebook.com/policy.php.
Data protection declaration for the web analytics service Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “Cookies”, text files which are stored on your computer and which enable an analysis of the use of the website. The information generated by the cookie regarding your usage of this website is normally transferred to a server of Google in the USA and stored there. We have activated the IP anonymisation. On this website, your IP address is therefore previously abbreviated by Google within the member states of the European Union or in other contracting states to the Treaty of the European Economic Area. Only in exceptional cases is your full IP address transmitted to a server of Google in the USA and abbreviated there. On behalf of the operator of this website, Google uses this information to analyse your use of the website, to compile reports regarding the website activities and to render further services to the website operator associated with the website use and Internet use. The IP address transmitted by Google Analytics from your browser is not merged with other data from Google. You can prevent the storage of Cookies through the appropriate setting of your browser software; however, we hereby point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the Cookie and regarding your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the available browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
You can prevent collection through Google Analytics by clicking on the following link. An opt-out Cookie is set which prevents the future collection of your data when visiting this website: Deactivate Google Analytics
More detailed information regarding the terms and conditions of use and data protection can be found under http://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/. We hereby point out that on this website Google Analytics has been extended by the code “anonymizeIp” to guarantee the anonymous collection of IP addresses (so-called IP masking).
Data protection declaration for the web advertising service Google Adsense
This website uses Google Adsense, a web advertising service by Google Inc., USA (“Google”). Google Adsense uses so-called “Cookies” (text files) which are stored on your computer and through which analysis of the use of the website is enabled. Google Adsense also uses so-called “web beacons” (small invisible graphics) for the collection of information. Simple actions such as visitor traffic on the website are recorded and collected using web beacons. The information generated through the cookie and/or web beacon regarding the use of this website (including your IP address) are transmitted to a server of Google in the USA and stored there. Google uses this information to analyse your use of the website with regard to advertisements, to compile reports regarding the website activities and advertisements, and to render further services associated with the website use and Internet use. If necessary, Google shall also transmit this information to third parties if this is legally specified or if third parties are processing this data on behalf of Google. Under no circumstances shall Google merge your IP address with other Google data. You can prevent the storage of Cookies on your hard drive and the display of web beacons by selecting “no cookies accepted” in your browser settings (in MS Internet-Explorer under “Extras > Internet options > Data protection > Settings”; in Firefox under “Extras > Settings > Data protection > Cookies”); however, we hereby point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you agree to the processing of the data collected pertaining to you by Google in the ways previously described and for the abovementioned purpose.
Data protection declaration for the web analysis server tracker
On this website, data is collected and stored for marketing and optimisation purposes using etracker GmbH technologies (www.etracker.de). User profiles are created from this data under a pseudonym. Cookies can be used for this purpose. Cookies are small text files which are stored locally in the buffer memory of the Internet browser of the site visitor. The Cookies enable recognition of the Internet browser.
The data collected using the etracker technologies is not used without the specific consent of the persons affected to personally identify the visitor of this website and is not merged with personal data pertaining to the bearer of the pseudonym. The data collection and storage can be revoked at any time with effect for the future. Further information can be obtained directly from the third-party provider: etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg; www.etracker.com/de/datenschutz.html.
Data protection declaration for the social network Google Plus
This website uses so-called “G +1” buttons from the social network Google Plus, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). The button can be recognised through the symbol “G +1”. If you are registered with Google Plus, you can express your interest in our website with the “G +1” button and share content of our website on Google Plus. In this case, Google stores both the information that you have given our content a “G +1” and also information regarding the site which you viewed at the time. Your “G +1” may possibly be shown together with your name (possibly also with photo – if available) at Google Plus in further Google services such as the Google search or your Google profile. The purpose and scope of the data collection, further processing and use of the data by Google and your rights and settings possibilities for the protection of your privacy in this regard can be found in Google’s data protection information: www.google.com/intl/de/policies/privacy/
Data protection declaration for the “Google Remarketing” and “Similar Target Groups” function by Google Inc.
Data protection declaration for “Google AdWords Conversion-Tracking” by Google Inc.
This website uses the “Google AdWords Conversion-Tracking” function by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google AdWords Conversion-Tracking uses so-called “Cookies”, small text files which are stored on your computer and through which analysis of the use of the website is enabled, if you have clicked on a Google advertisement. The Cookies are valid for a maximum of 90 days. Personal data is not stored in this process. Provided the Cookie is valid, Google, and ourselves as website operator, can recognise that you have clicked an advertisement and have reached a certain target site (e.g. order confirmation page, newsletter registration). These Cookies cannot be tracked across several websites of different AdWords participants. Conversion statistics are created in “Google AdWords” through the Cookie. These statistics record the number of users who have clicked one of our advertisements. Furthermore, the function counts how many users have reached a target page which is provided with a “Conversion-Tag”. However, the statistics do not contain data through which you can be identified. The storage of Cookies on your hard drive can be prevented by selecting “no cookies accepted” in your browser settings (In MS Internet-Explorer under “Extras > Internet options > Data protection > Settings”; in Firefox under “Extras > Settings > Data protection > Cookies”); However, we hereby point out that in this case you may not be able to use all the functions of this website to their full extent. Through the use of this website, you agree to the processing of the data collected pertaining to you by Google in the abovementioned manner and furthermore regarding the abovementioned purposes. Further information on how Google Conversion-Data is used and the data protection declaration by Google can be found under: https://support.google.com/adwords/answer/93148?ctx=tltp,http://www.google.de/policies/privacy/
Data protection declaration for the use of the web message service twitter.com
We also have the web message service twitter.com integrated on our website. This is provided by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Twitter provides a so-called “Tweet” function. Using this function, you can publish messages up to 140 characters, also with website links, in your own Twitter account. If you use the “Tweet” function of Twitter on our website, then the respective website will be linked to your account on Twitter and possibly be made public there. In this way, data is also transmitted to Twitter. We do not receive any knowledge of the content of the transmitted data and its use by Twitter. Therefore, for further information, please contact the data protection declaration of Twitter: http://twitter.com/privacy under the following link. Twitter provides you with the possibility to determine your data protection settings yourself: twitter.com/account/settings.
Data protection declaration for the web analysis service Piwik
Data protection declaration for the chat tool Zendesk
With the use of our chat tool, we automatically collect user data such as your visitor path, browser version, location, operating system and your IP address. This data is only used for processing your inquiry and not transmitted to third parties.
Updating this Data Protection Declaration
From time to time, an update of this Data Protection Declaration may become necessary, for example, through new legislative or official regulations and new offers on our website. In this case, we will inform you accordingly. In general, we recommend that you regularly call up this Data Protection Declaration to check whether there have been any changes. Amongst other things, you can recognise whether any changes have occurred through the update status at the bottom of this document.
Printing and storing this Data Protection Declaration
This Data Protection Declaration can be directly printed and stored, e.g. through the print or save function in your browser.
Data protection information for suppliers, customers, other business partners and interested parties
Responsible body in terms of Article 4 No. 7 GDPR:
Contact data for our Data Protection Officer:
– Data Protection Officer –
1. Please note that we record, store, process and use personal data collected by us from suppliers, customers, other business partners and interested parties, in particular, the names, addresses, telephone numbers, email addresses, contact details, customer numbers as well as order and delivery data, for the purposes of initiating, establishing and processing contractual and supply relationships, including delivery, payment and any warranty or product liability.
Your personal data is required to conclude and perform a contract. You are not obliged to provide this data. However, we cannot conclude a contract with you without this data. Your data will be processed in this respect based on Article 6 (1) b) GDPR.
Your personal data may also be processed based on your consent under Article 6 (1) a) GDPR (e.g. use of login areas).
Furthermore, we record, store, process and use this data for the purposes of managing customer and business relationships, and for marketing and advertising our own products and services. Your data will be processed in this respect on the basis of Article 6 (1) f) GDPR. In this respect, our legitimate interest in processing your data arises from our efforts to publicise and sell our own products and services.
Furthermore, we process data that we receive under the statutory conditions from credit agencies (for example from the German credit reference agency Schufa) for the purposes of credit checks relating to our suppliers, customers and other business partners. Your data will be processed in this respect on the basis of Article 6 (1) f) GDPR. Our legitimate interest in processing this data arises from receiving the contractually owed consideration for our services (for example the fee). Otherwise, we do not make any automated decisions.
Personal data is not shared with third parties with the exception of the following
• transfers to third parties engaged by us for the performance of contractual and supply relationships, for example banking institutions/payment service providers processing payments and transport companies/shipping companies processing deliveries;
• transfers to third parties engaged by us in the context of marketing and advertising for our own products and services, for example marketing service providers and printing houses;
• transfers to specialist service providers (commissioned data processors) that perform services for us based on our instructions and under our responsibility as part of the purposes stated above, for example IT service providers;
• transfers to third parties which we are legally obliged to make, for example to the tax office or other government authorities;
• transfers to third parties to fulfil our duties under commercial and tax law, for example to our tax consultants.
Data is only transferred to a third country outside the European Union which is also not a signatory state to the Agreement on the European Economic Area if this data transfer is required to fulfil an existing agreement between you and us (for example delivery to a third country).
Your data will be processed while a contractual or supply agreement is being initiated and processed and for as long as the obligations from a contractual or supply relationship continue to exist, for example any warranty or product liability obligations, as well as for the duration of the statutory retention periods under Article 6 (1) c) GDPR.
If we process personal data to carry out advertising, you have the right to object to the processing of your personal data for advertising purposes at any time. If you object to processing for advertising purposes, your personal data will no longer be processed for such purposes.
2. In accordance with Article 15 to 18 GDPR, you have a right to
– information about whether we process personal data about you and if so what data
– the correction of your personal data if it is incorrect or incomplete
– its deletion
– the restriction of processing of personal data concerning you.
3. In accordance with Article 21 (1) GDPR, you have the right, for reasons arising from your particular situation, to lodge an objection with us at any time to the processing of your personal data that we carry out on the basis of Article 6 (1) e) or f) GDPR.
In addition, you have the right under Article 21 (2) GDPR to object to the processing of your personal data for the purposes of conducting direct advertising at any time.
4. You have a right to data portability with respect to us under the conditions of Article 20 GDPR.
5. If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent up to the time of its withdrawal.
6. If you believe that the processing of your data breaches data privacy law, you have the right to complain to the relevant supervisory authority.