Data protection information velpTEC GmbH
General information on the processing of your data
We are legally required to inform you about the processing of your personal data (hereinafter "data") when you use our website. This privacy notice informs you about the details of how your data is processed and your related legal rights. For terminology such as "personal data" or "processing," the legal definitions set out in Art. 4 GDPR apply. We reserve the right to update this privacy policy for future effect, particularly in the event of website enhancements, the use of new technologies, or changes to legal requirements or relevant case law. We recommend that you read this privacy policy from time to time and keep a printout or copy for your records.
1. Scope
This privacy policy applies to all pages of https://velptec.de/. It does not extend to any linked websites or online presences of other providers.
2. Controller
The party responsible for the processing of personal data within the scope of this privacy policy is:
velpTEC GmbH
Philipsbornstraße 2
30165 Hannover
E-Mail: datenschutz@velptec.de
3. Questions about data protection
If you have any questions regarding data protection in relation to our company or our website, please use the contact details provided in the "Controller" section.
4. Security
We have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external interference. We regularly review our security measures and adapt them to the latest technological standards.
5. Your rights
You have the following rights regarding the personal data concerning you, which you may assert against us:
Right of access
You have the right to request information about the personal data we process in accordance with Art. 15 GDPR.
Right to rectification
If the information concerning you is (no longer) accurate, you may request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you may request that it be completed.
Right to erasure
You may request the erasure of your personal data in accordance with Art. 17 GDPR.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.
Right to object to processing
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Art. 6 (1) sentence 1 (e) or (f) GDPR, in accordance with Art. 21 (1) GDPR. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. Further processing will also take place if the processing serves the establishment, exercise, or defense of legal claims (Art. 21 (1) GDPR). Furthermore, you have the right under Art. 21 (2) GDPR to object at any time to the processing of your personal data for the purpose of direct marketing; this also applies to profiling insofar as it is related to such direct marketing. We draw your attention to this right to object in this privacy policy in connection with the respective processing.
Right to withdraw your consent
Where you have given your consent for processing, you have the right to withdraw it at any time in accordance with Art. 7 (3) GDPR.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format ("data portability") and the right to transmit this data to another controller, provided the requirements of Art. 20 (1) (a), (b) GDPR are met (Art. 20 GDPR).
You may exercise your rights by contacting us using the contact details provided in the "Controller" section.
If you believe that the processing of your personal data violates data protection law, you also have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority of your choice.
This includes the data protection supervisory authority responsible for the controller:
State Commissioner for Data Protection of Lower Saxony, P.O. Box 221, 30002 Hannover or: Prinzenstraße 5, 30159 Hannover, Phone: 0511 120-4500, E-mail: poststelle@lfd.niedersachsen.de, https://www.lfd.niedersachsen.de.
6. Use of our website
You can generally use our website for purely informational purposes without disclosing your identity. When you access individual pages of the website in this manner, only access data is transmitted to our web space provider so that the website can be displayed to you. The following data is processed in this process:












The temporary processing of this data is necessary to technically enable the flow of a website visit and the delivery of the website to your device. Access data is not used to identify individual users and is not merged with other data sources. Further storage in log files occurs to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6(1)(1)(f) GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. Storing access data in log files, particularly the IP address, for a longer period allows us to detect and defend against misuse. This includes, for example, defending against requests that overload the service or potential bot usage. Access data is deleted as soon as it is no longer required to achieve the purpose of its processing. In the case of collecting data to provide the website, this is the case when you end your visit to the website. Log data is generally kept directly and exclusively accessible to administrators and deleted after seven days at the latest. Thereafter, it is only available indirectly via the reconstruction of backup tapes (backups) and is permanently deleted after a maximum of four weeks.
To provide the website, we use the Content Management System Webflow. Your data is therefore also processed by "Webflow" (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow also processes your data in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list.
You may object to the processing. Your right to object applies to reasons arising from your particular situation. You can send your objection to us using the contact details provided in the "Controller" section.
7. Device information
Beyond the aforementioned access data, the use of the website involves technologies that store information on your terminal device (e.g., desktop PC, laptop, tablet, and smartphone) or access information already stored on your terminal device. These technologies can include, for example, cookies, pixels, LocalStorage, SessionStorage, IndexedDB, or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites. Pursuant to Section 25(1) TDDDG, we generally require your consent to use these technologies. According to Section 25(2) TDDDG, such consent is only not required if the technologies either enable the transmission of a message over a public telecommunications network or are absolutely necessary to provide a telemedia service you have expressly requested:
7.1 Technically essential device information
Some elements of our website serve the sole purpose of transmitting a message (Section 25(2) No. 1 TDDDG) or are absolutely necessary to provide you with our website or individual functionalities of our website (Section 25(2) No. 2 TDDDG), e.g., language settings, or to enable you to use our website without interruption by preventing popups, sidebars, etc., from being displayed again. These elements are deleted once storage is no longer required. You can prevent this processing by adjusting the settings in your browser software accordingly. For elements whose storage duration is not limited to the session, you can delete the elements in your browser software settings after your session has ended.
7.2 Technically non-essential device information
Furthermore, we use elements on the website that are not technically necessary. In accordance with legal requirements, we only use these technologies with your consent. Information on the individual technologies and functions can be found in our "Settings" and organized by individual function in the information below.
7.3 Consent management platform
To request consent for the processing of your device information and personal data via cookies or other tracking technologies on our website, we use a consent tool. This gives you the option to agree to or reject the processing of your device information and personal data via cookies or other tracking technologies for the listed purposes. Such processing purposes may include the integration of external elements, statistical analysis, reach measurement, or personalized advertising. You can grant or reject your consent for all processing purposes or grant or reject your consent for individual purposes. The settings you have made can also be changed by you at a later time. The purpose of integrating the consent management platform is to leave the decision regarding the setting of cookies and similar functionalities to the users of our website and to offer the possibility to change settings already made during further use of our website. In the course of using the consent management platform, personal data and information about the devices used are processed by us.
Information about the settings you have made is also stored on your device. The legal basis for the processing is Art. 6(1)(1)(c) GDPR in conjunction with Art. 7(1) GDPR, insofar as the processing serves to fulfill the legally mandated obligation to provide evidence of consent. Otherwise, Art. 6(1)(1)(f) GDPR is the relevant legal basis. Our legitimate interests in the processing lie in storing user settings and preferences regarding the use of cookies and evaluating consent rates. After twelve months have elapsed since the user settings were made, consent will be requested again. The user settings made will then be stored again for this period, unless you delete the information about your user settings in the device capacities provided for this purpose beforehand. You may object to the processing if the processing is based on Art. 6(1)(1)(f) GDPR.
Your right to object applies to reasons arising from your particular situation. You can send your objection to us using the contact details provided in the "Controller" section. The recipient of the personal data processed in this context is the provider of the consent management platform we use: "Cookiebot," the company Usercentrics A/S.
8. Contacting our company
When you contact our company, e.g., via email or the contact form on our website, the personal data you provide is processed by us to answer your inquiry. Providing a first and last name and a valid email address is mandatory for processing inquiries via the contact form. You may optionally provide a telephone number. At the time the message is sent to us, your IP address as well as the date and time of registration are also processed. The legal basis for this processing is Art. 6 (1)(1)(f) GDPR or Art. 6(1)(1)(b) GDPR if the contact is aimed at concluding a contract. If the inquiry is aimed at concluding a contract, providing your data is necessary and mandatory. If the data is not provided, it is not possible to conclude or perform a contract or process the inquiry. The other data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. We delete the data generated in this process once it is no longer required—usually two years after the communication has ended—or we restrict processing to comply with existing mandatory statutory retention obligations.
To process your contact inquiry, we use the service Make.com provided by "Celonis" (Celonis Inc, One World Trade Center, 87th Floor, New York, NY 10007). Your data is therefore also processed by "Celonis." Celonis also processes your data in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA. Celonis is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list.
You may object to the processing if the processing is based on Art. 6(1)(1)(f) GDPR. Your right to object applies to reasons arising from your particular situation. You can send your objection to us using the contact details provided in the "Controller" section. If you provide us with health data, such as your degree of disability, the legal basis for processing is your consent pursuant to Art. 9(2)(a) GDPR.
You may revoke your consent to the processing at any time by sending us a message using the contact details provided under "Controller." The lawfulness of the processing remains unaffected until the revocation is exercised.
9. Application process
As part of the application process, we process your contact details, such as name, address, email address, telephone number(s), data from your application documents—specifically certificates, CV, cover letter, date of birth, and gender—and, where applicable, special categories of personal data such as marital status and degree of disability. The purpose of this processing is to assess your suitability for a position within our company and to conduct the application process. For unsolicited applications sent via email, we also process metadata from your email, such as the date and time, to conduct the application process. When applying via our career portal on our website, the access data mentioned in the "Use of our website" section is also processed to enable you to submit your application documents and other materials to us digitally. The legal basis for this processing is Art. 6(1)(1)(b) GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG), insofar as the data processing is necessary for the establishment and implementation of the employment relationship. For the processing of special categories of personal data, the legal basis is Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG. Providing your data is necessary and mandatory for the conclusion or implementation of the contract. If you do not provide your data, you cannot apply for a position with us. We store your data for as long as it is necessary in connection with the application process. As a rule, we delete your personal data as soon as it is no longer required for the aforementioned purposes, provided there is no other legal obligation to retain it. In particular, we retain personal data for as long as we need it to assert or defend against legal claims. Accordingly, in the event of a rejection, we delete the data of applicants six months after the rejection notice has been sent. The legal basis for retention for the purpose of legal proceedings is Art. 6(1)(f) GDPR. For the processing of special categories of personal data, particularly regarding potential disabilities, the legal basis is Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG or Art. 9(2)(f) GDPR.
In the event of a successful application, we will store your data within our employee management system for the subsequent employment relationship. Further information can be found in the data protection information for employees. When applying via our website, you may also use data stored on "LinkedIn" (LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, USA). If you select this function, "LinkedIn" will be informed that you are accessing "LinkedIn" from our website. Furthermore, your data stored on "LinkedIn" (such as names, photos, profile slogans, your current position, and your email address linked to "LinkedIn") will be transferred to us. The data transfer from "LinkedIn" to us is based on your consent during the redirection process, and thus on the legal basis of Art. 6(1)(1)(a) GDPR. The transmission of your IP address to "LinkedIn" is based on Art. 6(1)(1)(f) GDPR. The purpose of this processing is to enable the integration of "LinkedIn" into our website. Our legitimate interests in this processing lie in improving our service offerings and making our website more attractive and user-friendly for applicants. "LinkedIn" also processes data in the USA. We have concluded standard contractual clauses with "LinkedIn" to commit them to an appropriate level of data protection. We are happy to provide you with a copy upon request. Further information on data protection and storage duration at "LinkedIn" can be found at https://www.linkedin.com/legal/privacy-policy.
You may revoke your consent to the processing of your "LinkedIn" data at any time by sending us a message (see the contact details in the "Controller" section). The lawfulness of the processing remains unaffected until the revocation is exercised. Furthermore, you have the right to object to the processing of your other data, provided the processing is based on the legal basis of Art. 6(1)(1)(f) GDPR. Your right to object applies to reasons arising from your particular situation. You can send your objection to us using the contact details provided in the "Controller" section.
If we do not have a vacant position but are generally interested in working with you, we will process your application documents in our applicant pool with your consent so that we can contact you in the event of a vacancy. We will contact you separately to obtain your consent. The legal basis is your consent pursuant to Art. 6(1)(1)(a) GDPR. Data in the applicant pool will be deleted after two years unless you have consented to a longer storage period.
You may revoke your consent to the processing at any time by sending us a message using the contact details provided under "Controller." The lawfulness of the processing remains unaffected until the revocation is exercised.
Personio
To coordinate applications as part of our general application management and to digitize the application process, we use software from Personio SE & CO.KG (Seidlstraße 3, 80335 Munich; hereinafter: "Personio"). Your data, specifically your name, email address, and address, as well as any other information provided during your inquiry, is stored within the HR management software for the purpose of coordinating and responding to your application. We use this data to manage and track applications, for automated communication with applicants, to schedule and coordinate interviews, and to manage job postings. You can enter the personal data required for your application directly into the input mask provided by "Personio" on our website or in the corresponding job posting on a job board. When you submit your application, your data from the input mask and your IP address are processed by "Personio" on our behalf. The legal basis for this processing is Art. 6(1)(b) GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG). When processing special categories of personal data, particularly health data, the legal basis is Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG and Section 22(1)(1)(a) BDSG. Providing your data is necessary and mandatory for the conclusion or execution of the contract. If you do not provide your data, you cannot apply for a position with us. We delete the data collected in this context once processing is no longer necessary—usually 6 months after the conclusion of the application process—or, if applicable, restrict processing to comply with existing mandatory legal retention requirements.
10. Processing for contractual purposes
We process your personal data if and to the extent that it is necessary for the initiation, establishment, execution, and/or termination of a legal transaction with our company. The legal basis for this is Art. 6(1)(b) GDPR. Providing your data is necessary for the conclusion of the contract, and you are contractually obligated to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute the contract. Once the purpose has been achieved (e.g., contract fulfillment), personal data will be blocked or deleted, unless we are authorized to continue processing it based on your consent (e.g., consent to process your email address for sending electronic promotional material), a contractual agreement, a legal authorization (e.g., authorization to send direct marketing), or legitimate interests (e.g., retention for the enforcement of claims). Your personal data will be disclosed to third parties if:








Your personal data will not be shared with other individuals, companies, or organizations beyond this scope unless you have effectively consented to such disclosure. The legal basis for processing in such cases is Art. 6(1)(a) GDPR. Within the scope of this privacy policy, we will inform you of the respective recipients in relation to each processing operation.
11. Email Marketing
11.1 Newsletter
You have the option to request information material about our educational offerings on the "FernstudiumCheck" website (OAK – Online Akademie GmbH, Zollstockgürtel 63, 50969 Cologne; hereinafter: "FernstudiumCheck") https://www.fernstudiumcheck.de/, specifically regarding the following content:




To receive the newsletter, you must provide your first and last name, your address, your course of study, and a valid email address. The legal basis for this processing is Art. 6(1)(a) GDPR. Your data will be processed until you withdraw your consent. You can withdraw your consent to the processing of your email address for receiving the newsletter at any time, either by clicking directly on the unsubscribe link in the newsletter or by sending us a message using the contact details provided under "Controller." This does not affect the legality of the processing that took place based on your consent up until the time of your withdrawal.
Double opt-in
To document your request for information material and to prevent the misuse of your personal data, registration for receiving materials is carried out using the so-called double opt-in procedure. After entering the data marked as mandatory, FernstudiumCheck will send you an email to the address you provided, in which you will be asked to expressly confirm your request by clicking on a confirmation link. During this process, your IP address, the date and time of the request, and the time of your confirmation are processed. In this way, "FernstudiumCheck" ensures that you truly wish to receive the information material. We are legally obligated to provide proof of your consent to the processing of your personal data in connection with newsletter registration (Art. 7(1) GDPR). Due to this legal obligation, data processing is based on Art. 6(1)(c) GDPR. You are not obligated to provide your personal data during the request process. However, if you do not provide the required personal data, we may not be able to process your request, or may only be able to do so partially. If no confirmation is received within 24 hours, FernstudiumCheck will block the submitted information and delete it automatically after no later than one month.
11.2 Opinion and market research surveys
To create and evaluate opinion surveys, we use the "Zoho Survey" service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT UTRECHT, Netherlands; hereinafter: "Zoho Survey"). As soon as you participate in a survey, "Zoho Survey" processes participation data (survey open/completion rates, activities, and behavior of respondents when answering surveys), contact information (e.g., email address) if you have questions for "Zoho Survey" regarding the survey, aggregated or anonymized survey results/usage data (e.g., survey type, number of participants, answers), device and browser data (IP address, location information based on the IP address), log data (IP address to determine whether a respondent has already participated in a survey), metadata (usage patterns), and referral data (information about the source through which the respondent accesses surveys). The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interests lie in creating engaging opinion surveys to gain helpful insights into ordering processes, customer satisfaction, and any potential need for optimization of products and internal processes.
You may object to the processing if it is based on Art. 6(1)(f) GDPR. Your right to object applies to reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section.
Zoho Survey also processes data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA. In addition, standard contractual clauses have been concluded with the provider Zoho to ensure an appropriate level of data protection.
12. Hosting
Webflow
We use external hosting services from "Webflow" (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA), which serve to provide the following services: infrastructure and platform services, computing capacity, storage resources, and database services, as well as security and technical maintenance services. For these purposes, all data—including the access data mentioned in the "Use of our website" section—required for the operation and use of our website is processed. The legal basis for this processing is Art. 6(1)(f) GDPR. By using hosting services, we pursue our legitimate interests in the efficient and secure provision of our website. Webflow processes data from users of its services, in particular IP addresses, referral URLs, exit URLs, browser software, and operating systems. Webflow may also process your data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA, and Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list.
Additionally, standard contractual clauses have been concluded with Webflow to ensure an appropriate level of data protection. We are happy to provide you with a copy upon request.
You may object to this processing. Your right to object applies to reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section.
13. Content Delivery Network
To ensure that you can access our online content quickly, we use a Content Delivery Network (hereinafter: "CDN"). When you visit our website, a library is loaded from our CDN and cached on your device to enable faster content delivery and avoid repeated loading. In this process, your IP address, information from the respective server request, browser information, and other information mentioned in the "Use of our website" section are processed by the provider of the respective CDN. The legal basis for this processing is Art. 6(1)(f) GDPR. By using a CDN, we pursue the legitimate interest of faster accessibility and a more effective and improved presentation of our online services. You may object to this processing. Your right to object applies to reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section. We use the following service provider(s) as our CDN:
Cloudflare Germany GmbH
Cloudflare Germany GmbH (Rosental 7, 80331 Munich) and Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). This service provider processes some of your data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA, and Cloudflare, Inc. is certified under this framework. Additionally, standard contractual clauses have been concluded with Cloudflare, Inc. to ensure an appropriate level of data protection. You can view a copy of these standard contractual clauses at https://www.cloudflare.com/de-de/cloudflare-customer-dpa/. Further information on data protection and storage duration can be found at: https://www.cloudflare.com/de-de/privacypolicy/.
14. Integration of third-party content
14.1 Google Maps
This website uses the "Google Maps" service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: "Google" and "Google Maps") to display maps or map sections, allowing you to conveniently use the map function on the website. By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, some of the data mentioned in the "Use of our website" section is transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and processes it—regardless of whether you have a Google account—for the purposes of advertising, market research, and/or tailoring its website to user needs. Regarding the storage of and access to information on your device, your consent is the legal basis according to § 25(1) TDDDG; for further processing, your consent is also the legal basis according to Art. 6(1)(a) GDPR. Google also processes your personal data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA, and Google, LLC is certified under this framework. Additionally, standard contractual clauses have been concluded with Google, LLC to ensure an appropriate level of data protection.
You can obtain a copy of these standard contractual clauses at https://cloud.google.com/terms/sccs. Further information on the purpose and scope of processing by the plug-in provider and the storage duration at Google Maps can be found at https://policies.google.com/privacy?hl=de.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool. The legality of the processing remains unaffected until the revocation is exercised.
14.2 Google Tag Manager
We use the "Google Tag Manager" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: "Google" and "Google Tag Manager") on our website. "Google Tag Manager" is a solution that allows website tags and other third-party elements to be managed via an interface. When the website is accessed, the Google Tag Manager sends an HTTP request to "Google." This transmits device information and personal data, such as your IP address and information about your browser settings, to Google. We use the "Google Tag Manager" to facilitate electronic communication by passing information to third-party providers via programming interfaces, among other things. The respective tracking codes of third-party providers are implemented in the "Google Tag Manager" without us having to manually change the website's source code. Instead, integration is achieved via a container that places a "placeholder" code into the source code. Furthermore, the "Google Tag Manager" allows user data parameters to be exchanged in a specific order, particularly by organizing and systematizing data packets.
Your data is occasionally transmitted to the USA. An adequacy decision by the EU Commission exists for data transfers to the USA, and "Google" is certified under this framework. Additionally, standard contractual clauses have been concluded with Google, LLC to ensure an appropriate level of data protection. You can obtain a copy of these standard contractual clauses at https://cloud.google.com/terms/sccs. The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interests in this processing lie in facilitating and conducting electronic communication by identifying communication endpoints, providing control options, exchanging data elements in a defined sequence, and identifying transmission errors. The "Google Tag Manager" does not store any data. Further information on data protection at "Google" can be found at: http://www.google.de/intl/de/policies/privacy.
You may object to the processing if it is based on Art. 6(1)(f) GDPR. Your right to object applies to reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section. You can prevent processing by deleting your history and website data in your browser settings or by opening your browser in "private mode." Furthermore, the "Google Tag Manager" is used to integrate third-party tags, such as tracking codes or tracking pixels, onto our website. The tool triggers other tags that, in turn, collect your data; we provide separate information about this within this privacy policy. The "Google Tag Manager" itself does not analyze the device information and personal data collected by these tags. Instead, your data is forwarded to the respective third-party service for the purposes specified in our consent management tool. We have configured the "Google Tag Manager" to work with our consent management tool so that the triggering of certain third-party services in the "Google Tag Manager" depends on your selections in our consent management tool, ensuring that only those third-party tags for which you have provided consent will trigger data processing.
The use of the "Google Tag Manager" is covered by the consent given for the respective third-party service. The legal basis for this processing is your consent under Art. 6(1)(a) GDPR. "Google" also processes data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA, and "Google" is certified under this framework. Additionally, standard contractual clauses have been concluded with Google, LLC to ensure an appropriate level of data protection. You can obtain a copy of these standard contractual clauses at https://cloud.google.com/terms/sccs. You can find the storage duration of your data in the descriptions of the individual third-party services below. Further information on data protection at "Google" can be found at: http://www.google.de/intl/de/policies/privacy.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.
14.3 Zoho Desk
For customer support, we use the service "Zoho Desk" provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT UTRECHT, Netherlands; hereinafter: Zoho Desk). We use Zoho Desk to organize customer support requests, for example, when you contact us via beratung@velptec.de. By analyzing customer feedback, we measure customer satisfaction and generate statistics regarding accounts, contacts, and products. Zoho Desk allows us to sort incoming customer inquiries by urgency, priority, and customer type, thereby optimizing the quality of our customer support. Data processed by Zoho Desk and us in this context includes, in particular, your address, name, email address, the time and date of contact with customer support or the submission of customer feedback, as well as any content you share with customer support or in a review. We process this data to measure customer satisfaction. We delete the data generated in this context once processing is no longer necessary, or we restrict processing to comply with existing mandatory legal retention requirements. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interests lie in optimizing our customer support. Zoho Desk also processes data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA. In addition, standard contractual clauses have been concluded with the provider Zoho to ensure an appropriate level of data protection. You can request a copy of these standard contractual clauses via Zoho's contact form at https://www.zoho.com/de/privacy.html or by emailing legal@zohocorp.com. Further information on data protection and storage duration can be found at: https://www.zoho.com/de/privacy.html.
You may object to this processing. Your right to object applies to reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section.
14.4 WhatsApp contact button
On our website, we offer you the option to contact us via a link using the WhatsApp messenger service. The provider is WhatsApp Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland).
The integration is implemented via a static link. This means that no data is transmitted to WhatsApp when you simply visit our website. Only when you actively click on the WhatsApp button will you be redirected to a WhatsApp landing page. It is only through this interaction that your browser leaves our website and establishes a connection to WhatsApp's servers. In this process, data such as your IP address and the information that you have visited our website are transmitted to WhatsApp.
The processing of your data in the context of establishing contact (e.g., answering your chat inquiry) is based on our legitimate interest in fast and effective communication with customers and interested parties pursuant to Art. 6 (1) sentence 1 lit. f) GDPR. If your inquiry is aimed at concluding a contract, Art. 6 (1) sentence 1 lit. b) GDPR is the legal basis.
WhatsApp also processes data in the USA in some cases. An adequacy decision by the EU Commission (Data Privacy Framework) exists for data transfers to the USA, for which the parent company Meta (to which WhatsApp belongs) is certified. In addition, standard contractual clauses have been concluded.
Details on data processing by WhatsApp can be found in their privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea.
15. Services for Statistical, Analytical, and Marketing Purposes
We use third-party services for statistical, analytical, and marketing purposes. This enables us to provide you with a user-friendly, optimized website experience. Third-party providers use cookies, pixels, browser fingerprinting, or other tracking technologies to manage their services. Below, we inform you about the external services currently used on our website, as well as the respective processing in individual cases and your existing revocation options.
15.1 Google Ads Conversion
We use the "Google Ads" service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: "Google" and "Google Ads") to draw attention to our attractive offers on external websites using advertising media (formerly known as "Google AdWords"). In relation to the advertising campaign data, we can determine how successful individual advertising measures are. These advertising media are delivered by "Google" via so-called "Ad Servers." For this purpose, we use "Ad Server" cookies, through which certain parameters for reach measurement, such as the display of ads or clicks by users, can be measured. If you reach our website via a "Google" ad, a cookie is stored on your device by "Google Ads." With the help of cookies, "Google" processes the information generated by your device about interactions with our advertising media (visiting a specific webpage or clicking on an advertising medium), the data mentioned in the "Use of our website" section, in particular your IP address, browser information, the previously visited website, as well as the date and time of the server request, for the purpose of analyzing and visualizing the reach measurement of our advertisements. For this purpose, it can also be determined whether different devices belong to you or your household. Due to the marketing tools used, your browser automatically establishes a direct connection with the "Google" server. If you are registered with a "Google" service, "Google" can associate the visit with your account. Even if you are not registered with "Google" or have not logged in, there is a possibility that the provider will obtain and process your IP address. We only receive statistical evaluations from "Google" for measuring the success of our advertising media. Regarding the storage of and access to information on your device, your consent is the legal basis pursuant to Section 25 (1) TDDDG; for further processing, your consent is also the legal basis pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. "Google" also processes data in the USA in some cases. An adequacy decision by the EU Commission exists for data transfers to the USA. "Google" is certified under this framework. In addition, so-called standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an appropriate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. The storage period at "Google" is a maximum of fourteen months. Further information on data protection and storage periods at "Google" can be found at: https://policies.google.com/privacy and https://business.safety.google/privacy/.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool. The legality of the processing remains unaffected until the revocation is exercised.
15.2 Google Analytics 4
To optimally tailor our website to user interests, we use "Google Analytics," a web analytics service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: "Google" and "Google Analytics 4"). Google Analytics 4 uses "cookies," which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition such as tracking pixels, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Google processes the information generated about your use of our website via your device as well as access data for the purpose of statistical analysis—e.g., visiting a specific webpage, number of unique visitors, entry and exit pages, time spent, clicking, swiping, and scrolling behavior, button activation, newsletter registration, bounce rate, and similar user interactions. For this purpose, it can also be determined whether different devices belong to you or your household. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, as well as the date and time of the server request.
In Google Analytics 4 systems, no individual IP addresses are logged or stored. At the moment the IP address is captured by Google in special local data centers in the EU, your IP address is used to determine location information. Subsequently, the IP address is deleted before the access data is stored in a data center or on a server for Google Analytics. Google Analytics 4 does not provide precise geographic location data, but only general location information such as the region and city of the device's location, which are derived from the IP address. Google will process this information to evaluate your use of the website, to compile reports on website activities for us, and—to the extent we explicitly indicate—to provide us with further services associated with website usage. If you are registered with a Google service, Google can associate the website visit with your user account and create and evaluate user profiles across applications. Furthermore, cross-platform analysis of user behavior on websites and apps that use Google Analytics 4 technologies is performed. This allows user behavior to be captured, measured, and compared equally across different environments. For example, user scroll events are automatically captured to provide a better understanding of website and app usage. For this purpose, different cookie IDs/device IDs are used for different devices. Subsequently, we are provided with anonymized statistics created according to selected criteria regarding the use of the different platforms.
With the help of Google Analytics 4, target groups are automatically created for specific cookie IDs/device IDs or mobile advertising IDs, which are later used for individualized advertising. Target group criteria may include, for example: users who viewed products but did not add them to a shopping cart, or added them to a shopping cart but did not complete the purchase, OR users who purchased specific items. A target group comprises at least 100 users. With the help of the Google Ads tool, interest-based advertisements can then be displayed in search results. Likewise, website users can be recognized on other websites within the Google advertising network (in Google Search, on YouTube, so-called Google Ads, or on other websites) and presented with tailored advertisements based on the defined target group criteria.
Regarding the storage of and access to information on your device, your consent is the legal basis pursuant to Section 25 (1) TDDDG; for further processing, your consent is also the legal basis pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. Google also processes data in the USA in some cases. An adequacy decision by the EU Commission exists for data transfers to the USA. Google, LLC is certified under this framework. In addition, so-called standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an appropriate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Your data in connection with Google Analytics 4 will be deleted after a maximum of 24 months. Further information on data protection at Google can be found at: http://www.google.de/intl/de/policies/privacy.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool. The legality of the processing carried out based on the consent until the revocation is not affected by the revocation.
15.3 Web Analytics Software Matomo
We use the web analytics software Matomo, an open-source software for the statistical evaluation of visitor access, to make our website better and more user-friendly. The provider is "Innocraft" (Innocraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand, contact@innocraft.com). "Matomo" is open-source software that enables statistical evaluations on our website, in particular regarding visitor access, page views, downloads, previously visited websites, and measuring the success of search engine entries. The analyzed information and statistics are processed exclusively on our own web servers or databases. The "Matomo" tool uses technologies such as fingerprinting to capture, analyze, and categorize incoming information generated by the user's device regarding the use of our website and interactions with our website, as well as access data, in particular IP address, browser information, the previously visited website, and the date and time of the server request, for the purpose of statistical analysis and measuring the reach of advertisements in search engines. Regarding the storage of and access to information on your device, your consent is the legal basis pursuant to Section 25 (1) TDDDG; for further processing, your consent is also the legal basis pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. We use "Matomo" with an extension that processes IP addresses in a shortened form to make it more difficult to identify individuals directly. The storage period is 13 months.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.
15.4 Call Tracking via Matelso / Searchperts
Our website uses a service from matelso GmbH, Stuttgart. This service is deployed by the performance marketing agency searchperts Deutschland GmbH, Düsseldorf (searchperts.de). When you call a phone number provided by matelso for us, information about the call is transmitted to a web analytics service we use (e.g., Google Analytics). matelso also reads cookies set by our analytics service or other parameters of the website you are visiting, for example, referrer, document path, remote user agent. The corresponding information is processed by matelso according to our instructions and stored on servers in the EU. Further information can be found at: https://matelso.com/de/privacy-statement. You can prevent the storage of cookies by adjusting your browser software settings; however, please note that in this case, you may not be able to use all functions of this website to their full extent.
The legal basis for storing information on the device is your consent pursuant to Section 25 (1) TDDDG, and for further processing, Art. 6 (1) sentence 1 lit. a) GDPR.
You can revoke your consent to processing at any time by moving the slider in the "" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.
15.5 Hotjar
We use Hotjar to better understand our users' needs and to optimize the offering and experience on this website. With the help of Hotjar's technology, we gain a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click, what they like and what they don't, etc.), which helps us align our offering with our users' feedback. Hotjar works with cookies and other technologies to collect data about our users' behavior and their devices, in particular the device's IP address (captured and stored only in anonymized form during your website usage), screen size, device type (unique device identifiers), information about the browser used, location (country only), and preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
Further information can be found in the 'about Hotjar' section on Hotjar's help page. You can revoke your consent to processing at any time by moving the slider in the "Settings" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.
15.6 Use of HubSpot and Zoho CRM
For contact management with our customers, we use the "Zoho CRM" service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT UTRECHT, Netherlands; hereinafter: Zoho CRM) as well as HubSpot Ireland Limited (Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland; hereinafter "HubSpot"). The CRM systems serve us for the complete planning, control, and execution of all interactive processes with customers and enable us to perform target-group-oriented market cultivation based on a customer database. The data processed by Zoho and HubSpot for us in this context includes, in particular, address, name, email address, profile data, contact history, communication data, interest data, contract data, transaction data, sales data, as well as action and reaction data. The legal basis for processing is Art. 6 (1) sentence 1 lit. f) GDPR or Art. 6 (1) sentence 1 lit. b) GDPR, if and to the extent that the processing serves the initiation and execution of a contract. Our legitimate interests in this case lie in the effective management of our contacts and the support of our network. We delete the data generated in this context once the processing is no longer required or, if applicable, restrict the processing to compliance with existing mandatory statutory retention obligations. Zoho also processes your data in the USA. An adequacy decision by the EU Commission exists for data transfers to the USA. In addition, so-called standard contractual clauses have been concluded with the providers to commit them to an appropriate level of data protection.
You may object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Controller" section.
15.7 Zoho Sales IQ
For our website, we use the "Zoho Sales IQ" service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT UTRECHT, Netherlands; hereinafter: Zoho Sales IQ) for customer interaction purposes as part of a live chat offering, as well as for statistical analysis of website usage. Zoho Sales IQ uses "cookies," which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition to process information from your device. For this purpose, a randomly generated identification number (user ID) is assigned to your device. Using these technologies, Zoho Sales IQ processes the information generated about your use of our website via your device as well as access data for the purpose of statistical analysis—e.g., visiting a specific webpage, number of unique visitors, entry and exit pages, time spent, clicking, swiping, and scrolling behavior, button activation, registrations/logins, bounce rate, and similar user interactions. Access data includes, in particular, the IP address, browser and device information, user ID, the previously visited website, as well as the date and time of the server request. Zoho Sales IQ will process this information to evaluate your use of the website, to compile reports on website activities for us, and—to the extent we explicitly indicate—to provide us with further services associated with website usage. This allows us, with the help of Zoho Sales IQ, to determine whether our website offering is attractive to you as a website user, to recognize you as a user, and to optimize our marketing strategy. Regarding the storage of and access to information on your device, your consent is the legal basis pursuant to Section 25 (1) TDDDG; for further processing, your consent is also the legal basis pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. Zoho also processes data in the USA in some cases.
An adequacy decision by the EU Commission exists for data transfers to the USA. In addition, so-called standard contractual clauses have been concluded with Zoho to commit Zoho to an appropriate level of data protection. You can request a copy of the standard contractual clauses via Zoho's following contact form https://www.zoho.com/de/privacy.html as well as via legal@zohocorp.com. Your data in connection with Zoho will be deleted after a maximum of approximately 13 months. Further information on data protection and storage periods can be found at: https://www.zoho.com/de/privacy.html.
You can revoke your consent to processing at any time by moving the slider in the "Settings" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.
15.8 Meta Pixel / Conversion API
We use analysis features from "Meta" on our websites (provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Meta Platforms Inc., 1601 Willow Rd, Menlo Park, California, USA; hereinafter: "Meta"). For this purpose, we use the Meta Pixel and the Meta Conversions API to analyze the use of our websites and online presence, e.g., on social networks like Meta and Instagram, the interactions performed by users on our websites and online presence, and to measure the reach of our advertisements. The Meta Conversions API, an application programming interface, helps us transmit marketing information and parameters regarding interactions between website visitors and our website directly to Meta's servers for evaluation. We use these insights to optimize our marketing and advertising campaigns and to create target groups, particularly of Meta users, to whom we can display interest-based advertisements. With the help of the Meta Pixel—graphics embedded on our websites that are automatically loaded when our websites are accessed, enabling the tracking of user behavior—your browser automatically establishes a direct connection with Meta's server. By integrating the Meta Pixel, Meta processes the information generated about your use of our websites via your device—e.g., that you have visited a specific webpage—and processes, among other things, the data mentioned in the "Use of our websites" section, in particular IP address, browser information, Meta ID, device ID, language settings, date and time of the server request, as well as event data such as page views, button clicks, and other interactions for the purpose of analyzing our websites and online presence, analyzing user interactions, and measuring the reach of our advertisements. We and Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26 GDPR for the collection and transmission of data within the scope of this service. We have concluded a corresponding agreement on joint responsibility with Meta ("Controller Addendum"), the essential contents of which you can view at https://www.facebook.com/legal/controller_addendum.
For these purposes, it can also be determined whether different devices belong to you or your household. The information obtained using the Meta Pixel is used by us solely for statistical purposes, is transmitted to us by Meta as anonymous statistics, and provides no information about the identity of the user. If you are registered with a Meta service, Meta can associate the collected information with your account or you as a user. Even if a user is not registered with Meta or is not logged in, there is a possibility that Meta will obtain and process the IP address and other identification features. Within the framework of joint responsibility, Meta is responsible for upholding the rights of data subjects pursuant to Art. 15-20 GDPR regarding the data stored by Meta after transmission.
Regarding the storage of and access to information on your device, your consent is the legal basis pursuant to Section 25 (1) TDDDG; for further processing, your consent is also the legal basis pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. Meta also processes data in the USA in some cases. An adequacy decision by the EU Commission exists for data transfers to the USA. Meta Platforms, Inc. is certified under this framework. In addition, standard data protection clauses have been concluded with Meta Platforms, Inc. to commit Meta Platforms Inc. to an appropriate level of data protection.
You can request a copy of the standard data protection clauses from Meta at https://www.facebook.com/help/contact/341705720996035. The storage period for information in Meta cookies is one year. Further information on data protection and storage periods at Facebook can be retrieved at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.
You can revoke your consent to processing at any time by moving the slider in the "Settings" of the consent tool. The legality of the processing carried out based on the consent until the revocation is not affected by the revocation.
15.9 LinkedIn Ads (Conversion)
We use the "LinkedIn Ads" features of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: "LinkedIn") on our website. In this context, we also use the "LinkedIn Insight Tag" feature, which implements a code snippet into the HTML code of our website. If you reach our website via a LinkedIn ad, the tag sets a cookie on your device or in your browser to measure the reach of our advertisements, enable the attribution of ad performance, and continuously improve our ads. Using these cookies, LinkedIn processes information generated by your device about interactions with our ads (e.g., visiting a specific webpage or clicking on an ad) as well as some of the data mentioned in the "Use of our website" section, such as your IP address, device and browser information, referrer URL, and timestamps for the purpose of analyzing the reach and success of our advertisements, with LinkedIn truncating the IP addresses. By using LinkedIn's conversion tracking features, we can specifically determine the extent to which our ads have influenced relevant actions on our website. For this purpose, your browser automatically establishes a direct connection with the LinkedIn server. If you are logged in to a LinkedIn service , LinkedIn can associate the collected information, particularly information about your visit to our website, with your user account. The direct identifiers of registered users processed in this context are removed by LinkedIn within seven days, and the remaining data is then deleted within 180 days. Even if you do not have a LinkedIn user account or are not logged in, it is possible that LinkedIn may obtain and process your IP address and other identification features.
During the evaluation, LinkedIn does not share personal data with us but only provides us with statistical reports on the performance of our advertisements. This allows us to see, in the form of statistics, how successful our ads on LinkedIn are and whether they have led to relevant actions on our website. We also receive statistical analyses regarding which groups of people (e.g., by job title, company, industry) have performed actions. Based on this, we can specify our target groups and improve the targeting of our advertisements. Regarding the storage of and access to information on your device, the legal basis is § 25(1) TDDDG; for further processing, the legal basis is Art. 6(1)(a) of the GDPR. LinkedIn also processes data in the USA. We have concluded standard contractual clauses with LinkedIn to commit them to an appropriate level of data protection. We are happy to provide you with a copy upon request. Further information on data protection and storage duration at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.
You can withdraw your consent to processing at any time by moving the slider in the "Advanced Settings" of the consent tool. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.
15.10 Analysis using Webflow Analyze
To optimally tailor our website to user interests, we use "Webflow Analyze," a web analytics service provided by "Webflow" (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow Analyze uses cookies stored on your device for recognition, as well as similar tracking methods for device recognition such as tracking pixels, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Webflow processes the information generated about your device's use of our website as well as access data for the purpose of statistical analysis – e.g., visiting a specific page, number of unique visitors, entry and exit pages, time spent, clicking, swiping, and scrolling behavior, button interaction, newsletter sign-ups, bounce rate, and similar user interactions. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request.
Regarding the storage of and access to information on your device, your consent is the legal basis according to § 25(1) TDDDG; for further processing, your consent is also the legal basis according to Art. 6(1)(a) of the GDPR. Webflow also processes your data in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list. Additionally, standard contractual clauses have been concluded with Webflow to commit them to an appropriate level of data protection. We are happy to provide you with a copy upon request. Data collected via Webflow Analyze is deleted after 12 months. The storage duration of the cookie is also 12 months.
You can withdraw your consent to processing at any time by moving the slider in the "" of the consent tool. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.
15.11 Testing different website designs (A/B testing) using Webflow
To optimally tailor our website to user interests, we use "Webflow Analyze," a web analytics service provided by "Webflow" (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow Analyze uses cookies stored on your device for recognition, as well as similar tracking methods for device recognition such as tracking pixels, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Your device is assigned to one of several user groups, each of which is served different versions of our website. This allows us to observe which designs lead to specific user behavior (e.g., visiting a specific page, number of unique visitors, entry and exit pages, time spent, clicking, swiping, and scrolling behavior, button interaction, newsletter sign-ups, bounce rate, and similar user interactions). Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request. Regarding the storage of and access to information on your device, your consent is the legal basis according to § 25(1) TDDDG; for further processing, your consent is also the legal basis according to Art. 6(1)(a) of the GDPR. Webflow also processes your data in the USA. There is an adequacy decision by the EU Commission for data transfers to the USA. Webflow is certified under this framework. Additionally, standard contractual clauses have been concluded with Webflow to commit them to an appropriate level of data protection. We are happy to provide you with a copy upon request. Data collected via Webflow Analyze is deleted after 12 months. The storage duration of the cookie is also 12 months.
You can withdraw your consent to processing at any time by moving the slider in the "" of the consent tool. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.
15.12 Server-side tag management via Stape.io
For the efficient management and privacy-friendly processing of our analysis and marketing tags, we use "Stape," a service for server-side tag management (Stape Europe OÜ, Narva mnt 5, 10117 Tallinn, Estonia). Tracking data is not processed directly in the browser but via a server endpoint controlled by us and, if necessary, forwarded to third-party providers (e.g., Google, Meta). Stape provides the necessary infrastructure for this (e.g., Google Tag Manager Server Container). This server-side processing allows us to control data flows more precisely and to anonymize or filter personal information (such as IP addresses) before any forwarding occurs. Cookies (e.g., _gtmeec, _fbp) are used for this purpose and are stored on your device for recognition. The processed data includes, in particular, truncated IP addresses, device and browser information, and event data.
Regarding the storage of and access to information on your device, your consent is the legal basis according to § 25(1) TDDDG; for further processing, your consent is also the legal basis according to Art. 6(1)(a) of the GDPR. The data is processed on Stape servers within the European Union. We have concluded a data processing agreement with Stape. Cookies set via Stape are deleted after the end of the respective session.
You can withdraw your consent to processing at any time by moving the slider in the of the consent tool. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.
16. Provision of whitepapers and information materials
On our website, we offer you the opportunity to download whitepapers and other professional publications. To use this service, you must provide personal data in the designated input form (usually your first name, last name, and a valid email address). This data is transmitted to us and stored to enable you to access the requested content and to allow us to contact you for lead generation purposes.
The processing of this data is based on Art. 6(1)(b) of the GDPR. The provision of the whitepaper is part of a contractual exchange where the delivery of content is linked to the provision of the specified data and permission for promotional contact.
The purpose of processing this data is to provide you with the requested publications and to technically manage the download process. Furthermore, this processing allows us to inform you about other relevant topics, offers, or services from velpTEC GmbH within the scope of our contractual relationship.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Within the scope of our contractual relationship, we store your data for as long as is necessary to provide information and support as a prospective customer, unless you object to further processing or request the deletion of your data.
You may object to the processing of your data for advertising purposes at any time with future effect or withdraw your consent. To do so, you can send us a message using the contact details provided under "Controller" or use the unsubscribe link in our emails.
General information on the processing of your data during telephone recordings
We are legally obligated to inform you about the processing of your personal data (hereinafter: "data") in the context of recording telephone calls. This privacy notice informs you about the details of your data processing and your related legal rights. For terminology such as "personal data" or "processing," the legal definitions set out in Art. 4 of the GDPR apply. We reserve the right to amend this privacy policy with future effect, particularly when using new technologies or changing legal requirements or relevant case law.
1. Controller
The controller responsible for the processing of personal data within the scope of this privacy policy is:
velpTEC GmbH
Philipsbornstraße 2
30165 Hannover
Email: datenschutz@velptec.de
2. Questions about data protection
If you have any questions regarding data protection in relation to our company or our services, you can contact us using the details provided in the "Controller" section.
3. Security
We have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external interference. We regularly review our security measures and adapt them to the state of the art.
4. Your rights
You have the following rights regarding the personal data concerning you, which you may assert against us:
Right to information
You may request information about your personal data that we process in accordance with Art. 15 GDPR.
Right to rectification
Should the information concerning you not (or no longer) be accurate, you may request a correction in accordance with Art. 16 GDPR. Should your data be incomplete, you may request that it be completed.
Right to erasure
You may request the deletion of your personal data in accordance with Art. 17 GDPR.
Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request a restriction on the processing of your personal data.
Right to object to processing
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on Art. 6(1) sentence 1(e) or (f) GDPR, in accordance with Art. 21(1) GDPR. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. Further processing will also take place if the processing serves the establishment, exercise, or defense of legal claims (Art. 21(1) GDPR). Furthermore, you have the right under Art. 21(2) GDPR to object at any time to the processing of your personal data for the purpose of direct marketing; this also applies to profiling insofar as it is related to such direct marketing. We draw your attention to this right to object in this privacy policy in connection with the respective processing.
Right to withdraw your consent
Where you have provided consent for processing, you have the right to withdraw it at any time in accordance with Art. 7(3) GDPR.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format ("data portability") and the right to transmit this data to another controller, provided the requirements of Art. 20(1)(a) and (b) GDPR are met (Art. 20 GDPR).
You may exercise your rights by notifying us using the contact details provided in the "Controller" section.
If you believe that the processing of your personal data violates data protection law, you also have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority of your choice.
This includes the data protection supervisory authority responsible for the controller:
State Commissioner for Data Protection of Lower Saxony, P.O. Box 221, 30002 Hannover or: Prinzenstraße 5, 30159 Hannover, Phone: 0511 120-4500, E-mail: poststelle@lfd.niedersachsen.de, https://www.lfd.niedersachsen.de.
5. Telephone recording
For the purpose of quality assurance, control, and improvement of our telephone customer service, as well as for training purposes, we record telephone calls with customers. In doing so, the personal data you provide during the call is processed. This includes, in particular, the recording of your voice, your first and last name, your address, and the number/identifier of your connection or terminal device. The legal basis for this processing is your consent in accordance with Art. 6(1) sentence 1(a) or Art. 9(2)(a) GDPR, if biometric data (voice) is involved. Unless you revoke your consent beforehand, we will delete your data after 12 months or, if applicable, restrict processing to comply with existing mandatory statutory retention obligations.
You may revoke your consent to processing at any time by sending us a notification using the contact details provided above. The lawfulness of the processing remains unaffected until the point of revocation.
6. Disclosure of your data
The consent you have provided also includes the disclosure of your data to our external service providers who assist us in recording telephone calls. These are:
Aircall
To store telephone conversations, we use the cloud-based telephone system provided by Aircall SAS (11-15 Rue Saint-Georges, 75009 Paris, France; hereinafter "Aircall"). Aircall also processes the personal data collected during call recording. To provide its technical infrastructure, Aircall uses services from Amazon Web Services (AWS). Your data is therefore also processed by Amazon Web Services, Inc. (410 Terry Avenue North, Seattle, WA 98109, USA). AWS also processes your data in the USA. For data transfers to the USA, there is an adequacy decision by the EU Commission (EU-US Data Privacy Framework). Amazon Web Services, Inc. is certified under this framework.
After the telephone call or connection has ended, the processed data is stored for a period of twelve months and subsequently deleted, unless statutory retention obligations prevent this.
Copyright by Spirit Legal