1. Names and contact details of the controller and the company data protection officer
Phone +49 (0) 40 360369090
Registered office Hamburg, Hamburg Local Court, HRB 15512
Managing directors: Bastian Gembler and Larissa Peters
Phone: 040 / 360 369 90
A company data protection officer has not been appointed. There is currently no legal obligation to do so.
To change the cookie settings click here
2. General information on data processing
a) Scope of the processing of personal data
We only process your personal data insofar as this is necessary to provide a functional website and to provide our contractual services.
b) Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
c) Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
3. Collection and storage of personal data and the nature and purpose of its use
a) While visiting our Website unter www.vantopia.de
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. This serves to safeguard our legitimate interests in the correct presentation of our website, which are overriding in the context of a balancing of interests. All data collected as part of the use of this website or in the forms provided for this purpose as described below are processed on its servers. Processing on other servers only takes place within the scope described here. This service provider is located within a country of the European Union or the European Economic Area.
When you visit the website www.vantopia.de, information is automatically sent from your browser to the server of our website without any action on your part. This information is temporarily stored in a so-called log file and automatically deleted after 6 months at the latest. This information cannot be assigned to you personally. We do not merge this data with other data sources. This data includes the browser type and version used, the operating system used, the URL of the previously visited website (referrer URL), the host name of the accessing computer (shortened IP address), the time of the server request, the access status and, if applicable, the name of your access provider. The aforementioned data is processed by us for the following purposes:
– Ensuring a smooth connection to the website,
– Ensuring a comfortable use of our website,
– evaluating system security and stability and – for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
b) If you contact us by e-mail or telephone
If you have any questions about our services, we offer you the option of contacting us by e-mail or telephone. When contacting us by e-mail, the e-mail address of the sender is automatically transmitted. The processing of this personal data is necessary so that we know who sent the request and can answer it. This also constitutes the necessary legitimate interest in processing the data. Further information can be provided voluntarily. You are free to decide whether to provide further data. The necessary and required data processing for the purpose of implementing a contractual relationship is carried out on the basis of the legal authorization from Art. 6 para. 1 sentence 1 lit. b GDPR. For further processing purposes, your voluntary consent is generally required in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
c) Data processing for the processing of bookings
When you book services with us, we need your first and last name, your e-mail address, your telephone number, your postal address and your payment information to process your booking. We use the e-mail address to communicate with you and for the booking confirmation. We process your data for the processing of your booking, including any subsequent liability cases. The legal basis for this is Art. 6 para. 1 lit. b GDPR (fulfillment of contract).
CHECKFRONT FOR WORDPRESS
4. Forwarding of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if: – you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, – disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard our legitimate interests, unless your interests, fundamental rights or freedoms, which require the protection of personal data, prevail, – in the event that there is a legal obligation for disclosure in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and – this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
5. E-mail advertising with newsletter registration
The following information explains the content of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described. Content of the newsletter: We only send newsletters, emails and other electronic notifications with advertising information (hereinafter “newsletter”) with the consent of the recipient or with legal permission. If the content of the newsletter is specifically described when registering for the newsletter, it is decisive for the user’s consent. Our newsletters also contain information about our products, offers, promotions and our company.
6. Use of data for payment processing
If you choose a payment method offered via the payment service provider “Stripe”, payment processing will be carried out via Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information on data protection from “Stripe” at the following Internet address: https://stripe.com/de/privacy#translation.
7. Cookies and web analysis
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
- Internet Explorer™
If cookies are not accepted, the functionality of our website may be limited. As part of the use of Google Analytics (see below), this website also uses the so-called DoubleClick cookie, which enables your browser to be recognized when you visit other websites. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The information automatically generated by the cookie about your visit to this website is transmitted to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymization on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google will use this information to compile reports on website activity and to provide other services relating to website activity and internet usage.This serves to safeguard our legitimate interests in the optimal marketing of our website, which predominate in the context of a balancing of interests. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. After the end of the purpose and the end of the use of Google DoubleClick by us, the data collected in this context will be deleted. Google Double Click is an offer from Google LLC. (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. You can deactivate the DoubleClick cookie via this link. You can also obtain information from the Digital Advertising Alliance about the setting of cookies and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted. You can also manage cookies used for online advertising via the tools developed in many countries as part of self-regulation programs, such as https://www.aboutads.info/choices/, which is based in the USA, or http://www.youronlinechoices.com/at/praferenzmanagement, which is based in the EU.
8. Analysis and tracking tools and Google services
The analysis and tracking tools listed below and used by us are used on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we pursue the purpose of ensuring a needs-based design and the continuous optimization of our offer. On the other hand, we use the tracking measures to statistically record and evaluate the use of our website. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tool.
a) WORDPRESS STATS
b) Google Analytics
c) Use of the Google Tag Manager for web analysis
Google Tag Manager is a solution that allows marketers to manage website tags via an interface, which serves to safeguard our legitimate interests in an optimized presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
d) Google Web Fonts
e) Google reCAPTCHA
f) Google AdWords Remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. After the end of the purpose and the end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted. Any further data processing will only take place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data in order to create target groups. Google AdWords Remarketing is an offer from Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield. You can deactivate the remarketing cookie via this link. You can also obtain information from the Digital Advertising Alliance about the setting of cookies and make settings for this.
9. Other marketing networks and third-party plug-ins
FACEBOOK-PLUGINS (LIKE & SHARE-BUTTON)
10. Rights of data subjects
You have the right: – to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details; – in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us; – in accordance with Art. in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims; – in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR to object to the processing; – in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; – in accordance with Art. 7 para. 3 GDPR, to withdraw your consent to us at any time. This means that we may no longer continue the data processing that was based on this consent in the future and – to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
11. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to email@example.com.
12. Data security
On our website, we use the Transport Layer Security method, more commonly known by its predecessor Secure Sockets Layer (SSL), as a hybrid encryption protocol for secure data transmission on the Internet, in conjunction with the highest security level supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual (sub)page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser. In addition, we use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.