Data Protection Disclaimer and Data Privacy

Thank you very much for visiting our website. Vibracoustic SE, Europaplatz 4, 64293 Darmstadt, Germany, collects and processes your data as controller.

You can reach our Data Protection Officer at the following email address: data-protection-officer@vibracoustic.com

If you have any queries or suggestions regarding data protection, please feel free to contact us:

Vibracoustic SE
Data Protection
Europaplatz 4
64293 Darmstadt
Germany

When processing personal data, Vibracoustic complies with the relevant statutory data protection and data security regulations in the countries concerned as well as with internal data protection regulations.

§1 For what purpose and under what legal basis is your personal data collected and processed?

In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website as well as the content and services. The personal data of our users is collected and used only with the user’s consent (Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR)). An exception applies in cases, where the processing of the data is mandatory due to statutory regulations (Art. 6 para. 1 lit. c EU GDPR) or technical reasons (Art. 6 para. 1 lit. f GDPR in the interest of a properly functioning website).

If we obtain the consent of the data subject to the processing of personal data, Art. 6 para. 1 lit. a GDPR applies as the legal basis for the processing of personal data.

In the processing of personal data, required to fulfil a contract, to which the data subject is a party, Art. 6 para. 1 lit. b GDPR applies as legal basis. This also applies to processing operations required to carry out pre-contractual actions.

Insofar as it is necessary to process personal data to fulfil a legal obligation to be met by our company, Art. 6 para. 1 lit. c GDPR applies as legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR applies as legal basis.

If processing is necessary to safeguard the legitimate interests of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the interest mentioned first, Art. 6 para. 1 lit. f GDPR applies as legal basis for processing. Our justified interest in the processing of the personal data of the data subject lies in the provision of a functioning website.

§2 Which categories of personal data are processed?

If you use our website, technical data such as the IP address of your network, date, time, time zone and status of the requested file, information about the website that referred you to our site, your browser type and the version of your operating system are sent to us and stored for a limited period of time as described below.

The data, including the IP addresses of the user, are also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Any data stored in log files will be deleted after ten days at the latest. Storage beyond this period is not possible. In this case, the IP addresses of the users are deleted or anonymized, so that an assignment of the calling client is no longer possible.

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Therefore, the user cannot object to this.

You must give your explicit consent when you provide us with personal data through this website. The data is only used for the stated purpose.

§3 What rights do you have?

Under the EU GDPR, you have the following rights:

If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you are entitled to its correction (Art. 16 GDPR). If the legal prerequisites exist, you can request the deletion or limitation of the processing as well as object to the processing (Articles 17, 18 and 21 GDPR). If you request a limitation, it may not be possible to initiate or process the transaction (such as deleting parts of the contact information, thus preventing communication with you or preventing the formation of a contract).

If you have consented to data processing or there is a data processing contract, and the processing of data is done through automated procedures, you may be entitled to data transmission (Art. 20 GDPR).

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

If we process your data on the basis of our predominant legitimate interest, you can object to the storage of your personal data at any time. Your personal data will no longer be processed unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims.

For the exercise of your rights as the data subject, a letter by mail to the below-mentioned address or an email to data-protection@vibracoustic.com is sufficient:

Vibracoustic SE
Data Protection
Europaplatz 4
64293 Darmstadt
Germany

If you exercise your rights mentioned above, Vibracoustic will check whether the legal requirements for this are met.

You also have the right to complain to any data protection supervisory authority. The supervisory authority responsible for Vibracoustic SE is:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden
Germany
Telephone: +49 611 1408 – 0
Fax: +49 611 1408 – 611
Email to HDSB: 
https://datenschutz.hessen.de/über-uns/kontakt

§4 When will your personal data be deleted?

We will delete your personal data or limit its processing as soon as the purpose of the processing ceases to exist. Such storage may also take place if specified by the European or national legislator in EU regulations, laws or other regulations, to which the controller is subject. A restriction or deletion of the data occurs even if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion or fulfilment of the contract.

§5 To whom is your personal data transferred?

We transmit your data to processors, who are involved in the processing and with whom we have concluded corresponding data protection agreements. In addition, we transmit your data to third parties if the circumstances (e.g. a request) make it necessary for the transfer of your data to a clerk of a company in the Vibracoustic Business Group in a member state of the European Union or in a third country (see below) to provide technical responses.

§6 Is the personal data transferred to a third country?

In addition, we transfer your personal data to the third country always in compliance with the Art. 44 to 49 GDPR, by concluding corresponding data protection agreements with the affiliated companies, with the inclusion of the GDPR standard contractual clauses, if necessary, or if an adequacy decision by the EU Commission for the destination country exists.

§7 Would you like to contact us (contact form and email contact)?

Our website has a contact form that can be used for online communication. If a user uses this form, the data entered in the input screen will be transmitted to us and saved. These details include required information about the first name, last name, company, country, email and inquiry.

When sending this form, your consent to the processing of the data is obtained and this data protection policy is referred to you. Alternatively, you can also contact us via the provided email address. In this case, the user’s personal data transferred by email will be saved.

Legal basis for the processing of the data in the presence of the user’s consent is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The lawful processing that has taken place until then remains unaffected by the revocation.

Regarding the revocation of this consent, we refer to your rights already described above.

In this context, there is no regular disclosure of the data to third parties. The data will be used exclusively to process the communication within the scope of your request. Data will be disclosed only to companies belonging to the Vibracoustic Group if it is necessary to respond to your request.

In addition, we transfer your personal data to affiliated companies in third countries always in compliance with the GDPR. When your personal data is transferred, Art. 44 to 49 GDPR and the corresponding data protection agreements are agreed, possibly with reference to the EU standard contract clauses, or there is an EU Commission adequacy decision for the target country exists.

If a processor is located in a third country, the personal data will be transmitted always in compliance with the provisions of Art. 44 to 49 GDPR. A related additional clause will be included in the relevant agreement on order processing.

We process the personal data from the input screen only to process the contact. In the case of contact by email, this also includes the required legitimate interest in the processing of the data.

The other personal information processed when sending the contact form is intended to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of data that is transferred by email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in answering your inquiry.

If the email contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data will be deleted as soon as it is no longer necessary for meeting the purpose of its collection. This is the case for the personal data from the input screen of the contact form and the data sent by email, once the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

The additional personal data collected when sending the contact form will be deleted at the latest after the request has been answered.

§8 Use of cookies

Cookies are small text files that are stored on the user’s device (computer, smartphone etc.).

This website uses the following types of cookies, whose scope and functionality can be explained as follows:

Transient cookies (more under a)

YSC: This cookie allows YouTube to compile usage information for videos hosted by YouTube.

wp-wpml_current_admin_language_d41d8cd98f00b204e9800998ecf8427e: Cookie is set by WPML to store language settings.

wordpress_test_cookie: Cookie is set by WordPress to check if cookies can be placed.

cookielawinfo-checkbox-statistics: The purpose of this cookie is to check whether or not you have given the consent to the usage of cookies under the category ‘Statistics’.

cookielawinfo-checkbox-non-necessary: Cookie is set by GDPR Cookie Consent to check if cookies can be placed.

cookielawinfo-checkbox-necessary: The purpose of this cookie is to check whether or not you have given the consent to the usage of cookies under the category ‘Basic’.

CookieLawInfoConsent: The cookie is used to store the summary of the consent given for cookie usage. It does not store any personal data.

cli_user_preference: The cookie is used to store the yes/no selection given for cookie usage. It does not store any personal data.

Persistent cookies (more under b)

position_ref: Used to store referrer for a specific job, for example Facebook, Indeed, LinkedIn.

global_ref: Used to store referrer in general, for example Facebook, Indeed, LinkedIn.

_ga: Used to distinguish users.

_gid: Used to distinguish users.

_gat: Used to throttle request rate.

PREF, VISITOR_INFO1_LIVE: These cookies allow YouTube to compile usage information for videos hosted by YouTube.

CONSENT: Consent cookie set by YouTube for iframe content.

wp-settings-1: Cookie is set by WordPress to store user preferences.

wp-settings-time-1: Cookie is set by WordPress to store user preferences.

wp-wpml_current_language: Cookie is set by WPML to store language settings.

wordpress_sec_be576c2dc65619bd71085284ae14024c: Cookie is set by WordPress to provide protection against hackers, store account details.

wordpress_logged_in_be576c2dc65619bd71085284ae14024c: Cookie is set by WordPress to keep users logged in.

viewed_cookie_policy: The cookie is used to store whether or not you have consented to the use of cookies. It does not store any personal data.

_pk_id: This is set by Matomo and used to store a few details about the user such as the unique visitor ID. We anonymize the two last bytes of the visiting devices IP address.

_pk_ref: This cookie is set by Matomo and used to store the attribution information, the referrer initially used to visit the website.

a) Transient cookies are automatically deleted when you close the browser. These specifically include the session cookies. They store a so-called session ID, which allow the classification of the various requests from your browser based to the collective session. Doing so allows your computer to be recognized should you return to our website. Session cookies are deleted once you log out or close the browser.

b) Persistent cookies are automatically deleted after a specific period, which may differ depending on the cookie. You can delete cookies at any time in your browser’s security settings.

You can configure your browser settings as you wish and refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions on this website if you do so.

§9 Use of Web Analytics Platform Matomo Analytics Tool

This website uses Matomo, an open-source web analytical service from matomo.org. It uses so-called first party cookies.

We use Matomo to analyze the usage of our website and make regular improvements. The statistics allows us to improve our website design and make it more interesting for users. The legal basis for the use is Art. 6 para. 1 S. 1 lit. a GDPR.

We anonymize the two last bytes of the visiting devices IP address.

The information generated by the cookies about your usage of this website is stored 12 months within our own database, no other third-party developer or Matomo itself has access to the data. Your data is not used for any other purpose than described nor transferred to a third party. The data is mainly used for aggregated statistics.

More about Matomo: www.matomo.org

§10 Integration of third-party services

YouTube

We have integrated YouTube videos in our online offer and these are saved at www.YouTube.com and can be played directly from our website. These are all in the “expanded data protection” mode, i.e. no data about you as a user will be transferred to YouTube if you do not play the videos. Only after you play the videos, the data listed in the next paragraph will be transferred. We have no influence on this data transfer.

Through your visit to the website, YouTube will be informed that you have opened on the corresponding subpage of our website. In addition, the data named in §2 of this declaration will be transmitted. This will happen regardless of whether you are logged in to a YouTube user account, or if there is not user account at all. If you are logged into Google, your data will be assigned directly to your account. If you do not want your data immediately assigned to your account, you must log out before activating the button. YouTube will store the data as a user profile and use it for promotional purposes, market research and/or the user-friendly design of its website. Such assessments are primarily made to provide tailored advertisements (even for users who are not logged in) and to inform other users in the social network about your activities on our website. You have the right to object to the creation of a user profile, however, you must address these objections to YouTube.

You can find out more about the purpose and scope of the data collection and its processing by YouTube in the data protection declaration. You will find more information about your rights and possible settings to protect your privacy: www.google.de/intl/de/policies/privacy.

LinkedIn

Tailored Audiences” and “Conversion Tracking” by LinkedIn offers the opportunity to target existing users and customers who have visited the Vibracoustic website with relevant campaigns. This is done by LinkedIn using a website tag to store anonymized user data. When a user visits our website, a LinkedIn cookie is placed in the browser.

At LinkedIn, you can decline interest-based advertising here https://www.linkedin.com/psettings/enhanced-advertising. Please note that rejection of such advertisements will not remove ads from the pages you visit. It simply means that the ads you are shown are not necessarily tailored to your personal interests. If you are not a member of LinkedIn, you will find the Cookie Privacy Policy at https://www.linkedin.com/legal/privacy-policy

§11 Integration of Google Maps

This website includes services from Google Maps. We are thus able to display an interactive map for you directly on the website and provide you with the convenient usage of the map function.

Visiting the website will provide Google with information that you have opened in the corresponding subpages of our website. In addition, the data named under §2 of this declaration will be provided. This will occur regardless of whether or not a user account has been created. If you are logged into Google, your data will be directly assigned to your account. If you do not wish to have this information assigned to your Google profile, you need to log out before activating the button. Google saves your data as a user profile and uses it for advertising, market research and/or the user-friendly design of its website. Such evaluations are made to provide tailored advertisements (even for users who are not logged in) and inform other users of social networks about your activity on our website. You retain the right to object to the formation of a user profile, whereby the exercising of such a right is subject to Google’s terms and conditions.

Further information about the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider’s data protection declaration. You will find more information about your rights and possible settings to protect your privacy: www.google.de/intl/de/policies/privacy.

§ 12 Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contact information, names, web page access, and other data generated through a web site.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

We are using the following host:

RAIDBOXES GmbH
Friedrich-Ebert-Straße 7
DE – 48153 Münster

Performance of a data processing agreement

In order to guarantee processing in compliance with data protection regulations, we agreed a data processing agreement with our host.



Additional Information

* All subsidiaries of Vibracoustic SE belong to the Vibracoustic Group.