Data Privacy Information

With this statement we inform you about the way in which your personal data is processed by us and what rights you have. The Vibracoustic Group includes all subsidiaries of Vibracoustic SE.

Content Overview

Click on the chapter name to directly jump to the relevant chapter. However, we recommend to read the entire document to give you the full picture.

1. Data Protection in General
2. When you visit our Website
3. When you send or receive emails from us or use the contact forms on the website
4. When you visit, follow or otherwise interact with one of our Social Media Presences

1. Data Protection in general

1.1 The Responsible

The responsible according to GDPR and other national data protection regulations is:

Vibracoustic SE
Hoehnerweg 2-4
69469 Weinheim
Deutschland

We collect and process your data as the responsible party.

You can reach our data protection officer by e-mailing to .

If you have questions or suggestions regarding privacy, please contact us at .

1.2 The legal basis

You are generally under no legal or contractual obligation to provide us with your personal data. However, it is possible that we can only provide certain services to a limited extent or not at all if you do not provide the data required for this or do not give the relevant consent for the processing of your data.

When processing personal data, Vibracoustic complies with the relevant legal provisions on data protection and data security in the countries concerned as well as internal data protection regulations.

As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as the contents and services or for the service requested. Beyond that, the collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases in which the processing is necessary for technical reasons to provide the content of the website or in which we are authorized or obliged to process on another legal basis. Insofar as we obtain the consent of the data subject for the processing operations of personal data, Art. 6 (1) (a) EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

1.3 What rights do you have as a data subject?

According to the EU General Data Protection Regulation, you have the following rights:

If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you can request the deletion or restriction of processing, as well as object to processing (Art. 17, 18 and 21 GDPR).

If you have consented to the data processing or if a contract for data processing exists and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 GDPR).

You have the right to revoke your declarations of consent under data protection law at any time for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If we process your data on the basis of our overriding legitimate interest, you may object to the storage of your personal data at any time. Your personal data will no longer be processed unless we have compelling legitimate interests that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

To exercise your rights, please send an email to . Should you make use of your above-mentioned rights, Vibracoustic will check whether the legal requirements for this are fulfilled.

You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Vibracoustic SE is the Baden-Württemberg Commissioner for Data Protection and Freedom of Information.

2. When you visit our website

2.1 Service provision and logfiles

When you use our website, technical data such as the IP address of your network, the date, time, time zone and status of the requested file, information about the website from which you came to our site, your browser type and the version of your operating system are transmitted to us.

The data including the IP addresses of the user are also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user. If the data is stored in log files, these are deleted after 10 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

If you provide us with personal information via this website, you must give your explicit consent for this. The data will only be used for the specified purpose.

2.2 Use of cookies

This website uses cookies. We use cookies to personalize content and ads, provide social media features, and analyze traffic on our website. Cookies are small text files used by websites to make the user experience more efficient.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. All other cookie types will only be activated after you have consented to their use in our Cookie banner. Some cookies are placed by third parties that appear on our pages. A list of the cookies used and their function and storage period can be viewed at any time in the cookie banner under “Details” or accessed and viewed at https://www.vibracoustic.com/en/data-protection/#cookies.

You can change or withdraw your consent at any time from the cookie statement on our website.

Please provide your consent ID and the date when you contact us regarding your consent.

2.3 Use of the web analysis platform Matomo

This website uses Matomo, an open-source web analytics service from matomo.org. We use Matomo to analyze the use of our website and for the continuous improvement of our website. It uses so-called “first party cookies”. The statistics allow us to better adapt the design and offer to user behavior and to make the content interesting.

We anonymize the last two bytes of the IP address of the device used to visit the website. The data collected by the cookies about the use of the website is stored in our database for 12 months. No third party, neither developer nor Matomo itself, has access to this data. The data collected by Matomo is only used for the purposes described and is not passed on. Read more about Matomo on www.matomo.org

2.4 Integration of third party services

2.4.1 YouTube

For most of the videos on our website, we use YouTube as video platform to embed them in the website. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland The videos are embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, data is processed by YouTube. YouTube is the controller responsible for processing this data, which we have no influence over.

For more information on the purpose and scope of data collection and processing by YouTube, please see their Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en

2.4.2 LinkedIn

“Tailored target groups” and “Conversion Tracking” from LinkedIn offer the possibility of targeting existing users and customers who have visited Vibracoustic’s Internet offering with relevant campaigns. This is done by LinkedIn using a website tag to store anonymized user data. For this purpose, a cookie from LinkedIn is placed in the browser when a user visits our website.

LinkedIn lets you opt out of interest-based advertising. https://www.linkedin.com/psettings/enhanced-advertising. Note that rejecting such ads does not remove ads from the pages you visit. It just means that the ads you are shown may not be aligned with your personal interests. If you are not a member of LinkedIn, you can find the Cookie Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

2.4.3 Google Maps

On this website we use the offer of Google Maps which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited stores your IP address and usually transfers this information to a Google server in the USA and stores it there. Google Ireland Limited is the controller responsible for processing this data, which we have no influence over.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.

2.5 Hosting und Content Delivery Networks (CDN)

This website is hosted by an external service provider (host):

RAIDBOXES GmbH
Friedrich-Ebert-Strasse 7
48153 Münster, Deutschland

Personal information collected on this website is stored on the host’s servers. This may include, but is not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, website access and other data generated through a website. The host is used for the purpose of fulfilling contracts with our potential and existing and in the interest of a secure, fast and efficient provision of our online services by a professional provider. Our host will only process your data to the extent necessary to fulfill its performance obligations and to comply with our instructions regarding such data.

To ensure that the data is processed in accordance with data protection regulations, we have concluded a commissioned contract data processing agreement with our host.

3. When you send or receive emails from us or use the contact forms on the website

3.1 Contact forms on the website

Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. This data is mandatory information on the subject, first name, last name, e-mail and the message, as well as optional information on the company, position and address of the sender.

For the processing of data, your consent is obtained during the submission process and reference is made to this privacy policy.

You can revoke your consent at any time with effect for the future. The lawful processing carried out until then remains unaffected by the revocation.

With regard to the revocation of this consent, we refer to your rights already outlined above.

In this context, there is no regular transfer of data to third parties. The data is used exclusively for processing the conversation within the scope of your request. Data will only be passed on if this is necessary to answer your request and only to companies that belong to the Vibracoustic Group.

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted at the latest after the request has been answered.

3.2 Communication via Emails

You will receive these data protection regulations when initiating a new transaction or executing an ongoing transaction, as part of which you have provided us with personal data in the form of business cards, offers and/or emails. These are required for executing the transaction or for communication.

We collected your data as part of our communication (email, letter, telephone, business card, newsletter subscriptions) and we process the following categories of your personal data:

• Name and contact details
• Communication contents
• Personal data in offers and other official letters
• Sanction lists

Since your personal data is also partly processed by service providers, in particular email service providers as well as providers for hosting and support, your data will be processed by them. The basis for this is an agreement on order processing.

In addition, we transmit personal data to other employees of our company, depending on the circumstances. These employees may be clerks from all divisions of the affiliated companies in our group of companies. Affiliates may be located in third countries and personal data is transferred consistently in compliance with the GDPR by entering into data protection agreements with such affiliates, including the EU standard contract clauses, where appropriate, or in the presence of the European Commission’s adequacy decision for the destination country. If a processor is located in a third country, the personal data will be transmitted always in compliance with the provisions the respective articles of the GDPR. A related additional clause will be included in the relevant agreement on order processing.

The personal data is deleted as soon as the legal basis for its processing ceases to exist. Nevertheless, there may also be further authorisations for storage at the same time, or if a legal basis ceases to exist, a new one may apply, such as the statutory retention requirements, which make longer storage necessary.

4. When you visit, follow or otherwise interact with one of our Social Media presences

We have our own presence in various social media to present ourselves, provide information, get in touch with the respective users and to communicate with them. We operate open public profiles in social networks as listed below.

Social networks, for example Facebook, Twitter, LinkedIn etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). A visit to our social media presences initiates numerous data protection-relevant processing operations. In detail:

If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can match this visit to your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address. With the so collected data, the operators of the social media portals can create user profiles, in which your preferences and interests are stored. In this way, interest-based advertising can be displayed within and outside the respective social media presence. If you have an account with the relevant social network, the interest-based advertisement can be displayed on all devices on which you are or were logged in.

Please also note that we cannot reproduce all the processes on the social media portals. Therefore, depending on the provider, further processing may be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policy of the respective social media portals.

4.1 Controller and claiming of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the provider of the social media platform for the data processing operations caused by this visit. You can basically exercise your rights (information, correction, deletion, restriction of processing, data transferability and complaints) both against us and against the operator of the respective social media portal (e.g. against Facebook). Please note that despite the joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider.

4.2 Storage Period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing them no longer applies, you request us to delete them, or revoke your consent to storage. Any cookies stored remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the providers of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

4.4 Our presences

4.4.1 Facebook [https://www.facebook.com/VibracousticOfficial]

We have a presence at Facebook. Provider is the Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. According to Facebook, the data collected is also transferred to the USA and other third countries.

You can adjust your advertising settings by yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found in the Facebook privacy policy:
https://www.facebook.com/about/privacy/.

4.4.2 Glassdoor [https://www.glassdoor.com/Overview/Working-at-Vibracoustic-EI_IE931222.11,23.htm]

We have an employer profile at Glassdoor. Provider is the Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, California, 94941, USA. Details on how they handle your personal data can be found in the privacy policy of Glassdoor: https://hrtechprivacy.com/en/brands/glassdoor#privacypolicy

4.4.3 Indeed [https://de.indeed.com/cmp/Vibracoustic]

We have an employer profile at Indeed. Provider is the Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, California, 94941, USA. Details on how they handle your personal data can be found in the privacy policy of Indeed: https://hrtechprivacy.com/de/brands/about-indeed#Indeeds-Privacy-Policy.

4.4.4 Kununu [https://www.kununu.com/de/vibracoustic]

We have an employer profile at Kununu. Provider is the New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the privacy policy of Kununu:
https://privacy.xing.com/en/your-privacy.

4.4.5 LinkedIn [https://www.linkedin.com/company/vibracoustic]

We have a presence at LinkedIn. Provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you want deactivate LinkedIn Advertising cookies, use this Link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Details on how they handle your personal data can be found in the privacy policy of LinkedIn https://www.linkedin.com/legal/privacy-policy.

4.4.5.1 When you interact with us via LinkedIn LeadGen Forms

We use the LinkedIn service “LinkedIn Lead Gen Forms” for acquiring new customers. If you contact us via this service using LinkedIn contact forms for lead generation, personal data is stored by LinkedIn and transmitted to us. This is, for example, your name, your e-mail address and, if applicable, other information provided by you. This data is processed by us to provide you with relevant marketing content about services and products. If you are also a member of the LinkedIn platform, LinkedIn can assign the use of the contact form to your profile there.

The data processing takes place based on your consent (Art. 6 para. 1 lit. a DSGVO For details on how LinkedIn handles your personal data, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy .

We do not share your personal data with third parties unless this is necessary for the implementation of the marketing campaign. In this case, we will inform you of this and only pass on the necessary data. Your personal data will only be stored for as long as is necessary to carry out the marketing campaign. If you revoke your consent, your data will be deleted immediately. Find the necessary contact under 1.1 in this document.

4.4.6 XING [https://www.xing.com/pages/vibracoustic-se]

We have a presence at XING. Provider is the New Work SE, Damm­torstraße 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the privacy policy of XING https://privacy.xing.com/en/your-privacy.

4.4.7 YouTube [https://www.youtube.com/@Vibracoustic]

We own a channel at YouTube. Provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Details on how they handle your personal data can be found in the privacy policy of Google
https://policies.google.com/privacy?hl=en&gl=de#infocollect.

This document has been updated on October 17, 2023

As data protection regulations are subject to updates or changes, you may want to re-visit this page from time to time.