Privacy Policy
We are pleased that you are visiting our website and thank you for your interest in VAPS GmbH on the site www.vaps.de. In the following, we provide information about the collection of personal data when using our websites. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior.
Controller for Data Processing
The controller pursuant to Art. 4 Para. 7 General Data Protection Regulation (GDPR) is VAPS GmbH; please refer to our Legal Notice for details.
Appointed Service Providers:
The general provision and maintenance of our websites and email systems are carried out with the support of IT service providers who act on our behalf and may therefore also view (receive) your data to the extent necessary.
External Data Protection Officer:
Thomas Althammer
c/o Althammer & Kill GmbH & Co. KG
Roscherstraße 7, 30161 Hannover
Phone +49 511 330603-90, Fax +49 511 330603-48
Email kontakt-dsb@althammer-kill.de
Collection and Use of Your Data
The scope and nature of the collection and use of your personal data differ depending on whether you visit our website only to retrieve information or to make use of services we may offer. If we use additional (IT) service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes (all data processing) below. In doing so, we also state the defined criteria for the storage period and the applicable legal basis for data processing.
Informational Use
For the informational use of our websites, we only collect the personal data that your browser automatically transmits to us, such as:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- the volume of data transferred in each case and the access status (file transferred, file not found, etc.)
- Website from which the request originates
- Browser type / version / language
- Operating system and its interface
- Language and version of your browser.
Storage period:
The storage period for this data (logs) is 40 days.
Legal basis for data processing:
The above-mentioned data is technically necessary to display our websites to you and to ensure stability and security, pursuant to Art. 6 Para. 1 lit. f) GDPR.
Newsletter
In order to receive our newsletter regularly, we require your email address in addition to your consent under data protection law. For the registration, we use the so-called double opt-in procedure, i.e., we will only send you the newsletter if you have previously confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. We want to ensure that only you, as the owner of the specified email address, can register for the newsletter. Your confirmation in this regard must be made promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted.
Withdrawal of your consent:
You can unsubscribe from a newsletter you have subscribed to at any time by clicking the corresponding link at the end of the newsletter or by sending a message to datenschutz@vaps.de.
Newsletter performance measurement:
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our websites. The data is collected exclusively in pseudonymized form, meaning the IDs are not linked to your other personal data, and direct personal reference is excluded. Such tracking is not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the aforementioned performance measurement will take place.
Appointed service provider:
Our newsletter is provided by the appointed service provider: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany, www.rapidmail.de.
Storage period:
After a successful registration, your data will be stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely for statistical and anonymous purposes.
Legal basis for data processing:
The newsletter is ordered through your personal consent, pursuant to Art. 6 Para. 1 lit. a) GDPR. The storage of further information, e.g., the time of your registration, is in our interest, pursuant to Art. 6 Para. 1 lit. f) GDPR.
Registration for Events
We offer the possibility to register for our events and training sessions on our website. To register, we require your email address, company number, name, and company name. The data is collected in order to address you personally (name), to contact you for queries and/or confirmations (email), and to provide you with additional information about the event (address for, e.g., training or order confirmation). Any further information is voluntary.
Storage period:
We process and store the data only until the purpose of the processing has been fulfilled and legal retention obligations (usually a 10-year retention period) do not prevent this.
Legal basis for data processing:
The processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Art. 6 Para. 1 lit. b) GDPR.
Applications
For online applications, we have provided corresponding forms on our websites through which you can easily apply for a position that suits you. Mandatory information required for this is marked separately; further information is voluntary. We process the data you have sent us in connection with your application (including cover letter, CV, and certificates) to check your suitability for the position (or other open positions, if applicable) and to carry out the application process. Your application will be reviewed by the central HR department upon receipt. Suitable applications will then be forwarded to the contact persons responsible for your position (management, department head, division, etc.) at one of the companies in the VAPS Group (www.vaps.de and www.seghamburg.de). The further process will then be coordinated. Within the VAPS Group, only those persons who need your data for the proper conduct of our application process generally have access to it.
Appointed service providers:
In carrying out the application process, we are supported by the service provider d.vinci HR-Systems GmbH in the form of an online applicant management system (AMS).
Storage period:
Data of applicants will be deleted after 6 months in the event of a rejection. In the event that you have consented to further storage of your personal data, we will include your data in our applicant pool. There, the data will be deleted after 2 years. Should you be awarded a position as part of the application process, the necessary and required data will be transferred to our personnel information system.
Legal bases for data processing:
The processing of your data as part of the application process is permissible for the decision on the establishment of an employment relationship, pursuant to Section 26 Federal Data Protection Act (BDSG). Should the data be required for legal prosecution after completion of the application process, data processing may take place to safeguard legitimate interests pursuant to Art. 6 Para. 1 lit. f) GDPR. Our interest then consists in the assertion or defense of claims. The transfer of your data to the company of the VAPS Group responsible for your position takes place in the interest of the respective company to review your application and carry out the application process, pursuant to Art. 6 Para. 1 lit. f) GDPR.
Inquiries by Email, Post, or Telephone
If you contact us by email, post, or telephone, your inquiry including the personal data contained therein will be processed by authorized persons for the purpose of processing your inquiry.
Storage period:
We process and store the data until the purpose of the processing has been fulfilled and legal retention obligations (usually a 10-year retention period) do not prevent this or you have effectively objected to the processing.
Legal basis for data processing:
The processing of your data is based on Art. 6 Para. 1 lit. b) GDPR if your inquiry is related to the performance of a contract or the implementation of pre-contractual measures. In all other cases, processing is based on Art. 6 Para. 1 lit. f) GDPR, as we have a legitimate interest in processing inquiries.
Use of Email and Postal Address for Product and Support Information and Direct Marketing
We use your email and postal address for product information. This can be, for example, current information about necessary system updates, operating aids, but also offered training measures or important support messages. Furthermore, we use the data for the purpose of direct marketing, provided you are or were a customer of ours and the direct marketing relates to our own similar goods and services.
Right to object to direct marketing:
You can object to the use for direct marketing at any time. It is best to use the following email address for this: datenschutz@vaps.de. The easiest way to object is to click the unsubscribe button in each newsletter. Further information is available towards the end of the privacy policy under the point Data Subject Rights or Right to Object to Direct Marketing.
Appointed service providers:
If we present direct marketing via a newsletter, the appointed service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany, www.rapidmail.de, is used.
Storage period:
We process and store the data until the purpose of the processing has been fulfilled and legal retention obligations (usually a 10-year retention period) do not prevent this or you have effectively objected to the processing.
Legal basis for data processing:
The processing of your data is based on Art. 6 Para. 1 lit. b) GDPR if your inquiry is related to the performance of a contract or the implementation of pre-contractual measures. In all other cases, processing is based on Art. 6 Para. 1 lit. f) GDPR, as we have a legitimate interest in maintaining and improving the customer relationship. If the processing involves direct marketing, the legal basis is Art. 6 Para. 1 lit. f) GDPR in conjunction with Recital 47.
Use of Microsoft Forms
We use MS Forms to conduct surveys. MS Forms is a Microsoft Office application from Microsoft Corporation. When using it, your answers (quantitative and qualitative) are generally processed on an anonymous basis, unless you provide your personal data, such as contact details, on a voluntary basis. Your contact details would then be used as previously declared in the survey, for example, to participate in a competition. Use for purposes not previously declared does not take place.
Appointed service provider:
The service is provided by Microsoft Corporation (https://www.microsoft.com/de-de/rechtliche-hinweise/impressum) on the basis of an order processing contract.
Storage period:
We process and store the data until the purpose of the processing has been fulfilled, e.g., the raw data is no longer required for evaluation in anonymous form or we have successfully conducted a competition after sending/transmitting the prizes.
Legal basis for data processing:
The processing of your data is based on Art. 6 Para. 1 lit. f) GDPR, as we have a legitimate interest in maintaining and improving the customer relationship. If the survey is conducted within VAPS GmbH, the legal basis is usually Section 26 Para. 1 of the Federal Data Protection Act. The data center location is within the EU. However, through the use of Microsoft products, it cannot be ruled out that your personal data will also be processed in third countries outside the European Union (EU). For this purpose, we have concluded a data protection EU standard contract pursuant to Art. 46 GDPR, see https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA. In addition to the EU standard contract, further guarantees are part of the level of protection. Further information on the nature and scope of data processing by Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement and https://docs.microsoft.com/de-de/microsoftteams/teams-privacy.
Use of Cookies
We use cookies for our websites. Cookies are small text files that are sent from our web server to your browser as part of your visit to our websites and are stored by it on your computer for later retrieval. They serve to make the overall internet offer more user-friendly and effective.
We exclusively use cookies that are necessary and required within the meaning of Section 25 Para. 2 of the Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG).
Cookies can generally be divided into two categories:
Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which
various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to the website. Session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies in the security settings of your browser at any time.
Regardless of your choice in the consent manager, you can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all functions of this website.
Salesviewer
Our website uses the web analysis service Salesviewer to collect and store data for marketing, market research, and optimization purposes. For this purpose, a JavaScript-based code is used, which serves to collect company-related data and the corresponding use. The data collected with this technology is encrypted via a non-reversible one-way function (so-called hashing). The data is immediately pseudonymized and not used to identify the visitor to this website.
Withdrawal of consent for the analysis of user behavior:
You can object to the use of your data by SalesViewer using the following link. An opt-out cookie will be set, which prevents the future collection of your data when visiting our websites:
Deactivate SalesViewer
Attention: If you delete your cookies, this will result in the opt-out cookie also being deleted and it may have to be reactivated by you.
Appointed service provider:
The provider is Salesviewer GmbH, Bongardstraße 29, 44787 Bochum.
Further information on data protection at Salesviewer GmbH can be found at:
https://www.salesviewer.com/de/datenschutzerklaerung
Storage period:
The stored anonymized usage processes are deleted after 30 days at the latest.
Legal basis for data processing:
The use is therefore based on our legitimate interest, Art. 6 Para. 1 lit. f. GDPR. Our legitimate interest consists in an optimization and data protection-friendly evaluation of the website.
Social Media Links and Channels
Within our websites, there are links to our various social media channels, some with the corresponding logos. If you click on one of these links, your IP address will generally be transmitted to the operators of the various platforms. If you make use of one of these services and are also logged in with your specific account, information about your surfing behavior may also be recorded by the social media operators. The transmission of your IP address to the operators of the accessed websites is technically necessary and applies to all websites.
Here you will find information about the respective provider:
Facebook:
https://www.facebook.com/vaps.gmbh/
Provider:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data processing is based on an agreement on the joint processing of personal data pursuant to Art. 26 GDPR.
Privacy Policy: https://www.facebook.com/about/privacy/
Instagram:
https://www.instagram.com/vaps.autohaus.kompetenz/
Provider:
Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Privacy Policy: http://instagram.com/about/legal/privacy
LinkedIn:
https://de.linkedin.com/company/vaps-autohaus-kompetenz
Provider:
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
YouTube:
https://www.youtube.com/channel/UC89uXMUkFsxbOdkjs3tO_OA
Provider:
YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
Privacy Policy: https://www.google.de/intl/de/policies/privacy.
XING:
https://www.xing.com/pages/vapsgmbh
Provider:
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Privacy Policy: https://www.xing.com/app/share?op=data_protection
Your Rights
You have the following rights towards us regarding the personal data concerning you:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority directly responsible for us is: The State Commissioner for Data Protection of Lower Saxony, Prinzenstr. 5, 30159 Hannover.
Right to Object and Withdraw Consent
If you have given consent to the processing of your data, you can withdraw it at any time. Such a withdrawal influences the permissibility of the processing of your personal data after you have expressed it to us.
The easiest way to delete consent within our consent manager is to clear the browser cache, reload the page, and choose again.
Insofar as we base the processing of your personal data on the balance of interests (legal basis is then Art. 6 Para. 1 lit. f) GDPR), you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is addressed by us in each case in the explanation of the individual data processing operations and functions on our websites further up in this privacy policy. When exercising such an objection, we ask for an explanation of the reasons why we should not process your personal data as carried out by us. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we continue the processing.
Contact Options Regarding Your Rights
To exercise your rights, you can contact us at any time. It is best to use the following email address for this: datenschutz@vaps.de
You are also welcome to use one of the contact options in our legal notice or contact our data protection officer directly (contact details above).
Data Security
We also use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction, or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments. The transmission of your personal data is encrypted using SSL technology (https) to prevent access by unauthorized third parties.
Communication by Email
Our email systems support encrypted communication via SSL technology (TLS 1.2 incl. PFS). The transmission of your email can therefore generally be encrypted. Please note, however, that encryption also depends on the configuration of your email program and we therefore cannot guarantee complete data security for the transport route.
For information with a high need for confidentiality, we recommend using the postal service.
Google Fonts
We integrate the fonts (“Google Fonts”) from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.