Privacy Policy

1. Our Privacy Policy at a glance

General Information

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data are any data by which you can be personally identified. You can find detailed information on the subject of data protection in our Privacy Policy below.

Data Collection on this Website

Who is responsible for processing the data collected by this website?

Data processing on this website is carried out by the website operator. You can find the website operator’s contact details in the section “Information on the Data Controller” in this Privacy Policy.

How Do We Collect Your Data?

On the one hand, we collect the data you provide to us. This could, for example, be data you enter on a contact form.

Other data is collected by our IT systems either automatically or with your consent whenever you visit the website. This is primarily technical data (e.g. details of your internet browser, operating system, or the time at which you view a website page). These data are collected automatically when you visit this website.

How Do We Use Your Data?

Some data is collected to ensure the seamless operation of our website. Other data are processed to analyse how you use the site.

What Rights Do You Have Regarding Your Data?

You always have the right to request information free of charge about your stored data, their origin, their recipients, and the purpose for which they are collected. You also have a right to request the correction or deletion of your personal data. If you have given your consent to data processing, you can revoke your consent at any time with immediate effect. You also have the right to request the restriction of the processing of your personal data in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time about these and any other questions regarding our Privacy Policy.

Analytical Tools and Tools from Third Parties

We may statistically analyse your browsing behaviour when you visit this website. This analysis is mainly conducted by analytical software programmes.

You can read more detailed information about these analytical programmes in our Privacy Policy below.

2. Hosting

External Hosting

This website is hosted by an external service provider (hosting provider). Personal data collected on this website are stored on the hosting provider’s servers. These data are primarily IP addresses, contact requests, meta and communication data, contract data, contact details, names, instances of website access, and other data generated via our website.

We use a hosting provider to fulfil contracts with our potential and existing customers (Article 6.1.b of the European Union’s General Data Protection Regulation, or GDPR for short) and for the provision of a safe, fast and efficient online offering by a professional provider (Article 6.1.f of the GDPR). Where your consent has been requested and granted, the processing is carried out exclusively on the basis of Article 6.1.a of the GDPR and Section 25.1 of the German Telecommunications and Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies and/or access to information on the device you are using (e.g., device fingerprinting) within the meaning of the TTDSG. You can revoke your consent at any time.

Our hosting provider will only process your personal data insofar as this is required to fulfil our service obligations and to comply with our instructions regarding these data.

We use the following hosting provider:

Klickpark Solution GmbH
Bahnhofstraße 27
68526 Ladenburg

3. General and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this Privacy Policy.

If you use this website, various items of personal data will be collected. Personal data includes any data by which you could be personally identified.

This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that the transmission of data over the Internet (e.g., via email communication) can be subject to security vulnerabilities. It is not possible to completely protect data transmitted in this way against access by third parties.

Information on the Data Controller

The Data Controller responsible for data processing on this website is:

Valesa GmbH
Lützowplatz 7
10785 Berlin

Telefon: +49 30 439724470
E-Mail: info@valesa.de

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Retention Period

Unless a specific retention period is stated within this Privacy Policy, we will retain your personal data until the purpose for processing the data no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legitimate and legally permissible reasons to store your personal data (e.g., retention periods under tax and/or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

General Information on the Legal Basis for Data Processing on this Website

Provided you have consented to data processing, we process your personal data on the basis of Article 6.1.a of the GDPR or Article 9.2.a of the GDPR where special categories of data are processed in accordance with Article 9.1 of the GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49.1.a of the GDPR. If you have consented to the storage of cookies and/or to access to information on the device you are using (e.g., via device fingerprinting), data processing is also carried out on the basis of Section 25.1 of the TTDSG. You can revoke your consent at any time. If your data are required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6.1.b of the GDPR. Furthermore, we process your data on the basis of Article 6.1.c of the GDPR if this is necessary for the fulfilment of a legal obligation. Data processing may also be based on our legitimate interest in accordance with Article 6.1.f of the GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this Privacy Policy.

Information on Data Transfer to the U.S. and other Third Countries

Some of the tools we use on our website are operated by companies based in the USA or other third countries that are not classed as safe third countries within the meaning of EU data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. Please be aware that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For example, U.S. companies are obligated to hand over personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, the possibility that U.S. authorities (e.g., intelligence services) may process, evaluate and permanently store your data located servers in the U.S. for surveillance purposes cannot be excluded. We have no influence over these processing activities.

Revoking Your Consent to the Processing of Your Data

Many data processing operations are only possible with your express consent. You may revoke your consent to such processing at any time. If you wish to do so, simply send us an informal message by email. The legality of the data processing performed prior to the revocation of consent remains unaffected.

Right to Object to the Collection of Data in Specific Cases and to Direct Marketing (Article 21 of the GDPR)

IF THE DATA PROCESSING IS BASED ON ARTICLE 6.1.E OR 6.1.F OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21.1 OF THE GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ARTICLE 21.2 OF THE GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the EU Member State of their habitual residence, place of work, or the place of the alleged breach. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have the data we process automatically, on the basis of your consent, or in performance of a contract, delivered to you or to a third party in a standard, machine-readable format. If you request the direct transfer of the data to another Data Controller, this will only be done insofar as it is technically feasible.

Information, Deletion and Correction

The applicable legal provisions grant you the right, at any time and at no charge, to information about your stored personal data, its origin and recipient, the purpose of the data processing, and, if applicable, a right to correction or deletion of these data. You can contact us at any time about this and any other questions you may have on the subject of personal data.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists under the following circumstances:

If you dispute the accuracy of your personal data held by us. We will usually need time to verify this. You have the right to request that the processing of your personal data is restricted for the duration of the verification process.
If the processing of your personal data was undertaken/is being undertaken unlawfully, you can request the restriction of data processing as an alternative to deletion.
If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request that the processing of your personal data is restricted rather than deleted.
If you have lodged an objection pursuant to Article 21.1 of the EU GDPR, a balance must be struck between your interests and our interests. You have the right to request that the processing of your personal data is restricted rather than deleted.

If you have restricted the processing of your personal data, such data can – apart from being stored – only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest to the European Union or a Member State.

SSL and TLS Encryption

This website uses SSL or TLS encryption for security reasons and to provide protection when transmitting confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and a lock symbol appears in your browser bar.

If SSL or TLS encryption is enabled, the data you transfer to us cannot be read by third parties.

4. Data Collection on Our Website

Cookies

Our internet pages use “cookies.” Cookies are small text files and do not cause any damage to the device you are using. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on the device you are using. Session cookies are automatically deleted at the end of your visit to our website. Permanent cookies remain stored on the device you are using until you delete them manually or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on the device you are using when you visit our site (third-party cookies). These cookies enable the use of certain services provided by the third-party company (e.g., security cookies).

Cookies perform a range of functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., security cookies or cookies that allow videos to be displayed). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies that are necessary to carry out the electronic communication process, to provide certain functions you have requested (e.g., contact form cookies), or to optimise our website (e.g., cookies to measure web audience) are “necessary cookies” and are stored on the basis of Article 6.1.f of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically fault-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested and granted, processing is carried out exclusively on the basis of this consent (Article 6.1.a of the GDPR and Section 25.1 of the TTDSG). You can revoke your consent at any time.

You can configure your browser to inform you about the installation of cookies and to only allow cookies in individual cases, to exclude the acceptance of cookies for certain cases, or to exclude the acceptance of cookies in general. You can also activate the automatic deletion of cookies when you close your browser window. However, disabling cookies may limit the functionality of this website.

If third-party cookies are used, or if cookies are used for analytical purposes, we will inform you about this separately in conjunction with this Privacy Policy and, if applicable, request your consent.

Server-Log-Files

The Hosting Provider automatically collects and stores data in so-called “server log files,” which your browser automatically transmits to us. These data include details of:

Your browser type and browser version
Your operating system
The referrer URL
The host name of the accessing computer
The time of the server request
Your IP address

These data are not combined with data from other sources.

The collection of these data is based on Article 6.1.f of the GDPR. As the website operator, we have a legitimate interest in the technically error-free presentation and optimisation of our website, which means we have to collect server log files.

Contact Form

If you send us enquiries via our website’s contact form, we will store your details, including the contact details you have provided in the contact form, for the purpose of processing your enquiry and dealing with any follow-up enquiries. We do not pass on these data without your consent.

The processing of these data is based on Article 6.1.b of the GDPR, provided that your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Article 6.1.f of the GDPR) or on your consent (Article 6.1.a of the GDPR) if this has been requested. You can revoke your consent at any time.

We will store the data you enter in the contact form until you ask us to delete it, withdraw your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your enquiry). Mandatory statutory provisions – in particular retention periods – are not affected by this.

Enquiries by email, telephone, or fax

If you contact us by email, telephone or fax, your enquiry, including all accompanying personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on these data without your consent.

We will retain the data you submit via the contact form until you ask us to delete it, withdraw your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – are not affected by this.

5. Analytical Tools and Advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of visitors to its website. It enables the website operator to receive various usage data, such as page views, duration of visit, operating systems used, and the origin of the user. This data is summarised in a user ID and assigned to the respective device the website visitor is using.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. In addition, Google Analytics uses various modelling approaches to augment the data sets it collects and employs machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analytical tool is based on Article 6.1.f of the GDPR and Section 25.1 of the TTDSG. You can revoke your consent at any time.

Data transfer to theUSA is based on the standard contractual clauses of the EU Commission. Xou can find the details here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.