Privacy Policy
www.vegra.com
Data protection notice – Contents
1. Name and address of the responsible person
2. Data Protection Officer
3. Website provisioning and log file generation
4. Email, telephone contact and contact form
5. Application process
6. Links to third-party websites
7. Data subject rights
1. Name and address of the responsible person
VEGRA Gesellschaft für Herstellung und Vertrieb von Produkten für die graphische Industrie mbH [= VEGRA limited liability company for production and distribution of products for the graphic industry] is the responsible party within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the Telecommunications Telemedia Data Protection Act (Telekommunikations-Telemedien-Datenschutz-Gesetz, TTDSG) as well as other data protection regulations for this website and the associated data processing.
Comprehensive information about our company can be found in the legal notice.
2. Data Protection Officer
Inquiries regarding data protection at VEGRA can be directed at any time to:
VEGRA GmbH
Otto-Hahn-Str. 1
84544 Aschau am Inn
Tel.: +49 (0) 8638 9678-0
E-Mail: info@vegra.com
3. Website provisioning and log file generation
3.1 Description and scope of data processing
Each time the website is accessed, the system, i.e. the web server, automatically records information from the system of the accessing computer or end device of the user.
The following data is collected:
● Information about the browser type and version used
● The operating system of the user’s end device
● The user’s internet service provider
● The IP address of the user
● Date and time of access
● The previous web page the user was redirected from
3.2 Legal basis for data processing
Legal basis for the temporary storage of this data and corresponding log files is Art. 6 1 lit. f) GDPR (our legitimate interest as the responsible website operator).
3.3 Purpose of the data processing
The temporary storage of the user’s IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage of the above-mentioned data in the log files is to ensure the functionality of the website. In addition, this data is used to optimize the website and to ensure the security of the information technology systems (e.g. for attack detection).
Evaluation of the data for marketing purposes does not take place in this context.
3.4 Duration of storage
The above data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after 14 days at the latest.
4. Email, telephone contact and contact form
4.1 Description and scope of data processing
You can contact us via the provided email address, telephone number and contact form (under “Contact” or “Contact us”).
Using “Request datasheets now” you can quickly and easily request datasheets for our products.
Your personal data transmitted with the request will be stored by us.
4.2 Legal basis for data processing
The legal basis for the processing of your data, which you transmit to us when submitting the contact form, is Art. 6 1 lit. a) GDPR (consent).
Legal basis for the processing of data that you provide to us in the course of sending a email or by telephone is Art. 6 1 lit. f) GDPR (our legitimate interest in answering your inquiry).
If the request is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 1 lit. b) GDPR (performance of a contract).
4.3 Purpose of the data processing
The processing of this personal data allows us to process your request and to answer your inquiry or to send you the data sheets on our products that you have requested.
4.4 Duration of storage
The above data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data transmitted by telephone, email or via the contact form, this is the case when the respective conversation with you has ended.
4.5 Right to object
You have the right to object to the data processing at any time.
The objection should be sent to the following email address:
info@vegra.com.
All personal data stored in the course of contacting us will be deleted in this case, insofar as no legal retention obligations prevent the deletion.
5. Application process
5.1 Description and scope of data processing
We offer you the possibility to apply for current job offers or for a training position (under “Careers”) or by email.
In the case of applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.
5.2 Legal basis for data processing
The legal basis for the processing of your data in the course of an application procedure is § 26 (1) BDSG in conjunction with. Art. 88 (1) GDPR.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be further processed based on your consent. The legal basis is then Art. 6 1 lit. a) GDPR.
However, you can of course revoke your consent at any time in accordance with Art. 7 (3) GDPR by declaration to us with effect for the future.
5.3 Purpose of the data processing
Your data will be processed in order to carry out the application procedure.
5.4 Duration of storage
In the event that an application is rejected, we will delete the data submitted to us six months after notification of the rejection.
After the end of the application process, we store your personal data for as long as we are legally obligated to do so or you have given us your consent to do so.
However, the data will not be deleted if it is required to be stored for a longer period of time due to legal provisions, e.g. due to the obligation to provide evidence in accordance with the General Act on Equal Treatment (AGG), or until the conclusion of legal proceedings.
The legal basis in this case is § 24 (1) para. 2 BDSG.
5.5 Possibility of objection
You have the right to object to the data processing at any time.
The objection should be sent to the following email address:
info@vegra.com.
All personal data stored in the course of the application process, will be deleted in this case, insofar as no legal retention obligations prevent the deletion.
6. Links to third-party websites
6.1 Description and scope of data processing
We have implemented a link to a third-party website on our website. This is clearly marked as an external link.
If you like our website, click the logo “Shytsee” and you will be redirected to the website of the advertising agency that designed our website.
For websites designed and provided by third parties, we have no influence on the design, content and function of these third-party services.
If necessary, please familiarize yourself directly on the linked website, e.g., via their privacy policy.
6.2 Legal basis of data processing
The legal basis for your forwarding to the linked website is Art. 6 1 lit. a) GDPR (your consent is granted through your voluntary click on the third-party logo).
6.3 Purpose of the data processing
The linking to the respective third-party site is carried out in order to provide you with easy access to the information in question.
7. Data subject rights
If personal data of a user is processed, they are a “data subject” within the meaning of GDPR. He or she is entitled to the following rights with regards to us as the controller:
• Right to information
• Right to rectification
• Right to restriction of proce
• Right to deletion
• Right to information
• Right to data portability
• Right of objection
• Right to revoke the declaration of consent under data protection law
• Right to complain to a data protection supervisory authority
Note on revocation of consent:
A data subject has the right to revoke his or her declaration of consent under data protection law at any time. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Notice of complaint to a supervisory authority:
Without prejudice to any other administrative or judicial remedy, a data subject shall have the right to lodge a complaint with a supervisory authority – in particular in the Member State of the user’s residence, the user’s place of work or the place of the alleged infringement – if the user ascertains that the processing of their personal data by us infringes GDPR.