VdS Schadenverhütung GmbH

General data protection information

The protection of your personal data is an important concern for us, and when processing personal data, we comply with the applicable data protection regulations, in particular the EU General Data Protection Regulation ("GDPR") and the Federal Data Protection Act ("FDPA").

In this data protection declaration we explain to you which information (including personal data) we process in connection with our business activity (including the websites we offer on which this data protection information is published). Please note that special data protection information may apply to individual offers, functionalities and activities, to which we point out separately when collecting personal data.
 

I. Who is responsible for data processing?

Responsible for the processing of personal data under data protection law is VdS Schadenverhütung GmbH, Amsterdamer Straße 174, 50735 Cologne, Germany, telephone +49 221 7766-0, fax +49 221 7766-341, e-mail info@vds.de. Any reference to "we" or "us" in this data protection information refers to VdS Schadenverhütung GmbH.

Our data protection officer can be reached via the aforementioned contact channels and at dsb(at)vds.de,

 

II. Which data do we process?

For what purposes and on what legal basis do we process this data?
In connection with our business activities, we must process personal data in certain cases. In the following we shall explain and clarify these matters to you.

 

1. Website. You can access our website without directly providing personal data (such as your name, postal address or e-mail address). Even in this case we have to process certain information to enable you to access our website. In addition, we use certain analysis proc

edures on our website and have integrated links to other websites whose operators may process further (personal) data. For certain functionalities on our web pages, it is necessary to enter personal data.

a) Log files. When you visit this website, our web server automatically saves the domain name or IP address of the requesting computer (usually your Internet access provider) including the date, time and duration of your visit, the sub-pages/URLs you visit and information about the application(s) and terminal equipment you use to view our pages. Any personal data contained in the log files is processed to enable you to use our website; this is done on the basis of Section 15 (1) TMG (German Telemedia Act) or on the basis of Article 6 (1) f) General Data Protection Regulation (GDPR) to safeguard our legitimate interest in the operation of our website.

b) Cookies. To make our offer as user-friendly as possible, we use - like many well-known companies - so-called cookies. Cookies are small text files that are stored in the Internet browser you use. These files help us to recognise certain preferences of our visitors while surfing and to design our site accordingly. Most of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit. However, we also use permanent cookies. These serve to improve user guidance and to analyse the use of the website via an application we operate ourselves. Our own cookies do not collect any direct personal data and are not suitable for identifying you on third-party websites. You can set your browser to inform you about the placement of cookies. In this way, the use of cookies becomes transparent to you. You can also refuse to accept cookies in principle via your browser settings. However, under certain circumstances this may mean that you will not be able to use all the functions of the website. The processing of the data collected via cookies and the pseudonymous user profiles is carried out for the purposes of advertising, market research and the needs-based design of our website on the basis of § 15 paragraph 3 TMG or on the basis of article 6 paragraph 1 f) of the General Data Protection Regulation (GDPR) to safeguard our legitimate interest in the operation and analysis of the use of our website.

In addition, when you visit our website, cookies may also be set by third parties, about which we inform you below.

Thank you for your consent to the use of cookies on our website.

You have rejected the use of cookies on our website.

You can find further information on how we use anonymised user data to improve our website in our privacy policy below.

If you want to change your decision, please click . After reloading the page, you can change your decision using the popup window.

 

c) Website analysis via Google Analytics. We use Google Analytics on our website, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to continuously improve our website. Google Analytics also uses cookies, which are stored on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is generally sent to a Google server in Europe (or in a member state of the European Economic Area Treaty) to make the IP address anonymous, so that no personal reference can be made. Only after the IP address has been made anonymous is the abbreviated IP address transmitted to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On this website, Google Analytics is used with an extension for the anonymised recording of IP addresses (so-called IP masking). On our behalf, Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide us with other services associated with the use of the website. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google. You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. An opt-out cookie is set to prevent the future collection of your data when you visit this website. Further information on data protection at Google Analytics can be found here http://tools.google.com/dlpage/gaoptout?hl=de. and here [http://www.google.com/intl/de/analytics/privacyoverview.html].

 

The aforementioned data is also processed for the purposes of advertising, market research and the design of our website in line with requirements on the basis of Section 15 Paragraph 3 TMG or on the basis of Article 6 Paragraph 1 f) GDPR to safeguard our legitimate interest in the operation and analysis of the use of our website.

 

d) Closed areas. Via our website we can make information available in closed areas which can only be accessed by certain user groups after entering access data (usually a user ID and password). These user groups may in particular include VdS customers who have purchased a specific product or participants in VdS events and who have received access data from us in this context. If the access data is linked to other data relating to a natural person, this personal data is collected in connection with a specific business transaction (e.g. the purchase of a product or registration for a VdS event); for more information, please see the further course of this data protection information document.

Insofar as access to a closed area is part of a contract concluded with the user, we process the personal data stored in connection with the access data in order to fulfil this contract on the basis of Article 6 paragraph 1 b) GDPR; if this contract is concluded with an organisation (e.g. a company), the processing is carried out in order to safeguard our legitimate interest and the legitimate interest of this organisation in the execution of the contract on the basis of Article 6 paragraph 1 f) GDPR. Otherwise, the processing of personal data in connection with access data to safeguard our legitimate interest in controlling access to the closed areas and the information made available there is carried out on the basis of Article 6 paragraph 1 f) GDPR.

 

e) User account. On our website we can offer you the possibility to create a user account in certain areas (e.g. in our webshop). In doing so, we will collect the personal data that results from the corresponding registration form; mandatory data are marked as such. We may request the re-entry of data already collected during registration (in particular for your identification) and may collect further personal data if you wish to access your user account..

Insofar as you use your user account in connection with the conclusion of a contract, we process the data from the user account in order to fulfil this contract on the basis of Article 6 paragraph 1 b) GDPR; if this contract is concluded with an organisation (e.g. a company), the processing is carried out in order to safeguard our legitimate interest and the legitimate interest of this organisation in the execution of the contract on the basis of Article 6 paragraph 1 f) GDPR. Otherwise, the processing of personal data in connection with your user account to safeguard our legitimate interest in the provision of this functionality is carried out on the basis of Article 6 paragraph 1 f) GDPR.


 

f) Conclusion of contracts for products or other services without a user account (including registration for events). On our website we offer you the possibility to conclude contracts for products and other services (including participation in VdS events). The information required for this purpose can be found in the respective section of our website (e.g. the respective order/registration form); mandatory details are marked as such. We process any further personal data provided when placing an order/registration and any other personal data collected in connection with the execution of the relevant contract in order to execute the contract concluded. If the contract is concluded with an individual, the processing is based on Article 6 paragraph 1 b) GDPR; if this contract is concluded with an organisation (e.g. a company), the processing is carried out to safeguard our legitimate interest and the legitimate interest of this organisation in the execution of the contract on the basis of Article 6 paragraph 1 f) GDPR.

For the events we organise (e.g. courses and conferences), we record the participants in separate participant lists, from which the name and company are derived. These participant lists are made available to other participants. In accordance with Art 6 Paragraph 1 f) GDPR, the legal basis is the legitimate interest of our company, the participants and their companies in the promotion of professional contacts and the exchange of information between the participants and their companies. These lists of participants are also available to those exhibitors who present their products and services in close proximity to the event premises. In accordance with Art. 6 para. 1 f) GDPR, the legal basis is the legitimate interest of participants and exhibitors in the advertising of theme-related products and services. You can object to publication on the list of participants in writing or by sending an e-mail to lehrgang@vds.de.

 

g) Online surveys. Through our website, we may offer you the opportunity to participate in online surveys on various topics, for example to collect information about the opinions or needs of specific target groups. We can either make the online surveys publicly available via our website or restrict access to certain persons (e.g. those invited by e-mail). Unless otherwise stated on the website or in the invitation, we do not collect any personal data in connection with our online surveys. However, we may collect certain information about the terminal or browser used to access the online survey in order to identify multiple participants and to be able to take them into account when evaluating the online survey. The aforementioned information does not contain IP addresses, is not combined with other information stored by us and is deleted after evaluation of the online survey. The aforementioned data is processed to safeguard our legitimate interest in conducting technically secure online surveys on the basis of Article 6 paragraph 1 f) GDPR.

 

h) Further functionalities. We can offer you further functionalities on our website, for the use of which it is possible or necessary to enter personal data. In this case we will inform you about the processing of personal data in connection with the corresponding functionality (e.g. in the corresponding input form).

 

i) Links to other websites. Our website may contain links to other websites which are not operated by us but by third parties. Please note that when you access such third party websites, information (including personal data, if applicable) about your visit may be collected by the third party. For more information, please refer to the privacy policy of the respective website.

 

2. Conclusion of contracts for products or other services (including registration for events). We also offer you the opportunity to conclude contracts for products or other services (including participation in VdS events) outside our website. We will provide you with the information required for this purpose prior to the conclusion of the respective contract (e.g. via the respective order/registration form); mandatory details are marked as such. We process any further personal data provided when placing an order/registration and any other personal data collected in connection with the execution of the respective contract in order to execute the contract concluded. If the contract is concluded with an individual, the processing is carried out on the basis of Article 6 paragraph 1 b) GDPR; if this contract is concluded with an organisation (e.g. a company), the processing is carried out to safeguard our legitimate interest and the legitimate interest of this organisation in the execution of the contract on the basis of Article 6 paragraph 1 f) GDPR.

For the events we organise (e.g. courses and conferences), we record the participants in separate participant lists, from which the name and company are derived. These participant lists are made available to other participants. In accordance with Art 6 Paragraph 1 f) GDPR, the legal basis is the legitimate interest of our company, the participants and their companies in the promotion of professional contacts and the exchange of information between the participants and their companies. These lists of participants are also available to those exhibitors who present their products and services in close proximity to the event premises. In accordance with Art. 6 para. 1 f) GDPR, the legal basis is the legitimate interest of participants and exhibitors in the advertising of theme-related products and services. You can object to publication on the list of participants in writing or by sending an e-mail to lehrgang@vds.de.

 

3. Information by e-mail / e-mail newsletter. On our website and in other ways (e.g. on order/registration forms in paper form) we offer you the possibility to register for information offers by e-mail or an e-mail newsletter. The required information is given in the respective form and includes at least your e-mail address and, if applicable, other details (such as your title, first and last name or your organisation/company). Mandatory information is marked accordingly. The processing of the data provided as part of the registration process is based on your consent and Article 6 paragraph 1 a) GDPR. Please note that you can revoke the consent you have given us at any time with effect for the future, e.g. by clicking on the corresponding link in each of our newsletters or by notifying us via one of the contact channels mentioned at the beginning of this data protection information.

 

4. Contact possibilities. We would like to point out (among other things on our website) various ways in which you can contact us. If you use one of these ways, we process the information requested by us and/or the information you provide in order to process your request. The processing of the personal data transmitted to us in the context of the enquiry sent to us via the contact channels shown on the website is carried out for the purpose of processing the respective enquiry in order to safeguard our legitimate interest in the execution of an existing business relationship or in the execution of our other business activities on the basis of Article 6 paragraph 1 f) GDPR.

 

5. Data processing to fulfil legal obligations. We may also process the personal data processed for the above-mentioned purposes in order to fulfil legal obligations to which we are subject; this is done on the basis of Article 6 paragraph 1 c) GDPR.

 

6. Data processing to safeguard other legitimate interests. Insofar as necessary, we also process personal data beyond the purposes described above to safeguard further legitimate interests or the legitimate interests of third parties; this is done on the basis of Article 6 paragraph 1 f) GDPR. Our legitimate interests include-

a) the assertion of legal claims and defence in legal disputes;

b) the prevention and investigation of criminal offences; and

c) the management and further development of our business activities, including the sending of information about VdS services, unless you have expressly objected to the sending of information (e.g. direct advertising via print)

 

III. Am I obliged to provide data?
In some of the cases mentioned in this data protection information it is necessary to provide personal data. This applies in particular to the processing of personal data in connection with the conclusion of contracts, the receipt of information by e-mail or e-mail newsletters, the processing of enquiries via the contact channels we have specified or the offer of certain functionalities on our website. If personal data is collected, we will inform you of the data required in the respective case (e.g. by marking it as mandatory data). Without this required data we cannot provide the respective service, e.g. we cannot conclude a contract with you.

Even if we also collect personal data from you, we will inform you at the time of collection whether the provision of this information is required by law or contract or is necessary for the conclusion of a contract. In doing so, we generally mark such information that is provided voluntarily and is not based on any of the aforementioned obligations or is not necessary for the conclusion of a contract.

 

IV. Who receives personal data?

Personal data is generally processed within our company. Depending on the type of personal data, only certain departments / organisational units have access to personal data. These include, in particular, the specialist departments involved in providing our digital services (e.g. websites) or the respective business processes and our IT department. By means of a role and authorisation concept, access within our company is restricted to those functions and the scope that is necessary for the respective purpose of processing.
 

We may also transfer personal data to third parties outside our company to the extent permitted by law. These external recipients may include in particular-

 

  • those third parties who perform individual services for us within the scope of the contracts concluded by us, in particular speakers at VdS events to whom we provide directories with limited information on event participants;
  • those other participants in VdS events to whom we provide directories with limited information on event participants;
  • those recipients to whom we need to transmit personal data in order to fulfil contracts concluded, such as logistics or shipping service providers;
  • the service providers we engage to perform services for us on a separate contractual basis, which may include the processing of personal data, and the subcontractors of our service providers who are engaged with our consent;
  • non-public and public bodies, insofar as we are obliged to transmit your personal data due to legal obligations.

 

V. Is automated decision making used?
In connection with the processing of personal data described in this data protection information, we do not use automated decision making (including profiling) in the sense of Article 22 GDPR. If we use such procedures in individual cases, we will inform you separately to the extent required by law.

 

VI. Is data transferred to countries outside the EU / EEA?
The processing of personal data by us takes place exclusively within the EU or the European Economic Area.

In individual cases, it may be necessary - e.g. for the execution of contracts - to transfer information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the European Economic Area Treaty, in which a level of data protection comparable to that in the European Union cannot be readily assumed.

If the information transferred includes personal data, we will ensure before such a transfer that the necessary adequate level of data protection is ensured in the third country concerned or with the recipient in the third country. This may in particular result from a so-called "adequacy decision" of the European Commission, which determines an adequate level of data protection for a specific third country as a whole. Alternatively, we may base the data transfer on the so-called "EU standard contractual clauses" agreed with a recipient or - in the case of recipients in the USA - on compliance with the principles of the so-called "EU-US Privacy Shield". We will be happy to provide you with further information on the appropriate and adequate safeguards to maintain an adequate level of data protection upon request; contact details are provided at the beginning of this Privacy Information. Information on the participants in the EU-US Privacy Shield can also be found here www.privacyshield.gov/list; information on the EU standard contractual clauses here www.privacyshield.gov/list; information on the EU standard contractual clauses here  http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDFand information on the adequacy decisions here ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en.

 

VII. How long is personal data stored?
We store personal data as long as we have a legitimate interest in this storage and your interests in not continuing the storage do not outweigh the data.

Even without a legitimate interest, we may continue to store the data if we are obliged to do so by law (for example, to fulfil storage obligations). We also delete personal data without the intervention of the person concerned as soon as knowledge of the data is no longer necessary to fulfil the purpose of the processing or the storage is otherwise legally inadmissible.

 

As a rule

  • the log data is deleted within seven days, unless further storage is required for legally intended purposes such as the detection of misuse and the recognition and elimination of technical faults;
  • the data processed in connection with a business relationship (in particular in connection with concluded contracts) is deleted at the latest after expiry of the statutory retention periods; and
  • which in connection with a user account is deleted with the deletion of the user account, insofar as further storage is not necessary for the fulfilment of legal retention periods in connection with the respective business relationship.

 

The personal data which we have to store in order to fulfil the obligation to retain will be stored until the end of the respective retention period. Insofar as we store personal data exclusively for the fulfilment of storage obligations, such data is usually blocked so that it can only be accessed if this is necessary in view of the purpose of the storage obligation.


 

 

VIII. What rights do affected individuals have?


a) Right of objection in accordance with Art. 21 GDPR

An affected person shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data relating to him or her carried out pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. In the event of such an objection, we shall no longer process the personal data relating to that person unless we can demonstrate compelling legitimate reasons for processing which outweigh the interests, rights and freedoms of the data subject, or unless the processing is for the purpose of asserting, exercising or defending legal claims.

When we process personal data for the purpose of direct marketing, a data subject shall have the right to object, at any time, to the processing of personal data relating to him/her for the purpose of such marketing, including profiling, insofar as it relates to such direct marketing. If an individual objects to data processing for the purposes of direct marketing, the personal data concerned shall no longer be processed for those purposes.

 

b) Further rights

In addition, an affected person has the right to-

  • to information on the personal data stored about them, Article 15 GDPR;
  • to the correction of incorrect or incomplete data, Article 16 GDPR;
  • to the deletion of personal data, Article 17 GDPR;
  • to restriction of processing, Article 18 GDPR; and
  • on data transferability, Article 20 GDPR.

n order to exercise these rights, an individual affected can contact us at any time - e.g. via one of the contact channels indicated at the beginning of this data protection information sheet.

If a concerned person has questions regarding the processing of personal data, he or she can also contact our data protection officer.

A person affected is also entitled to lodge a complaint with a competent supervisory authority for data protection, Article 77 GDPR.

 

 

up
Top