VELOX Privacy Cookies

Privacy & Cookies

1. General information

a. Contact details

Should you have any questions or suggestions regarding this information, or would like to contact us about exercising your rights, please submit your request to:

VELOX GmbH
Brandstwiete 1
20457 Hamburg, Germany
T: +49 (0)40 369688-0
privacy(at)velox.com

b. General information about data processing

Use of this website may entail the processing of personal data. The term ‘personal data’ under data protection legislation refers to any information relating to a specific or identifiable person – including your IP address. An IP address is assigned to each Internet-connected device by the Internet service provider to enable it to send and receive data. When using this website, we collect information that you yourself provide.
Furthermore, when you visit our website we collect certain information about your use of it.
We process personal data in compliance with relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG). We only process data on a lawful basis. When using this website, we process personal data only with your consent (Article 6(1)a GDPR), to perform a contract to which you are a party or to carry out pre-contractual measures at your request (Article 6(1)b GDPR), to fulfil a legal obligation (Article 6(1)c GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or basic rights and fundamental freedoms which require the protection of personal data are overriding (Article 6(1)f GDPR). If you apply for a vacancy in our company, we will also process your personal data to be able to take hiring decisions (Section 26(1) BDSG).

c. Retention period

Unless stated otherwise in the following, we only store the data for as long as it is necessary to fulfil the processing purpose or to fulfil our contractual or legal obligations. Such statutory retention obligations may arise from commercial or fiscal regulations in particular.

d. IT service providers

Unless stated otherwise in the following, data is processed on the servers of our IT service providers which have been commissioned by us for this purpose. These service providers only process the data according to explicit instructions and are contracted to maintain adequate technical and organisational data-protection measures.

e. Notice regarding processing as a jointly responsible party

VELOX GmbH processes personal data as part of the group with its subsidiary companies, and has thereby collaboratively organised certain processing tasks. For this processing, a joint responsibility exists in accordance with Art. 26 GDPR, in which the joint purposes and means of processing are specified. For this purpose, we have contractually agreed which company performs which duties under GDPR. The agreement will be provided upon request.

2. Processing of server log files


When using our website purely for informative purposes, only general information is stored automatically (i.e. without prior registration) which your browser transmits to our server. By default, this includes: browser type/version, operating system used, page visited, the previously visited page (referrer URL), IP address, date and time of the server request, and the HTTP status code. The information is processed to safeguard our legitimate interests. The lawful basis for processing is Article 6(1)f GDPR. This processing is for the technical management and security of the website. The stored data will be erased after seven days provided there is no reasonable suspicion of unlawful use on the basis of specific evidence and where no further examination and processing of the information is required for this reason.

3. Contact options and enquiries

Our website includes a contact form that you can use to send us messages. Your data will be encrypted during transfer. All data fields marked as mandatory must be completed to process your enquiry. Failure to provide the requested information will result in us being unable to process your enquiry. The provision of further information is voluntary. Alternatively, you can message us via the contact e-mail address. We will process this data for the purpose of answering your enquiry. The lawful basis for processing data is Article 6(1)b GDPR.

4. Applications / job advertisements

If you submit an application to us, we will process your application data for the purposes commensurate with your interest in current or future employment with us and with the processing of your application. Your application will be processed and acknowledged solely by the relevant contact personnel within our company. All employees entrusted with processing data are obliged to maintain the confidentiality of your data.
If we are unable to offer you employment, we will hold your application data on file for up to six months following a respective rejection for the purpose of responding to any questions arising in connection with your application or rejection. This does not apply insofar as statutory regulations preclude erasure, continued storage is required for evidential purposes, or you have expressly agreed to a longer storage period.
The lawful basis for processing data is Article 26(1) BDSG. If we hold your application data for a period longer than six months with your express consent, you may revoke this consent at any time pursuant to Article 7(3) GDPR. Any such withdrawal of consent does not affect the lawfulness of processing based on that consent prior to its withdrawal.

5. Cookies

We use cookies on our website. Cookies are small text files stored by your browser when you visit a website. This identifies the browser used and it can be recognised by our web server.
We also use ‘persistent cookies’. These are deleted automatically after a specific period, which may differ depending on the cookie.
Insofar as this use of cookies results in the processing of personal data, the lawful basis for this is Article 6(1)f GDPR. This manner of processing serves our legitimate interest in making our website more user-friendly, effective and secure.
You can delete cookies at any time via your browser settings. You can also object in general to the use of cookies via your browser settings.
For further information, see: https://ico.org.uk/media/for-organisations/documents/1545/cookies_guidance.pdf

6. Google Analytics

To evaluate visits to our website we use Google Analytics, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). Google uses cookies that allow an analysis of your use of our website. The information generated by such cookies about the use of our website by users will generally be transmitted to and stored by Google on servers in the USA. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within our website and to provide us with additional services related to the use of our website and the Internet. As part of this, pseudonymous user profiles may be created from the data processed.

We only use Google Analytics with IP anonymisation enabled. This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google Server in the USA and shortened there.

The IP address sent by your browser will not be associated with other data held by Google. Users can prevent the storage of cookies via their browser settings.

The lawful basis for processing data in connection with the Google Analytics service is Article 6(1)f GDPR. Our legitimate interest in processing this data is to analyse user behaviour on our website for the purposes of adapting the design to user needs.
You can prevent the storage of cookies via your browser settings. You can also prevent the gathering of information generated by the cookie by downloading and installing the browser plugin available here: http://tools.google.com/dlpage/gaoptout?hl=en. If using a mobile device to visit our website, you can deactivate Google Analytics by tapping/clicking this link.
Google is certified under the Privacy Shield Agreement, which provides a guarantee of compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

7. Embedded services and third-party content

We use services and content provided by third parties on our website (hereinafter referred to collectively as ‘content’). For this type of embedding, in technical terms your IP address needs to be processed for the content to be sent to your browser. Your IP address will therefore be transmitted to respective third-party providers.
In each case, the data will be processed to safeguard our legitimate interests in the optimisation and efficiency of our website. The lawful basis for this processing is Article 6(1)f GDPR.
The programming language JavaScript is used regularly to embed content. You can therefore object to data processing by disabling the running of JavaScript in your browser or by installing a JavaScript blocker. However, please be aware that this may restrict the functionality of our website.
We have embedded content on our website from the following third party-providers:
Google LLC services (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”):

- Google Maps to display maps;
- Google Web Fonts to display fonts.

Google is certified under the Privacy Shield Agreement, which provides a guarantee of compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
 
YouTube.com provided by YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; hereinafter “YouTube”) to display videos.
YouTube is certified under the Privacy Shield Agreement, which provides a guarantee of compliance with European data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

8. Withdrawing consent

Where you have granted us separate consent to process your data, you can withdraw such consent at any time pursuant to Article 7(3) GDPR. Any such withdrawal of consent does not affect the lawfulness of processing based on that consent prior to its withdrawal.

9. Your rights

As a data subject you are entitled to exercise your rights towards us. In particular, you have the following rights:

• Pursuant to Article 15 GDPR and Section 34 BDSG, you have the right to request information confirming whether or not, and if so to what extent, we are processing your personal data.
• Pursuant to Article 16 GDPR, you have the right to require that we rectify inaccurate personal data concerning you.
• Pursuant to Article 17 GDPR and Section 35 BDSG, you have the right to require that we erase your personal data.
• Pursuant to Article 18 GDPR, you have the right to require that we restrict the processing of your personal data.
• Pursuant to Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and also have the right to transfer such data to another controller.

10. Right to object

Pursuant to Article 21 GDPR you have the right to object to any processing based on Article 6(1)e or f GDPR. Where we process personal data concerning you for the purposes of direct marketing, you are entitled to lodge an objection to such processing pursuant to Article 21(2) and (3) GDPR.

11. Data Protection Officer

You can contact our Data Protection Officer using the following address:
datenschutzbeauftragter(at)velox.com

12. Complaining to a supervisory authority

If you consider that the processing of personal data relating to you infringes GDPR provisions, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR.


Status: 05/2018