Privacy policy – vi2vi Retail Solution

1. Information about the collection of personal data

(1) In the following we inform you about the processing of personal data when using our website and during video surveillance of the company building and premises. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In this way we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

(2) Responsible according to Art. 4 (7) GDPR

Managing Director Mathias Bechler
vi2vi Retail Solutions GmbH
Siemensstrasse 22
76275 Ettlingen
Germany
Phone: +49 7243 – 76999 100
www.vi2vi-retail-solution.com

You can reach our data protection officer via

datenschutz@vi2vi-retail-solution.com
Phone: +49 7243 – 76999 290
or our postal address with the addition “the data protection officer – personal/confidential”.]

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. If the request is assigned to a contract, we delete the data arising in this context after the deadlines for the contract period, otherwise after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

2. Your rights

(1) According to Chapter 3 of the GDPR (Articles 12 to 23) you have the following rights in relation to a person responsible with regard to your personal data:

Right to obtain confirmation of processing
Right to information,
Right to rectification or deletion,
Right to restriction of processing,
Right to object to processing,
Right to data portability.

In the case of a request for information that is not sent in writing by post, we ask for your understanding that we may then request evidence from you that proves that you are the person you say you are.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. For us it is

State Commissioner for Data Security and Freedom of Information in Baden-Württemberg https://www.baden-wuerttemberg.datenschutz.de responsible, but any other supervisory authority will also accept a complaint.

3. Processing of personal data when visiting our website

When using the website for informational purposes, i.e. simply viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically required for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Article 6 Paragraph 1 Clause 1 Letter f GDPR:

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (page visited)
Access status/HTTP status code
Data volume transferred in each case
previously visited page
Browser
Operating system
Language and version of the browser software.

4. Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other common functions for analysis or marketing of our offers, which are presented in more detail below. To do this, you usually have to provide additional personal data or we process such additional data that we use to carry out the respective services. The aforementioned data processing principles apply to all data processing purposes described here.

(2) In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are checked regularly.

(3) Furthermore, we can pass on your personal data to third parties if we offer participation in campaigns, competitions, conclusion of contracts or similar services together with partners. Depending on the service, your data can also be collected by the partners on their own responsibility. You will receive more detailed information when you enter your data or below in the description of the respective offers.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

5. Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to us. The admissibility of the processing of your data up to the time of your revocation remains unaffected.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary in particular to fulfill a contract with you, which is shown by us in the following description of the functions. If you exercise such an objection, we ask that you explain the reasons why we should not process your personal data in the way we have done. In the event of your objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your objection to advertising using the contact details given above.

6. Processing of data from your terminal equipment (“Cookie Policy”).

(1) In addition to the data mentioned above, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. When you visit our website and at any time thereafter, you can choose whether you want to generally allow the setting of cookies or which individual additional functions you want to select. You can make changes in your browser settings or via our consent manager. In the following, we first describe cookies from a technical point of view (2), before we go into more detail about your individual choices by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).

(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the place that sets the cookie. Cookies cannot run programs or transmit viruses to your computer, but primarily serve to make the internet offer faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:

Transient cookies: Such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognized when you return to our website.

Persistent cookies: Such cookies are automatically deleted after a predefined duration, which varies depending on the cookie. You can view the cookies set and the runtimes at any time in the settings of your browser and delete the cookies manually.

(3) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires that we use technologies, in particular cookies. Without these techniques, our website cannot be displayed (fully correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot opt out of these cookies if you wish to use our website. The individual cookies can be seen in the consent manager. The legal basis for this processing is Art. 6 (1) sentence 1 lit. f GDPR.

(4) Optional cookies when you give your consent: We only set various cookies with your consent, which you can select using the so-called cookie consent tool when you visit our website for the first time. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you during a visit or to display advertising (possibly also to targeting ads to interests, measuring the effectiveness of ads, or showing interest-based ads). The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. a GDPR. The revocation of your consent is possible at any time without affecting the admissibility of the processing until the revocation.

The functions we use, which you can select and revoke individually via the Consent Manager, are described below in Section 7.

7. External services used for the improved functioning of the website

(1) WordPress Emoji: This feature is an emoji set loaded from wordpress.org. No cookies in the technical sense are set on the user’s client, but technical and personal data such as the IP address are transmitted from the client to the service provider’s server in order to enable the use of the service.

Use on the legal basis of: Consent Art. 6 Para. 1 lit.a GDPR

Provider: WordPress.org

(2) Google Fonts. This service downloads fonts that are not installed on the user’s client device and embeds them into the website. No cookies in the technical sense are set on the user’s client device, but technical and personal data such as the IP address are transmitted from the client to the service provider’s server in order to enable the use of the service.

The data collected is processed by Google on servers in a third country. Due to an existing contract for order processing in connection with the agreement of the EU standard contractual clauses, we assume admissibility on the basis of consent.

Use on the legal basis of: Consent Art. 6 Para. 1 lit.a GDPR

Provider: Google Ireland Limited, Gordon House, Barrow Street Dublin 4. Ireland

(3) Google Maps. The map service is used to display the company address on a map and to generate information on how to get there from another location.

Google Maps is a service provided by Google Ireland Limited (“Google”), a company incorporated and operating under the laws of Ireland (registered number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Maps uses “cookies”. The information generated by the cookie about your use of our website (including your IP address) is transferred to Google’s computer and stored there. It cannot be ruled out that the data processing will take place outside the scope of EU law. Google guarantees the EU standard contractual clauses, so that Google guarantees compliance with EU data protection standards. Your consent is requested before the connection to the Google servers is established. If you do not give your consent, this service will not be used.

(4) Plugin from YouTube. We use the YouTube No-Cookies function, i.e. we have activated extended data protection, videos are not accessed via youtube.com, but via youtube-nocookie.com. YouTube provides this connection itself and thus ensures that YouTube will initially not store any cookies on your device. However, when the relevant pages are called up, the IP address and the other data specified in […]1 are transmitted and in particular communicated which of our Internet pages you have visited.

As soon as you start playing an embedded video by clicking on it, YouTube only saves cookies on your device through the extended data protection mode, which make you identifiable in particular if you are logged in to a Google service.

Regardless of whether the embedded videos are played back, a connection to the Google network “DoubleClick” is established each time this website is accessed, which can trigger further data processing operations without our influence. According to information from YouTube, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive practices.

Use on the legal basis of: Consent Art. 6 Para. 1 lit.a GDPR

Provider: Youtube belongs to Google Inc., based in San Bruno/California, USA. The Service is provided in Europe by Google Ireland Limited (“Google”), a company incorporated and operating in Ireland (registered number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

You can find more information on data protection on YouTube in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/

(5) External Links. Links to the websites of other providers are included on individual pages. When you click, you leave the website of vi2vi Retail Solution GmbH and you will be forwarded to their website. This is, for example, Facebook, Instagram, LinkedIn or Xing.

At that moment, the responsibility for the processing shifts to the context of the respective target website.

8. video surveillance of the company buildings and premises.

(1) Purposes and legal basis for the processing of personal data

Data processing takes place on the basis of GDPR Article 6 Paragraph 1 Letter f for the following purposes:

Exercise of domiciliary rights
Prevention and detection of crimes (esp. theft, robbery, fraud, damage, vandalism)

(2) Legitimate interests of the person responsible, which are pursued through the processing

Protection of the property and assets of the person responsible
Protection of employees, customers and visitors

(3) Recipients of the personal data

A transfer of data to third parties (e.g. police) only takes place with a sufficient legal basis and only if an important purpose such as investigating criminal offenses is given.

The data will not be transmitted to recipients or processors in a third country.

(4) Duration of storage of the data or criteria for determining it

Saved recordings are regularly overwritten. The deletion takes place after 5 days at the latest. A longer storage period only takes place if this is necessary to enforce legal claims or to preserve evidence, e.g. for the prosecution of criminal offenses in a specific individual case.

9. Handling of data from applications

We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process.

Applicant data will be deleted after 6 months in the event of rejection.

In the event that you have agreed to further storage of your personal data, we will transfer your data to our pool of applicants. The data will be deleted there after two years.

If you have been awarded a position as part of the application process, the data from the applicant data system will be transferred to our personnel information system.

Your applicant data will be viewed by the HR department after your application has been received. Suitable applications are then forwarded internally to the department heads for the open position. Then the further process is coordinated. In principle, only those people in the company who need it for the proper running of our application process have access to your data.

The data is processed exclusively in data centers in the Federal Republic of Germany.