Legal

Privacy policy

How VAULO GmbH processes personal data on this website.

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. The operator's contact details can be found in this website's legal notice.

How do we collect your data?

Some data is collected when you provide it to us. This may, for example, be data you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time you accessed a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. You may contact us at any time at the address given in the legal notice about this or any other data protection questions. You also have the right to lodge a complaint with the competent supervisory authority.

In addition, under certain circumstances you have the right to request restriction of the processing of your personal data. Details can be found in this privacy policy under “Right to restriction of processing”.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically analysed. This is done primarily using cookies and analytics programs. Analysis of your browsing behaviour is generally anonymous; it cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objecting can be found in the following privacy policy.

2. Hosting and content delivery networks (CDN)

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access information and other data generated through a website.

We use the host to fulfil our contracts with prospective and existing customers (Article 6(1)(b) GDPR) and in the interests of secure, fast and efficient provision of our online offering by a professional provider (Article 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

The host is: medigital Softwareschmiede, proprietor Ulf Maier, Rohrwiesenstr. 30, 72336 Balingen

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

Various personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for processing data on this website is:

VAULO GmbH

Ridlerstraße 55

80339 München

Represented by its managing directors: Marc Conzelmann & Sebastian Küsters

Telephone: 089-1241384-10

Email: hello@vaulo.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. An informal notification by email to us is sufficient. Withdrawal does not affect the lawfulness of data processing carried out before consent was withdrawn.

WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. This right to complain is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, either yourself or through a third party, in a commonly used, machine-readable format. If you request that the data be transferred directly to another controller, this will be done only where technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in your browser's address line from “http://” to “https://” and by the padlock symbol in your browser's address bar.

When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Access, deletion and correction

Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, a right to correction or deletion of this data. You may contact us at any time at the address given in the legal notice about this or any other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address given in the legal notice for this purpose. The right to restriction of processing applies in the following cases:

If you contest the accuracy of personal data we hold about you, we generally need time to verify it. For the duration of this verification, you have the right to request restriction of the processing of your personal data.
If your personal data was or is being processed unlawfully, you may request restriction of processing instead of deletion.
If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been established whose interests prevail, you have the right to request restriction of the processing of your personal data. If processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

4. Data collection on this website

Cookies

Our websites use “cookies”. Cookies are small text files and do not harm your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you enter our website (third-party cookies). These enable us or you to use certain services provided by the third-party company, such as cookies for processing payment services.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as a shopping basket or displaying videos. Other cookies are used to evaluate user behaviour or display advertising.

Cookies necessary to carry out electronic communications or provide certain functions you have requested, such as a shopping basket, are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to provide its services in a technically error-free and optimised manner. Where corresponding consent has been requested, for example consent to store cookies, processing takes place exclusively on the basis of Article 6(1)(a) GDPR; consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, permit cookies only in individual cases, exclude cookies in particular cases or generally, and automatically delete cookies when the browser is closed. Disabling cookies may restrict the functionality of this website.

Where cookies from third-party companies or for analytics purposes are used, we will inform you separately in this privacy policy and request consent where applicable.

Server log files

The provider of this website automatically collects and stores information in server log files that your browser automatically transmits to us. This information comprises:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address. This data is not combined with other data sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; collecting server log files is necessary for this purpose.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all resulting personal data such as your name and enquiry, is stored and processed by us to handle your request. We do not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary to take steps before entering into a contract. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) and/or our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in effectively handling enquiries addressed to us.

Data you send to us through contact enquiries remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storing it no longer applies, for example after your request has been fully handled. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

This website uses social media plugins, for example from Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn and Tumblr.

You can generally recognise the plugins by the respective social media logos. To protect data on this website, we use these plugins only together with the “Shariff” solution. This application prevents plugins integrated into this website from transferring data to the respective provider as soon as you first enter the page.

A direct connection to the provider's server is established only when you activate the relevant plugin by clicking its button (consent). Once you activate the plugin, the provider receives information that you have visited this website with your IP address. If you are logged in to your corresponding social media account, such as Facebook, at the same time, the provider can associate your visit to this website with your user account.

Activating the plugin constitutes consent within the meaning of Article 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.

Plugins from the Facebook social network are integrated into this website. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the United States and other third countries.

You can recognise Facebook plugins by the Facebook logo or the “Like” button on this website. An overview of Facebook plugins is available at: https://developers.facebook.com/docs/plugins/?locale=de_DE

When you visit this website, the plugin establishes a direct connection between your browser and Facebook's server. Facebook thereby receives information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged in to your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Facebook uses it. Further information is available in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation

If you do not want Facebook to associate your visit to this website with your Facebook user account, please log out of your Facebook account.

Facebook plugins are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the widest possible visibility on social media.

Twitter plugin

Functions of the Twitter service are integrated into this website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Using Twitter and the “Re-Tweet” function links the websites you visit to your Twitter account and makes them known to other users. Data is also transferred to Twitter in the process. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Twitter uses it. Further information is available in Twitter's privacy policy at: https://twitter.com/de/privacy

The Twitter plugin is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the widest possible visibility on social media.

You can change your Twitter privacy settings in your account settings at https://twitter.com/account/settings

Instagram plugin

Functions of the Instagram service are integrated into this website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged in to your Instagram account, clicking the Instagram button allows you to link the content of this website to your Instagram profile. Instagram can thereby associate your visit to this website with your user account. Please note that, as the website provider, we have no knowledge of the content of the data transmitted or how Instagram uses it.

Data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the widest possible visibility on social media. Where corresponding consent has been requested, for example consent to store cookies, processing takes place exclusively on the basis of Article 6(1)(a) GDPR; consent may be withdrawn at any time.

Further information is available in Instagram's privacy policy at: https://instagram.com/about/legal/privacy/

Pinterest plugin

This website uses social plugins from the Pinterest social network, operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

When you access a page containing such a plugin, your browser establishes a direct connection to Pinterest's servers. The plugin transmits log data to Pinterest's server in the United States. This log data may include your IP address, the addresses of websites visited that also contain Pinterest functions, your browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

Further information about the purpose, scope and further processing and use of data by Pinterest, and your associated rights and options to protect your privacy, is available in Pinterest's privacy information at: https://policy.pinterest.com/de/privacy-policy

If you wish to subscribe to the newsletter offered on this website, we require an email address and information allowing us to verify that you own that email address and agree to receive the newsletter. No further data is collected, or it is provided only voluntarily. We use this data exclusively to send the requested information and do not disclose it to third parties.

Data entered in the newsletter registration form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and email address and their use to send the newsletter at any time, for example using the “Unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of processing operations already carried out.

Data you provide to us for the purpose of receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe, and is deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. Data in the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (a legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage in the blacklist is not subject to a time limit. You may object to storage if your interests outweigh our legitimate interest.

7. Plugins and tools

Usage statistics with Umami

We use Umami at https://analytics.vaulo.com to analyse page views, visitor sources and technical website performance. We also record selected interactions: clicks on our demo links, the selection of an audience, plans and add-ons in the pricing calculator, clearing that selection, and clicks on the quote request link. These events include the page language, the placement of a demo link, and identifiers and counts of the selected offerings. They do not transmit the content of a quote request email. Clicking a demo or email link does not confirm a booking or the sending of a request.

Our Umami instance for usage statistics and the session recordings and heatmaps described below is hosted by Hetzner Online GmbH on servers in Germany.

We retain fully anonymised, aggregated statistics that do not allow individual people to be identified indefinitely for long-term comparisons. We retain personal or pseudonymous analytics data only for as long as necessary for the stated analysis purposes, after which it is deleted or fully anonymised.

These usage statistics are separate from the optional session recordings described below. Your choice in the session recording notice controls only the recording script.

Session recordings and heatmaps with Umami

With your prior consent, we use Umami for sampled session recordings and heatmaps. This helps us understand how our website is used, identify usability problems and improve its design and functionality. Processing takes place through our analytics address at https://analytics.vaulo.com.

This captures page content and changes to it, mouse movements, clicks, scrolling, pages visited, and information about screen and page dimensions. Visits can be replayed and interactions displayed in aggregated heatmaps. Form inputs are masked; other visible page text is not masked by default.

Session recordings are automatically deleted after 30 days. Only fully anonymised, aggregated analyses that do not allow individual people to be identified are retained indefinitely.

The recording script is loaded only after you consent. The legal bases are Section 25(1) TDDDG and, where personal data is processed, Article 6(1)(a) GDPR. Consent is voluntary. You can use the website without consenting.

You may withdraw your consent at any time with effect for the future through “Privacy settings” in the footer. Withdrawing consent reloads the page to stop the running recording. Withdrawal does not affect the lawfulness of processing before withdrawal.

We store your decision in your browser's local storage for up to 180 days so that we can respect your choice. This storage is used solely to manage your privacy preference. If your browser blocks storage or you delete the saved preference, we will ask again on your next page visit.

Leadfeeder

Our website uses technologies from Leadfeeder, Liidio OY as part of ECHOBOT Group GmbH (“Leadfeeder”), to analyse visitor behaviour. This process involves processing a visitor's IP address. The purpose of this processing is to help us understand which businesses (B2B) visit our website by enriching IP addresses with associated information such as the company name or industry code.

For this purpose, the visitor's IP address and corresponding session data are compared against an extensive whitelist of known businesses at the start of the visitor's session.

When we process website traffic data, we do so on the basis of our legitimate interest (Article 6(1)(f) GDPR) in optimising our products, services, sales and marketing.

To prevent this processing, you, as a website visitor, can install and configure suitable ad blockers or use no-script plugins in your browser.

Data is deleted as soon as it is no longer needed for the intended purposes. Statutory retention obligations may result in a longer retention period for the data concerned.

We have entered into a data processing agreement with Leadfeeder to ensure compliance with applicable data protection standards.

Google Web Fonts

This website uses web fonts provided by Google to display fonts consistently. The Google Fonts are installed locally. No connection to Google servers is established in this process.

Further information about Google Web Fonts is available at https://developers.google.com/fonts/faq

and in Google's privacy policy: https://policies.google.com/privacy?hl=de

Source: https://www.e-recht24.de

Contact us

We are happy to assist you by email and telephone.

hello@vaulo.com

+49 89 1241384-10