Legal

Privacy policy

How VAULO GmbH processes personal data on this website.

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. The operator's contact details can be found in this website's legal notice.

How do we collect your data?

Some data is collected when you provide it to us. This may, for example, be data you send us by email.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time you accessed a page. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. You may contact us at any time at the address given in the legal notice about this or any other data protection questions. You also have the right to lodge a complaint with the competent supervisory authority.

In addition, under certain circumstances you have the right to request restriction of the processing of your personal data. Details can be found in this privacy policy under “Right to restriction of processing”.

Analytics tools and third-party tools

When you visit this website, we analyse its use statistically with a self-hosted analytics tool, without cookies and without third parties. We use session recordings and heatmaps only with your explicit consent. Details can be found in the section “Plugins and tools”.

2. Hosting

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access information and other data generated through a website.

We use the host to fulfil our contracts with prospective and existing customers (Article 6(1)(b) GDPR) and in the interests of secure, fast and efficient provision of our online offering by a professional provider (Article 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

The host is: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft Azure). The servers are located in Germany (data centre region Germany West Central, Frankfurt am Main). A data processing agreement pursuant to Article 28 GDPR is in place with Microsoft (Microsoft Products and Services Data Protection Addendum).

A transfer of personal data to the parent company Microsoft Corporation in the USA cannot be completely ruled out. Microsoft is certified under the EU-US Data Privacy Framework; such transfers are based on the European Commission's adequacy decision (Article 45 GDPR) and, in addition, on the EU standard contractual clauses.

3. General information and mandatory disclosures

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

Various personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for processing data on this website is:

VAULO GmbH

Ridlerstraße 55

80339 München

Represented by its managing directors: Marc Conzelmann & Sebastian Küsters

Telephone: 089-1241384-10

Email: hello@vaulo.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.

Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. An informal notification by email to us is sufficient. Withdrawal does not affect the lawfulness of data processing carried out before consent was withdrawn.

WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING ACTIVITY IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. This right to complain is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, either yourself or through a third party, in a commonly used, machine-readable format. If you request that the data be transferred directly to another controller, this will be done only where technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the change in your browser's address line from “http://” to “https://” and by the padlock symbol in your browser's address bar.

When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Access, deletion and correction

Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, and, where applicable, a right to correction or deletion of this data. You may contact us at any time at the address given in the legal notice about this or any other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address given in the legal notice for this purpose. The right to restriction of processing applies in the following cases:

If you contest the accuracy of personal data we hold about you, we generally need time to verify it. For the duration of this verification, you have the right to request restriction of the processing of your personal data.
If your personal data was or is being processed unlawfully, you may request restriction of processing instead of deletion.
If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been established whose interests prevail, you have the right to request restriction of the processing of your personal data. If processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

4. Data collection on this website

Cookies and local storage

We do not use cookies for advertising or analytics and do not embed any third-party cookies.

When you explicitly choose a language or follow a German-language link, we store this choice in the “NEXT_LOCALE” cookie for up to one year, so that we show you the website in your language on later visits. We also store your decision on session recordings in your browser's local storage (see “Session recordings and heatmaps with Umami”).

This storage is strictly necessary for the functions you have requested (Section 25(2)(2) TDDDG). The legal basis for any processing of personal data is Article 6(1)(f) GDPR; our legitimate interest is respecting your language and privacy settings.

You can delete cookies and locally stored data in your browser at any time. The website continues to work; we will ask for or determine your settings again.

Server log files

The provider of this website automatically collects and stores information in server log files that your browser automatically transmits to us. This information comprises:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; collecting server log files is necessary for this purpose.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all resulting personal data such as your name and enquiry, is stored and processed by us to handle your request. We do not disclose this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary to take steps before entering into a contract. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) and/or our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in effectively handling enquiries addressed to us.

Data you send to us through contact enquiries remains with us until you request its deletion, withdraw your consent to storage, or the purpose of storing it no longer applies, for example after your request has been fully handled. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Plugins and tools

Usage statistics with Umami

We use Umami at https://analytics.vaulo.com to analyse page views, visitor sources and technical website performance. We also record selected interactions: clicks on our demo links, on email and phone links and on the contact options of the pricing page, the selection of an audience, plans and add-ons in the pricing calculator, clearing that selection, clicks on the quote request link, successful registrations for our events, and completed demo bookings. These events include the page language, the page visited, the placement of a link, identifiers and counts of the selected offerings, the identifier of the event and, if you arrived through a campaign link, its source and campaign name. They do not transmit your name, your email address or any other details from the registration form, nor the content of a quote request email. Clicking a demo, email or phone link does not confirm a booking, the sending of a request or a call.

Our Umami instance for usage statistics and the session recordings and heatmaps described below is hosted by Hetzner Online GmbH on servers in Germany.

We retain fully anonymised, aggregated statistics that do not allow individual people to be identified indefinitely for long-term comparisons. We retain personal or pseudonymous analytics data only for as long as necessary for the stated analysis purposes, after which it is deleted or fully anonymised.

These usage statistics are separate from the optional session recordings described below. Your choice in the session recording notice controls only the recording script.

Session recordings and heatmaps with Umami

With your prior consent, we use Umami for sampled session recordings and heatmaps. This helps us understand how our website is used, identify usability problems and improve its design and functionality. Processing takes place through our analytics address at https://analytics.vaulo.com.

This captures page content and changes to it, mouse movements, clicks, scrolling, pages visited, and information about screen and page dimensions. Visits can be replayed and interactions displayed in aggregated heatmaps. Form inputs are masked; other visible page text is not masked by default.

Session recordings are automatically deleted after 30 days. Only fully anonymised, aggregated analyses that do not allow individual people to be identified are retained indefinitely.

The recording script is loaded only after you consent. The legal bases are Section 25(1) TDDDG and, where personal data is processed, Article 6(1)(a) GDPR. Consent is voluntary. You can use the website without consenting.

You may withdraw your consent at any time with effect for the future through “Privacy settings” in the footer. Withdrawing consent reloads the page to stop the running recording. Withdrawal does not affect the lawfulness of processing before withdrawal.

We store your decision in your browser's local storage for up to 180 days so that we can respect your choice. This storage is used solely to manage your privacy preference. If your browser blocks storage or you delete the saved preference, we will ask again on your next page visit.

Fonts

We serve this website's fonts (IBM Plex) from our own server. Loading a page does not establish a connection to any third-party server.

Contact us

We are happy to assist you by email and telephone.

hello@vaulo.com

+49 89 1241384-10