Data Protection

DATA PROTECTION DECLARATION INTERNET PRESENCE VERTILAS
This data protection declaration will inform you about the collection, use and purpose of processing personal data when accessing the website and its offerings of VERTILAS GmbH, Daimlerstr. 11d, D-85748 Garching („VERTILAS“).

1. What and how personal data is being processed by Vertilas
Upon visiting the VERTILAS website the host server will automatically collect and store  the following data:
 
• IP address of the requesting computer
• information of your device and host name
• browser type and version
• operating system of the requesting computer
• referring URL
• date and time of the server enquiry
 
VERTILAS uses this data (“website access data”) to provide access to the website, to identify and resolve potential technical problems and to identify and prevent the misuse of VERTILAS’ website and offerings.
Furthermore, VERTILAS reserves the right to process this information as anonymized data for statistical purposes or to improve the internet presence. The data is anonymized so that it cannot be attributed to a specific data subject.
VERTILAS collects and processes this website access data as personal data of the data subject on the legal basis of article 6 (1) lit. f) General Data Protection Regulation (“GDPR”).

2.            Collecting and processing data provided voluntarily by email
VERTILAS offers to contact the company by email. If you provide us with personal data, such as your name, title, address, phone number, email address and further text information regarding the contact or enquiry, you are doing so on a voluntary basis. The data subject solely defines the scope and category of the information provided beyond the email address.
VERTILAS processes the personal data provided by email solely for the purpose to respond to the email enquiry on the legal basis of article 6 (1) lit. f) GDPR.
 
3.            Using Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files stored on the data subject’s computer and saved by the browser to exchange settings and data with the VERTILAS website. A cookie usually contains the domain name, a time stamp and an alphanumerical identifier. Cookies enable VERTILAS to make the website more user-friendly, stable and secure. The VERTILAS website uses session cookies that are deleted automatically when closing the browser.
 
Cookies can be deleted at any time. The security settings of the computer and the browser settings offer the data subject to decline the acceptance of all or certain kind of cookies. Declining the acceptance of cookies may limit the usability of the website.
 
Cookies, required to perform electronic communication or to provide specific functions required by the data subject, will be stored on the legal basis of article 6 (1) lit. f) GDPR. The host of this website has a legitimate interest to store cookies to display the website and ensure or optimize the stability and security of it.

4.            Transmission of personal data to third parties 
VERTILAS uses third parties for services, such as IT infrastructure and service providers, data deletion, website development and management that get access to personal data to fulfil their service obligations. VERTILAS selects these service providers with care, and they act only upon VERTILAS’ notice and direction and are contractually obliged to comply with the applicable data protections laws and regulations.
 
Beyond the cases outlined in this data protection declaration, VERTILAS does not transmit your personal data to third parties without your explicit consent, with the exceptions if it is necessary for VERTILAS to comply with legal obligations or follow statutory or regulatory directives.
 
5.            Deletion of data
VERTILAS deletes website access data (see section 1) upon expiration of the needs to fulfil the purposes as stated in this data protection declaration, with the exceptions to comply with legal, statutory or regulatory requirements to store the data for a longer period. Website access data will be generally stored for a period of 30 days.
 
VERTILAS deletes personal data collected and stored as part of an email enquiry (see section 2), once the data is not required anymore to fulfil the purpose, routinely after the enquiry has been processed and completed.
 
The legal basis for the aforementioned deletion of personal data stored is article 6 (1) lit. f) GDPR. The legitimate interest is based on article 5 (1) lit. c) GDPR, the principle of data minimization.
 
6.            Rights of the data subject
The data subject has the following data protection rights. VERTILAS process a data subject’s claim of such a right without undue delay and it will not lead to any discrimination for the data subject.

• Right of information (Art. 15 GDPR)
• Right of rectification (Art. 16 GDPR)
• Right to object (Art. 21 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right of restriction of processing (Art. 18f. GDPR)
• Right of data portability (Art. 20 GDPR)
 
The data subject has the right to lodge a complaint with a supervisory authority if he or she considers that VERTILAS’ processing of personal data relating to him or her infringes the GDPR. The complaint can be lodged either with the data protection supervisory authority responsible for VERTILAS (see section 8), or with the supervisory authority in the data subject’s habitual residence, place of work or place of the alleged infringement.
Further details about the complaints procedure can be found in article 77 GDPR.
 
7.            Responsible party
Controller for the purposes of the General Data Protection Regulation, other data protection laws applicable in Member states of the EU and other provisions related to data protection is: 
 
VERTILAS GmbH
Controller for Data Protection
Daimlerstr. 11d
D-85748 Garching
Telefon: +49 (0)89 37156018-0
Telefax: +49 (0)89 37156018-19
E-Mail: dsgvo@vertilas.com

The data subject can claim the rights listed in section 6 at the responsible party.
 
8.            Supervisory authority
 
The Data Protection Authority of Bavaria (Bayerisches Landesamt für Datenschutzaufsicht) is responsible for the data protection for the private sector in Bavaria and is supervising data processing by privately owned corporations and entities. The contact information is: 

Bayerisches Landesamt für Datenschutzaufsicht 
Promenade 27 (Schloss)
91522 Ansbach
Germany
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
email: poststelle@lda.bayern.de
 
9.            Changes to VERTILAS Data Protection Declaration
This data protection declaration is revised on an ad-hoc basis to adapt it to changes, such as legal or regulatory requirements, company and product developments.
 
status: 24.05.2018