Data Protection

Data Privacy

Data privacy statement and duty to inform pursuant to Art. 13 GDPR

1. Duty to inform pursuant to the GDPR

Controller for data processing pursuant to point (a) of Art. 13(1) GDPR: Trading name pursuant to section 17(1) HGB inc. contact details of the responsible person (MD)

Veyhl GmbH
Schwarzwaldstrasse 2-8
D-75389 Neuweiler
Telefon: +49 (0) 7055/18-0
Telefax: +49 (0) 7055/18-180
Mail: info(at)veyhl.com 
Stuttgart local court, HRB 331658
VAT ID number: DE 814 121 048
Managing director with power of representation: Gerhard Wahl

Contact details of the data protection officer pursuant to point (b) of Art 13(1) GDPR:

Helbig Datenschutz GmbH
Michaela Helbig
Bergstrasse 11
91207 Lauf an der Pegnitz
+49 9123 70275-10
michaela.helbig(at)helbig-datenschutz.de

Purposes and legal basis of the data processing pursuant to point (c) of Art 13(1) GDPR
The personal data will be processed for the performance of a contract or in order to take steps prior to entering into a contract. They include the customer master data with contact persons and the contact history, offers, purchase orders, invoices, project data and other statutory obligations of the controller. The legal basis derives from Art. 6 GDPR. Other substantive legal bases derive from the German Commercial Code (HGB), German tax legislation, the German Limited Liability Company Act (GmbHG) and other statutory requirements of relevance for Veyhl GmbH. These also include contractual arrangements. Newsletters are processed on the basis of consent from the data subject.

Processing is necessary to protect the legitimate interests of the controller or a third party pursuant to point (d) of Art. 13(1) GDPR.Where necessary, we will process your data beyond actual performance of the contract in order to protect our legitimate interests or those of third parties. These purposes includ:

  • Managing distribution and controlling distribution
  • Establishing legal claims and defending in the event of legal disputes
  • Guaranteeing IT security and IT operations
  • Measures to control and develop business

Categories of recipients of personal data (data transfer) pursuant to point (e) of Art. 13(1) GDPR
Within Germany, the European Union and the European Economic Area
Germany: public accountants, bailiffs and other creditors as well as other state bodies for the fulfilment of statutory obligations and for required certifications, logistics companies, applicants, customers, suppliers and other bodies and business partners.

Third country inc. adequacy decision pursuant to point (f) of Art. 13(1) GDPR
In international business relations, data will be transferred pursuant to point (b) of Art. 6(1) for the performance of a contract or in order to take steps prior to entering into a contract. This does not require an adequacy decision.

Storage period pursuant to point (a) of Art. 13(2) GDPR
The respective purposes derive from statutory requirements and pertinent regulations specific to the industry. The personal data will be erased after the purpose has been achieved.

Rights of data subjects pursuant to point (b) of Art. 13(2) GDPR
You can at any time make use of your rights regarding the contact data set out above. If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Notice of the rights of the data subject

The data subject has the right to demand confirmation from the controller as to whether personal data concerning them are being processed; if this is the case, they have the right to access these personal data and the information set out in detail in Art. 15 GDPR. The data subject has the right to require the controller to rectify without undue delay incorrect personal data concerning them and where appropriate to complete incomplete personal data (Art. 16 GDPR).

The data subject has the right to require the controller to erase personal data concerning them without undue delay if one of the reasons set out in detail in Art. 17 GDPR applies, e.g. if the data are no longer necessary for the purposes pursued (right to erasure). The data subject has the right to require the controller to restrict processing if one of the requirements set out in detail in Art. 18 GDPR is met, e.g. if the data subject has objected to the processing, pending verification by the controller.

The data subject has the right to object at any time to the processing of personal data concerning them on grounds relating to their particular situation. The controller will no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Rights of data subjects pursuant to point (c) of Art. 13(2) GDPR
If you have given us consent to process personal data for certain purposes (e.g. processing images of the data subjects), your consent makes such processing lawful. Once given, consent can be withdrawn at any time. This also applies for the withdrawal of declarations of consent that were given to us prior to the entry of the GDPR into force, i.e. prior to 25 May 2018. Please note that the withdrawal only has effect for the future. It does not affect processing performed prior to the withdrawal of consent

Right to complain to a supervisory authority pursuant to point (d) of Art 13(2) GDPR
Notwithstanding any other remedy in administrative law or through the courts, every data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of the personal data concerning them infringes the GDPR (Art. 77 GDPR). The data subject can exercise this right with a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg the competent supervisory authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Hausanschrift: Königstrasse 10a, 70173 Stuttgart
Postanschrift: Postfach 1029 32, 70025 Stuttgart 
Tel: +49 711615541-0
Fax: 0711615541-15
E-Mail: poststelle(at)lfdi.bwl.de

Provision of personal data pursuant to point (e) of Art. 13(2)
For the purposes of our business relationship, you only need to provide personal data that are necessary for the establishment, implementation or termination of the employment relationship or that we have a statutory duty to collect. Without these data we will normally not be able to implement the employment relationship.

Change to the Data Privacy Statement - change of purpose
We reserve the right to change this Data Privacy Statement in compliance with data protection legislation. You can request it at any time using the above contact data. If we intend to process your data for purposes other than those for which they were collected, we will inform you of this in advance in compliance with statutory provisions.

2. Data protection at a glance

General information
The following information provides a simple summary of what happens with your personal data when you visit our website. Personal data are all data that enable you to be identified personally. For more information on the subject of data protection, please refer to our Data Privacy Statement below this text.

Data collection on our website

Who is responsible for recording data on the website? The processing of data on this website is performed by the website operator. Their contact details are set out in the Legal Notice of this website.

How do we collect your data?
Your data are recorded automatically by our IT systems when you visit the website. These are primarily technical data (e.g. your web browser and operating system or the time you accessed the page). These data will be recorded automatically as soon as you enter our website.

What do we use your data for?
Some of the data will be collected in order to ensure you can make full use of the website. Other data may be used to analyse your user behaviour.

What rights do you have over your data?
Your rights are set out in the above section on our duty to inform.

Analysis tools and tools of third-party providers 
When you visit our website, your surfing behaviour may be analysed statistically. This is done primarily with cookies and what are known as analysis programs. Your surfing behaviour is generally analysed anonymously – it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following Data Privacy Statement. You can object to this analysis. This Data Privacy Statement tells you how to register an objection.

3. General information and mandatory information

Data privacy 
The operators of these pages take the privacy of your personal data very seriously. We will treat your personal data in confidence and in compliance with statutory data protection requirements and this Data Privacy Statement. When you use this website, a variety of personal data is collected. Personal data are data that enable you to be identified personally. This Data Privacy Statement explains what data we collected and what we use them for. It also explains how and for what purpose this is done. We should point out that the transmission of data via the internet (e.g. when communicating by email) may have security vulnerabilities. It is not possible to protect data completely from access by third parties.

Withdrawal of your consent for data processing
Many data processing operations are only possible with your express consent. You can at any time withdraw consent that you had given previously. All you need to do is send an informal message to us by email. Withdrawal does not affect the lawfulness of the data processing that occurred prior to withdrawal.

Right to object to the collection of data in particular cases and to direct advertising (Art. 21 GDPR)
If the data are processed on the basis of points (e) or (f) of Art. 6(1) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation; to any profiling based on these provisions. This Data Privacy Statement sets out the relevant legal basis on which data are processed. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct advertising (objection under Art. 21(2) GDPR).

Information, blocking, erasure
The prevailing legal provisions give you the right at any time to receive information free of charge on the personal data stored concerning you, their origin and recipients and the purpose of the data processing and, where applicable, the right to have these data rectified, blocked or erased. You can contact us at the address indicated in the Legal Notice at any time for more information on this or any other issues relating to personal data.

Objection to advertising emails
Objection is hereby made to the use of contact details that are published in accordance with the obligation under German law to provide such details to send advertising and information materials not expressly requested. The operators of the website expressly reserve the right to take legal action in the case that unsolicited advertising information is received, such as through spam emails.

4. Data collection on our website

Cookies 
Some of the web pages use what are known as cookies. Cookies do not cause any damage to your computer and do not contain viruses. They are used to make our website more effective, secure and user-friendly. Cookies are small text files which are stored on your computer and saved on your browser. Most of the cookies we use are what are known as session cookies, which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can change your browser settings so that you are informed when cookies are set and can decide whether to accept them on a case-by-case basis or exclude the acceptance of cookies for particular cases or generally. You can also enable an option to delete the cookies automatically when you close the browser. If cookies are disabled, the functionality of this website may be restricted.

Cookies that are needed in order to execute electronic communication processes or to provide certain functions you request (e.g. the basket function) will be stored in accordance with Art. (1) (f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this Data Privacy Statement.

Server log files
The provider of the pages automatically collects and stores information in what are known as server log files that your browser sends us automatically. These files provide information on:

  • the browser type and version
  • the operating system used
  • the referrer URL
  • the host name of the accessing computer
  • the time of the server request
  • the IP address

These data will not be merged with data from other sources. These data are recorded on the basis of point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – which is why the server log files have to be kept.

Enquiry by email, telephone or faxIf you contact us by email, telephone or fax, we will store and process your enquiry including all personal data obtained from it (name, enquiry) for the purposes of dealing with the matter. We will not pass these data on without your consent. These data will be processed on the basis of point (b) of Art. 6(1) GDPR if your enquiry is associated with the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases they will be processed on the basis of your consent (point (a) of Art. 6(1) GDPR) and/or on the basis of our legitimate interest (point (f) of Art. 6(1) GDPR, since we have a legitimate interest in responding effectively to enquiries sent to us. We will keep the data you send when contacting us with an enquiry until you request their erasure, you withdraw your consent to their storage or the purpose for storing the data no longer applies (e.g. we have finished dealing with the matter). This does not apply for mandatory statutory provisions, especially statutory retention periods.

5. Analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service, Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.Google Analytics uses what are known as cookies, which are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is generally sent to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its web pages and its advertising

IP anonymisationWe have enabled the IP anonymisation function on this website. This means that your IP address will be shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area (EEA) prior to transmission to the USA. Only in exceptional circumstances is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of our website, to compile reports on the website activities and to provide additional services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser as part of Google Analytics will not be associated with other Google data.

Browser plug-in
You can prevent the storing of cookies on your computer by making the corresponding settings in your browser software. Please note, however, that if you do so you may not be able to make full use of all functions of this website. You can also prevent Google from recording the data relating to your use of the website that are generated by the cookie (including your IP address) and from processing these data by downloading and installing the browser in available on the link https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to the recording of data
You can prevent Google Analytics from recording your data by clicking on the following link. This sets an opt-out cookie that prevents your data from being recorded on future visits to this website: Disable Google Analytics. More information about how user data are handled by Google Analytics can be found in Google’s data privacy statement at: https://support.google.com/analytics/answer/6004245?hl=de .

Commissioned processing
We have concluded a data processing contract with Google and are fully compliant with the strict requirements of the German data protection authorities in our use of Google Analytics.

Storage period
Data stored by Google at user and event level that are linked with cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or erased after 14 months. For further details, refer to https://support.google.com/analytics/answer/7667196?hl=de

Google AdSense (not personalised)
This website uses Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense uses what are known as cookies, which are text files that are stored on your computer and enable use of the website to be analysed. Google AdSense also uses what are known as web beacons (invisible graphics). These Web Beacons enable information such as visitor traffic on these pages to be analysed. The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is sent to a Google server in the USA and stored there. Google may pass this information on to contract partners of Google. However, Google will not associate your IP address with other data stored about you.

AdSense cookies are stored on the basis of point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its web pages and its advertising. You can prevent the installation of cookies on your computer by making the corresponding settings in your browser software. Please note, however, that if you do so you may not be able to make full use of all functions of this website. By using this website, you declare that you are in agreement with the processing of the data gathered about you by Google in the previously described manner and for the stated purpose.

Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in combination with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

This function enables the advertising target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. Personalised, interest-related advertising messages based on your previous usage and surfing behaviour on a terminal device (e.g. mobile phone) can then be displayed on another of your devices (e.g. tablet or PC). Once you have given the relevant consent, Google then links your web and app browser history with your Google account. This allows the same personalised advertising messages to be activated on any device on which you log in with your Google account.

To support this function, Google Analytics records Google-authenticated IDs of the users who are linked temporarily with our Google Analytics data in order to define and create target groups for cross-device advertising. You can permanently object to cross-device remarketing/targeting by disabling personalised advertising in your Google account. To do so, follow the link https://www.google.com/settings/ads/onweb/.

The data are recorded in your Google account solely on the basis of your consent, which you can give to Google or withdraw from Google (Art. 6 (1) (a) GDPR). Where recorded data are not compiled in your Google account (e.g. because you do not have a Google account or have objected to the data being compiled), the data are recorded on the basis of Art. 6 (1) (f) GDPR. The legitimate interest is that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes. For further information and the data privacy provisions, please refer to Google's data privace statement at https://policies.google.com/technologies/ads?hl=de.

Google AdWords und Google conversion tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Within Google AdWords we use what is known as conversion tracking. When you click on an advertisement delivered by Google, a cookie for conversion tracking is set. Cookies are small text files that the web browser places in the user's computer. These cookies cease to be valid after 30 days and are not used to identify users personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was forwarded to this page. Every Google AdWords customer is given a different cookie. The cookies cannot be tracked by the websites of AdWords customers. The information that is obtained by means of the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who have clicked on their advertisement and been forwarded to a page set with a conversion tracking tag. However, they do not receive any information enabling them to identify users personally. If you do not want to take part in tracking, you can object to this use by simply disabling the Google conversion tracking cookie in the user settings of your web browser. You will then not be included in the conversion tracking statistics. The storage of conversion cookies and the use of this tracking tool are based on point (f) of Art. 6(1) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its web pages and its advertising. More information about Google AdWords and Google conversion tracking can be found in Google’s data privacy provisions at https://policies.google.com/privacy?hl=de.

You can change your browser settings so that you are informed when cookies are set and can decide whether to accept them on a case-by-case basis or exclude the acceptance of cookies for particular cases or generally. You can also enable an option to delete the cookies automatically when you close the browser. If cookies are disabled, the functionality of this website may be restricted.

6. Plug-ins and tools

YouTube with extended data privacy
Our websites uses plug-ins of the website YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to the website before they view the video. Extended data privacy mode, however, does not necessarily prevent the transmission of data to YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you view a video. As soon as you launch a YouTube video on our website, a connection to the YouTube servers is established. The YouTube server will be told which of our pages you visited. When you are logged in to your YouTube account, you enable YouTube to assign your search behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. In addition, YouTube can store a variety of cookies on your device after a video has been launched. These cookies enable YouTube to obtain information about visitors to our website. Among other purposes, this information is used to compile video statistics, improve user friendliness and prevent attempts at fraud. The cookies remain on your device until you erase them.

Once a YouTube video has been launched, further data processing operations over which we have no control may be initiated. YouTube is used in order to present our online products in an appealing way. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Further information about data privacy at YouTube can be found in its data privacy statement at https://policies.google.com/privacy?hl=de.

Google web fonts
To ensure consistency in the presentation of fonts, this site uses web fonts provided by Google. When a page is accessed, your browser loads the necessary web fonts in your browser cache so that text and fonts can be displayed correctly. This requires the browser you are using to establish a connection to Google’s servers. Google therefore learns that our website was accessed from your IP address. Google web fonts are used in order to present our online products in a consistent and appealing way. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If your browser does not support web fonts, your computer will use a standard font. Further information about Google web fonts can be found at https://developers.google.com/fonts/faq and in Google's data privacy statement at https://www.google.com/policies/privacy/.

Last revised: 06.03.2019