fbpx

Data Protection

This Privacy Policy explains in detail how we treat your personal information when you use the Valsight websites.

General Privacy Policy

This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within our online offering and the related websites, features and content, as well as external online presence, e.g. our social media profiles. With regards to the terminology used, e.g. “processing” or “responsible”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).Responsible:

Valsight GmbH
Wilhelm-Kabus-Str. 42
10829 Berlin

Managing Director: Khai Tran

You can contact the Data Protection Officer at Valsight GmbH here: privacy@valsight.com.

Used terms

“Personal information” means any information related to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable if it can be identified directly or indirectly, in particular by association with an identifier such as a name, with an identification number, with location data, with an online identifier (e.g. cookie) or with one or more special features, which express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

“Processing” means any process or series of operations associated with personal data carried out with or without the aid of automated procedures. The term “processing” is broad, e.g. it includes the viewing of data, and thus includes virtually every handling of data.

“Responsible person” means the natural or legal person, public authority, establishment or other facility that decides, alone or in concert with others, on the purposes and means of processing personal data.

Relevant legal basis

The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfillment of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit. b GDPR, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as a legal basis.

Safety measures

We ask you to inform yourself regularly about the content of our privacy policy. We will adjust the privacy policy as soon as the changes to the data processing we make require it. We will notify you as soon as the changes require your participation (e.g. consent) or other individual notification.

Collaboration with processors and third parties

If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit data to them or otherwise grant them access to the data, this will only be done based on a legal permission (e.g. if a transmission of the data to third parties, as to payment service providers, is required to fulfill the contract, see Art. 6 (1) lit. b GDPR), if you have consented, if a legal obligation stipulates it, or on the basis of our legitimate interests (e.g. the use of agents, web hosts, etc.). If we commission third parties to process data based on a so-called “mandate processing contract”, this is done based on Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre)contractual obligations, based on your consent, based on a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. This means that the processing takes place for example based on specific guarantees, such as the officially recognized level of data protection (e.g. for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Rights of the person concerned

  • You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data, as well as for further information and a copy of the data in accordance with Art. 15 GDPR.
  • According to Art. 16 GDPR you have the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you.
  • In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be deleted immediately or, alternatively, to require a restriction of the processing of data in accordance with Art. 18 GDPR.
  • You have the right to demand that the data relating to you, which you have provided to us, be obtained in accordance with Art. 20 GDPR and request their transmission to other responsible persons.
  • You have according to Art. 77 GDPR the right to file a complaint with the competent supervisory authority.

Right of revocation

You have the right to revoke issued consent in accordance with. Art. 7 (3) GDPR, with effect for the future.

Right of objection

You can at any time object to the future processing of your data in accordance with Art. 21 GDPR. The objection may be especially against data processing for direct marketing purposes.

Data erasure and storage duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is not applicable. In addition, such storage may take place if stipulated by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place when the storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion of a contract or the fulfillment of a contract.

1. Collection and processing of your data

1.1 In general, you can visit our website without giving any personal information.

1.2 Cookies. Our website uses cookies. These are small text files that make it possible to store specific user-related information on the user’s device while using the website. Cookies make it particularly possible to determine the frequency of use and the number of users of the web pages, to analyze the behavior of the page usage, but also to make our offer more customer-friendly. Cookies are stored at the end of a browser session and can be recalled when the page is visited again. If you do not want this, you should set your Internet browser to refuse to accept cookies.

1.3 Google Analytics. Due to our legitimate interests, this website uses for the optimization and analysis of our online offer within the meaning of Art. 6 (1) lit. f. GDPR, the “Google Analytics” service offered by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses “cookies” as described in 1.2. The information collected by the cookies is usually sent to a Google server in the US and stored there. Google complies with the privacy policy of the Privacy Shield Agreement and is registered with the Department of Commerce’s Privacy Shield Program and uses the information we collect to evaluate the use of our websites, to report on them, and to provide to us other related services. Learn more here. The IP-anonymization has access to this website. The IP address of the users is shortened within the member states of the EU and the EEA and in the other contracting states of the agreement. Only in individual cases, the IP address is initially transferred unabridged to the US to a Google server and shortened there. This reduction eliminates the personal reference of your IP address. The user’s IP address provided by the browser will not be combined with other data stored by Google. Under the terms of the Order Data Agreement, which we, as a website operator, have created with Google Inc., this last one compiles an evaluation of website usage and website activity using the collected information, and provides services related to internet usage. The data collected by Google on our behalf will be used to evaluate the use of our online offering by individual users, for example to generate website activity reports in order to improve our online offering. You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without restriction if your browser does not allow cookies. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under this link.

Here is more information on data usage by Google Inc.:

1.4 HubSpot. In addition, products and services of HubSpot, Inc. (“HubSpot”) are used for marketing and optimization purposes on this website. In doing so, cookies are stored on your computer that allow to analyze your use of the website. The information generated by cookies about your use of this website may also be transmitted to a server of HubSpot outside the EU and stored there. Personal data will only be collected if you complete forms on this website. In this case, in addition to the data entered by yourself, your IP address will also be saved. When contacting us (for example by contact form, e-mail, telephone or via social media) the information of the user will be handled in order to process the contact request and its execution in accordance with. Art. 6 (1) lit. b) GDPR. User information can be stored in a Customer Relationship Management System (“CRM System”) or in a comparable requesting organization.

1.5 Mouseflow. This website uses Mouseflow, a web analytics tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to collect randomly selected individual visits (using an anonymous IP address only). The result is a log of mouse movements, mouse clicks and keyboard interaction, with the intention of reproducing individual visits to this site at random so-called session replays and evaluating in the form of so-called heat maps, and hence deriving potential improvements for this site. The data collected by Mouseflow are not personal and will not be disclosed to third parties. The storage and processing of the collected data takes place within the EU.

If you do not want to be detected by Mouseflow, you can object to this on all websites that use Mouseflow at this link.

1.6 Vimeo. This site incorporates videos from the Vimeo platform of Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Vimeo can use Google Analytics. Vimeo’s privacy policy can be found at: https://vimeo.com/privacy. In the style of point 1.3, the reference to the Google Privacy Policy is found here, as well as opt-out options for Google Analytics or Google’s data usage settings for marketing purposes.

1.7 LinkedIn/LinkedIn Insights. Within our online offering, features and content of the LinkedIn service offered by the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, may be incorporated. Here are included content such as images, videos, or text, as well as buttons, that users use to announce their favor of the content, subscribe to content creators, or subscribe to our posts. If the website users are members of the platform LinkedIn, LinkedIn can assign the aforementioned contents and functions to the profiles of the users there. LinkedIn’s privacy policy can be found at the following link: https://www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the Privacy Shield Agreement, and provides hereby a guarantee to comply with European privacy legislation. Data privacy statement. Opt-Out.

In addition, this website uses the LinkedIn Insight Tag. LinkedIn Insight Tag creates a LinkedIn browser cookie that collects the following information: IP address, timestamp, page activity, LinkedIn demographics, if the user is an active LinkedIn member. The collected data is encrypted. For more information here.

1.8 Google Maps. We integrate maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data may include especially the users’ IP addresses and location data, but these are not collected without their consent (usually as part of the settings of their mobile devices). The data can be processed in the US. Data privacy statement. Opt-Out.

1.9 MailChimp. The newsletters will be sent by MailChimp, a Newsletter dispatch platform of Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. The privacy policy of the dispatch service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC is certified under the Privacy Shield Agreement and provides hereby a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the foundation of our legitimate interests according to Art. 6 (1) lit. f GDPR and an order processing agreement according to Art. 28 (3) sentence 1 GDPR. The dispatch service provider can use the data of the recipients in pseudonymous form, that is to say without attribution to a user, to optimize or improve their own services, for example for the technical optimization of dispatch and the presentation of the newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to address them or to pass the data on to third parties.

1.10 Newsletter2Go. In order to ensure the best handling of personal data, Valsight GmbH is currently in a test phase with the provider Newsletter2Go for sending newsletters. Newsletter2Go has received the certification of TÜV Rheinland: service provider with certified data protection management. All data is stored and processed on a German server, data transfer abroad does not take place. Further information can be found here.

Specific recipient groups certification by TÜV Rheinland: Service provider with certified data protection management. All data is stored and processed on a German server, data transfer abroad does not take place. Further information can be found here.

1.11 Newsletter. If you subscribe to our newsletter, with your express consent we will use the information provided by you to send you our newsletter. To send the newsletter, we use your e-mail address. The newsletter contains current articles as well as offers from Valsight GmbH. Shipping takes place regularly, but not more often than every 14 days. The deregistration is possible at any time. The logging of the registration process is based on our legitimate interests in accordance with. Art. 6 (1) lit. f GDPR. Our interest lies in the use of a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the users and also allows us to prove consent. Termination/Revocation – You may terminate the receipt of our newsletter at any time, i.e. revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may save the submitted e-mail addresses for up to three years based on our legitimate interests before we delete them, in order to prove prior consent. The processing of this data is limited for the purpose of a possible defense against claims. An individual request for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed. The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the server when opening the newsletter from our server, or from the dispatch service provider’s server if we use one. Within this retrieval technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, will be collected.

This information is used to improve the technical performance of services based on their technical information or target audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. Statistical surveys also include determining if the newsletters will be opened, when they will be opened, and which links will be clicked. The evaluations serve to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

1.12 Privacy policy in the application process. We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfill our (pre)contractual obligations in the context of the application process within the meaning of Art. 6 (1) lit. b. GDPR Art. 6 (1) lit. f. GDPR if the data processing is required for us for example in the context of legal proceedings (in Germany, § 26 BDSG applies additionally).

The application process requires applicants to provide us with the applicant data. The necessary applicant data are marked in the online form or result from job descriptions. In principle, this includes the personal details, postal and contact addresses and the application documents, such as cover letter, CV and certificates. In addition, applicants can voluntarily provide us with additional information. By submitting the application to us, the applicants agree to the processing of their data for the purposes of the application process in accordance with the nature and scope set forth in this Privacy Policy.

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily communicated within the framework of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b GDPR (e.g. health information, such as disability, or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants in the context of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. a GDPR (for example health data, if necessary for the profession). If provided, applicants can submit their applications to us via an online form on our website. The data will be encrypted according to the state-of-the art and transmitted to us.

The data provided by the applicants may be further processed by us in the event of a successful application for employment purposes. Applicants’ data will be deleted when the application is withdrawn, to which the applicants are entitled at any time.

The cancellation occurs after the expiration period of six months, subject to a legitimate withdrawal of the candidate, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with the tax regulations.

1.13 Recruiterbox. Recruiterbox is an offer from Applied Training Systems, Inc. (ATSI), Delaware, USA. ATSI uses third-party data storage providers. ATSI transmits personal information to service providers in the US and other third countries. ATSI is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law. Learn more about the Privacy Shield Agreement here: https://www.privacyshield.gov/. European citizens can send their queries to support@recruiterbox.com. Recruiterbox’s full privacy policy can be found here.

2. Use and disclosure of your data

We use the data provided by you to answer your inquiries, for the execution of the contract and for the technical administration of our offer. To this end, as far as necessary, a transfer of your data to other companies takes place, e.g. to payment service providers whose use you have previously consented to. These companies may use your data only for order processing, and not for other purposes.

3. Right of objection

Naturally you can object to the use of your data for marketing purposes at any time or revoke your consent. However, this does not apply to the data required to process the contractual relationship. For this purpose, please contact: privacy@valsight.com.

4. Information, rectification, blocking, deletion

According to the Federal Data Protection Act you have a right to free information about your stored data as well as a right to rectification, blocking or deletion of this data. For this purpose, please contact privacy@valsight.com. The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the data stored by us are deleted as soon as they are no longer required for their purpose and the deletion does not conflict with any statutory storage requirements. In case the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax reasons. According to legal requirements in Germany, the storage takes place particularly for 6 years in accordance with § 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting records, etc.) and for 10 years in accordance with § 147 paragraph 1 AO (books, records, status reports, accounting records, trade and business letters, documents relevant to taxation, etc.).

5. Contact for data protection

If you have any questions about the collection, processing or use of your personal data, information, rectification, blocking or deletion of data, and revocation of your consent, please contact: privacy@valsight.com.

Attachment: Declarations of consent

If applicable, you have expressly granted us the following consents. We have logged this consent. We are obliged to keep the contents of the consent ready for retrieval at any time. You can revoke your consent at any time with effect for the future.

  • Registration for information materials/contact:
    I have read [the terms and conditions as well as] the privacy policy (privacy policy) and agree to their validity.
  • Registration for the newsletter:
    Valsight GmbH will use the information you provide in this form to keep in touch with you and to provide you with updates and marketing information. Please let us know which way you would like to hear from us (e-mail, mail, customized online advertising, multiple choice possible).

Version: 23rd May 2018

If you have any questions regarding this contract or would like further information, please contact us at privacy@valsight.com.