Table of contents

A. General information
B. Visiting our website
C. Use of contact details
D. Rights of data subjects
E. Contact

 

A. General information
Protecting your privacy is very important to us. We take safeguarding your personal data and your right to determine how your information is used very seriously. In the following, we explain how your personal data is collected and processed when you use our website and online service offered at www.victorgroup.eu. Personal data in this context means all data that can be used to identify you e.g. name, address, email address, browsing activity.

1. Controller
The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is: VICTOR Güthoff & Partner GmbH, Europaallee 44, 50226 Frechen, victor@victorgroup.eu 

The contact details of our company data protection officer are: datenschutz@victorgroup. eu

Additional information and contact details can be found in our imprint section.

2. Data security
We have implemented a range of technical and organisational measures to protect our website and other systems against the loss, destruction, access, modification or dissemination of your data by unauthorised persons.

When our website is accessed, data is stored temporarily, and as a rule for no longer than 30 days, on our servers for data and system security purposes that could potentially be used to identify you (e.g. IP address). The lawful basis for our processing potentially personal data for the purpose of data and system security is point (f) of Article 6(1) of the GDPR and our legitimate interest in protecting our systems and preventing misuse.

3. Principles for the storage and deletion of personal data
Personal data is only processed for the duration necessary to achieve the respective purpose of storage, or where doing so is required by laws or regulations to which we are subject, e.g. obligations for record keeping under the commercial or tax codes. Should a purpose of storage no longer apply or a statutory retention period expire, the personal data concerned will be routinely deleted in accordance with statutory provisions or its processing restricted, e.g. restricted processing as part of the obligations for record keeping under the commercial or tax codes.

The basis for the processing of personal data due to a legal obligation, specifically, for compliance with legal obligations for record keeping, is set out in point (c) of Article 6(1) of the GDPR. Insofar as personal data is processed pursuant to point (f) of Article 6(1) for the purposes of preserving evidence, these processing purposes shall lapse on expiration of the statutory retention periods; the regular statutory limitation period is three years.

B. Visiting our website
When you visit our website solely for the purpose of gathering information, i.e. when you do not transmit any personal information to us, it is still possible that we gather personal data that is transmitted by your browser to our server.

1. Technical provision of the website
When you visit our website, we collect the following data that is technically necessary for us to make our website available and to ensure the stability and security of our Internet presence:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Contents of the request (specific page)
  • Access status/HTTP status code
  • Quantity of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its user interface
  • Language and version of the browser software

The lawful basis for collecting and processing this data is point (f) of Article 6(1) of the GDPR. Our legitimate interest is in offering a functional website and ensuring the security of the systems involved. In addition to this, we use the above-mentioned data in anonymised form for statistical purposes and to improve our online service offering.

We sometimes make use of primarily technical service providers to support us with the operation of the website and associated processes (e.g. web hosting services, IT service providers). To the extent that the aforementioned service providers process personal data, they do so on our behalf and in accordance with our instructions (data processing).

2. Cookies
Our website uses cookies. Cookies are small text files that are stored and stored on a computer system via an Internet browser.

Many websites and servers use cookies. Cookies often contain a so-called cookie ID. Such an ID is a unique identifier of the cookie and consists of a string that allows websites and servers to be associated with a specific Internet browser in which the cookie was stored. Such cookies make it possible to distinguish your individual browser from other internet browsers that contain other cookies. A particular internet browser can therefore be recognized and identified by a unique cookie ID.

By using cookies, we can provide you with more user-friendly services that could not be realized without the cookie setting, or only to a limited extent. Cookies allow us to recognize users of our website. The purpose of this recognition is to make it easier for users of our online service to use it.

The use of cookies is based on Art. 6 para. 1 sentence 1 lit. f DS-GMO. Our legitimate interest in this regard is the provision and optimization of a functional and comfortable online offer.

You can prevent the setting of cookies by setting your Internet browser and thus permanently contradict the setting of cookies. In addition, you can delete already set cookies via an internet browser or other software programs. Please keep in mind, however, that you may not be able to use all the features of our and other online services when you disable cookies in your internet browser.

3. Integration of third-party services and content (YouTube)
We use content on our website supplied by the third-party service provider "YouTube" owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“) in order to embed videos and make them accessible on our website.

In order for third-party service providers such as YouTube to deliver the videos on our website to you, they need to record your IP address, as they send the data in question to the browser using that IP address. We endeavour to only transmit information that is absolutely necessary to deliver the content in question.

The lawful basis for this is point (f) of Article 6(1) of the GDPR. Our legitimate interest in the sense of this clause is the delivery and presentation of the content offered on our website. You can find Google's data privacy statement here:  https://www.google.com/policies/privacy/.

C. Use of contact details
On our website, we offer a variety of ways for you to get in contact with us and send us messages.

Should you contact us using one of these methods, the data you provide (e.g. your email address, name and telephone number, where applicable) will be stored and processed by us in order to deal with your inquiry. The lawful bases in this case are points (b) and (f) of Article 6(1) of the GDPR. Our legitimate interest is the capability to log and process your inquiries in an efficient and structured manner. We delete the gathered data once it is no longer necessary for it to be kept, or restrict processing in the event statutory obligations to keep records apply.

D. Rights of data subjects
We would be happy to explain your rights as a "data subject" under the GDPR. According to this, you have the following rights with respect to your personal data:

  • Right to be informed (Article 15(1,2) GDPR)
  • Right to rectification (Article 16 GDPR) and deletion (Article 17 GDPR)
  • Right to restrict processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object to processing (Article 21 GDPR)
  • Right to object (Article 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)

Below is a summary of the key aspects of the rights of data subjects under the GDPR, whereby the presented information makes no claim to be comprehensive, but merely covers the main features of the data subject's rights under the GDPR:

Right to be informed (including the right to confirmation and rights of access to the data)
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed.

The data subject has the right to obtain information about the personal data concerning him or her and the following information:

  • the purposes of the processing;
  • the categories of personal data being processed;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or deletion of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
  • Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer. 
  • The data subject shall have the right to be provided with a copy of the personal data concerning him or her that is undergoing processing.

Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to restrict processing
The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: 

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the deletion of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
  • the data subject has objected to processing pursuant to Article 21(1) of the GDPR pending verification as to whether the legitimate grounds of the controller override those of the data subject. 

Right to deletion
Except where there is a legal requirement to process the personal data (see Article 17(3) of the GDPR for exceptions), the data subject shall have the right to obtain from the controller the deletion of personal data concerning him or her without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal grounds for the processing;
  • the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); 
  • the personal data have been unlawfully processed;
  • the personal data have to be deleted for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

Right to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or on a contract pursuant to point (b) of Article 6(1) and the processing is carried out by automated means.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Right to Object
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority
Every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

The data protection authority with jurisdiction over us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf.

Notice of right to object pursuant to Article 21(1,2) of the GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. Should you file an objection, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is required for the establishment, exercise or defence of legal claims. 

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
 

E. Contact
Please do not hesitate to contact us should you wish to exercise your rights as a data subject or if you have any general questions concerning privacy or data protection, e.g. by email at datenschutz@victorgroup.eu or using the contact details provided under paragraph A(1).