Privacy policy

If you have any questions about the collection and processing of your personal data or a request for information, our external data protection officer would be pleased to assist you. The data protection officer can be contacted via datenschutz@viehoff-consult.de.

3.1 Personal data

According to Art. 4 (1) of the EU GDPR, personal data describes all information relating either directly or indirectly to an identified or identifiable natural person. This includes, for example, your name, your contact details and data which you provide when registering for a customer account, for processing your orders or as part of an application.

3.2 Server statistics

Every time our website is accessed, data is automatically transferred to the web server by the respective Internet browser and stored in log files. The following data is stored till its deletion:

• IP address at the time the respective page is accessed (anonymized form – last octet is replaced with a *)
• date, time and success of the access to the web page
• website from which the user accessed our web page (so-called referrer URL)
• type and version of the browser
• operating system of the end device used to access the web page

The data is processed for the following purposes:

• to enable the connection to the website,
• to enable the optimised presentation of the website,
• to check and guarantee the security and stability of the systems and
• to enable and improve the administration of the website

The stored data is not combined with other sources of data. It is generally not possible for us to assign the data to any specific person. The data is not processed for the purpose of gaining further information about the respective visitor to the website.
We reserve the right to store the IP addresses of visitors to our websites for a maximum time period of sixty days. The logging of this data serves to recognise advanced persistent threats and limit and resolve faults, as well as for ensuring system and data security.
We have a legitimate interest in the sense of Art. 6 Sentence 1 f) of the EU GDPR for processing the data for the purposes described above.

3.3 Contact

Visitors can request information or ask for further details using the email-addresses of our released contact persons. All information is transferred to us voluntarily by the person making the enquiry and in order for us to answer the enquiry by email, it is necessary for the person to provide us with a valid email address. The data is exclusively processed for the purposes of providing advice or for handling and answering enquiries submitted.
The processing of this data is carried out pursuant to Art. 6 (1) Sentence 1 f) of the EU GDPR for the purpose of consultation and answering of enquiries. If the aim of the contact is the conclusion of contract the processing of data is carried out pursuant to Art. 6 (1) Sentence 1 b) of the EU GDPR. The personal data collected due to the request is automatically deleted as soon as the enquiry has been dealt with and there is no reason for it to be stored for a longer period of time.

3.4 Cookies

Our website uses cookies. Cookies are small text files that are stored on the customer’s digital end device or data medium so that they can ensure an optimum use of all the functions of our website. Most of the cookies we use are deleted from the digital end device or data medium after the end of the current browser session and are thus described as session cookies. Cookies that enable us to check the main functions involved in the operation of our website are left on the digital end device or data medium. For security reasons, we use cookies on various pages of our website that are required for the use of certain functions.
It is possible to deactivate the saving of cookies at any time. The help function in the menu for most browsers (e.g. Internet Explorer or Firefox) will describe how users and visitors to our application portal can prevent the browser accepting cookies, how the user and visitor to our website can be informed by the browser when they receive a new cookie or also how he or she can delete all of the cookies already received and block the saving of any cookies in the future. In the latter case, the previously described functions (login and administration options) will no longer be available. It is necessary to remove the block on cookies in order to use these functions.
The following cookies are used on this website:

• Matomo, anonymized usage statistics
  • _pk_id.x.xxxx (Valide for13 month)
  • _pk_ses.x.xxxx (Valide for 2h)
  • _pk_testcookie.x.xxxx (Valide till end of session)
• System Session Cookie
  • fe_typo_user (Valide for till end of session)

3.5 Usage of Matomo Web Analytics

This website uses the web analytic services of Matomo. Matomo is an open-source-software used for the statistical evaluation of visitors accessing the website and page views. Matomo analyses your usage behaviour anonymously so that a conclusion to certain individuals is not possible.

Additional information on the usage of cookies can be taken from section 3.4 Cookies.
The usage of Matomo serves the purpose of gaining knowledge regarding the common usage of the website to enable improving and optimizing its contents and functions. The processing of data is carried out pursuant to Art. 6 (1) Sentence 1 f) of the EU GDPR.

3.6 E-mail and security

Please bear in mind that emails are not protected against unauthorised access, falsification, etc. Therefore, please do not send any confidential information (e.g. account number, passwords, etc.) to us by email.

Personenbezogene Daten werden grundsätzlich nur an Dritte übermittelt, wenn

• the data subject has expressly given their consent for the data to be used for this purpose in accordance with Art. 6 (1) Sentence 1 a) of the EU GDPR,
• in the event of the transfer of data in accordance with Art. 6 (1) Sentence 1 f) of the EU GDPR, this is required for the establishment, exercise or defence of legal claims and there is no reason to believe that the data subject has an overriding legitimate interest for the non-transfer of their data,
• in the event of the transfer of data in accordance with Art. 6 (1) Sentence 1 c) of the EU GDPR, a legal obligation to this end exists,
• it is necessary in accordance with Art. 6 (1) Sentence 1 b) of the EU GDPR for the performance of a contract to which the data subject is party and/or
• third parties’ services are used which are part of an order data processing agreement pursuant to Art. 28 of the EU GDPR.

If your personal data has been processed due to your visit to our website, you have the following rights as the “data subject” in the sense of the EU GDPR:

5.1 Right to obtain information

You can request information from us about whether we are processing personal data about you. No right to obtain information exists if the data cannot be deleted due to legal or contractual retention periods or has been processed exclusively for data backup or data security purposes and the provision of this information would require a disproportionate amount of cost and effort and any processing of the data for other purposes is excluded using suitable technical and organisational measures. Where applicable, you can request information about:

• the purposes of the processing
• the categories of your personal data that were processed
• the recipients or categories of recipients to whom your personal data is made public, especially recipients in third countries
• if possible, the period for which your personal data will be stored, or if that is not possible, the criteria used to determine that storage period
• the existence of a right to rectification or erasure or restriction of processing of the data about you as the data subject or a right to object to this processing
• the right to lodge a complaint with a data protection supervisory authority
• if the personal data was not obtained from you as the data subject, any available information on the source of the data
• if relevant, the existence of automated decision-making including profiling and meaningful information on the logic involved, as well as the scope and envisaged consequences of such automated decision-making
• if the personal data is transferred to a recipient in a third country, insofar as the EU Commission has not issued a resolution on the adequacy of the level of protection in accordance with Art. 45 (3) of the EU GDPR, information on what appropriate safeguards in accordance with Art. 46 (2) of the EU GDPR have been provided to protect the personal data

5.2 Right to rectification and completion

If you establish that the personal data, we hold about you is incorrect, you can request that we rectify the incorrect data. You also have a right to request that incomplete data is completed.

5.3 Right to erasure

You have a right to erasure (“right to be forgotten”) if one of the following grounds applies:

• the personal data is no longer required for the purposes for which they were processed
• you have withdrawn you consent for the processing of the data
• you have objected to the processing of your personal data that we have made public
• you have objected to the processing of personal data that we have not made public and there are no overriding legitimate grounds for the processing of the data
• your personal data has been unlawfully processed
• the erasure of your personal data is required to comply with a legal obligation to which we are subject

The right to erasure does not exist if, in the event of legal non-automated data processing, the erasure of the data would only be possible at a disproportionate amount of cost and effort due to the special type of storage and you only have a low level of interest in its erasure. In this case, the processing of this data will be restricted instead of the data being erased.

5.4 Right to restriction of processing

You have the right to request a restriction of processing if one of the following grounds applies:

• you contest the accuracy of the personal data. In this case, a restriction can be requested for the period required to verify the accuracy of the data.
• the processing is unlawful and the data subject requests a restriction of the use of their personal data instead of the erasure of the data.
• your personal data is no longer required by us for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims.
• you have raised an objection in accordance with Art. 21 (1) of the EU GDPR. A restriction of processing can be requested pending the verification of whether we have legitimate grounds that override your grounds for a restriction of processing.

A restriction of processing means that the personal data will only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We are obligated to inform you before the restriction of processing is lifted by us.

5.5 Right to data portability

You have a right to data portability if the processing is based on your consent according to Art. 6 (1) Sentence 1 a) or Art. 9 (2) a) of the EU GDPR or a contract to which you are a contractual party and the processing is carried out with the aid of automated means. In this case, the right to data portability includes the following rights insofar as they do not adversely affect the rights and freedoms of others:
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format. You have the right to have this data transferred to another controller without hindrance from us. If technically feasible, you can request that we directly transfer your personal data to another controller.

5.6 Right to object

If you believe that the processing of your personal data is unlawful, you can lodge a complaint with a data protection supervisory authority that is responsible for your place of residence, place of work or the place of the alleged infringement.

5.7 Withdrawal of consent

Your consent for the processing of personal data can be withdrawn at any time with future effect. The withdrawal of consent can also apply to individual sections of the data processing (e.g. unsubscribing from the newsletter).
Please note that even if you withdraw your consent, processing of the data may still be required due to legal regulations.
Please send us the notification about your withdrawal of consent using the contact details stated above in section 1 and please understand that some identification may be required in the event of a withdrawal of consent to prevent any misuse.

This website contains external links linking websites which are not directed and which content is not influenced by us. For this reason, we are unable to assume any liability for their correctness and completeness, as each links own provider is liable for its given content.

We hereby expressly prohibit the use of our contact details – published as part of our duty to publish a legal notice – for the purpose of sending us any advertising or information materials that we have not expressly requested. The operator of these websites expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information such as in the form of spam emails.