Data Privacy Policy

Privacy Policy

Virtual Data Platform GmbH, Anzengruberstraße 19, D - 82194 Gröbenzell

Responsible for data processing:
Virtual Data Platform GmbH
Anzengruberstraße 19
82194 Gröbenzell
Germany

Last Update: 20 November 2024

We are pleased about your interest in our services. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data and data protection under the domain virtualdataplatform.com, as well as for the use of our services and the Software as a Service product "Virtual Data Platform".

1. Collection, Retention, and Use of Your Personal Data

Below, we provide information about the collection of personal data when using our services, which may be used to contact or identify you. Personally identifiable information may include, but is not limited to:

Email address

First and last name

Phone number

Usage data

Usage data is automatically collected when you use our services. This may include information such as the internet protocol address of your device (e.g., IP address), browser type, browser version, the pages of our services you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

If you access our services via a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you are using, the unique ID of your mobile device, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you are using, unique device identifiers, and other diagnostic data.

We may also collect information that your browser sends when you visit our services or when you access the services via a mobile device.

1.1 Purpose of Collection

The company may use personal data for the following purposes:

To provide and maintain our services, including monitoring the usage of our services.

To provide the product "Virtual Data Platform".

To manage your account: To manage your registration as a user of our services. The personal data you provide may give you access to various features of our services available to you as a registered user.

To fulfill contracts: To develop, comply with, and enforce the purchase contract for the products, items, or services you have acquired, or any other contract with us through our services.

To contact you: To contact you via email, phone calls, SMS, or other equivalent forms of electronic communication, such as push notifications from a mobile app regarding updates or informational messages related to the features, products, or contractually agreed services, including security updates, when necessary or appropriate for their implementation.

To send you news, special offers, and general information about other goods, services, and events we offer that are similar to those you have already purchased or inquired about, unless you have opted out of receiving such information.

To manage your inquiries: To process and manage your inquiries to us. This includes, but is not limited to, transaction requests or support inquiries. To facilitate your inquiries, we may share your data with third parties involved in order fulfillment, such as Virtual Data Platform business partners or financial institutions. You may also be offered "live chat" sessions on our websites to assist you in navigating our websites or in our forums and blogs.

For other purposes: We may use your data for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our advertising campaigns, and evaluating and improving our services, products, marketing, and your overall experience.

1.2 Disclosure or Transfer

Your information, including personal data, is processed at the company's operational offices and other locations where the parties involved in the processing are located. This means that such data may be transferred and stored on computers outside your state, province, country, or any other governmental jurisdiction where different data protection laws may apply. Locations controlled by Virtual Data Platform will only have access to personal data if they have a legitimate interest and are required to do so. We also use external service providers to process your data. These providers are carefully selected and contracted by us, bound by our instructions, and regularly monitored.

The company will take all reasonable measures to ensure that your data is handled securely and in accordance with this privacy policy. Your personal data will not be transferred to an organization or country without appropriate controls in place to ensure the security of your data and other personal information.

Under certain circumstances, the company may also be required to disclose your personal data if required by law or in response to valid requests by authorities (e.g., a court or government agency).

The company may disclose your personal data if it reasonably believes that such action is necessary to:

Comply with a legal obligation,

Protect and defend the rights or property of the company, business partners, customers, suppliers, or third parties,

Prevent or investigate potential misconduct related to the service,

Protect the personal safety of users of the service or the public,

Protect itself from legal liability.

1.3 Retention

Your personal data will be stored by Virtual Data Platform for as long as necessary to fulfill the purposes for which it was processed or for other legitimate reasons (e.g., to comply with our legal obligations, resolve disputes, or enforce our contractual agreements).

We will retain your registration data for as long as your account is active or as needed to provide services to you. If you no longer wish for us to use your registration data to provide services, please contact us at contact@virtualdataplatform.com.

Since circumstances may vary depending on the context and the service, a specific notice may contain more detailed information about the applicable retention periods.

1.4 Security and und Quality

We are committed to protecting your personal data and ensuring its accuracy. Accordingly, we have implemented appropriate physical, administrative, and technical security measures to protect your personal data from unauthorized access, use, and disclosure. For example, certain highly sensitive personal data (such as credit card information) is encrypted during transmission over the internet. We also require our suppliers and partners to protect this data from unauthorized access, use, and disclosure.

Certain online transactions may involve contacting you by phone or vice versa. This may also include online chats. Please note that Virtual Data Platform generally monitors these interactions for employee training or quality assurance purposes, and in some cases, may record or retain evidence of a specific transaction or interaction.

2. Access Data and Hosting

You can visit our sites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is used exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves to protect our legitimate interests in the correct presentation of our services, in accordance with Art. 6 (1) sentence 1 lit. f GDPR. All access data will be processed as long as it is necessary for the purposes outlined above.

2.1 Hosting.

The services for hosting and displaying our websites are partly provided by our service providers as part of data processing on our behalf. Unless otherwise explained in this privacy policy, all access data and any data collected in designated forms on these websites are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact information described in this privacy policy. Our service providers use servers in Germany, the Netherlands, Ireland, and Israel. For these countries, the European Commission has issued a decision confirming an adequate level of data protection. Additionally, our service providers use servers in the USA, South Korea, Taiwan, and other countries outside the EU and EEA, for which no adequacy decision by the European Commission exists. Our cooperation with you is based on the European Commission's Standard Contractual Clauses.

3. Data Processing for Contact and Customer Communication

3.1 Contact

We collect personal data when you voluntarily provide it to us during a contact initiation (e.g., via a contact form, free trial registration form, or email). Mandatory fields are marked as such because we require this data to process your inquiry, and you cannot send the inquiry without providing this information. The specific data collected is visible in the respective input forms. We use the data you provide to process your inquiries in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR.

After your customer inquiry has been fully processed, your data will be restricted for further processing and deleted after the statutory retention periods for tax and commercial law have expired, in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR, unless you have explicitly consented to further use of your data in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, or we reserve the right to use your data in ways that are legally permissible and of which we inform you in this declaration.

3.2 Email Newsletter with Registration

When you subscribe to our newsletter, we use the data you provide to send you regular email newsletters based on your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time. You can do so either by sending a message to the contact option below or by using the unsubscribe link in the newsletter. After unsubscribing, we will delete your email address from our recipient list, unless you have explicitly consented to further use of your data under Art. 6 Para. 1 Sentence 1 lit. a GDPR. We may also reserve the right to further use your data if legally allowed, and we will inform you about this in this statement.

The newsletter may also be sent by our service providers as part of a processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

4. Cookies and other Technologies

4.1 General Information

To make your visit to our websites more attractive and to enable the use of certain features, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).

The following cookies are used on our public website:

Cookie name: XSRF-TOKEN

Purpose: Used for security reasons

Validity: Browser session

Cookie type: Essential

Cookie name: hs

Purpose: Used for security reasons

Validity: Browser session

Cookie type: Essential

Cookie name: svSession

Purpose: Used in connection with user login

Validity: 12 months

Cookie type: Essential

Cookie name: SSR-caching

Purpose: Used to indicate the system from which the website was rendered

Validity: 1 minute

Cookie type: Essential

Cookie name: bSession

Purpose: Used to measure efficiency

Validity: 30 minutes

Cookie type: Essential

Cookie name: fedops.logger.X

Purpose: Used to measure stability/efficiency

Validity: 12 months

Cookie type: Essential

Furthermore, when using the product “Virtual Data Platform” and during the order process for the corresponding licenses, the following cookies are set:

Cookie name: .AspNetCore.Cookies

Purpose: Used in connection with user login

Validity: Browser session

Cookie type: Essential

Cookie name: vdp-antiforgery

Purpose: Used for security reasons

Validity: Browser session

Cookie type: Essential

Cookie name: vdp-tenant-id

Purpose: Used for access to the service as well as for security reasons

Validity: 12 months

Cookie type: Essential

Cookie name: ARRAffinitySameSite

Purpose: Used to forward requests to the correct instance

Validity: Browser session

Cookie type: Essential

Cookie name: ARRAffinity

Purpose: Used to forward requests to the correct instance

Validity: Browser session

Cookie type: Essential

We also use technologies that are strictly necessary for the use of certain features of our services (e.g., website preference settings). These technologies collect and process your IP address, the time of visit, device and browser information, as well as information about your use of our services (e.g., information about your preferences). This is done in the context of a legitimate interest balancing, with the overriding legitimate interest being an optimized presentation of our offer in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy. You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™. As far as you have consented to the use of technologies in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact option described in the privacy policy. If you do not accept cookies, the functionality of our websites may be limited.

4.2 Use of the WIX Consent Manager Tool to Manage Consents

On our public website, we use the Wix Consent Manager tool to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document any necessary consent for the processing of your personal data through these technologies. This is required in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR to fulfill our legal obligation under Art. 7 Para. 1 GDPR, which requires us to be able to prove your consent to the processing of your personal data. The Wix Consent Manager tool is provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“Wix”). After you submit your cookie declaration on our website, Wix’s web server stores your IP address, the date and time of your declaration, browser information, as well as information about your consent behavior and its traceability (user ID). Additionally, a cookie is set that contains information about your consent behavior. Your data will be deleted once the above-mentioned purpose has been fulfilled, unless you have explicitly consented to further use of your data under Art. 6 Para. 1 Sentence 1 lit. a GDPR, or we reserve the right to use your data in ways that are legally permitted and of which we inform you in this declaration.

4.3 Use of Google Analytics

On our public website, we use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies that allow for the analysis of your usage of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. In the case of IP anonymization being activated on this website, however, your IP address will be shortened by Google within the member states of the European Union or in other countries that are parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and there it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services related to website usage and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

You can prevent the storage of cookies by adjusting the settings in your browser software; however, we would like to point out that in this case you may not be able to fully use all features of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website also uses Google Analytics with the "_anonymizeIp()" extension. This ensures that IP addresses are processed in a shortened form, making it impossible to trace them to a specific individual. If any data collected about you is personally identifiable, this will be immediately anonymized, and the personal data will be deleted right away.

We use Google Analytics to analyze and regularly improve the use of our public website. The statistics obtained help us improve our offerings and make them more interesting for you as a user. In exceptional cases where personal data is transferred to the USA, Google has submitted to the EU-U.S. Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Article 6(1) sentence 1 letter f of the General Data Protection Regulation (GDPR).

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/en.html, Privacy Overview: http://www.google.com/intl/en/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.com/intl/en/policies/privacy.

This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out using a user ID.

5. Social Media

5.1 Our Online Presence on Facebook (by Meta), X, Instagram (by Meta), YouTube, LinkedIn, Xing

To the extent that you have given your consent in accordance with Art. 6 para. 1 sentence 1 letter a GDPR to the respective social media operator, your data will be automatically collected and stored when you visit our online presence on the social media platforms mentioned above for market research and advertising purposes. Pseudonymous usage profiles will be created from this data. These can be used, for example, to display advertisements both within and outside the platforms that are likely to align with your interests. Cookies are typically used for this purpose. For detailed information on how the respective social media operator processes and uses your data, as well as contact options, your rights in this regard, and privacy settings to protect your personal information, please refer to the privacy notices of the providers linked below. If you still need assistance with this, please feel free to contact us.

Facebook (by Meta) is an offering of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the Standard Contractual Clauses of the European Commission. Data processing in connection with visiting a Facebook (by Meta) fan page is carried out based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

X is an offer from Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. The information automatically collected by X about your use of our online presence on X is generally transmitted to a server of X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the standard contractual clauses of the European Commission.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the Standard Contractual Clauses of the European Commission. Data processing in connection with visiting an Instagram (by Meta) fan page is carried out based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

YouTube is an offering of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the Standard Contractual Clauses of the European Commission.

LinkedIn s an offering of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the Standard Contractual Clauses of the European Commission. ist ein Angebot der LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland ("LinkedIn").

Xing is an offering of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

5.2 Embedding of YouTube Videos

We have embedded YouTube videos on our Website, which are hosted at http://www.YouTube.com and can be played directly from our website. These are all embedded in 'extended privacy mode,' meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transfer. When you visit the website, YouTube receives the information that you have accessed the relevant subpage of our website. Additionally, the data mentioned in section 1 of this statement is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or if no user account exists. If you are logged into Google, your data will be directly linked to your account. If you do not wish the data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or tailoring its website. Such evaluations are carried out especially (even for users who are not logged in) for targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. For more information about the purpose and scope of data collection and processing by YouTube, please refer to their privacy policy. There you will also find more information about your rights and privacy settings: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

6. Contact Options and Your Rights

6.1 Your Rights

As a data subject, you have the following rights:

Pursuant to Art. 15 GDPR, the right to request information about the personal data we process about you, to the extent specified therein;

Pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or the completion of your personal data stored by us;

Pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless the further processing is necessary:
- for the exercise of the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise, or defense of legal claims;
Pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data if:
- the accuracy of the data is contested by you;
- we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
- you have objected to the processing under Art. 21 GDPR;
Pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transfer to another controller;

Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your usual place of residence, workplace, or our company headquarters for this purpose.

6.2 Right to Object

To the extent that we process personal data as described above in order to safeguard our overriding legitimate interests in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are grounds arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

6.3 Protection of Children's Privacy

Our service is not intended for individuals under the age of 13. We do not knowingly collect personal data from individuals under 13 years of age. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we discover that we have collected personal data from individuals under 13 years of age without verifying parental consent, we will take steps to remove this data from our servers.

If we need to rely on consent as the legal basis for processing your data and your country requires parental consent, we may ask for your parent's consent before collecting and using this data.

6.4 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you would like to request information, correction, restriction, or deletion of data, as well as revoke any consents given or object to a specific use of your data, please contact us directly using the contact details provided in our imprint.

7. Links to other Websites

Our services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be redirected to the site of that third party. We strongly recommend that you read the privacy policies of every website you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites or services.

8. Update of this Privacy Policy

We may update our privacy policy from time to time. We will inform you of any changes by posting the new privacy policy on this page. Additionally, we will update the date of the last update at the top of this privacy policy.

We recommend that you review this privacy policy regularly for any changes. Changes to this privacy policy will take effect when they are posted on this page.