Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Controller” in this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us, for example, through a contact form. Other data is collected automatically or with your consent when you visit the website through our IT systems (e.g., browser type, operating system, time of access). This data collection occurs automatically as soon as you enter this website.

Why do we use your data?

Some data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other inquiries.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke it at any time. You also have the right to request restriction of processing under certain circumstances and to lodge a complaint with the competent supervisory authority.

For this and further questions on data protection, you can contact us at any time.

2. Hosting

We host the content of our website with the following provider:

Aut O’Mattic

The provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter Aut O’Mattic), whose parent company is based in the USA.

The hosting includes functions for analyzing visitor behavior using Jetpack (formerly WordPress Stats). Technologies such as cookies or device fingerprinting are used for recognition. Log files (referrer, IP address, browser, etc.), visitor origin (country, city), and actions performed (e.g., clicks, views, downloads) are also recorded for analysis. The collected information about the use of this website is stored on the hoster’s servers in the USA. Your IP address is anonymized after processing and before storage.

The use of Aut O’Mattic is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses. Details: https://automattic.com/privacy/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). Further information: https://www.dataprivacyframework.gov/participant/4709.

Order Processing

We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required by data protection law, ensuring that personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., email communication) can have security gaps. Complete protection against third-party access is not possible.

Controller

The controller responsible for data processing on this website is:

Vistiqa UG (haftungsbeschränkt)
Roonstrasse 23a
76137 Karlsruhe
Germany

Phone: +49 (0)170 735 69 65
E-Mail: info@vistiqa.com

Storage Duration

Unless a specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for processing ceases. If you assert a legitimate deletion request or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., tax or commercial retention periods); in the latter case, deletion occurs after these reasons cease.

General Information on Legal Bases for Data Processing on this Website

If you have consented to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR if special categories of data are processed. In case of explicit consent to transfer personal data to third countries, processing is also based on Art. 49 para. 1 lit. a GDPR. If you have consented to cookie storage or access to information on your device (e.g., device fingerprinting), processing is additionally based on § 25 para. 1 TDDDG. Consent can be revoked at any time. If your data is required for contract performance or pre-contractual measures, we process it based on Art. 6 para. 1 lit. b GDPR. We also process data if required to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR. Processing may also be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Information on relevant legal bases in each case is provided in the following paragraphs of this privacy policy.

Recipients of Personal Data

In the course of our business activities, we cooperate with various external parties. This sometimes requires transferring personal data to these parties. We only transfer personal data if necessary for contract performance, if legally obligated (e.g., to tax authorities), if we have a legitimate interest under Art. 6 para. 1 lit. f GDPR, or if another legal basis permits it. When using processors, we transfer personal data only based on a valid data processing agreement. In joint processing, a joint processing agreement is concluded.

Revocation of Consent to Data Processing

Many data processing operations require your explicit consent, which you can revoke at any time. The legality of processing up to revocation remains unaffected.

Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object to processing of your personal data for reasons arising from your particular situation, including profiling. The respective legal basis is stated in this privacy policy. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms, or processing serves legal claims (objection under Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing, you have the right to object at any time, including profiling related to such marketing. If you object, your data will no longer be used for direct marketing (objection under Art. 21 para. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In case of GDPR violations, you have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or the place of alleged violation. This right exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data processed based on consent or contract in a common, machine-readable format. Direct transfer to another controller occurs only if technically feasible.

Information, Correction, and Deletion

You have the right to free information about your stored personal data, its origin, recipients, and purpose, as well as correction or deletion under applicable laws. Contact us for this or further questions on personal data.

Right to Restriction of Processing

You have the right to request restriction of processing. Contact us for this. The right exists in these cases:

If you contest accuracy, we need time to verify – you can request restriction during verification.
If processing is unlawful, you can request restriction instead of deletion.
If we no longer need the data but you need it for legal claims, you can request restriction instead of deletion.
If you object under Art. 21 para. 1 GDPR, restriction applies until interests are balanced.

If restricted, data may only be processed (besides storage) with your consent, for legal claims, protection of others’ rights, or important public interest.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security and protection of confidential content (e.g., orders, inquiries). An encrypted connection is indicated by https:// and the lock icon in your browser.

Objection to Advertising Emails

We object to the use of published contact data for unsolicited advertising. We reserve legal action against unsolicited advertising, e.g., spam emails.

4. Data Collection on this Website

Cookies

Our website uses cookies. Cookies do not harm your device and are either temporary (session cookies) or permanent. Session cookies are deleted after your visit. Permanent cookies remain until you delete them or your browser does.

Cookies can be first-party or third-party. Third-party cookies enable integration of third-party services (e.g., payment processing).

Cookies have various functions. Necessary cookies are technically required for website functions (e.g., shopping cart, video display). Others analyze behavior or serve advertising.

Necessary cookies are stored based on Art. 6 para. 1 lit. f GDPR for error-free and optimized service. If consent is requested for cookies or device access, processing is based on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG; consent can be revoked.

You can configure your browser to manage cookies. Disabling cookies may limit website functionality.

Server Log Files

The provider automatically collects server log files (browser type/version, OS, referrer URL, hostname, time, IP address). No merging with other data sources.

Collection based on Art. 6 para. 1 lit. f GDPR for technical presentation and optimization.

Contact Form

Data entered in the contact form (including contacts) is stored for processing and follow-up questions. No sharing without consent.

Processing based on Art. 6 para. 1 lit. b GDPR (contract/pre-contractual) or lit. f GDPR (legitimate interest) or lit. a GDPR (consent); revocable.

Data retained until deletion request, consent revocation, or purpose ends (subject to retention periods).

Inquiries by Email, Phone, or Fax

Inquiries including personal data are stored for processing. No sharing without consent. Same legal bases as contact form. Data retained until deletion request, consent revocation, or purpose ends (subject to retention periods).

5. Analysis Tools

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). Google Analytics uses cookies to analyze website usage. The generated information is usually transferred to a Google server in the USA and stored there.

We use Google Analytics with the “anonymizeIP” extension, so IP addresses are processed only in shortened form. Google uses this information to generate reports on website activity.

The legal basis is Art. 6 para. 1 lit. a GDPR (consent via cookie banner). Data transfer to the USA is based on Standard Contractual Clauses (SCC). Further information: https://policies.google.com/privacy/.

6. Video Conferences

Google Meet

We use Google Meet (Google Ireland Limited) for video conferences with customers or partners. Various data is processed (e.g., name, email address, IP address, meeting metadata, possibly audio/video).

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication) or lit. b GDPR (contract performance). Data may be transferred to the USA based on Standard Contractual Clauses (SCC). More information: https://policies.google.com/privacy/.

7. Plugins and Tools

Google Maps

This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use Google Maps functions, your IP address must be stored and transferred to Google servers in the USA. We have no influence on this transfer. When Google Maps is activated, Google may use Google Fonts for uniform font display.

The use of Google Maps is in the interest of an appealing presentation and easy location finding. This constitutes a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG; consent can be revoked.

Data transfer to the USA is based on Standard Contractual Clauses.

More information: https://policies.google.com/privacy/