email public

VEGA Inventory System data privacy statement

Table of contents

  • General information

    In this data privacy statement, we, VEGA Grieshaber KG (hereinafter referred to as “we”), will inform you about the processing of your personal data when you use our software “VEGA Inventory System – Hosting Service” or “VEGA Inventory System – Local Server Version” (hereinafter referred to as “software” or “web application”).

    “Personal data” for the purposes of this statement means any information relating to an identified or identifiable natural person, such as name, address, telephone number or e-mail address.

  • Responsible within the meaning of the EU General Data Protection Regulation (GDPR)

    VEGA Grieshaber KG
    Am Hohenstein 113
    77761 Schiltach
    Germany

    E-mail: info.de@vega.com

  • Contact details of our Data Protection Officer

    Our Data Protection Officer can be reached at datenschutz@vega.com or at the postal address provided above, with the additional note “FAO Data Protection Officer”.

  • Legal basis for the collection and use of data

    1. We will only collect and use your personal data if we are permitted to do so on the basis of a statutory provision or your consent.
    2. The legal basis for the necessary processing of personal data of our contractual partners for the performance of contracts is GDPR Article 6(1)(b). If personal data of third parties (e.g. of contact persons of our contractual partners) is processed, the legal basis for this is GDPR Article 6(1)(f) (safeguarding legitimate interests). If we process personal data on the basis of a statutory obligation, this is permitted according to GDRP Article 6(1)(c). If we process data for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests of the data subject, this is permitted according to GDPR Article 6(1)(f). We will mention the applicable legal basis for each use in the following.
    3. If we process data on the basis of your consent, this consent is the legal basis for the processing according to GDPR Article 6(1)(a); such consent can be revoked at any time and shall be implemented for all future communications.

  • Collection of general data and information

    1. Data concerned

      The following data is collected and processed by the web browser of all system users of the hosting version and administrators of the local server software who sign up to our hosting service:

      •  Login data (username and password)
      • IP address
      • Date and time of enquiry
      • Time zone difference from Greenwich Mean Time (GMT)
      • Content of request (specific page)
      • Access status/HTTP status code
      • Data quantity transmitted
      • Website, from which the request comes
      • Browser software/version and language
      • Operating system and version
    2. The following categories of personal data are stored and processed on our hosting service: IP address, email address, title, full name, country and language. The fields for telephone and mobile numbers are optional and will not be processed if they are not completed.
    3. The data is processed on the basis of our legitimate interest pursuant to GDPR Article 6(1)(f) to set up the customer account, to allow access to the software, to allow the set-up of user accounts, to authenticate users, to send notifications and to provide our services and support.

  • Use of cookies

    1. When you use the software, cookies will be saved to your computer. Cookies are small text files saved to your hard drive which are associated with the browser you use and through which we receive certain information.
    2. Cookies cannot execute any programs or transfer viruses to your computer. They serve to make our Internet presence more user-friendly and more effective.
    3. You can configure your browser settings as you wish, for instance, to refuse specific or all cookies. This may, however, mean that you cannot use all the functions of the software.

    4. First-party cookies are used by us and are essential for the proper functioning of the web application.
      The cookies currently used, together with a more detailed description of their function and duration, are listed in the table.

    5. Third-party cookies enable the integration of certain third-party services into the web application (e.g. map functions). These cookies are used to improve the performance and functionality of our web application.

      Google Maps

      This web application uses the Google Maps API service.

      Provider: 

      • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
      • Google Ireland Limited for users of Google services based in the European Economic Area or Switzerland, based at Gordon House, Barrow Street, Dublin 4, Ireland.

      The purpose of this service is to display the location and status of our devices in the map functions of the software. The devices include sensors and wireless emitting units.

      When using the Google Maps API service, the following location information is collected and used by your device: IP address and GPS (latitude and longitude).

      Further information on the collection, use and management of your data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en
      You can find information about how Google uses cookies here: https://policies.google.com/technologies/cookies?hl=en

    6. Our web application also uses web storage technology. 
      Web storage is a technique for web applications that stores data in a web browser. Web storage supports persistent data storage, similar to cookies, as well as local session-specific storage.

      Unlike cookies, which can be accessed both by the server and the client, web storage is fully controlled by the client. It does not transfer data to the server with every HTTP request and a web server is unable to write data to the web storage directly. It is only accessed by scripts on the web application.

      We use web storage to store certain user settings that do not need to be transmitted to the server with every request. Current filter settings, column widths, auto-reload and date values from the Values tab under Visualisation are functions that use this technology to some extent.

    7. The legal basis for the above processing operations is GDPR Article 6(1)(f). Insofar as we ask you for consent for use, the legal basis for the processing of data is consent pursuant to GDPR (2) and (3) Article 6(1)(a).

  • Withdrawal of consent given and objection to data processing

    1. If you have given your consent to the processing of your data, you can withdraw it at any time with effect for the future.
    2. Insofar as we base the processing of your personal data on a balancing of interests required by law (for example, GDPR Article 6(1)(f)), you may object to the processing of your personal data. You may object at any time with regard to the processing of your personal data for the purposes of advertising and data analysis, and also if the processing is not necessary for the performance of a contract or the provision of a specific service or order which you request.
    3. You can declare an objection by e-mail to info.de@vega.com or by a message to the contact details indicated in our masthead. Please state the subject of your objection.

  • Duration of processing

    We will delete data once the storage is no longer necessary for the stated processing purpose. If deletion is contrary to statutory retention obligations or if we require the data to pursue or defend legal claims or to fulfil statutory obligations, we will restrict the use of the data accordingly.

  • Obligation to disclose data and consequences of refusal

    The provision of data marked as mandatory information for contractual purposes is mandatory: this data is necessary in order to use the services of the controller. If you decide not to provide your data, you will not be able to make use of the services of the controller.

  • Access to the data

    Your data may be made available for the purposes mentioned above:
    1. authorised employees and/or staff of the controller with regard to their role as (joint) controllers and/or internal processors;

    2. Third parties (e.g. subcontractors) who perform outsourced activities on behalf of the controller, for example as data processors.

  • Disclosure and transfer of data

    Apart from the cases explicitly mentioned in this Privacy Policy, your personal data will only be disclosed without your express prior consent if this is permitted or required by law.

    Insofar as we use external service providers to provide our services, any disclosure of personal data is justified by the fact that we have carefully selected, regularly reviewed and contractually obliged our third-party companies and external service providers either within the framework of GDPR Article 28(1) as a data processor to process all personal data exclusively in accordance with our instructions or within the framework of GDPR Article 26(1) as joint controllers, having jointly defined the purposes and means of processing.

  • Your rights as data subject

    1. According to the relevant data protection regulations, you are entitled to the following rights under the relevant legal requirements regarding your personal data:

      • Right of access,
      • Right to rectification or erasure,
      • Right to restriction of processing,
      • Right to object against the processing,
      • Right to data portability,
      • Right to revoke any consent given with future effect.

      You will not incur any costs in exercising these rights.

    2. You may contact the relevant data protection supervisory authority for any complaints about the processing of your personal data.

      VEGA Grieshaber KG
      Version: 19/08/2024


Close