Source: https://www.viega.com/en/meta/footer/privacy-policy.html
Timestamp: 2019-04-21 09:04:57+00:00

Document:
Our Viega website and its sub-pages can generally be used without providing personal data. However, if Viega special services are used through our website, it may be required to process personal data of the user. If the processing of personal data is required and if there is no legal basis for such processing, we shall generally seek the consent of the data subject. An exception shall apply in cases where processing of the data is permitted by law.
Viega is committed to protect the privacy of website users as much as possible. The security measures used correspond to the state of the art. User data are treated confidentially and protected against unauthorized or unintended disclosure. No publication or unauthorized disclosure of user data shall neither be made without explicit prior consent.
Whenever this website is accessed, Viega uses an automated system to collect data and information from the calling computer. They are stored in the log files of the server delivering the website.
The IP address is transmitted with every server request for the server to know where to send the response. Every Internet user receives the IP address from their Internet service provider (ISP) upon connecting to the Internet. The ISP is able to trace, which IP address was assigned to which of its customers at which time. As long as the IP address is stored, it is theoretically possible to determine the identity of the connection owner via the ISP. We and our statistical service provider therefore store the IP address only in an abbreviated (anonymous) form and use it only for session detection, for geolocation (down to city level) and for the defense against attacks The IP address is then deleted immediately, so that the recorded data becomes anonymous and it is no longer possible to attribute them to the user's identity, not even via the ISP.
The data are processed to deliver the content of the website, to ensure the functionality of our information technology systems and to optimize the website. In so doing, the log file data are always stored separately from other personal data. No personal data are evaluated for marketing purposes in this context.
These purposes also constitute Viega's legitimate interest in data processing according to Art. 6 (1) (f) GDPR.
The data are deleted once they are no longer necessary for the purpose of collection. When collecting the data for providing the website, this is the case once the respective session is terminated. If the data are stored in log files, it is the case after no more than seven days. Extended storage is possible. In this case, the users' IP addresses are deleted or manipulated, making it impossible to attribute the calling user.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. The user therefore has no option to opt out.
Viega uses so-called cookies on this website. Cookies are text files that are stored in or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. Such cookie contains a characteristic string that allows clear identification of the browser and therefore of the user when visiting the website again.
In this way, the following data can be transmitted: The collected data are listed below. They may for example include: Entered search terms, frequency of page views, use of website functions. Below, we will inform you about the types of cookies stored, their purpose and their expiry: The legal basis for processing personal data using cookies is Art. 6 (1) (f) GDPR.
Viega has integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on them, also for free. Information on YouTube is available at https://www.youtube.com/yt/about/de/.
The operating of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
With each visit to one of the pages of this website, which is operated by Viega and incorporates a YouTube component (YouTube video), the Internet browser on the user's information technology system is automatically caused by the respective YouTube component to download the corresponding YouTube component from YouTube. As part of this technical process, YouTube and Google learn which specific sub-page of our site is visited by the user.
If the user is logged in to YouTube at the same time when visiting a sub-page containing a YouTube video, YouTube recognizes which specific sub-page of our website is visited by the user. This information is collected by YouTube and Google and associated with the user's YouTube account.
If the user does not want such information to be transmitted to YouTube and Google, he/she may prevent transmission by logging out of his/her YouTube account before visiting our website.
Some of the data collected when you visit our website are used for statistical analysis.
Viega uses the services of company Webtrekk GmbH, Hannoversche Str. 19, 10115 Berlin, Germany, to collect statistical data about the use of our website and to optimize our offer accordingly. Webtrekk GmbH is certified for data protection, in the area of web controlling software, by the TÜV Saarland. Part of the certification is an on-site audit of Webtrekk in Berlin and at the hosting site, where collection and processing of tracking data was checked for data privacy compliance and data security.
A more detailed list of the information transmitted is available at http://www.webtrekk.com/index/datenschutzerklaerung.html. Webtrekk stores the IP address only in an abbreviated (anonymous) form and uses it only for session detection, for geolocation and for the defense against Cyber-attacks. The IP address is then deleted immediately so that the collected data are anonymous.
The user can specify in his/her browser settings whether or not cookies may be placed. If the user does not wish to be tracked specifically for Viega's website, he/she may object to the tracking. To complete the opposition, the user can click on the following link http://www.webtrekk.com/index/datenschutzerklaerung/opt-out.html.
For information, visit the website of Webtrekk GmbH, http://www.webtrekk.com.
If a user subscribes to the Viega Newsletter, the data of the respective input mask will be transmitted to Viega.
When registering for the newsletter, the user's IP address as well as date and time of registration are saved. The purpose of this is to prevent misuse of services or e-mail address. The data are not disclosed to third parties. An exception applies in case of a legal obligation to disclose.
The legal basis for processing the data after the user has registered for the newsletter is Art. 6 (1) (a) GDPR if the user's consent was given.
Subscription to the newsletter may be terminated by the user at any time Likewise, consent to the storage of personal data may be revoked at any time. Each newsletter contains a corresponding link for this purpose.
In addition, the user can opt out by sending an e-mail message to the following address: newsletter@viega.de or datenschutz@viega.de.
Some forms require the user to enter personal data. The data in the respective input mask are transmitted to Viega and stored exclusively for the purpose of internal use by Viega.
When using the input masks, the user's IP address as well as date and time of use are also saved.
The purpose of this is to prevent misuse of services. The data are not disclosed to third parties. An exception applies in case of a legal obligation to disclose.
Likewise, in some instances, the customer's first and last name, telephone, e-mail address, address and company are stored.
Collection of such data is necessary for the provision of the desired content or services. Likewise, this serves solely for purposes of processing or contacting.
Legal basis for processing the data transmitted by means of an input mask is Art. 6 (1) (f) GDPR. If the contact aims at concluding a contract, Art. 6 (1) (b) GDPR forms an additional basis for processing.
Users have at all times the option to delete or modify the stored data. The user receives information about his/her stored personal data at any time.
The data are deleted once they are no longer necessary for the purpose of collection.
The website provides a contact form that may be used for electronic contact. Contact may also be made via the e-mail address provided. If the user contacts Viega via one of these channels, personal data transmitted by the user will be automatically saved. This always includes first and last name, telephone, e-mail address and company. The user may optionally specify additional data.
Storage solely serves the purposes of processing or contacting the user. The data are not disclosed to third parties.
Legal basis for processing the data transmitted in the context of transmitting an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact aims at concluding a contract, Art. 6 (1) (b) GDPR forms an additional basis for processing.
We process personal data from the input mask only to handle the contact. In case of contact via e-mail, this also includes the required legitimate interest in processing the data.
The data are deleted once they are no longer necessary for the purpose of collection. Regarding the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
In general, Viega processes and stores personal data of users only as long as this is necessary to achieve the purpose of the storage. In addition, such storage may take place if provided for by the European or national legislator in Union regulations, laws or other regulations governing Viega. Data are furthermore blocked or deleted when a storage period prescribed by such standards mentioned expires, unless such data storage must continue for conclusion or fulfillment of a contract.
Once the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data are routinely blocked or deleted.
The user may request Viega to confirm if personal data relating to him/her is processed by us.
The user has the right to rectification and/or completion vis-à-vis Viega if his/her processed personal data are incorrect or incomplete. Viega shall implement such correction without delay.
d. if the user has objected to the processing pursuant to Art. 21 (1) GDPR and it has yet to be determined if Viega's legitimate reasons outweigh the user's reasons.
If the processing was restricted in accordance with the aforementioned requirements, the user will be notified by Viega before the restriction is lifted.
e. The deletion of the user's personal data is necessary to meet a legal obligation under Union law or the law of the Member States governing Viega.
If Viega has made the user's personal data public and if Viega is required to deleted them pursuant to Art. 17 (1) GDPR, Viega will take appropriate measures, including technical measures, taking into account available technology and the costs of implementation, to notify controllers processing the personal data that the user as data subject has requested that Viega deletes all links to such personal data or copies or replications of such personal data.
If the user has asserted the right of correction, deletion or restriction of processing to Viega, Viega is obliged to notify all recipients who have been disclosed the user's personal data of such correction or deletion of this proves to be impossible or associated with unreasonable effort.
The user is entitled vis-à-vis Viega to be informed about these recipients.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on Viega.
Viega no longer processes the user's personal data, unless Viega can prove compelling legitimate reasons for the processing, outweighing the user's interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims.
Regarding the cases specified in a. and c., Viega will take reasonable steps to safeguard the user's rights, freedoms and legitimate interests, including, but not limited to, the right of effect someone to intervene on the part of Viega, to state his/her own position and to contest the decision.
Insofar as Viega obtains the user's consent for processing of personal data, Art. 6 (1) (a) of the General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
To the extent that personal data need to be processed to fulfill a legal obligation of Viega, Art. 6 (1) (c) GDPR serves as the legal basis.
If the processing is necessary to safeguard the legitimate interests of Viega or of a third party and if the user's interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as legal basis for processing. Viega's legitimate interest lies in conducting Viega's business.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 17
 Art. 6
 Art. 6
 Art. 6