Source: https://www.vincorion.com/en/data-protection-declaration
Timestamp: 2019-04-23 20:27:09+00:00

Document:
We only process the personal data of our users to the extent that this is necessary to provide a functional website as well as our content and services. We generally only process our users’ personal data after obtaining the consent of the user. An exception applies in such cases in which the processing of the data is permitted by legal regulations.
To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6(1) a EU General Data Protection Regulation (GDPR) is the legal basis for the processing of personal data.
Where the processing of personal data is necessary for the fulfillment of a contract to which the data subject is a party, Art. 6(1) b GDPR is the legal basis. This also applies to processing that is necessary to carry out pre-contractual measures.
To the extent that the processing of personal data is necessary to fulfill a legal obligation imposed on our company, Art. 6(1) c GDPR is the legal basis.
Where processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6(1) f GDPR is the legal basis for processing.
The user’s personal data will be erased or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
The legal basis for the temporary storage of data and log files is Art. 6(1) f GDPR.
The data are stored in log files to ensure the correct functioning of the website. In addition, the data help us to optimize the website and to ensure the security of our IT systems. The data are not analyzed for marketing purposes in this context.
Our legitimate interest in data processing pursuant to Art. 6(1) f GDPR also lies in these purposes.
The personal data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the session in question has ended.
If the data are stored in log files, this is the case after one month at the latest.
Further storage is possible in anonymous form. In this case, the IP addresses of the users are erased or distorted, so that it is no longer possible to allocate the visiting client.
The legal basis for the processing of personal data using cookies is Art. 6(1) f GDPR.
Our legitimate interest in processing personal data pursuant to Art. 6(1) f GDPR also lies in these purposes.
whereby mandatory fields are marked with (*).
Context data (referrer, domain, browser language, user’s country, etc.).
Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transferred by e-mail will be stored.
The data will not be passed on to third parties in this context. The data are used exclusively for processing the conversation.
The legal basis for the processing of data with the presence of the user’s consent is Art. 6(1) a GDPR.
The legal basis for the processing of data transferred in the course of sending an e-mail is Art. 6(1) f GDPR. Where the e-mail contact is for the purpose of concluding a contract, the additional legal basis for the processing is Art. 6(1) b GDPR.
We only process personal data from the input mask for the purpose of processing the establishment of contact. Where contact is made by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our IT systems.
The personal data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the particular conversation with the user is finished. The conversation is finished when it can be inferred from the circumstances that the matter in question has been clarified.
The additional personal data collected during the sending process will be erased after three months at the latest.
The user is able to withdraw his consent to the processing of his personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. To withdraw his declaration of consent, the user only has to notify us of this. All personal data stored in the course of contacting us will be erased in this case.
We use the component Google Analytics on our website. Google Analytics is a web analysis service operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Web analysis is the collection, recording and evaluation of data about the behavior of users on our website. A web analysis service collects, among other things, data about which website the user came to a website from, which subpages of the website were accessed or how often and for how long a subpage was viewed.
We use the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, Google shortens the IP address of the user and thus makes it anonymous if our websites are accessed from a Member State of the European Union or from another signatory to the agreement on the European Economic Area. The shortening of the IP address results in anonymization. It is then no longer possible to assign the shortened address to an identified or identifiable person.
Google Analytics places a cookie on the user’s computer. By placing the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of this website is visited, the Internet browser on the user’s computer is automatically prompted by the Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google obtains knowledge of user data, such as the shortened IP address of the data subject, which allows Google, among other things, to trace the origin of visitors and clicks.
The cookie is used to store personal data, such as the access time, the location from which access originated and the frequency of visits to our website by the user. Whenever you visit our website, these data, including the IP address of the Internet connection used by the data subject, is transferred to Google in the USA. These personal data are also stored by Google in the USA. Google may pass on these personal data collected through the technical procedure to third parties.
The legal basis for the processing of data is Art. 6(1) f GDPR and Section 15(3) German Telemedia Act (Telemediengesetz).
The purpose of using Google Analytics is to analyze the flow of visitors to our website. Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us that show activity on our website and to provide other services in connection with the use of our website. This enables us to further optimize our website for the user.
The data stored via Google Analytics will be automatically erased by us after 26 months.
As mentioned above, the user may prevent the storage of cookies by our website at any time by changing the settings of the Internet browser used and thus permanently objecting to the storage of cookies. In addition, a cookie already stored by Google Analytics can be erased at any time via the Internet browser or other software programs.
Furthermore, the user has the option of objecting to and thus preventing the collection of data generated by Google Analytics as well as the processing of these data by Google. To do this, the user must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on automatically informs Google Analytics after installation that no data and information on the user’s visits to websites may be transferred to Google. The installation of the browser add-on is deemed an objection. If the user’s system is erased, formatted and reinstalled in the future, the user must reinstall the browser add-on to deactivate Google Analytics.
http://www.google.com/analytics/terms/de.html . Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/ .
We do not use data processing social media plug-ins from social networks on our website. Our website only contains buttons labeled with the social networks Youtube (their logos). These buttons are qualified links to the social networks in question. By clicking on the button you will be directed to the social network via a link. In addition, a link to the website visited by you is sent at the same time for the purpose of sharing on the social networks. The user’s personal data are not collected by the buttons or transferred to the operators of the social networks.
Where we process data in third countries (countries outside the EU/EEA) or transmit data to companies in third countries, we will only do so if we are authorized to do so by you or by the law. If there is no adequacy decision by the Commission pursuant to Art. 45 GDPR for the third country concerned, i.e. there is no adequate level of data protection in the third country, we ensure through contractual provisions (standard EU contractual clauses on data protection) or other suitable guarantees as defined by Art. 46 GDPR that your privacy and your personal data are also adequately and legally protected in the company in the third country.
JENOPTIK Advanced Systems GmbH uses technical and organizational security measures to protect your personal data collected by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
(8) the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information as to whether your personal data are transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
You have a right to rectification and/or completion vis-à-vis the controller if your processed personal data are inaccurate or incomplete. The controller must make the rectification immediately.
(4) if you have lodged an objection to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate reasons of the controller override your reasons.
Where the processing of your personal data has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the processing restriction has been restricted in accordance with the above conditions, you will be notified by the controller before the restriction is lifted.
(6) your personal data have been collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
Where the controller has made your personal data public and if he is obliged to erase the data pursuant to Art. 17(1) GDPR, he will take reasonable steps, including technical measures, taking into account the available technology and the implementation costs, to inform controllers who are processing the personal data that you as the data subject have requested the erasure of all links to these personal data or of copies or replications of these personal data.
Where you have exercised your right to have the controller rectify, erase or restrict the processing, he is obliged to notify all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate amount of effort.
You have the right vis-à-vis the controller to be notified of such recipients.
In exercising this right, you also have the right to request that your personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other persons must not be impaired by this.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out pursuant to Art. 6(1) e or f GDPR; this also applies to profiling based on these provisions.
The controller will then no longer process your personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling, to the extent that it is associated with such direct marketing.
You may exercise your right to object in connection with the use of information society services – Directive 2002/58/EC notwithstanding – by means of automated procedures using technical specifications.
You have the right to withdraw the data protection declaration of consentat any time. The withdrawal of consent will not affect the legality of processing carried out on the basis of consent before withdrawal.
(3) takes place with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2) a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State where you reside or work or where you suspect infringement, if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 46
 Art. 22
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78