Source: https://www.vs.de/en/data-privacy-statement/
Timestamp: 2019-04-19 16:28:06+00:00

Document:
We are very happy that you have decided to visit our web site and for your interest in our company. We take the protection of your personal data very seriously and are committed to protecting your private life and treating your data as confidential.
With this statement on data protection, our company wishes to inform the public about the nature, scope and purpose of the personal data that we collect, use and process. In addition, this data protection statement informs the persons concerned (data subjects) of their rights.
As the entity responsible for processing the data (the “data controller”), our company has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed via this web site.
Despite this, Internet-based data transfers can always be subject to security shortfalls (for example during e-mail communication), with the result that absolute protection cannot be guaranteed. Consequently, all persons concerned are also free to communicate their personal data to us by alternative channels, for example by telephone.
It is possible to use our web sites without supplying any personal data However, if a visitor to the web site wishes to make use of specific services provided by our company via the web site then it may be necessary to process the visitor's personal data.
If it is necessary to process personal data and there is no lawful basis for such processing then we will always ask the data subject for their authorization.
We also process personal data as part of our everyday business activities. This data is communicated to us via inquiries and orders as well as by telephone and e-mail or at the trade fairs that we attend and is stored to enable us to perform our (pre-)contractual tasks for as long as is necessary to perform these tasks or is set out in legal requirements.
Personal data, for example the name, postal address, e-mail address or telephone number of a data subject, is always processed in conformity with the General Data Protection Regulation (GDPR) as well as with other data protection regulations and the specific national data protection provisions applicable to our company.
In all cases where we obtain the authorization of the data subject for the processing of personal data, art. 6 para. 1, point a of the GDPR serves as the lawful basis.
When we process personal data that is required in order to fulfil a contract to which the data subject is party, art. 6 para. 1, point b of the GDPR serves as the lawful basis. This also applies to processing operations that are necessary in order to undertake pre-contractual measures.
If the processing of personal data is necessary in order to fulfil a legal obligation that is imposed on us, art. 6 para. 1, point c of the GDPR serves as the lawful basis.
If the vital interests of the data subject or of another natural person render the processing of personal data necessary, art. 6, para. 1, point d of the GDPR serves as the lawful basis.
If processing is necessary in order to protect a legitimate interest of our company or a third-party and the interests, fundamental rights and basic freedoms of the data subject do not override the above-mentioned interest then art. 6, para., point f of the GDPR serves as the lawful basis.
The data subject’s personal data is deleted and locked as soon as the purpose for which it was stored has been fulfilled. It may be stored beyond this period if this is provided for in European or national legislation in accordance with EU regulations, laws or other requirements to which the data controller is subject. The data is also locked and deleted when a retention period set out in the above-mentioned regulations expires, except in cases where the continued storage of the data is required for the purposes of concluding or executing a contract.
When you visit our web site, we automatically collect a range of general data and information that your browser automatically sends us in so-called log files on our server.
We neither analyze this data nor communicate it to third-parties and it is deleted at regular intervals provided that there are no legal retention requirements to the contrary.
This information is required in order to provide the necessary law enforcement information to law enforcement agencies in the event of cyber attacks.
Some of our web pages use so-called cookies. Cookies are text files that are saved in the user’s web browser or on the user’s computer system by the web browser.
Cookies make it possible for us to recognize visitors to our web site. We do this in order to make it easier for visitors to use our web site.
On our site, we primarily use so-called “session cookies”. These are automatically deleted when you leave our web site. Other cookies continue to be stored on your terminal device until you delete them.
By changing the settings in your web browser, you can be informed whenever a cookie is to be written and only accept cookies on a case-by-case basis, authorize the acceptance of cookies in certain cases or exclude cookies and specify that cookies are to be automatically deleted when you close the browser. If you disable the writing of cookies in the web browser that you use, you may sometimes not be able to use all the functions of our web site.
We offer users of our web site the possibility of registering by informing us of their personal data. This data is entered in an input screen, sent to us and stored. It is not transmitted to third-parties. The following data is collected during the registration process.
At the time of registration, the user is asked to give approval for the processing of this data.
Art. 6, para. 1, point a of the GDPR forms the lawful basis for the processing of the data. If registration is performed in order to fulfil a contract to which the user is a party or to undertake pre-contractual measures then art. 6, para. 1, point b of the GDPR forms the lawful basis for the processing of the data.
User registration is required for the provision of certain contents and services on our web site or for the execution of a contract with the user or for the undertaking of pre-contractual measures.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the registration procedure intended for the execution of a contract or the undertaking of pre-contractual measures, this occurs when the data is no longer needed for the fulfilment of the contract. Even after conclusion of the contract, it may be necessary to save the contractual partner's personal data in order to fulfil contractual or legal obligations.
As a user, you can cancel your registration at any time. You can request the modification of your stored personal data whenever you wish. We will be happy to correct or delete this data on request provided that there is no legal obligation to retain it. For information on any related matters, please contact our marketing department at marketing@vs-moebel.de.
On our web site, you can contact us directly by sending an e-mail. If you contact us by e-mail, we only store or use the data for the purposes of communicating with you following your contact. This personal data is not transmitted to third-parties.
Our web site uses SSL encryption in order to ensure security and protect the transmission of confidential content. You can tell if a connection is encrypted by the fact that the http:// in your browser’s address line changes to https:// and by the presence of a padlock symbol in the browser bar. If SSL encryption is enabled, third-parties are not able to read any of the data you send us. We only save and use the data in order to communicate with you following your contact.
The European guidelines and directives give all data subjects the right to demand confirmation from the data controller of whether it processes personal data relating to them. Should any data subject wish to make use of this right of confirmation, they can address an employee of the data controller at any time.
The data subject also has the right to be informed if the personal data has been transferred to a third country or an international organization. If this is the case, the data subject also has the right to be informed of appropriate guarantees relating to this transfer.
The responsible entity will provide a copy of the personal data that is the object of the processing. For all further copies requested by the data subject, the data controller may demand appropriate reimbursement based on the administrative costs. If the data subject makes the request in electronic form then the information will be supplied in a habitual electronic format unless requested otherwise by the data subject. The right to receive a copy must not impair the rights and freedoms of other persons.
Data subjects have the right to demand that we immediately rectify incorrect personal data relating to them. While taking into account the purposes of data processing, data subjects have the right to demand the completion of incomplete personal data – including by means of an additional statement.
-	the data subject opposes processing in accordance with article 21, para 1 of the DGPR and there are no legitimate reasons for processing that take precedence or the data subject opposes processing in accordance with article 21, para 2 of the DGPR.
information society services as set out in article 8, para 1 of the GDPR.
If the data controller has made the personal data public and is required to delete it in accordance with paragraph 1 then, while taking account of the available technology and implementation costs, it will take appropriate measures, including those of a technical nature, to inform the parties responsible for data processing that a data subject has requested them to delete all links to this personal data or has demanded copies or duplicates of this personal data.
-	in order to fulfil a legal obligation requiring processing in accordance with EU legislation or the legislation of the Member States to which the data controller is subject or to undertake an activity of public interest or resulting from the exercise of official authority and entrusted to the data controller.
-	for the enforcement, exercise or defense of legal claims.
-	the data controller no longer needs the personal data for processing purposes and the data subject nevertheless still requires the data in order to enforce, exercise or defend legal claims.
-	the data subject has opposed processing in accordance with article 21, para. 1 of the GDPR and it has not yet been determined whether the legitimate interests of the data controller override those of the data subject.
If processing has been restricted as set out in paragraph 1, then this personal data may – apart from being stored – not be processed except with the agreement of the data subject or for the purpose of enforcing, exercising or defending a legal claim or to protect the rights of another natural or legal person or for reasons relating to an important public interest of the EU or a Member State.
Any data subject that has caused processing to be restricted will be informed by the data controller before the restriction is lifted.
-	processing is based on consent in accordance with article 6, para. 1, point a of the GDPR or article 9, para. 2, point a of the GDPR or on a contract in accordance with article 6, para. 1, point b of the GDPR.
-	processing is performed using automated procedures.
If exercising the right to the transferability of data in accordance with paragraph 1, the data subject has the right to demand that the personal data be transferred directly from one data controller to another data controller provided that this is technically feasible. Article 17 of the GDPR is unaffected by the exercise of the right set out in paragraph 1 of the current article. This right does not apply to processing required in order to perform a task that is in the public interest or results from the exercise of official authority and has been entrusted to the data controller.
The right in accordance with paragraph 2 must not impair the rights and freedoms of other persons.
Data subjects have the right at any time, for reasons resulting from their own specific situation, to oppose the processing of their personal data pursuant to article 6, para. 1, point e and point f of the GDPR.
In the event of opposition, we no longer process the personal data unless we are able to demonstrate vital reasons requiring protection for such processing that override the interests, rights and freedoms of the data subject or processing is performed in order to enforce, exercise or defend legal claims.
European guidelines and legislation confer on every data subject whose personal data is processed the right to withdraw consent for the processing of their personal data at any time.
We collect and process the personal data of applicants in order to conduct the job application process. Processing may also be performed electronically. This is the case, in particular, if applicants send the corresponding job application documents electronically, for example by e-mail. If we conclude a contract of employment with the applicant then the transferred data is stored for the purposes of managing the employment relationship and in compliance with legal requirements. If no contract of employment is concluded with the applicant then the application documents are deleted immediately after the decision not to offer such a contract, provided that no other legitimate interests oppose their deletion. Another legitimate interest in such a situation could be, for example, an obligation to provide evidence in an action pursuant to the General Act on Equality of Treatment (AGG).
Information transfer via the Internet is not completely secure. Despite the protection provided, by means of appropriate technical and organizational measures for our web site and the other mechanisms with which data is transferred to us, we cannot therefore guarantee the data sent to our web site via the Internet against loss of availability, confidentiality or integrity. We therefore additionally refer to point 10 of the present statement on data protection.
We reserve the right to modify the present statement on data protection at any time, in part or in full, with future effect. The current version of our statement on data protection can be consulted on our web site at any time.
transmission of advertising information, for example in the form of spam e-mails.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6

Art. 6
 art. 6