Privacy policy
Adjust your current cookie settings
By clicking on the following link, you can view and adjust your current cookie settings:
Privacy Policy
Below, we provide information about the processing of your personal data in connection with the use of our online services.
Controller
Viaplano GmbH
Tich 5a
48231 Beelen
Telephone: 0123 45678-9
Fax: 0123 45678-9
Email: info@viaplano.de
Contact
If you have any questions about data protection, please contact us using the contact details provided above.
Storage periods
We generally delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.
If we have asked for your consent and you have given it, we will delete your personal data if you withdraw your consent and there is no other legal basis for processing.
We will delete your personal data if you object to the processing and there are no overriding legitimate reasons for the processing, or if you object to the processing for the purposes of direct marketing or related profiling.
If deletion is not possible because processing is still necessary to fulfil a legal obligation (statutory retention periods, etc.) to which we are subject or to assert, exercise or defend legal claims, we will restrict the processing of your personal data.
Further information on storage periods can also be found in the following passages.
Your rights
You have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. We will then no longer process your personal data for these purposes.
You have the right to withdraw your consent to the processing of your personal data at any time if you have given us such consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to complain to a supervisory authority about our processing of your personal data.
Provision of your personal data
The provision of your personal data is generally neither required by law nor contractually required and is not necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. However, if this should ever be the case, we will point this out separately when collecting your personal data (for example, by marking the mandatory fields on input forms).
If you do not provide your personal data, we will generally not process your personal data for any of the purposes described below and you will not be able to take advantage of any offers related to the respective processing (example: without providing your email address, you will not receive our newsletter).
Web hosting
We use external services for web hosting. These services may have access to personal data that is processed in the context of using our online services.
Web server log files
We process your personal data in order to be able to display our online services to you and to ensure the stability and security of our online services. In doing so, information (e.g. requested element, URL accessed, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is to ensure the proper display of our online services and to guarantee the stability and security of our online services.
Security
For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser line by the string "https://" and the lock symbol.
Contact
If you contact us, we will process your personal data to handle your enquiry.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this case is to process your contact request. If the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures based on your enquiry, the legal basis for the processing is also Art. 6 (1) (b) GDPR.
We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed when you contact us. Further information on the services used, the scope of data processing and the technologies and procedures used when employing the respective services can be found below in the further information on the services we use and under the links provided there:
Twilio SendGrid
Provider: In the European Economic Area (EEA), the United Kingdom and Switzerland, the service is provided by Twilio Ireland Limited, Ireland. Twilio Ireland Limited is a subsidiary of Twilio Inc., United States of America.
Website: https://www.digitalocean.com
Further information & data protection: https://www.digitalocean.com/legal/
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has acceded to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.
Cookies & similar technologies
Cookies are used. Cookies are text files that are stored on your device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are only deleted after a certain period.
In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following information on cookies also applies to similar technologies. This information also applies to further processing (analysis & marketing, etc.) in connection with cookies and similar technologies. This applies to any consent you may have given for the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.
Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online services, to design it in line with demand and based on interests, and thus to optimize our online services and our marketing. Cookies can be used by us and by external services.
We use a consent tool to manage the cookies used and the relevant consents. Details on the cookies used (purpose, storage period, external service, etc., if applicable) and the consent tool can be found in the following passages and in the consent tool we use.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests can be found in the following passages.
You can prevent the storage of cookies by adjusting your browser settings accordingly. Below, we provide links for typical browsers where you can find further information on managing cookie settings:
- Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html
Further options for objecting can be found at the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.
If you prevent cookies from being stored, this may impair the proper functioning of our online services. If you delete all cookies, the above settings will also be lost and must be re-entered.
You can also activate the "Do Not Track" function in your browser to signal that you do not want to be tracked. Below, we provide links for typical browsers where you can find further information on the "Do Not Track" setting:
- Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- Safari has not supported the "Do Not Track" function since February 2019. Cross-website tracking can be prevented in Safari by clicking on the following link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
- Yandex: https://yandex.com/support/browser/personal-data-protection/ytp.html
You can also withdraw or manage your consent to the use of cookies in the consent tool we use.
Viaplano App (SaaS)
If you use the Viaplano app as software as a service, we process your personal data to make this software available to you via the internet and to comply with the associated rights and obligations.
The legal basis for the processing is Art. 6 (1) (b) GDPR, because the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures. Insofar as the processing is not necessary for the performance of a contract, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the provision of the Viaplano App.
Recipients of your personal data may be third parties (fulfilment service providers, IT service providers, shipping or transport service providers, banks, tax advisors, lawyers, authorities, etc.) insofar as this is necessary for the provision of the Viaplano app.
We use external services to process payments. We transfer your personal data to these services to the extent necessary for the processing of payments. Further information on the services used, the scope of data processing and the technologies and procedures used in the respective services can be found in the additional information on the services we use at the end of this passage and under the links provided there.
Billwerk
Provider: Billwerk+ Germany GmbH
Website: https://www.billwerk.plus/de/
Further information & data protection: https://www.billwerk.plus/de/datenschutzhinweise/
Analytics & marketing
We process your personal data to measure the reach of our online services, to design them in line with demand and based on interests, and thus to optimize our online services and our marketing.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this regard is the optimization of our online services and our marketing.
We use external services for analysis and marketing purposes. This may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
Further information on cookies and similar technologies can be found above.
Meta pixels with custom audiences
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Weitere Informationen & Datenschutz: https://www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, https://www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=en_GB, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has acceded to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.
Social media content/plugins
We use social media content/plugins from external services to display content and functions from external services and thus optimize our online services and marketing.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest in this is to optimize our online services and our marketing.
The use of external services may also involve profiling (for advertising purposes, personalized information, etc.). Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
Vimeo
Provider: Vimeo, Inc., United States of America.
Website: https://vimeo.com/de/
Further information & data protection: https://vimeo.com/privacy
Guarantee: The provider has acceded to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.
Cookies: The Vimeo video player is used in "Do Not Track Mode". Only one technically necessary cookie (__cf_bm) is set. The cookie is part of the Cloudflare Bot Management Service and helps to minimise the risk associated with spam and bot traffic. It has a storage period of 30 minutes.
Fonts & scripts
We use fonts and scripts from external services to display our online services and to ensure that fonts and scripts are always up to date.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6(1)(a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest in this is to ensure the proper display of our online services and to guarantee up-to-date fonts and scripts.
The use of external services may also involve profiling (for advertising, personalized information, etc.). Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
Adobe Fonts
Provider: If you are resident in North America, the service is provided by Adobe Inc., United States of America. If you are resident outside North America, the service is provided by Adobe Systems Software Ireland Limited, Ireland.
Website: https://fonts.adobe.com
Further information & data protection: https://www.adobe.com/de/privacy.html
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us. The provider has acceded to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which ensures compliance with an adequate level of data protection based on a decision by the European Commission.
Maps
We use maps from external services to show you our location and to enable you to use the other functions of these external services in connection with the maps.
If we have asked for your consent and you have given it, the legal basis for processing is Art. 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest in this is the simplified use of maps.
The use of external services may also involve profiling (for advertising, personalized information, etc.). Profiling may also be carried out across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures involved in the use of the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
OpenStreetMap
Provider: OpenStreetMap Foundation, United Kingdom.
Website: https://wiki.osmfoundation.org/wiki/Main_Page
Further information & data protection: https://wiki.osmfoundation.org/wiki/Privacy_Policy
Adequate level of data protection for transfers of personal data to the United Kingdom: Adequacy decision by the European Commission.