We use the so-called tracking code of Lead Forensics London 4, Old Park Lane, Mayfair, London W1K 1QW on our Internet pages. Lead Forensics follows the activities on the website and provides viafintech GmbH with information about:
The « Lead Forensics » tool complies with the requirements of applicable data protection regulations, in particular the GDPR, as it only provides information that is already publicly accessible. Instead of cookies, the Lead Forensics tool uses so-called IP tracking to identify visitors. We use the tool to obtain information about which company visits our website in order to deduce which company is interested in our company, products and services. You can find further information at www.leadforensics.com.
4. The use of these tools mentioned under VII 1, 2 and 3 serves marketing purposes. These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.
4. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (« Google »). According to Google, the contact for all data protection issues is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse and improve our website and our product based on your user behaviour. The data collected in this context may be transferred by Google to a server in the USA for evaluation and stored there. If personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield. However, your IP address will be shortened before the evaluation of the usage statistics so that no conclusions can be drawn about your identity. For this purpose, Google Analytics has been extended by the code « anonymizeIP » to ensure anonymous recording of IP addresses.
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
Google will process the information obtained through the cookies in order to evaluate your use of the website and the products, to compile reports on website activities for the website operators and to provide further services associated with website and internet use.
As shown above, you can configure your browser to reject cookies, or you can prevent the collection of data generated by cookies and related to your use (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on provided by Google. As an alternative to the browser add-on or if you access our website from a mobile device, please use this opt-out link: deactivate Google Analytics.
This will prevent Google Analytics from collecting data within this website in future (the opt-out only works in the browser and only for this domain). If you delete your cookies in this browser, you have to click this link again.
You can find more information on this in Google’s privacy policy.
5. Facebook Fanpage
We operate a page (fan page) on the social network Facebook, which is offered for users outside the USA and Canada by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (« Facebook ») and for all other users by Facebook Inc, 1601 Willow Road, Menlo Park, California 94025, USA (« Facebook ») in joint responsibility with Facebook, in order to communicate therewith followers (such as our customers and interested parties) and to provide information about our products and services.
We may receive statistics from Facebook regarding the use of our fan page (e.g. information on the number, names, interactions such as likes and comments, and aggregated demographic and other information or statistics). For more information about the nature and scope of these statistics, please refer to the Facebook notes and related help pages. Details of the respective responsibilities can be found in the Page Insights information. The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR based on our aforementioned legitimate interest.
We have no influence on data that is processed by Facebook on its responsibility according to the Facebook terms of use. However, we would like to point out that when you visit the fan page, data on your usage behaviour is transferred from Facebook and the fan page to Facebook. Facebook itself processes the above-mentioned information to produce more detailed statistics and for its own market research and advertising purposes, over which we have no influence. You can find more detailed information on this in the Facebook data policy. In the event that personal data is transferred to the USA, Facebook has subjected itself to the EU-US Privacy Shield.
As far as we receive your personal data when operating the fanpage, you are entitled to the rights mentioned in this privacy policy. If you wish to assert your rights against Facebook, the easiest way to do so is to contact Facebook directly. Facebook knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of data processing and can implement appropriate measures upon request if you exercise your rights. We will be happy to support you in asserting your rights as far as we are able and will forward your enquiries to Facebook.
VIII. Duration of storage
The data are deleted as soon as they are no longer necessary for the purpose for which they were collected.
IX. Possibility of opposition and removal
As the person concerned, you have the opportunity to have the data stored about you modified at any time. Please contact our data protection officer with your request (request for deletion or change) or write to us directly at datenschutz@viafintech.com.
X. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights in relation to the person responsible:
1. Right of access to information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing has taken place, you can request information from the data controller on the following:
- (1) the purposes for which the personal data are processed;
- (2) the categories of personal data which are processed;
- (3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- (4) the planned duration of storage of the personal data relating to you or, if it is not possible to specify this, criteria for determining the duration of storage;
- (5) the existence of a right of rectification or erasure of personal data concerning you, a right to have the processing limited by the controller or a right to object to such processing;
- (6) the existence of a right of appeal to a supervisory authority;
You have the right to obtain information as to whether personal data concerning you are being transferred to a third country or an international organisation. In this context, you may request to be informed of the appropriate safeguards according to Art. 46 GDPR in connection with the transfer.
2. Right of rectification
You have the right to ask the data controller to correct and/or complete any personal data processed concerning you if it is incorrect or incomplete. The data controller must correct without delay.
3. Right to restrict processing.
Under the following conditions, you may request that the processing of personal data concerning you be restricted:
- (1) if you dispute the accuracy of the personal data concerning you for a period of time which enables the person responsible to verify the accuracy of the personal data;
- (2) if the processing is unlawful and you object to the deletion of the personal data and request instead that the use of the personal data be restricted;
- (3) the controller no longer needs the personal data for the purposes of the processing, but you need the personal data to exercise or defend legal claims; or
- (4) if you have lodged an objection to the processing following Art. 21 Para. 1 GDPR and it has not yet been established whether the legitimate reasons for the controller outweigh your reasons.
If the processing of personal data relating to you has been restricted, such data, apart from being stored, may be processed only with your consent or to assert, exercise or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
4. Right of cancellation
a) Duty to delete
You may request the controller to delete the personal data concerning you immediately and the controller is obliged to delete such data immediately if one of the following reasons applies:
- (1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- (2) You revoke your consent on which the processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a FADP, and there is no other legal basis for the processing.
- (3) You object to the processing according to Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you lodge an objection to the processing according to Art. 21(2) GDPR.
- (4) The personal data concerning you have been processed unlawfully.
- (5) The deletion of personal data relating to you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
- (6) The personal data concerning you have been collected in relation to information society services offered, following Article 8(1) of the GDPR.
b) Information to third parties
If the data controller has made public the personal data concerning you and is obliged to delete them according to Art. 17 para. 1 DPA, it shall take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
c) Exceptions
The right of cancellation does not apply if the processing is necessary
- (1) to exercise the right to freedom of expression and information;
- (2) to comply with a legal obligation requiring processing under Union or national law to which the controller is subject or to perform a task carried out in the public interest or the exercise of official authority vested in the controller;
- (3) for reasons of public interest in the field of public health according to Article 9 (2) lit. h and i and Article 9 (3) GDPR;
- (4) for archival, scientific or historical research purposes in the public interest or statistical purposes according to Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
- (5) to assert, exercise or defend legal claims.
5. Right to information
If you have asserted the right to rectify, erase or limit the processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the data controller.
6. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller without interference from the controller to whom the personal data has been communicated, provided that
- (1) the processing is based on a consent according to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract according to Art. 6 para. 1 letter b GDPR and
- (2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data transferability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or the exercise of official authority vested in the controller.
7. Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out according to Art. 6 paragraph 1 letter e or f FADP; this also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you unless he/she can demonstrate compelling reasons for the processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it relates to such direct marketing.
If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes.
You may exercise your right of objection concerning the use of information society services using automated procedures involving technical specifications, without prejudice to Directive 2002/58/EC.
8. Right to revoke the declaration of consent under the data protection law
You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the lawfulness of the processing that has taken place based on your consent until revocation.
9. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the suspected infringement if you consider that the processing of personal data concerning you is in breach of the DPA.
The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
10. Changes of Privacy Policy
From time to time we update this Privacy Policy, for example if we adapt our website or the legal or official requirements change.
Date: 30.11.2020
