Data protection declaration

Data protection declaration and information in accordance with Articles 13 and 14 GDPR

ProVI GmbH takes the protection of your personal data very seriously. We want you to know when we collect data, which data we collect, and how we use it. We have implemented the necessary technical and organizational measures to ensure compliance with the General Data Protection Regulation.

Use

The entity responsible for the processing activities described below is:
ProVI GmbH
Garmischer Strasse 21
81373 Munich

If you have any questions about data protection, please contact our Data Protection Officer:
Robert Aumiller, Tel. +49 9431 716027
E-mail: aumiller[at]iitr.de

Data in question

Personal data are collected only when you provide us with it. We do not collect any other personal data. The processing of your personal data beyond the purposes permitted by law occurs only with your express consent.

Purpose of processing: Contract performance.

Categories of recipients:

  • Public bodies where other legal provisions take precedence.
  • External service providers or other contractors.
  • Other external bodies if the data subject has granted consent or transfer is permitted by overriding interests.

Third country transfers:
Processors outside the European Union can also be used in conjunction with contract performance.

Duration of data storage:
The duration of data storage is determined by the statutory retention requirements and is typically ten years.

Use of cookies

On the pages where you can order information materials, a cookie is used and remains valid for the duration of your visit to the website. This is required for technical reasons. Most browsers are set by default to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that you are notified every time cookies are sent.

Usercentrics Consent Management Plattform

We use Usercentrics CMP as our consent management platform. Usercentrics CMP collects consent data using JavaScript. This is software that queries and stores the user’s data protection consent in a differentiated manner via a pop-up. This tool can also be used to revoke consent after it has been given by deactivating the consent settings.

As part of an order processing agreement, ProVI GmbH transfers personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich, Germany, as an order processor. Consent data includes the following data: date and time of the visit or consent/refusal, device information.

The data is processed to fulfil legal obligations in accordance with Sect. 25 para. 2 no. 2 TTDSG. The local memory on the user’s end device is also used to store the data.

The consent data is stored in accordance with the legal requirements of the GDPR and deleted in compliance with the provisions of Art. 17 GDPR. The data is processed within the European Union.

Links to other websites

Our website contains links to other websites. We have no influence over whether the operators of these websites comply with the relevant data protection regulations.

Use of Hubspot

We use HubSpot for our online marketing activities. This is an integrated software solution that we use to cover various aspects of our online marketing.

These include, among others:

  • Content management (website and blog)
  • Email marketing (newsletters and automated mailings, e.g. to provide downloads)
  • Social media publishing & reporting
  • Reporting (e.g. traffic sources, hits, etc. …)
  • Contact management (e.g. user segmentation & CRM)
  • Landing pages and contact forms

Our registration service allows visitors to our website to learn more about our portal, download content and provide their contact information and other demographic information.

This information and the content of our website is stored on the servers of our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which services or offers are of interest to them.

All information we collect is subject to this privacy policy.

We use all information collected solely to optimize our marketing.

HubSpot is a software company from the USA with a branch in Ireland.

Contact us:
HubSpot
2nd Floor, 30 North Wall Quay
Dublin 1, Ireland
Phone: +353 1 5187500

For this purpose, we have concluded a contract with HubSpot with so-called standard contractual clauses, in which HubSpot undertakes to process user data only in accordance with our instructions and to comply with the EU data protection level. Further information on HubSpot’s privacy policy can be found here:
https://legal.hubspot.com/dpa and https://legal.hubspot.com/privacy-policy

CRM system by Salesforce

We use the CRM system of the provider salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, in order to be able to process enquiries from our users more quickly and efficiently (legitimate interest pursuant to Art. 6 para. 1 lit. b. GDPR).

An EU standard contract has been concluded with Salesforce and the data protection regulations are implemented.

Salesforce only uses user data for the technical processing of enquiries and does not pass it on to third parties. To use Salesforce, it is necessary to provide at least a correct e-mail address. Pseudonymous use is possible. In the course of processing service requests, it may be necessary to collect further data (name, address).

If users do not agree to their data being collected and stored in Salesforce’s external system, we offer them alternative contact options for submitting service enquiries by email, telephone, fax or post.

Users can find further information in Salesforce’s privacy policy:
www.salesforce.com/company/privacy

Use of Google Ads conversion tracking

We use Google Ads and conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). If you give your consent, a cookie will be placed on your computer when you click on a Google advert. These cookies lose their validity after a limited time, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked via the websites of Google Ads customers. The information collected with the help of the cookie is used to create conversion statistics for Adwords customers who have opted for Google Ads and conversion tracking. Adwords customers learn the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. The legal basis for the use of marketing cookies is Art. 6 para. 1 a) or Art. 49 para. 1 a) GDPR in conjunction with your consent.

Use of Google Remarketing

This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyses your user behaviour on our website (e.g. clicks on certain pages) in order to categorise you in certain advertising target groups and then display suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked to Google’s cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalised advertising by clicking on the following link:
https://adssettings.google.com/anonymous?hl=en

The use of Google Remarketing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its products as effectively as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Further information and the data protection provisions can be found in Google’s privacy policy at:
https://policies.google.com/technologies/ads?hl=en

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (Google). Google Analytics uses cookies, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website is normally transmitted to and stored by Google on servers in the US. If IP anonymization is active, however, Google will truncate your IP address for Member States of the European Union or for other parties to the Agreement on the European Economic Area. Your full IP address will be sent to and truncated by Google on servers in the US in exceptional cases only. On behalf of the website provider, Google will use this information to analyze your use of the website, compile reports on website activity and provide the website provider with other services relating to website activity and Internet usage. Google Analytics will not associate the IP address transmitted from your browser with other data held by Google. You can refuse the storage of cookies by configuring the appropriate setting in your browser. If you do this, however, note that you might not benefit from all functions of this website. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plugin available here. In view of the discussion concerning the use of analysis tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()”, and therefore IP addresses are processed in truncated form only in order to rule out the possibility of direct personal references. Specifically for browsers on mobile devices, please use this link to prevent future anonymized tracking by Google Analytics on this website for your browser using an opt-out cookie.
Otherwise, data is processed in line with your consent.

Use of font libraries (Google Webfonts)

Type and purpose of processing
To display our content correctly and in a visually appealing manner on all browsers, we use “Google Web Fonts”, of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) to display fonts on this website.

The privacy policy of the library operator, Google, can be found here.

Legal basis
The legal basis for the use of Google Webfonts and the associated transfer of data to Google is your consent (Article 6(1)(a) GDPR).

Recipients
Accessing script or font libraries automatically establishes a connection to the library’s operator. It is theoretically possible – though currently unclear whether and, if so, for what purposes – for the operator, Google, to collect data.

Storage duration
We do not collect any personal data by using Google Webfonts.

Further information on Google Web Fonts can be found here and in Google’s privacy policy.

Third country transfer
Google processes your data in the US.

Provision prescribed or required
The provision of personal data is neither legally nor contractually prescribed. However, the correct presentation of content using standard fonts may not be possible.

Revoking consent
The programming language JavaScript is typically used to present content. You can therefore object to data processing by deactivating JavaScript in your browser or installing a JavaScript blocker. Please note that this could restrict functions on the website.

Use of Vimeo

Our company uses the Vimeo channel to provide you with further online offers and information from our company.

We would like to point out that the Vimeo channel is used solely for information and communication purposes.

Legal basis for use
The use of the Vimeo channel and the associated processing of personal data is based on your consent in accordance with Article 6(1)(a) GDPR.

The data you enter on our Vimeo channel, in particular your user name and the content published under your account, may be processed by us to the extent that we respond to your posts.

Otherwise, we only process visitors’ personal data to the extent necessary to process a request or comment.

Processing of visitors’ personal data by Vimeo
The video platform Vimeo is a company incorporated under the laws of the US state of Delaware. For the video function offered here, the Ministry of State uses the technical platform and services of Vimeo Inc, 555 West 18th Street New York, New York 10011, USA, e-mail: Privacy@vimeo.com.

We would like to point out that you use Vimeo and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. liking, commenting).

Information on what data is processed by Vimeo and for what purposes it is used can be found in Vimeo’s privacy policy https://vimeo.com/privacy. You can also find out about the use of cookies by Vimeo at https://vimeo.com/cookie_policy

We have no influence on the type and scope of the data processed by Vimeo, the type of processing and use or the transfer of this data to third parties. Nor does it have any effective control options in this respect.

On the one hand, Vimeo processes your voluntarily entered data such as name and user name, e-mail address or telephone number when you upload or synchronize it. The data remains stored by Vimeo until the company no longer has a commercial reason for storing it.

On the other hand, Vimeo also analyzes the content you share to determine which topics you are interested in and to place advertisements on third-party sites.

Vimeo may use analysis tools for evaluation purposes. The Ministry of State has no influence on the use of such tools by Vimeo, Inc. and has not been informed of any such potential use. If tools of this kind are used by Vimeo, Inc. for the Ministry of State’s account, the Ministry of State has neither commissioned nor approved this nor supported it in any other way. Nor is the data obtained during the analysis made available to it. Only certain non-personal information about post activity, such as the number of profile or media clicks and the viewing time of a specific video, can be viewed by the Ministry of State via its account. Furthermore, the Ministry of State has no way of preventing or disabling the use of such tools on its Vimeo account.

Finally, Vimeo also receives information when you view content, for example, even if you have not created an account. This so-called “log data” includes your IP address, technical information about your device (e.g. browser type, operating system, basic device information), the website you visited or the search query you entered before arriving at the Vimeo website, and your activities. These can be tracked using cookies and similar technologies. For more information on the use of cookies on Vimeo, see the cookie policy.

You have the option to manage cookies in your browser according to your wishes. For example, if you do not want Vimeo to set cookies and thus collect information about you, you can delete or deactivate cookies in your browser settings at any time. Please note that various functions may no longer be fully available after deactivating/deleting cookies.

The data remains stored by Vimeo until the company no longer has a business reason for storing the data. The data is then deleted or anonymized.

You have the option of restricting the processing of your data in the general settings of your Vimeo account. Further information on data protection options can be found under this point in Vimeo’s privacy policy. In addition, on mobile devices (smartphones, tablet computers) you can restrict Vimeo’s access to photos, location data and so on in the settings options there. However, this depends on the operating system you are using.

Disclosure of your personal data to third parties | transfer to third countries
Your personal data will not be passed on by us to third parties, unless expressly explained above.

Vimeo is based in the USA. However, the services are offered worldwide. The company uses computer systems, databases and servers in the USA and other countries. Your data may therefore also be transferred to the USA and processed there. In this respect, Vimeo relies on legitimate business interests and standard data protection clauses. Further information on this can be found in Vimeo’s privacy policy.

Handling of business cards

When you give us or exchange business cards with us, you are giving us personal data such as your telephone number or e-mail address. We use this information exclusively to remain in contact with you. We may also send you further information on our services. If you do not buy any products or services from our range, we erase your contact data after five years.
You have the right to access, rectification, or erasure at any time.

Use of a newsletter

When you register for our newsletter, you also give us your e-mail address and other optional data. We use this information exclusively to send you the newsletter. We store the data you enter when registering for the newsletter until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided in the newsletter or by letting us know. By unsubscribing, you object to the use of your e-mail address.

Other than this, we exclusively use your e-mail address, which we receive when you purchase goods or services, for direct marketing in the form of our newsletter for goods or services of ours similar to those you ordered, provided that you have not objected to its use. You can object to the use of your e-mail address at any time without incurring any costs beyond the basic rates for transmission. You can also object (and thereby unsubscribe from our newsletter) by sending a message to this effect to our e-mail address (see Legal Information).

Information on other data processing procedures

Specific information on the application process

Data in question: Application information.

Purpose of processing: Conducting the application process.

Categories of recipients:

  • Public bodies where other legal provisions take precedence.
  • External service providers or other contractors.
  • Other external bodies if the data subject has granted consent or transfer is permitted by overriding interests.

Third country transfers:
Processors outside the European Union can also be used in conjunction with contract performance.

Duration of data storage:
After you have been notified of a decision, application data is typically erased within four months unless you have consented to longer data storage.

Specific information on the processing of customer data/interested party data

Data in question:
Data communicated for contract performance; possibly further data for processing on the basis of your express consent.

Purpose of processing: Contract performance.

Categories of recipients:

  • Public bodies where other legal provisions take precedence.
  • External service providers or other contractors.
  • Other external bodies if the data subject has granted consent or transfer is permitted by overriding interests.

Third country transfers:
Processors outside the European Union can also be used in conjunction with contract performance.

Duration of data storage:
The duration of data storage is determined by the statutory retention requirements and is typically ten years.

Specific information on the processing of employee data

Data in question:
Data communicated for contract performance; possibly further data for processing on the basis of your express consent.

Purpose of processing: Contract performance.

Categories of recipients:

  • Public bodies where other legal provisions take precedence.
  • External service providers or other contractors.
  • Other external bodies if the data subject has granted consent or transfer is permitted by overriding interests.

Third country transfers:
Processors outside the European Union can also be used in conjunction with contract performance.

Duration of data storage:
The duration of data storage is determined by the statutory retention requirements and is typically ten years.

Specific information on the processing of supplier data

Data in question:
Data communicated for contract performance; possibly further data for processing on the basis of your express consent.

Purpose of processing: Contract performance.

Categories of recipients:

  • Public bodies where other legal provisions take precedence.
  • External service providers or other contractors.
  • Other external bodies if the data subject has granted consent or transfer is permitted by overriding interests.

Third country transfers:
Processors outside the European Union can also be used in conjunction with contract performance.

Duration of data storage:
The duration of data storage is determined by the statutory retention requirements and is typically ten years.

Your rights

You can exercise your rights to access, rectification or erasure or limitation of processing or exercise your right to object to processing and your right to data transferability at any time. You can contact us in this respect by e-mail or letter. You also have the right to direct complaints to the Data Protection Supervisory Authority.

We are happy to advise you

How can we help you? Write to us.
We look forward to hearing from you!

To the contact form

ProVI GmbH   //   Garmischer Str. 21   //   81373 Munich   //   kontakt@provi-cad.de
Newsletter