UnternehmenServiceProdukteKundencenterKontakt
English

Privacy policy

Data protection policy

We are delighted that you are interested in learning more about our company. The managing directors of VEMAG Maschinenbau GmbH attach particular importance to the protection of your data. In principle, you can use the VEMAG Maschinenbau GmbH websites without providing us with any personal data.

It may however be necessary for us to process your personal data if you wish to use particular services offered via our websites.

We always process personal data (such as a data subject's name, address, email address or telephone number) in compliance with the General Data Protection Regulation and the country-specific data protection provisions which apply to VEMAG Maschinenbau GmbH.

The purpose of this data protection policy is to inform you about the purposes for which VEMAG Maschinenbau GmbH collects, uses and processes personal data, and the nature and scope of its activities in this respect. It also informs you about your rights.
 

  1. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the EU Member States and other provisions of a similar nature is:

VEMAG Maschinenbau GmbH
Weserstr. 32
27283 Verden (Aller)
Germany

Tel.: +49 (0) 42 31 - 77 70
E-Mail: e-mail(at)vemag.de
Website: www.vemag.de
 

  1. Definition of terms

The terminology used by VEMAG Maschinenbau GmbH in its data protection policy is the same as that used by the EU regulator in the General Data Protection Regulation (GDPR). We want our data protection policy to be easy for you to read and understand. We have therefore provided an explanation of this terminology below.

The terms used in this data protection policy have the following meanings:

  • a) Personal data

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • b) data subject

"Data subject" means any identified or identifiable natural person whose personal data is used by the controller.

  • c) Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • d) Restriction of processing

"Restriction of processing" means the marking of stored personal data with the aim of limiting its processing in the future.

  • e) Profiling

"Profiling" means any form of automated processing of personal data involving the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

  • f) Pseudonymisation

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

  • g) Controller

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for their nomination may be provided for by Union or Member State law.

  • h) Processor

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  • i) Recipient

"Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data is disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law will not be regarded as recipients.

  • j) Third party

"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  • k) Consent

"Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
 

  1. User data

Every time you access one of our websites, general data and information are collected and stored in log files on the server. These may include:

  • the browser type and version you are using,
  • the operating system you are using,
  • the website you visited directly before arriving at our website ("referrer"),
  • the sub-pages via which you were directed to our website,
  • the date and time when you accessed our website,
  • your Internet protocol address (IP address),
  • your Internet Service Provider, and
  • other similar data and information which can be used to avert threats in the event that our IT systems are attacked.


The general data and information referred to above are not used to identify you. Instead, they are used to:

  • ensure that the content of our websites is delivered correctly,
  • optimise the content of our websites and the way in which they are advertised,
  • guarantee the long-term functionality of our IT systems and the technologies used on our websites, and
  • provide the necessary information to law enforcement authorities in the event of a cyber attack.


The data and information referred to above are therefore collected anonymously by VEMAG Maschinenbau GmbH and evaluated, firstly for statistical purposes, and secondly with the aim of improving the level of data protection and data security within our company and ultimately optimising the level of protection we provide for the personal data we process. The anonymous data in the server log files are stored separately from any personal data you provide.
 

  1. Data protection when applying for a job with VEMAG Maschinenbau GmbH and during the application procedure

VEMAG Maschinenbau GmbH collects and processes the personal data of individuals who apply for a job within the company; it does so for the purpose of handling the application procedure. The personal data may also be processed electronically. This is particularly the case if the applicant has submitted the relevant application documents to the controller electronically, for example by email.
Upon conclusion of a contract of employment with an applicant, the data which has been transferred for the purpose of establishing an employment relationship will be stored in compliance with the statutory provisions. In the event that a decision is taken not to conclude a contract of employment between VEMAG Maschinenbau GmbH and the applicant, the application documents will be erased six months after the applicant has been notified of this decision, provided that there are no other legitimate interests of the controller which prevent this erasure.
Such legitimate interests include e.g. the obligation to provide evidence in proceedings under the General Equal Treatment Act [Allgemeines Gleichbehandlungsgesetz, AGG].
In cases where we wish to store the application documents for a period longer than that specified above, we will obtain consent to do so from the applicant in question.
 

  1. Contact via the website

As per the statutory provisions, the VEMAG Maschinenbau GmbH website provides details of how you can use electronic means of communication to contact our company quickly and communicate with us directly; these options include a general email address.

If you make contact with our company via email or a contact form, the personal data you provide will be stored automatically. Any personal data of this kind which you transfer to us voluntarily will be stored for the purpose of processing or in order to make contact with you. Your personal data will not be transferred to third parties.
 

  1. Cookies

VEMAG Maschinenbau GmbH's websites use cookies. Cookies are text files which a web browser downloads and stores on a computer system.
A great many websites and servers use cookies. Many cookies contain a "cookie ID". A cookie ID is a unique identifier for the cookie. It consists of a sequence of characters which can be used to assign websites and servers to the specific web browser where the cookie was stored. This makes it possible for the websites and servers you visit to distinguish between your browser and other web browsers. A specific web browser can be recognised and identified using the unique cookie ID.

Cookies allow VEMAG Maschinenbau GmbH to provide you and other users of this website with user-friendly services that would not otherwise be possible. They make it possible to optimise the information and offers on our websites to reflect your personal interests. As explained above, cookies allows us to recognise you and other users of our websites. The aim of this is to make it easier for you to use our websites. For example, website users who allow cookies do not need to enter their login details every time they visit the website, because this task is handled by the website and the cookie stored on the user's computer system. The shopping baskets in online shops also use cookies. They allow the online shop to remember the items which a customer has placed in his or her virtual basket.

You can prevent cookies being set by our website at any time and on a permanent basis by altering the settings in the web browser you use. You can also delete any cookies which have already been set at any time using a web browser or other piece of software. All popular web browsers include this functionality. If you disable cookies in the web browser you use, you may not always be able to use all of the functionalities of our websites in full.

Many online advertising cookies from companies can be managed via the US-based website www.aboutads.info/choices/ or the EU-based website www.youronlinechoices.com/uk/your-ad-choices/.
More information on the use of cookies in relation to Google Analytics and Matomo can be found in the sections below.

  1. Web analytics

Web analytics is the collection, organisation and evaluation of data about the behaviour of website visitors.
The data collected by a web analytics service includes the following:

  • von welcher Internetseite der Besucher auf eine Internetseite gekommen ist (the website visited directly before the visitor arrived at the relevant website ("referrer"),
  • which sub-pages of the website were accessed, or
  • how often and for how long the visitor stayed on a sub-page.

The primary purpose of web analytics is to optimise websites; it is also used as a basis for cost/benefit analyses of web advertising.

We use the following web analytics services on our website:
7.1 Data protection rules concerning the deployment and use of Google Analytics (with anonymisation function)
A Google Analytics component (with anonymisation function) is integrated into our website. Google Analytics is a web analytics service.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

We use the extension "_gat._anonymizeIp" for web analytics via Google Analytics. Google uses this extension to shorten and anonymise the IP address of your Internet connection if our websites are accessed from an EU Member State or another contracting party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor flows to our website. Google uses the data and information which have been collected for various purposes; these include evaluating use of our website so that online reports outlining website activity can be compiled, and providing other services associated with use of our website.
We also have a legitimate interest in processing data for these purposes. The legal basis for the deployment of Google Analytics is Section 15(3) of the Telemedia Act [Telemediengesetz, TMG] or Article 6(1)(f) GDPR. We have concluded a contract with Google concerning the associated processing of data by a processor. The data that we send to Google and that is associated with cookies, user IDs or advertising IDs is erased automatically after 14 months. As soon as the storage period has expired, data is erased automatically once per month.

Google Analytics sets a cookie on your IT system. Reference should be made to the preceding section for an explanation of the term "cookie". Setting cookies makes it possible for Google to analyse the use of our website. Every time one of the individual pages of this website (which is operated by VEMAG Maschinenbau GmbH and into which a Google Analytics component is integrated) is accessed , the relevant Google Analytics component tells the web browser on your IT system to forward data to Google for the purpose of online analysis. This technical procedure allows Google to obtain personal data such as your IP address, which Google uses for various purposes, including an improved understanding of your browsing history and clicks with a view to commission-related calculations at a later date.

For example, cookies are used to store your personal data, such as the time and place of access and the frequency of visits to our websites. Every time you visit our websites, this personal data (including the IP address of the Internet connection you use) is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Under certain circumstances, Google may transfer the personal data collected using this technical procedure to third parties.

As explained above, you can prevent cookies being set by our websites at any time and on a permanent basis by changing the settings of the web browser you use. Changing the settings of the web browser you use in this way would also prevent Google from setting cookies on your IT system. A cookie set previously by Google Analytics can be erased at any time using the web browser or another piece of software.

You can also object to the collection of data generated by Google Analytics in relation to your use of this website and object to and prevent the processing of this data by Google. In order to do so, you must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout.
This browser add-on uses JavaScript to tell Google Analytics that no data and information about your visits to websites may be transferred to Google Analytics. Installation of the browser add-on is interpreted by Google as an objection. If your IT system is deleted, formatted or newly installed at a later point in time, you must reinstall the browser add-on in order to disable Google Analytics. If the browser add-on is uninstalled or disabled by you or any other person for whom you are responsible, it can be reinstalled or reactivated.

Further information on the applicable Google data protection policies can be found at policies.google.com/privacy and www.google.com/analytics/terms/de.html. A more detailed explanation of Google Analytics can be found at www.google.com/analytics/.

7.2 Data protection rules concerning the deployment and use of Matomo
A Matomo component is integrated into this website. Matomo is an open-source software tool for web analytics.

The software runs on VEMAG Maschinenbau GmbH's server, and log files which are deemed sensitive under data protection law are only stored on this server.

The purpose of the Matomo component is to analyse visitor flows to our website. VEMAG Maschinenbau GmbH uses the data and information which have been obtained in this way for various purposes, for example to evaluate use of the website so that online reports outlining website activity can be compiled. We also have a legitimate interest in processing data for this purpose. The legal basis for the deployment of Google Analytics is Section 15(3) of the Telemedia Act [Telemediengesetz, TMG] or Article 6(1)(f) GDPR.

Matomo sets a cookie on your IT system. For an explanation of the term "cookie", refer to the section above. Setting cookies makes it possible for us to analyse the use of our website. Every time you access one of the individual pages of this website, the Matomo component automatically tells the web browser on your IT system to transfer data to our server for the purpose of online analysis. This technical procedure allows us to obtain personal data such as your IP address, which we use for various purposes, including an improved understanding of your browsing history and clicks.
For example, cookies are used to store your personal data, such as the time and place of access and the frequency of visits to our websites. Every time you visit our websites, this personal data (including the IP address of the Internet connection you use) is transferred to our server. We store this personal data. We do not transfer this personal data to third parties.

As explained above, you can prevent cookies being set by our websites at any time and on a permanent basis by changing the settings of the web browser you use. Changing the settings of the web browser you use in this way would also prevent Matomo from setting cookies on your IT system. A cookie set previously by Matomo can be erased at any time using the web browser or another piece of software.
You can also object to and prevent the collection of the data generated by Matomo in relation to this website. In order to do so, you must set an opt-out cookie. If your IT system is deleted, formatted or reinstalled at a later point in time, you will need to set the opt-out cookie again. If an opt-out cookie is set, it is possible that the user may no longer be able to use the controller's website in full.

Further information on on the applicable Matomo data protection policies can be found at matomo.org/privacy/.
 

  1. Data protection rules concerning the deployment and use of Google Adwords

Google AdWords is integrated into our website. Google AdWords is an Internet advertising service which allows advertisers to place advertisements in Google search results and in the Google advertising network. Google AdWords allows advertisers to define certain keywords in advance; an advertisement will only be displayed in the Google search results if the visitor uses the search engine to retrieve a search result which is relevant to the keywords. In the Google advertising network, the advertisements are displayed on the basis of an automatic algorithm in accordance with the keywords previously observed on relevant websites.

The operator of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying personalised advertisements on the websites of third-party companies and in Google search results, and displaying third-party advertisements on our website. We also have a legitimate interest in processing data for these purposes. The legal basis for the deployment of Google Analytics is Section 15(3) of the Telemedia Act [Telemediengesetz, TMG] or Article 6(1)(f) GDPR.

If you arrive at our website by clicking on a Google advertisement, a "conversion cookie" will be stored on your IT system by Google. Reference should be made to the preceding section for an explanation of the term "cookie". A conversion cookie becomes invalid after 30 days and is not used to identify visitors. Conversion cookies which are still valid are used to determine whether particular sub-pages of our websites (for example the shopping basket of an online shop system) have been accessed.
Google uses the data and information collected by means of the conversion cookie to produce visitor statistics for our website. In turn, we use these visitor statistics to determine the total number of visitors who reach us via AdWords advertisements in order to gauge the success of the relevant AdWords advertisement and optimise our AdWords advertisements in future. Neither our company nor other Google Adwords advertisers receive any information from Google which could be used to identify you or other visitors.
Conversion cookies are used to store personal data, for example the websites you have visited. Every time you visit our websites, personal data (including the IP address of the Internet connection you use) is therefore transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Under certain circumstances, Google may transfer the personal data collected using this technical procedure to third parties.

As explained above, you can prevent cookies being set by our websites at any time and on a permanent basis by changing the settings of the web browser you use. Changing the settings of the web browser you use in this way would also prevent Google from storing a conversion cookie on your IT system. A cookie set previously by Google AdWords can be erased at any time using the web browser or another piece of software.
You can also object to personalised advertising by Google. In order to do so, you must access the link www.google.com/settings/ads in the web browser you use and change the relevant settings.

Further information on the applicable Google data protection policies can be found at www.google.com/intl/de/policies/privacy/.
 

  1. Data protection rules concerning the deployment and use of YouTube

YouTube components are integrated into various sections of our website. YouTube is an Internet-based video portal which allows video publishers to upload clips and other users to watch, rate and comment on them, in both cases free of charge. YouTube allows many different kinds of videos to be uploaded, and the Internet portal therefore hosts not only complete films and TV programmes, but also music videos, trailers and user-made videos.

The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Every time you access one of the pages on our websites into which a YouTube component (YouTube video) is integrated, the YouTube component tells the web browser on your IT system to download a version of the relevant YouTube component from YouTube.

Further information on YouTube can be accessed at www.youtube.com/yt/about/. As part of this technical procedure, YouTube and Google are provided with information on the specific sub-pages of our websites which you have visited.

If you are logged into YouTube at the same time, YouTube will detect the specific sub-page of our websites which you visit whenever you visit a sub-page containing a YouTube video. This information is collected by YouTube and Google and assigned to your individual YouTube account.
YouTube and Google will always be told (via the YouTube component) that you have visited our website if you are logged into YouTube when you visit our website; this will apply regardless of whether you click on a YouTube video. If you do not wish any such information to be transferred to YouTube and Google, you can prevent this by logging out of your YouTube account before accessing our website.

The data protection polices published by YouTube, which can be accessed at policies.google.com/privacy, provide information on the collection, processing and use of personal data by YouTube and Google.
 

  1. Legitimate interests in processing pursued by the controller or a third party

If the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is the conduct of business activities for the benefit of all of our employees and our shareholders.
 

  1. Automated decision-making

As a responsible company, we do not use automated decision-making or profiling procedures.
 

  1. Statutory or contractual regulations on the provision of personal data; need for conclusion of a contract; data subject's obligation to provide personal data; potential consequences of not providing data

In some cases, you may be required to provide personal data on the basis of statutory provisions (e.g. tax regulations) or contractual provisions (e.g. information on the contracting party).
You may sometimes need to provide us with personal data which will subsequently be processed by us if you conclude a contract with us (e.g. as a prospect, customer or supplier).
For example, prospects are obliged to provide us with personal data if they conclude a contract with our company (e.g. name and contact details for a contact person).
If you refuse to provide personal data to us, this will mean that a contract cannot be concluded with you. Prospects should contact one of our employees before providing personal data. Our employee will explain to you, on the basis of your specific circumstances,

  • whether the provision of personal data is required on the basis of statutory or contractual provisions, or
  • whether the provision of personal data is necessary to conclude a contract,
  • whether you are obliged to provide personal data, and
  • the potential consequences of a failure to provide personal data.


  1. Legal basis for processing

VEMAG Maschinenbau GmbH processes personal data on the basis of the following legislative provisions:
 

  1. Consent

As a general rule, we will obtain your consent for the processing of personal data if such processing is necessary and there is no legal basis for it. Article 6(1)(a) GDPR serves as a legal basis for the processing of data by our company in such cases.

  1. Performance of a contract or steps prior to entering into a contract

In the event that the processing of personal data is necessary to perform a contract which we have concluded with you, for example the processing operations necessary to supply goods or render any other service or service in return, the processing will be based on Article 6(1)(b) GDPR.
The same applies to any processing operations necessary to carry out steps prior to entering into a contract (e.g. at the enquiry or quotation stage), for example in the event that we receive enquiries about our products or services.

  1. Legal obligation

In the event that our company is required to process personal data on the basis of a legal obligation, for example a tax-related obligation, the processing will be based on Article 6(1)(c) GDPR.

  1. Protection of vital interests

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. For example, this would be the case if a visitor to our premises suffered an injury and it became necessary as a result to provide his or her name, age, health insurance details or other vital information to a doctor, hospital or other third party. In such cases the processing would be based on Article 6(1)(d) GDPR.

  1. In the public interest and in the exercise of official authority vested in the controller

It may be necessary to process personal data if this is necessary to perform a task in the public interest or in the exercise of official authority vested in the controller (e.g. the prosecution of a crime). In such cases the data will be processed on the basis of Article 6(1)(e) GDPR.

  1. Legitimate interest pursued by the controller

Finally, data may be processed on the basis of Article 6(1)(f) GDPR. This clause covers processing operations which do not fall under any of the categories referred to above. The processing of personal data is necessary in such cases to protect a legitimate interest of our company or a third party provided that the interests or the fundamental rights and freedoms of the data subject are not overriding.
The European regulator makes specific reference to such processing operations as being lawful. Recital 47 sentence 2 GDPR states that a legitimate interest may be present if the data subject is a client of the controller, for example.

  1. Length of time for which personal data is stored

The length of time for which personal data is stored is decided on the basis of the applicable statutory retention period. Once this period has expired, the relevant data is routinely erased provided it is no longer required for the performance or establishment of a contract.
 

  1. Routine erasure and blocking of personal data

VEMAG Maschinenbau GmbH only processes and stores personal data for the length of time necessary to achieve the purpose of storage or in so far as provided for by the European regulator or another regulator in legislative acts or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a storage deadline imposed by the European regulator or another competent regulator expires, the personal data is routinely blocked or erased in accordance with the statutory provisions.

  1. Data security

In its capacity as controller, VEMAG Maschinenbau GmbH has implemented many different technical and organisational measures to ensure that the personal data processed via this website is protected to the fullest extent possible.
Nevertheless, transfers of data via the Internet are in principle exposed to security loopholes, meaning that absolute protection cannot be guaranteed. You are therefore welcome to transfer personal data to us using alternative channels, for example by telephone.

In order to protect the data you transfer as effectively as possible, the website operator uses SSL encryption. Encrypted connections can be identified by the prefix "https://" in the webpage link in the address bar of your browser. Unencrypted pages can be identified by the prefix "http://".
Any data which you transfer to this website, for example in connection with an enquiry or when logging in, cannot be read by third parties thanks to SSL encryption.
 

  1. Your rights

The EU regulator has granted you a number of different rights. These include:

a) Right to confirmation
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed. If you would like to exercise this right to confirmation, you can contact one of our employees or our Data Protection Officer at any time.

b) Right of access
In the event that VEMAG Maschinenbau GmbH processes personal data concerning you, you have the right to obtain information at any time on the personal data concerning you which we store and a copy of the data (in both cases free of charge). The European regulator has furthermore stipulated that the following information must be provided to you:

  • the purposes of the processing
  • the categories of personal data concerned
  • the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where the personal data is not collected from the data subject, any available information as to their source
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you


You also have a right to be informed if personal data is transferred to a third country or to an international organisation. If such data transfers take place, you are also entitled to information on appropriate guarantees in this connection.
If you would like to exercise this right of access, you can contact one of our employees or our Data Protection Officer at any time.

c) Right to rectification
If VEMAG Maschinenbau GmbH processes your personal data, you have the right to demand, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you would like to exercise this right to rectification, you can contact one of our employees at any time.

d) Right to erasure ("right to be forgotten")
You have the right to demand the erasure of personal data concerning you, without undue delay, where one of the following grounds applies and if the processing is not necessary:

  • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  • You withdraw the consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
  • You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  • The personal data has been unlawfully processed.
  • The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.


If any of the above grounds apply and you wish to request the erasure of personal data stored by VEMAG Maschinenbau GmbH, you can contact one of our employees or our Data Protection Officer at any time. VEMAG Maschinenbau GmbH employees will arrange for your personal data to be erased as soon as possible.

Where VEMAG Maschinenbau GmbH has made the personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, VEMAG Maschinenbau GmbH, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, that personal data, provided the processing is not necessary. VEMAG Maschinenbau GmbH employees will arrange for the necessary measures to be taken on a case-by-case basis.
e) Right to restriction of processing
You have the right to request from VEMAG Maschinenbau GmbH restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use.
  • The controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
  • You have objected to processing pursuant to Article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override your objections.

If any of the above requirements are met and you wish to request a restriction of the processing of personal data stored by VEMAG Maschinenbau GmbH, you can contact one of our employees or our Data Protection Officer at any time. The employee of VEMAG Maschinenbau GmbH will arrange for the necessary restriction of processing.
f) Right to data portability
You have the right to receive the personal data concerning you and which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit such data to another controller without hindrance from VEMAG Maschinenbau GmbH, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Pursuant to Article 20(1) GDPR, you furthermore have the right to have the personal data transmitted directly from VEMAG Maschinenbau GmbH to another controller, where technically feasible, provided this does not adversely affect the rights and freedoms of others.
If you wish to exercise your right to data portability, you can contact one of VEMAG Maschinenbau GmbH's employees or our Data Protection Officer at any time.
g) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.
In the event of an objection, VEMAG Maschinenbau GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data is processed by VEMAG Maschinenbau GmbH for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also includes profiling to the extent that it is related to such direct marketing. If you object to processing by VEMAG Maschinenbau GmbH for direct marketing purposes, your personal data will no longer be processed by VEMAG Maschinenbau GmbH for such purposes.

Where personal data is processed by VEMAG Maschinenbau GmbH for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, you furthermore have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

If you wish to exercise your right to object, you can contact any of VEMAG Maschinenbau GmbH's employees or our Data Protection Officer at any time.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may also exercise your right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or affects you in a similarly significant way. This will not apply if the decision:
(1) is required for entering into or performance of a contract between you and VEMAG Maschinenbau GmbH, or
(2) is authorised by Union or Member State law to which VEMAG Maschinenbau GmbH is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
(3) is based on your explicit consent.

If the decision
(1) is required for entering into or performance of a contract between you and VEMAG Maschinenbau GmbH, or
(2) is based on your explicit consent,
VEMAG Maschinenbau GmbH will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of VEMAG Maschinenbau GmbH, to express your point of view and to contest the decision.
If you wish to exercise your rights in relation to automated decisions, you can contact a VEMAG Maschinenbau GmbH employee or our Data Protection Officer at any time.
i) The right to withdraw consent under data protection law
You are entitled to withdraw your consent to the processing of personal data at any time.
If you would like to exercise your right to withdraw consent, you can contact one of our employees or our Data Protection Officer at any time.

i) The right to lodge a complaint
If you believe that your personal data has been processed unlawfully, you can exercise your right to lodge a complaint with the data protection supervisory authority:
 

Data Protection Commissioner for the Federal State of Lower Saxony
Prinzenstraße 5
30159 Hannover
Tel. +49 (0) 511 120 – 45 00  
Fax +49 (0) 511 120 – 45 99
 
  1. Name and address of the Data Protection Officer

If you have any questions and suggestions concerning data protection or if you would like to exercise your rights, you can contact our Data Protection Officer.

The VEMAG Maschinenbau GmbH Data Protection Officer is:
Claudia Frenzel
VEMAG Maschinenbau GmbH
Weserstr. 32
27283 Verden (Aller)
Deutschland
Tel.: +49 (0) 42 31 - 77 74 80
E-Mail: datenschutz(at)vemag.de
Website: www.vemag.de



This privacy policy was produced using the data protection policy generator of datenschutz din 66399 in cooperation with RC GmbH (a company which recycles used IT equipment) and WBS-LAW (specialists in file sharing).