We take data protection very seriously. Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and other relevant data protection regulations.
Below, we inform you of how we process your data and what rights you will have if you visit our websites and use our online services there.
1. Controller, bases, purpose
The controller within the meaning of the data protection laws and the supplier within the meaning of the German Telemedia Act (Telemediengesetz, TMG) is:
vhf camfacture AG
Phone: +49 7032 97097 000
1.2. Processing purposes and legal basis
All access to our website and every request for a file that is available on the website will be logged. This logging is for internal system-related and statistical purposes. In this respect, the following data will be transmitted to us from your browser: Browser type and version, operating system in use, the referring URL (the previously visited site), the host name of the accessing computer (IP address) and the date and time of the server request. These data will not be assigned to specific persons. These data will not be merged with other sources of data.
The bases for the processing are Art. 6(1), sentence 1, letter (f) of the GDPR and § 15 of the German Telemedia Act (TMG).
b) Form-based data collection
In cases where it is possible to enter data via our website, e.g. for a quotation request, when registering for a newsletter or using a contact form, certain entry fields are marked as “required information”. We use these fields to collect only the data that is necessary for us to perform the contract or carry out the requested action. If you wish, you are obviously at liberty to provide us with additional data on a voluntary basis.
Your personal data will be used and stored in order to perform the contract that we have concluded with you, or to carry out actions that you have requested (e.g. to prepare a quote, or respond to a contact inquiry) and for advertising purposes (in this respect, please also read item c). As soon as the personal data are no longer required to achieve the intended purpose, they will be deleted. If any statutory retention obligations apply, the data will be held inaccessibly until expiry of the retention obligations and subsequently deleted.
The bases for processing the personal data are Art. 6(1), sentence 1, letters (a), (b) and (f) of the GDPR.
c) Advertising measures; including the email newsletter
You can, at any time, object to the use of your personal data, or withdraw your consent for this if you have given it to us – with future effect in each case – in writing, by fax, email or telephone.
This applies in particular to our email newsletter, which contains, for example, information about our products and services. We will send you our email newsletter only if you have given your consent to the use of your data for this purpose. You can unsubscribe from an email newsletter at any time, with future effect, either by clicking the link that is provided for this purpose in each email newsletter, or by contacting us using the contact data provided.
The bases for processing the personal data are Art. 6(1), sentence 1, letters (a) and (f) of the GDPR.
d) Partner login
Access to a protected area of the website containing, by way of example, information that is relevant for specialist traders can be granted to existing business partners upon request. The access data are not generally individual but group based and are given out only by us. The users themselves cannot register individually; users may not pass on data received from us.
The bases for the processing are Art. 6(1), sentence 1, letter (b) of the GDPR.
e) vhf shop customer account
Registration or log-in is required to place orders or for a customized presentation (e.g. to show agreed discount rates or display additional product groups).
You can register for a free, password-protected customer account via our website. You can use this account to view your completed orders and orders in progress, and to manage your personal data.
During the registration process, your first and last name and your email address will be collected as required information. You will be able to amend these data at any time. Your consent to data processing which you give when you register can be withdrawn at any time, with future effect, by deleting your account.
The basis for processing is Art. 6(1), sentence 1, letter (a) of the GDPR.
f) Online applications
Online applications can be submitted via the vhf website. We will store personal data that you voluntarily enter into the online form during the application process; this includes, in particular, your first and last names, address, email address, date of birth, place of birth, profession, resumé, and certificates. Additional data that are relevant to your application may be collected during the application process. These will also be stored.
Your personal data will be processed only for the purposes of handling the application process, unless you have expressly agreed to their use for another purpose.
If your application is unsuccessful, your personal data will be anonymized in compliance with the data protection regulations upon completion of the application process. Once the data has been anonymized, it will no longer be possible to draw a conclusion about the relevant person. We use anonymized data for statistical purposes only. Statistical analyses constitute a legitimate interest with respect to monitoring efficiency and optimizing the system.
Additional storage and use of your data will take place only if you have expressly stated that you wish to remain stored in our database even after completion of the specific application process so that you can potentially be contacted by us at a later date with respect to new projects/positions. If you no longer wish to receive such information, you can, at any time and with future effect, object to this use of your personal data, or withdraw your consent for their use, by letter, email or telephone.
The basis for the data processing is s. 26(1), sentence 1 of the German Data Protection Act (Bundesdatenschutzgesetz, BDSG) and Art. 6(1), sentence 1, letters (a) and (f) of the General Data Protection Regulation (GDPR).
If you name a third party as a reference in your application, you are responsible for ensuring that said third party agrees to his/her personal data being passed to vhf camfacture AG.
Cookies are small text files that are placed on your computer. Most of the cookies we use will be deleted again from your hard drive at the end of your browser session (session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (persistent cookies). Obviously, you also have the option to view our website without cookies. Most browsers will accept cookies automatically.
In addition, we also use the following third-party cookies:
- Google Analytics
- YouTube Analytics
If you have given us your consent, you can withdraw this at any time, or you can object to the data processing. The easiest way to do this is to prevent cookies from being saved on your hard disk by selecting “Do not accept any cookies” in your browser settings. However, if you do so, you may not be able to use all of the functions on our website to their full extent.
2. Disclosure of data to third parties
We will pass on your personal data within our company to the departments that require the data to comply with the contractual and statutory obligations or to pursue our legitimate interest. Further disclosure of your personal data, including your home address and email address, to third parties will be made only to the extent that this is essential for the purposes of contract performance, if you have expressly agreed to the disclosure, or if such disclosure is permitted under data protection law. However, in each case, only the essential data will be transferred.
If necessary for the purposes of delivering ordered goods, your address data will be passed to transport and logistics companies.
For payments made by “direct debit”, we will pass your data that are necessary for processing the payments to the payment provider you have selected.
Customers who hold a customer account with PayPal can effect the payment via “PayPal” or the “Express Purchase with PayPal Button”. PayPal is part of the company PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. By clicking on this button you will be taken directly to the PayPal website. In doing so, data will be transmitted to PayPal; in particular, PayPal will be informed that you have visited our website, with your IP address. We do not have any influence on how PayPal processes data. This will in fact depend on the terms and conditions that have been agreed between you and PayPal. PayPal will be solely responsible for the protection and handling of the data it collects. For further information on how PayPal handles data, please refer to PayPal’s privacy notice, available at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev.
In the following cases, our data processing will be carried out by a service provider who is bound by instructions, is obliged to comply with the data protection regulations, and is not authorized to use the data for other purposes:
- Reference management
- Service provider for checking data against European and international anti-terror lists
3. Your data protection rights
Subject to certain conditions, you have the right to request to be informed, free of charge, about the personal data we have stored about you, to have incorrect data rectified, and to erasure or restriction of processing and to portability of your personal data. You can object to the use of the data at any time with future effect. In some cases, however, we may not be permitted to completely delete user data owing to statutory retention obligations. We would also like to inform you of your right to lodge a complaint with the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
If you have any queries concerning the processing of personal data, please contact our data protection officer:
Address: Lettenstraße 10, 72119 Ammerbuch
Phone: +49 7032 97097 000
4. Privacy notices for third-party services
Based on our legitimate interests (i.e. an interest in the analysis, optimization, and economic operation of our online service within the meaning of point [f] of Article 6  GDPR), we include the content and service offerings of third-party providers within our online service in order to incorporate their content and services, such as videos or fonts (hereinafter jointly referred to as “Content”).
This is always subject to the third-party providers of this Content being aware of a user’s IP address, as they are unable to send Content to a user’s browser without an IP address. The user’s IP address is therefore required in order for the Content to be shown. We endeavor to only use Content the providers of which use IP addresses solely for the delivery of the Content. Third-party providers may additionally use so-called pixel tags (invisible graphics otherwise known as “Web beacons”) for statistical or marketing purposes. Pixel tags allow information such as visitor traffic on webpages to be evaluated. This pseudonymized information can also be stored on the user’s device in the form of cookies and can include details such as technical information regarding the browser and operating system, the referrer URLs, the visit time, and other information regarding the use of our online service, and may also be combined with corresponding information from other sources.
4.1 Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place. Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
Objecting to data collection
In the case of browsers on mobile devices, you can prevent Google Analytics from collecting your data by clicking on the following link Link. An opt-out cookie will be generated that prevents your data from being collected during future visits to this website: In this respect, please note that this opt-out cookie will function only in this browser and only for this domain. If you delete your cookies in this browser, you will need to click on the link again.
Further information on how Google Analytics handles user data can be found in Google’s privacy notice, available at:
- https://www.google.com/intl/en/policies/privacy/partners/ (“How Google uses data when you use our partners’ sites and apps”),
- http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”),
- https://www.google.com/settings/u/0/ads/authenticated?hl=en (“Determine the ads Google shows to you”),
Order Data Processing
We have concluded a contract for order data processing with Google and are fully implementing the strict specifications issued by the German data protection authorities in connection with use of Google Analytics.
Google Analytics Remarketing
Our websites make use of Google Analytics Remarketing functions in connection with the device-independent functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
With these functions, the advertising target groups that Google Analytics Remarketing generates can be linked with the device-independent functions of Google AdWords and Google DoubleClick. In this way, personalized advertising messages that relate to your interests, which have been adapted to you on the basis of your previous usage and surfing behavior (e.g. mobile phone) can also be displayed on another one of your end devices (e.g. tablet or PC).
If you have given appropriate consent, Google will link your web and app browser history to your Google account. In this way, the same personalized advertising messages can be displayed to you on every end device that you use to log in to your Google account.
To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked with our Google Analytics data, in order to define and generate target groups for the device-independent advertisements.
You can prevent the device-independent remarketing/targeting at any time by deactivating personalized advertising in your Google account; for further details, click on the following link: https://www.google.com/settings/ads/onweb/.
The collected data will be integrated in your Google account only on the basis of your consent, which you can give to or withdraw from Google at any time (Art. 6(1)(a) GDPR). The basis for data collection processes that are not linked with your Google account (e.g. because you do not have a Google account or you have turned off linking), is Art. 6(1)(f) of the GDPR. There is a legitimate interest because the website operator has an interest in conducting anonymized analyses of website visitors for advertising purposes.
Further information and the data protection terms can be found in Google’s privacy notice, available at: https://www.google.com/policies/technologies/ads/.
4.2 Bing Ads
The website uses the remarketing function “Bing Ads” provided by Microsoft Corporation One Microsoft Way, Redmond, WA 98052-6399, USA. (“Microsoft Advertising”). Microsoft Bing Ads stores a cookie on your computer if you have reached our website via a Microsoft Bing advert. This enables Microsoft Bing and us to determine that someone has clicked on an advert, been forwarded to our website and reached a previously determined target page (conversion page). We only learn the total number of users that have clicked on a Bing advert and then been forwarded to the conversion page. No personal information regarding the identity of the user is passed on.
If you do not want information on your behavior to be used by Microsoft as described above, you can refuse the setting of the cookie required for this purpose – for example by configuring the browser setting that disables the automatic setting of cookies generally. You can also prevent the collection of data generated by the cookie relating to your use of the website and the processing of this data by Microsoft by opting out at the following link: http://choice.microsoft.com/en/opt-out. Further information on data protection and the cookies used by Microsoft and in the context of Bing Ads is available on the Microsoft website at https://privacy.microsoft.com/en-us/privacystatement.
Bing Universal Event Tracking (UET)
On our website, data are acquired and stored with Bing Ads technologies to create usage profiles based on pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service allows us to track the activities of users on our website if they came to our website via Bing Ads advertisements. If you get to our website via such an advertisement, a cookie will be placed on your computer. A Bing UET tag is integrated on our website. This is a code via which, in connection with the cookie, some non-personal data about the use of the website will be stored. This includes the duration of the visit to the website, the areas of the website that were visited and the advertisement via which the user came to the website. Information about your identity is not collected.
The information acquired will be transmitted to Microsoft servers in the USA and stored there for a maximum of 180 days on principle. You can prevent acquisition of the data generated by the cookie that relate to your use of the website and the processing of these data by disabling cookies. This may restrict the functionality of the website.
Moreover, Microsoft can potentially use so-called cross-device tuning to track your user behaviour across multiple electronic devices and due to this may be able to show you personalised advertisements on Microsoft websites and in Microsoft apps. You can disable this behaviour at http://choice.microsoft.com/de-de/opt-out.
More detailed information about Bing’s analysis services is provided on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). More detailed information about data privacy at Microsoft and Bing is provided in the Microsoft data privacy statement (https://privacy.microsoft.com/de-de/privacystatement).
4.3 Plugins and tools
We use „Google reCAPTCHA“ (hereinafter referred to as „reCAPTCHA“) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyses the behaviour of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
The data is processed on the basis of Art. 6 Sect. 1 lit. f GDPR. It is in the website operators legitimate interest, to protect the operator’s web content against misuse by automated industrial espionage systems and against SPAM.
We have embedded videos from the Google-operated site YouTube (YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) into the “enhanced data protection mode” on our website. Launching the respective video will mean that your IP address will be passed to the YouTube server. YouTube will thus be informed that our internet site has been visited with your IP address. If you are also logged into YouTube on the browser that you use for this site, the account identifier will also be passed on. Hence, YouTube can assign your visit to this website to your user account. We will not be informed about the data that is collected in this way, or of how it is used.
YouTube is used in the interests of providing an attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR.
Further information about how user data is handled can be found in YouTube’s privacy notice, available at: https://policies.google.com/privacy?hl=en&gl=en.
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Strasse 126, 10179 Berlin, Germany. Sendinblue is a service that can be used, among other things, to organise and analyse the sending of newsletters. The data you enter to subscribe to the newsletter is stored on Sendinblue’s servers in Germany.
Data analysis by Sendinblue
Sendinblue enables us to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked on. In this way we can determine which links have been clicked on particularly often.
We can also see whether certain previously defined actions have been carried out after opening/clicking (conversion rate). For example, we can see whether you have made a purchase after clicking on the newsletter.
Sendinblue also allows us to cluster newsletter recipients into different categories. This allows us to classify newsletter recipients according to age, gender or place of residence, for example. This makes it easier to tailor the newsletter to the relevant target groups.
If you don’t want Sendinblue to analyse you, you must unsubscribe from the newsletter. We provide a link to this in every newsletter message. You can also unsubscribe directly on the website.
For full details of Sendinblue’s features, please refer to the following link: https://de.sendinblue.com/newsletter-software/.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you have cancelled your subscription. Data stored by us for other purposes remain unaffected by this.
After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 subsection 1 sentence 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Conclusion of a contract for processing orders
We have entered into an agreement with Sendinblue in which we commit Sendinblue to protect our customers’ information and not to pass it on to third parties.
4.4 Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.
You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.
Individual social networks
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
We use the short message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
You can customize your Twitter privacy settings in your user account. Click on the following link and log in: https://twitter.com/personalization.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.