Privacy Policy

1. General Information and Mandatory Clauses

Handling of Personal Data Hereinafter we explain how we handle your personal data.

Information on the Controller The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: ViOX DESIGN GmbH Bavariastraße 6b 80336 Munich, Germany Phone: +49 (0) 89 – 380 194 0 Email: office@viox-design.de

Information on the Data Protection Officer (DPO) We have appointed a data protection officer: c/o activeMind AG Management- und Technologieberatung Potsdamer Straße 3 80802 Munich, Germany Phone: +49 (0)89 / 91 92 94 – 900 Email: anfrage@activemind.de

2. Your Rights as a Data Subject

Under the contact details provided, you can exercise the following rights at any time: * Access to your data stored by us and information on its processing (Art. 15 GDPR), * Rectification of incorrect personal data (Art. 16 GDPR), * Erasure of your data stored by us (Art. 17 GDPR), * Restriction of data processing, provided that we are not yet permitted to delete your data due to statutory obligations (Art. 18 GDPR), * Objection to the processing of your data by us (Art. 21 GDPR), and * Data portability, provided you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, e.g., the competent supervisory authority of the federal state of your residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) including addresses can be found at: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html.

3. Information About Your Right to Object Under Art. 21 GDPR

Individual Right to Object You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Recipient of an Objection The objection can be made informally with the subject line “Objection”, stating your name, address, or other identifying characteristics, and should be sent to: ViOX DESIGN GmbH Bavariastraße 6b 80336 Munich, Germany Phone: +49 (0) 89 – 380 194 0 Email: office@viox-design.de

4. Server Log Files

* Type and Purpose of Processing: When you access our website—i.e., if you do not register or otherwise submit information—information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and the like. It is processed in particular for the following purposes: * Ensuring a trouble-free connection setup of the website * Ensuring the smooth use of our website * Ensuring and evaluating system security and stability, particularly for abuse detection * Ensuring a correct presentation and optimization of our website We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

• Legal Basis: The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and abuse detection. * Recipients: Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.
• Third-Country Transfer: No third-country transfer takes place. The data is processed exclusively within the EU/EEA. * Storage Duration: Data in server log files is stored in a form that permits identification of the data subjects for a maximum period of 7 days, unless a security-related event occurs (e.g., a DDoS attack). In the event of such an occurrence, server log files will be stored until the security-related event has been resolved and fully investigated. * Provision Mandatory or Required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted.
• Right to Object: Please read the information about your right to object under Art. 21 GDPR in Section 3 of this privacy policy.

5. Contacting Us

* Type and Purpose of Processing: A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. Contact can also be made via the provided email addresses. In this case, the user’s personal data transmitted with the email will be stored. This includes the date and time of the email transmission, the email address, IP addresses, and information about the servers involved in the email communication. You can also contact us via the phone number provided. In this case, we collect log data containing your phone number and the duration of the call. Regardless of the chosen communication channel, we collect the content of your inquiry. Your data will be stored for the purpose of individual communication with you. * Legal Basis: The processing of data entered into the contact form is based on a legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest in processing your data is to enable uncomplicated contact. If you contact us to request a quote, the processing of the data entered into the contact form is carried out to implement pre-contractual measures (Art. 6(1)(b) GDPR). * Recipients: Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.

• Third-Country Transfer: No third-country transfer takes place. The data is processed exclusively within the EU/EEA. * Storage Duration: The data you send us via contact requests will remain with us until you request erasure, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after the final processing of your request). Mandatory statutory provisions—in particular statutory retention periods—remain unaffected. * Provision Mandatory or Required: The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the inquiry.
• Right to Object: Please read the information about your right to object under Art. 21 GDPR in Section 3 of this privacy policy.

6. Newsletter

* Type and Purpose of Processing: For the delivery of our newsletter or comparable information, we collect personal data transmitted to us via an input mask. For an effective registration, we require a valid email address. In order to verify that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation email, and the receipt of the requested response. No further data is collected. * Legal Basis: Based on your explicitly granted consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or comparable information by email to your specified email address. * Recipients: We use a service provider for the distribution who acts as our processor.

• Third-Country Transfer: No third-country transfer takes place. The data is processed exclusively within the EU/EEA. * Storage Duration: In this context, the data is only processed as long as the corresponding consent is active. * Provision Mandatory or Required: The provision of your personal data is voluntary, solely based on your consent. Without existing consent, we cannot send you our newsletter. * Withdrawal of Consent: You can withdraw your consent to the storage of your personal data and its use for newsletter distribution at any time with effect for the future. The unsubscribe request can be made via the link contained in every email or via the contact information listed in this privacy policy.

7. Job Applications

* Type and Purpose of Processing: You can submit your application documents to us by email. We will process the data provided by you exclusively to evaluate your professional suitability and to contact you.

• Legal Basis: The processing is carried out to establish an employment relationship in the context of implementing pre-contractual measures taken at your request, pursuant to Art. 6(1)(b) GDPR. * Recipients: Within the company, access to your data is granted to those departments that require it to fulfill contractual, statutory, and regulatory obligations, as well as to safeguard legitimate interests. Furthermore, we use service providers acting as processors for the management of the application process.
• Third-Country Transfer: No third-country transfer takes place. The data is processed exclusively within the EU/EEA. * Storage Duration: In the event of a rejection of your application, erasure takes place six months after notification of the decision. If an employment relationship is established, the application documents will be filed at least for the duration of the employment with us.

If we do not make you a job offer, there may be an option to include you in our applicant pool. In the event of inclusion, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies. Inclusion in the applicant pool occurs exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no bearing on the ongoing application process. The data subject can withdraw their consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no statutory reasons for retention. Data from the applicant pool will be irrevocably deleted at the latest two years after consent was granted. * Provision Mandatory or Required: The provision of personal data is neither legally nor contractually required. However, without providing it, processing of the application is not possible.

8. Cookies

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. You can delete individual cookies or the entire cookie inventory. Furthermore, you can find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information under the following links: * Mozilla Firefox: support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen * Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies * Google Chrome: support.google.com/accounts/answer/61416?hl=de * Opera: www.opera.com/de/help * Safari: support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Borlabs

Our website uses Borlabs, a consent management tool provided by Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg.
Borlabs enables us to obtain, manage and document website visitors’ consent to the use of cookies and other tracking technologies in a manner that complies with the law. When you visit our website, Borlabs sets a technically necessary cookie (borlabs-cookie) in which your consent decision is stored. This means that consent does not need to be requested again each time you visit a page.
The stored data is not passed on to third parties and is not transferred outside the EU. This data is not combined with other data sources.
The cookie is automatically deleted after 12 months.
For further information, please refer to the provider’s privacy policy: 

Polylang Pro

Our website uses the Polylang Pro plugin provided by WP SYNTEX, 28 Allée Jean Sébastien Bach, 38090 Villefontaine, France. The plugin is used to make our website available in multiple languages.
Polylang Pro sets a technically necessary cookie (pll_language) which stores the language selected by the visitor or automatically detected, in order to ensure a consistent language display throughout the session. This cookie contains only information relating to the selected language (e.g. ‘de’ or ‘en’) and no other personal data.
The cookie is automatically deleted when the browser is closed (session cookie). Alternatively, it may be stored as a persistent cookie to retain the language preference for a subsequent visit.
No data is transferred to third parties or to third countries.
For further information, please refer to the provider’s privacy policy: https://polylang.pro/privacy-policy/

Technically Necessary Cookies

* Type and Purpose of Processing: We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is required that the browser is recognized even after a page change.

• Legal Basis: The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in a user-friendly design of our website. * Recipients: Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website.
• Third-Country Transfer: No third-country transfer takes place. The data is processed exclusively within the EU/EEA. * Storage Duration: Detailed information can be found in the notices on the individual tools within this privacy policy. * Provision Mandatory or Required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. Furthermore, individual services may be unavailable or restricted.
• Right to Object: Please read the information about your right to object under Art. 21 GDPR in Section 3 of this privacy policy.

Technically Non-Necessary Cookies

* Type and Purpose of Processing: Furthermore, we use cookies to better tailor the offer on our website to the interests of our visitors or to generally improve it based on statistical evaluations. Please refer to the information listed below on the display, tracking, remarketing, and web analytics technologies used to see which providers set cookies.

• Legal Basis: The legal basis for these processing operations is your consent in each case, pursuant to Art. 6(1)(a) GDPR. * Recipients: Recipients of the data may be technical service providers acting as processors for the operation and maintenance of our website. Further recipients can be found in the information listed below on the specific tools integrated into this website. * Third-Country Transfer: Information on this can be found in the listings for the individual tools in this privacy policy. * Storage Duration: Detailed information can be found in the notices on the individual tools in this privacy policy. * Provision Mandatory or Required: Of course, you can generally view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see withdrawal of consent). Please note that individual functions of our website may not work if you have deactivated the use of cookies. * Withdrawal of Consent: You can withdraw your consent at any time via our cookie consent tool. * Profiling: To what extent we analyze the behavior of website visitors with pseudonymized user profiles can be found in the information listed below on the technologies used in this privacy policy.

9. External Tools

In the following section, you will find notes on the tools of external providers integrated into our website.

All-in-One WP Migration and Backup

Our website uses the ‘All-in-One WP Migration and Backup’ plugin provided by ServMask, Inc., 16192 Coastal Highway, Lewes, Delaware 19958, USA. The plugin is used exclusively for technical purposes, specifically for creating backups and migrating website data.
The plugin does not set any cookies and does not collect any personal data from website visitors. Personal data may only be affected if it is stored in the WordPress database (e.g. contact enquiries) and a backup is created or a migration is carried out. In this case, this data is processed and stored as part of the backup.
The plugin is used exclusively within the logged-in administrator area and is not accessible to website visitors. Backups are stored on our own servers or at a storage location chosen by the administrator and are not passed on to third parties.
Processing is carried out on the basis of our legitimate interest in the secure and reliable provision of our website and the protection of our data against loss (Article 6(1)(f) of the GDPR).
For further information, please refer to the provider’s privacy policy: https://servmask.com/privacy

hCAPTCHA

* (1) Type and Purpose of Processing: When submitting forms, we use the hCaptcha service provided by Intuition Machines, Inc. The service serves to distinguish whether an entry is made by a natural person or is done abusively by automated processes. This is intended to protect the website from spam, abusive inquiries, and automated attacks.

• (2) Legal Basis: The legal basis for processing your data is Art. 6(1)(1)(a) GDPR. Processing is carried out exclusively on the basis of your previously granted consent. * (3) Recipients: To provide the service, the browser you use must connect to the hCaptcha servers. As a result, the provider learns that our website was accessed via your IP address. In addition, further technical information may be processed that is necessary for detecting automated access. Further information can be found in the privacy policy of hCaptcha. * (4) Third-Country Transfer: Personal data may also be processed in the USA. To the extent that a transfer to a third country takes place, it is based on the legal prerequisites of Art. 44 et seq. GDPR, in particular through the conclusion of standard contractual clauses or on the basis of an adequacy decision, insofar as applicable. * (5) Storage Duration: In this context, the data is only processed as long as the corresponding consent is active or processing is necessary for the stated purposes. * (6) Provision Mandatory or Required: The provision of your personal data is voluntary based on your consent. Without providing the data, the forms protected by hCaptcha may not be usable. * (7) Withdrawal of Consent: You can withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out on the basis of the consent until withdrawal. You can adjust your settings at any time via our consent management tool.

WP Statistics

* (1) Type and Purpose of Processing: For the statistical evaluation of the use of our website, we use the WordPress plugin “WP Statistics”. The tool serves the analysis of visitor traffic, reach measurement, and optimization of our online offering. In particular, information about accessed pages, date and time of access, browser type, operating system, origin page (referrer), and the IP address are processed in anonymized form.

• (2) Legal Basis: The legal basis for processing your data is Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in the demand-oriented design, optimization, and economic provision of our website. To the extent that consent should be required under the applicable data protection regulations, processing is carried out on the basis of Art. 6(1)(1)(a) GDPR. * (3) Recipients: The collected data is processed and stored exclusively on our own web server. A transmission to external analysis providers does not take place. * (4) Third-Country Transfer: A transfer of personal data to third countries does not take place within the scope of using WP Statistics. * (5) Storage Duration: The data is only stored as long as necessary to fulfill the aforementioned purposes and is subsequently deleted or anonymized. * (6) Provision Mandatory or Required: The provision of data occurs automatically when accessing the website. Without the processing of technical access data, the provision and security of the website cannot be guaranteed.
• (7) Right to Object: Insofar as the processing is based on Art. 6(1)(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data.

Online Conference Tools

* (1) Type and Purpose of Processing: For communication with customers, interested parties, and business partners, we use online conference tools. These serve the execution of video and audio conferences as well as facilitated and efficient communication. When using the respective conference tools, personal data is processed. This includes, in particular, the data provided by you such as email address and/or phone number, as well as communication and metadata generated during use. In addition, the providers of the conference tools process technical data required for conducting online communication. This includes, in particular, IP addresses, device and hardware information (e.g., device type, operating system, camera, microphone), connection data, and other technical identifiers. Insofar as content is exchanged, uploaded, or stored within the conference tools, this can also be processed on servers of the respective providers. This includes, in particular, chat messages, audio and video data, files, whiteboards, and any recordings.

• (2) Legal Basis: The legal basis for data processing is Art. 6(1)(1)(b) GDPR, insofar as communication takes place within the scope of a contractual relationship or for contract initiation. Otherwise, processing is carried out on the basis of Art. 6(1)(1)(f) GDPR (legitimate interest in efficient communication). Insofar as consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(1)(a) GDPR. Consent can be withdrawn at any time with effect for the future. * (3) Recipients: Recipients of the data are the respective providers of the conference tools used, insofar as this is required for providing the services. We do not have full influence over data processing by the providers. * (4) Third-Country Transfer: Depending on the provider, personal data may also be processed in third countries, particularly the USA. To the extent that a transfer takes place, it is carried out on the basis of Art. 44 et seq. GDPR, in particular through the conclusion of standard contractual clauses. * (5) Storage Duration: The data directly processed by us will be deleted as soon as the purpose of processing no longer applies, a granted consent is withdrawn, or you request us to delete it, provided no statutory retention obligations exist. * (6) Provision Mandatory or Required: The provision of personal data is necessary for using the respective conference tools. Without this data, participation in online communications is not possible.
• (7) Data Processing Agreement: Data processing agreements (DPA) pursuant to Art. 28 GDPR have been concluded with the providers used, insofar as they act as processors.
• (8) Conference Tools Used: * Zoom: The provider is Zoom Communications Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. Further information on data processing can be found at zoom.us/de-de/privacy.html. The transfer to the USA is based on standard contractual clauses. * Microsoft Teams: The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Further information on data processing can be found at privacy.microsoft.com/de-de/privacystatement/.

Social Media Channels

In the following section, you will find notes on the corporate profiles we maintain on various social media channels.

• LinkedIn: * Type and Purpose of Processing: We maintain a company profile on LinkedIn. This platform is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We maintain this LinkedIn company page to inform users, interested parties, and customers about our company. We provide information via our LinkedIn profile and offer users a way to communicate with us.

Furthermore, we point out that as the operator of a LinkedIn company profile, we are jointly responsible with LinkedIn for processing the personal data of page visitors (Art. 26 GDPR). For this purpose, we have entered into a corresponding joint controllership agreement with LinkedIn, which defines the distribution of data protection obligations between us and LinkedIn. You can access this agreement here. According to this agreement, LinkedIn is primarily responsible for responding to data subject requests. To assert your data subject rights, you can contact LinkedIn online or reach them via the contact details in the privacy policy. You can also contact LinkedIn’s data protection officer. In addition, you may turn to us to exercise your data subject rights in this context. It is sufficient to contact us with your request via the contact form or by email. In such a case, we will forward your request to LinkedIn.

• • Legal Basis: The processing of your personal data is based on legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest consists exclusively of marketing purposes such as better reachability of target groups, increasing visibility, image building, user information, and employer branding. * Recipients: The recipient of your data in this context is LinkedIn. We cannot rule out that when accessing our LinkedIn company presence, a third-country transfer, e.g., to servers located in the USA, occurs. Further detailed information on the processing of your data by LinkedIn can be found in LinkedIn’s privacy policy. * Third-Country Transfer: Please note that according to LinkedIn’s privacy policy, personal data may also be processed by LinkedIn in the USA or other third countries. LinkedIn states that it only transfers personal data to countries for which an adequacy decision of the European Commission under Art. 45 GDPR is available or on the basis of appropriate safeguards under Art. 46 GDPR. * Storage Duration: LinkedIn retains your personal data until you close your account. LinkedIn may store certain information (e.g., employer reviews) in anonymized form beyond this point in time. * Provision Mandatory or Required: The provision of your personal data is neither legally nor contractually required. However, without providing your personal data, you cannot interact with us or our content on LinkedIn. * LinkedIn Insights: In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g., whether you are a follower of our page. The processing of this data takes place in anonymized form, specifically in the form of statistics. This gives us insights into the behavior of people who are interested in our page (so-called Page Insights). With Page Insights, LinkedIn only provides us with aggregated Page Insights—meaning it is not possible for us to draw conclusions about individual persons via this information. We have entered into an agreement with LinkedIn Ireland Unlimited Company regarding processing as joint controllers, in which the distribution of data protection obligations is defined. You can access this agreement here: Joint Controller Addendum. The initiated analysis processes may be based on deviating legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6(1)(a) GDPR).
• YouTube: * Type and Purpose of Processing: We maintain a company profile on YouTube to provide videos. The operator is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “YouTube”). This is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). When you access YouTube, a connection to the servers of YouTube or Google is established. Depending on your settings, various data are transmitted (e.g., your IP address). When a YouTube video is started, the provider sets cookies that store, for example, your IP address and URL. If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data is stored. Nevertheless, Google stores data with a unique identifier linked to your device, browser, or app. Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policies. There you will also find further information on your rights in this regard and settings options to protect your privacy.
  • Legal Basis: The processing of your personal data is based on legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest consists exclusively of marketing purposes such as better reachability of target groups, increasing visibility, image building, user information, and employer branding. * Recipients: The recipient of the data is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC employs Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. * Third-Country Transfer: Since Google’s headquarters are in the USA, it cannot be ruled out that the data is processed on Google servers in the USA. Standard contractual clauses of the European Commission exist with Google. * Storage Duration: YouTube retains your personal data until you close your account. YouTube may store certain data in anonymized form beyond this point in time. * Provision Mandatory or Required: The provision of your personal data is neither legally nor contractually required. However, without providing your personal data, you cannot interact with us or our content on YouTube.
• Facebook and Instagram: * (1) Type and Purpose of Processing: We operate a company page on Facebook and tank Instagram. The provider of the platforms is Meta Platforms Ireland Limited, “Meta” (4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland). As a user, you use our company page and its functions on your own responsibility. This applies in particular to interactive functions (e.g., commenting, sharing, liking). Meta processes personal data about your account, your IP address, and the end devices you use. Cookies are also used for data collection. If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyze your usage behavior and create a user profile corresponding to this behavior. This user data is regularly processed for market research and (personalized) advertising purposes.

If you want to avoid this, you should log out of your Facebook/Instagram profile or deactivate the “stay logged in” function, delete the cookies on your device, and close and restart your browser. In this way, the Facebook/Instagram information through which you can be directly identified is deleted. This allows you to use our Facebook/Instagram page without revealing your Facebook/Instagram ID. When you access interactive functions of the page (like, comment, share, message, etc.), a Facebook/Instagram login screen appears. After you log in, Meta will recognize you again as a specific user.

• • (2) Legal Basis: The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest. The legitimate interest pursued by us lies in contacting (potential) customers and interested parties, the public presentation of our company, and providing information about our products and services. * (3) Recipients: Further information on the processing of your data by Meta Ireland, in particular regarding storage duration and your rights, can be found in Meta’s privacy policy, which you can view at www.facebook.com/privacy/policy/. Information on how you can change your privacy settings can be found at www.facebook.com/help/instagram/196883487377501?cms_id=196883487377501. * (4) Duration of Storage: We do not store any personal data processed in social networks on our servers. * (5) Provision Mandatory or Required: The provision of your data is voluntary. If you wish to interact with us, there are alternative ways to get in touch with us, for example by email and phone. * (6) Third-Country Transfer: The recipient of the data is Meta Platforms Ireland Limited. The parent company Meta Platforms Inc. is based in the USA, so a transfer to the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework and bases the transfer to the USA on the adequacy decision.
  • (7) Right to Object: Please read the information on your right to object pursuant to Art. 21 GDPR. In addition, you have the option to object to the respective platform operator. If you wish to make information requests or assert your user rights, it is possible to assert these rights against us or Meta.

10. Final Provisions

Data Security (TLS) In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., TLS) via HTTPS.

Changes to Our Privacy Policy We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

Questions About Data Protection If you have any questions about data protection, please write us an email at: office@viox-design.de