1. Principles

Data protection and data security for our contractual partners as well as for consumers have a high priority for our company. Therefore, the protection of your personal data during our entire business processes is also very important to us and a special concern. Respecting this personal right is a matter of course for us. In general, it is not necessary for you to provide personal data in order to use our website. However, in order to be able to provide our services, we may need your personal data. In doing so, we collect, process and use personal data to the extent that this is legally permissible and necessary for processing or you have consented to it.

2. Name und Kontaktdaten des für die Verarbeitung Verantwortlichen sowie des betrieblichen Datenschutzbeauftragten

PROLIANCE GmbH
Leopoldstr. 21
80802 München
E-Mail: [email protected]

3. Purposes of data processing, legal basis and legitimate interests pursued by VALU-X GmbH as well as categories of personal data and categories of recipients

Accessing our website

When you access our website, the browser used on your end device automatically sends information to the server of our website and temporarily stores it in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until it is automatically deleted:

• The IP address of the requesting internet-capable device.
• The date and time of access
• The name and URL of the file accessed
• The website/application from which the access was made (referrer URL)
• The browser you use and, if applicable, the operating system of your Internet-enabled computer as well as the name of your access provider.
• The IP address of your terminal device and the other data listed above are used by us for the following purposes:
• Ensuring a smooth connection setup,
• Ensuring a comfortable use of our website,
• evaluating system security and stability.

The data is stored for a period of 28 days and then automatically deleted. Furthermore, we use so-called cookies and tracking tools for our website. The exact procedures involved and how your data is used for this purpose are explained in more detail in Chapter 7.

3.2 Data processing when using contact forms for interested companies Contact forms as part of marketing campaigns

Personal data is collected, processed and used by us to the extent necessary to process your request and to transfer it to our CRM systems. The data processing serves the purpose of establishing contact and initiating a contract. The processing is based on Art. 6 (1) lit. b DSGVO.

3.3 Data processing of media contacts

Personal data is collected, processed and used by us insofar as this is necessary to provide the information published by our company or to contact you as requested. We also use your data to inform you about company news by e-mail or telephone, for example to send out press releases. When we contact you, we are guided by the relevance of our message and the thematic focus of your journalistic work.

3.4 Data processing of applicant data (e.g. when using our application form or at career fairs etc.)

We collect, process and use personal data to the extent necessary to process your application and to contact you. We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.

3.5 Data processing for advertising purposes and market and opinion research

3.5.1 Advertising purposes of VALU-X

Insofar as you have concluded a contract with us or we have you as an interested party, we process your address data and criteria for advertising selection on the basis of Art. 6 (1) (a) and (f) of the DS-GVO in order to send you such information and offers from us and other companies. The newsletter may be sent by means of a shipping service provider. If you do not wish this, you can object to the use of your data for advertising purposes at any time.

3.5.2 Data use for market and opinion research

We also process your data for market and opinion research. We use this exclusively anonymously for statistical purposes and only for VALU-X. Your answers in surveys are not passed on to third parties or published. We do not store the answers from our surveys together with your e-mail address or other personal data. You can object to the use of data for market and opinion research at any time, either in full or for specific measures, without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details below (e.g. e-mail, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey e-mail.

3.5.3 Right to object

You can object to the use of your personal data for advertising purposes at any time, either in total or for individual measures, without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to VALU-X GmbH, Kemmannsweg 13, 45219 Essen, Germany, or to [email protected] is sufficient for this purpose. If you object, the contact address concerned will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection. Thank you for your understanding.

4. Legal basis

VALU-X processes personal data on the basis of the provisions of the General Data Protection Regulation (also with the help of service providers). The processing is carried out on the basis of consents pursuant to Art. 6 (1) (a) DS-GVO as well as on the basis of Art. 6 (1) (b) as well as (f) DS-GVO, insofar as the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures, or insofar as the processing is necessary for the protection of the legitimate interests of the controller or a third party and the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, are not overridden. Processing operations carried out by VALU-X in the context of a legal obligation concerning it are carried out on the basis of Art. 6 (1) c) DS-GVO. On the basis of Art. 6 (1) (f) DS-GVO, we process your address data and advertising selection criteria in order to send you such information and offers from us and other companies. If you do not wish this, you can object to the use of your data for advertising purposes with us at any time. Consents can be revoked at any time vis-à-vis VALU-X. This also applies to consents that were already given before the DS-GVO came into force. The revocation of consent does not affect the lawfulness of the personal data processed until the revocation.

5. Categories of personal data

5.1 In the context of online enquiries from data subjects, we process the data required for this purpose. This includes the following categories:

Personal data, for example surname, first name, date of birth, place of birth, address as well as communication data and identification data.

5.2 In the context of data processing when using the contact forms for interested companies and contact forms in the context of marketing campaigns, we process the data required for this purpose. This includes the following categories:

• Personal master data (title, first name, last name, address, function holder status in the company, company master data)
• Communication data
• Usage data
• Marketing data (e.g. consent)

5.3 Within the scope of applicant management, we process the following data:

• Personal master data (surname, first name, address)
• Communication data
• Other data from the application documents (e.g. enrolment certificates, references, details of marital status, etc.).

In the context of media contacts, we process the following data:

• Personal master data (surname, first name)
• Company data (medium, address)
• Communication data (e-mail address, telephone, department, position)

6. Categories of recipients of personal data

Any information you provide to us by entering it on these web pages will be stored on a server located in a country in the European Union (“EU”) and will be passed on to the relevant departments within the company to process your enquiries and requests. Service providers used by us may also receive data from us to fulfil the prescribed purposes. These may, for example, be companies in the categories of IT services, printing services, marketing, sales or telecommunications.

7. Online presence and website optimization

7.1 Tracking tools and cookies – general information

Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. Cookies can be used without consent and with consent. Cookies that do not require consent are those that are necessary in order to use our online services or that serve IT security purposes (necessary cookies). The legal basis for data processing is Article 6(1)(f) DS-GVO. Cookies that require consent, on the other hand, serve on the one hand to make the use of our offer more pleasant for you (preference cookies). For example, we use cookies to recognise that you have already visited individual pages of our website or that you have already logged into your customer account. Furthermore, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again in order to use our services, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you as well as to display information specially tailored to you (marketing and statistics cookies). The legal basis of data processing for cookies requiring consent is Article 6(1)(a) DS-GVO. This data includes, among other things, page views, length of stay, origin, country, etc. We analyse this statistical information in order to improve our offer and to check the acceptance of individual web pages. Invisible GIFs are only used to position elements on the website. No other functions are associated with the Invisible GIFs used. These cookies are stored by your browser and are usually deleted when you close the browser. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. The storage period of cookies depends on their purpose and is not the same for everyone. We recommend that if you use shared computers that are set to accept cookies, you always log out completely when they are finished. The cookies we currently use are explained in more detail in the section below. You can manage the cookies independently – HERE – quickly and easily and change your settings at any time.

7.2 Cookie consent

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents. Borlabs cookie does not process any personal data. The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent. Hier können Sie Cookies einsehen und Einstellungen verwalten.

7.3 Google services

In order to improve the user experience on our website, this website uses various Google services, whose parent company Google LLC (“Google”) is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For users in the European Economic Area, data responsibility lies with Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). In the event of the transfer of personal data of our contractual partner to the parent company, Google LLC has committed to the EU standard contractual clauses, which ensures compliance with the level of data protection applicable in the EU. Further information is available here: https://business.safety.google/gdpr/.

• Use of script libraries (Google Fonts) In order to display our content correctly and in a graphically appealing manner across browsers, we use script libraries and font libraries such as Google Fonts (https://www.google.com/webfonts/ ) on our website. Google Fonts are transferred to your browser’s cache to avoid multiple loading. If the browser does not support Google Fonts or prevents access, content is displayed in a standard font. Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and, if so, for what purposes – that the operators of such libraries collect data. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw=1.
• Google Tag Manager The Google Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behaviour, to set up remarketing or retargeting as well as targeting and to test and optimise websites. For more information on Google Tag Manager, see https://www.google.com/intl/de/tagmanager/use-policy.html.
• Google Analytics Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. For more information on terms of use and data protection, see https://www.google.com/analytics/terms/de.html, or https://support.google.com/optimize/answer/6230273 or https://policies.google.com/?hl=de.
• Google Ads Remarketing We use Google Ads as a marketing tool to draw customers’ attention to our services. When an ad is clicked on, a cookie is set on the user’s computer by Google. Further information on Google Ads can also be found in Google’s notes on website statistics at: https://services.google.com/sitestats/de.html and in the privacy policy at https://www.google.de/policies/privacy/.

8. Duration of data storage

We generally only store your data for as long as is necessary for the respective purpose of the data processing (e.g. processing your request or legal retention periods). We store the data collected for the processing of the contract until the expiry of the legal or possible contractual warranty and guarantee rights. After the expiry of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years from the conclusion of the contract), the data is processed again solely in the event of an audit by the tax authorities. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is necessary for the advertising approach. In addition, we follow the principle of deleting data for advertising purposes after 4 years after the end of the contract or after 4 years after the end of the marketing efforts. Advertising objections are not deleted. We store the data we process as part of the recruitment process for up to 6 months after the end of the application process. In particularly justified cases, we also store data for longer periods, for example if a public authority requires this or if the data is needed for legal reasons, e.g. to provide evidence in a court case.

9. Recipients outside the EU

If we use service providers outside the EU or the European Economic Area (EEA), we take appropriate and suitable safeguards in accordance with Art. 44 ff DS-GVO (e.g. conclusion of EU standard contracts, additional technical and organisational measures such as encryption or anonymisation) to ensure a sufficient level of data protection when transferring personal data. Please note that despite careful selection and commitment of a service provider, the service provider may process data outside the EU or the EEA or may be subject to a different legal system due to its registered office and thus may not offer an adequate level of data protection. For an efficient and reliable newsletter and ordering process, we commission an external service provider with the processing: https://www.mailgun.com/ (Mailgun Technologies, Inc., a Delaware corporation) By subscribing to our newsletter, you agree that we may transfer your data to this service provider in accordance with Art. 28 DS-GVO. The transmitted data is limited to your name, first name and email address. When an order is placed, the following data is transmitted to the external service provider: Name and first name, address, telephone number, email address, if applicable for direct debit payment option: IBAN. This service provider undertakes to comply with the DS-GVO, more information can be found under https://www.1blu.de/datenschutz/ and https://www.cloudflare.com/privacypolicy/

10. Your rights

10.1 Overview

In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:

• Right to information about your personal data stored by us pursuant to Art. 15 EU-DSGVO,
• Right to correct inaccurate data or to complete correct data in accordance with Art. 16 EU-DSGVO,
• Right to have your data stored by us deleted in accordance with Art. 17 EU-DSGVO,
• Right to restriction of the processing of your data according to Art. 18 EU-DSGVO,
• Right to data portability according to Art. 20 EU-DSGVO.

You can address your respective concerns in writing to VALU-X GmbH, Kemmannsweg 13, 45219 Essen, Germany, or by e-mail to [email protected]. In addition, you have the option of contacting the supervisory authority responsible for VALU-X, the State Commissioner for Data Protection of the State of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.

10.2 Right of objection

Under the conditions of Art. 21 (1) DS-GVO, the processing of data may be objected to for reasons arising from the particular situation of the data subject. The objection can be made without formalities and is to be addressed to VALU-X  GmbH, Kemmannsweg 13, 45219 Essen, Germany. The above general right to object applies to all processing purposes described in this privacy notice, which are processed on the basis of Article 6(1)(f) DS-GVO. Unlike the specific right of objection directed at data processing for advertising purposes, we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible danger to life or health). In addition, you have the option of contacting the supervisory authority responsible for VALU-X, the State Commissioner for Data Protection of the State of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.

11. Data security

All data transmitted by you personally will be transferred using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, for online banking. You can recognise a secure SSL connection, among other things, by the appended s at the http (i.e. https://…) in the address bar of your browser or by the lock symbol in the lower area of your browser. Status: November 2021