Privacy

Data protection declaration

VEKA AG , as the operator of these pages, takes the protection of your personal data extremely seriously. We treat your personal data confidentially and according to the EU Data Protection Basic Regulation (GDPR), the local legislation applicable in your country

This Data Protection Declaration clarifies the type, scope and purpose of the collection and use of data of visitors and users of the website of VEKA AG . In case of questions regarding data protection, you can contact our Data Protection Officer via email under datenschutz@veka.com or the address stated below.

Information obligation acc. Art. 13 GDPR
Responsible body in terms of Article 4 No. 7 GDPR:

VEKA AG
Dieselstraße 8
48324 Sendenhorst
info@veka.com

Contact data for our Data Protection Officer:
VEKA plc
-Data protection officer-
Farrington Road
Rossendale Road Industrial Estates
GB – BB11 5DA Burnley – Lancs
dataprotection@veka.com

Use of the website:
Our offer is expressly not orientated towards underage persons.
All data received and processed within this online offer is treated confidentially acc. GDPR and is not transferred to third parties. 

Surfing on our website without stating personal data 
The use of our website without personal data is possible outside the password-protected VEKA AG -Partner area. 
We will then only find out

  • The name of the Internet site or file called up and the time it is called up or downloaded
  • The domain via which you reached our website
  • The transmitted data volume
  • Whether the call-up or download was successful.  

The data is exclusively used for administration, optimisation of the Internet offer and for processing inquiries. 
The IP address can be considered personal data, because, under certain conditions, it is possible to obtain the identity of the owner of the Internet access used by using the information of the respective Internet provider.   
The IP address is only analysed in case of attacks against our Internet infrastructure. In this case, we have an authorised interest in terms of Art. 6 Para. 1 f) GDPR to process the IP address. This authorised interest arises from the need to defend against an attack on the Internet infrastructure, to investigate the source of the attack in order to bring proceedings against the responsible person under criminal and civil law, and to effectively prevent further attacks.
The IP address is deleted if we can exclude the possibility that it has been used in an attack against our Internet infrastructure did not occur. This deletion occurs regularly after seven days.  
Furthermore, we record from which domains our web visitors come. We also analyse this data in order to recognise trends and statistics, but we subsequently delete this data again. 
This site uses "Cookies" and in some areas "Active X Controls". 
In addition, this website contains links to other websites. The legal owner of this site shall not be held responsible for the data protection provisions or the content of these websites. If you have questions or comments regarding our data protection practice, then please contact us under  datenschutz@veka.com .
You can prevent storage of the Cookies through the appropriate settings in your browser software; however, this may lead to the fact that you may not be able to use all functions of this website to their full extent. 

Surfing on our website with the statement of personal data  
If you voluntarily provide us with personal data (e.g. name, address or email address) on our website or within the scope of registration for the VEKA AG -Partner area, then this data shall not be transferred to third parties without your express permission or legal authorisation. If you register for the VEKA AG -Partner area, then a contract comes into effect between us regarding the storage and provision of the respective profile.
In this case, we process your data based on Article 6 b) of the GDPR or the fulfilment of a contract existing between us, or acc. Article 6 a) GDPR based on the consent provided by you. The processing occurs for the fulfilment of contractual performance, payment processing, for the delivery of contractually ordered products and services, for transmission of your address data to logistics companies for the delivery of goods, and for sending interesting information regarding products and actions. Your data is transferred within our premises to order processing or persons involved in decision-making. A transfer to third parties over and above this which is not covered by legislative necessity shall only occur subject to your express consent. Automatic decision-making does not occur. 
We only process your data if this is required for the fulfilment of our contract or the applicable legal regulations or due to the reason for your data transfer. We do not independently delete the personal data stored by you in the VEKA AG -Partner area. However, you have the possibility to change individual data in your profile at any time. We shall undertake complete deletion of the personal data stored within the scope of your profile on request via email (stating your user name) to  datenschutz@veka.com , if the continued storage of this data is not permitted due to further statutory exemptions. Business documents are stored according to the statutory retention periods and are subsequently deleted compliant with data protection.

Use of external service providers
We work together with service providers who process certain data on our behalf. This occurs exclusively in harmony with the respective valid data protection laws. In particular, we have concluded an agreement with our service providers regarding data processing under contract which satisfies the requirements of Article 28 of the GDPR. No data is transmitted to unsafe third countries or supranational or intergovernmental agencies. 

Your rights:
According to the GDPR, you have the following rights:

+ Right to information regarding the processing of your data 
You have the right to demand information regarding whether personal data pertaining to you is processed by VEKA AG , and, if yes, which personal data pertaining to you is processed by VEKA AG . You have the right to the following information:

  • The processing purposes
  • The categories of your personal data being processed
  • The recipients or categories of recipients to whom your personal data has been disclosed or is still disclosed
  • If possible, the planned duration for which your personal data will be stored, or if this is not possible, the criteria for the determination of this duration
  • If your personal data has not been collected from you yourself, all available information regarding the origin of the data
  • The existence of automated decision-making including profiling according to Article 22 of the GDPR and — at least in these cases — pertinent information regarding the logic involved and the scope and aspired effects of such processing for you.

We will provide you with a copy of the personal data which is the subject of the processing. If we have substantiated doubts, then we will request additional information for confirmation of the identity of the person affected.

+ Right of correction 
You have the right to request from us the correction of incorrect personal data pertaining to you. Under consideration of the purposes of the processing, you have the right to request the completion of incomplete personal data — also by way of a supplementary declaration.

+ Right of deletion
Deletion of your personal data occurs if you assert a claim for deletion and no statutory retention rights or obligations contradict this. Furthermore, we always delete your personal data if the data is no longer required for the fulfilment of the purpose associated with the storage or if the storage is not permissible for other legal reasons, and if the deletion does not contradict the statutory retention periods. 

+ Right of limitation of processing 
You are entitled to request a limitation of the processing of your personal data if the personal data is not accurate, and this for the duration which enables VEKA AG to check the accuracy of the personal data. If the processing is unlawful and you refuse the deletion of the personal data, and instead request the limitation of the use of your personal data from us, then we shall comply with your request. The deletion of data also does not occur if we require it for the assertion, exercising or defence of our own legal claims, or if you have objected to the processing acc. Article 21 Paragraph 1 GDPR, provided it is not yet established whether the entitled reasons given by VEKA AG outweigh your reasons. 

+ Right to appeal against processing
You have the right to appeal at any time against the processing of your personal data which occurs due to Art. 6 of the GDPR. VEKA AG shall not process your personal data any more in case of an appeal, unless we can verify compelling legitimate reasons for the processing which outweigh the interests, rights and freedoms of the affected persons, or the processing serves the assertion, exercising or defence of legal claims.

+ Right of data portability
You have the right to receive the personal data pertaining to you which you have provided to us in a structured, conventional and machine-readable format, and to transmit this data to another responsible person without obstruction by us. The prerequisite is that the processing is based on consent acc. Art. 6 or Art. 9 of the GDPR or on a contract, and that the processing occurs with the assistance of an automated procedure. Furthermore, you have the right to personal data being directly transmitted by VEKA AG to another responsible agency, provided this is technically feasible.

+ Right of revocation of your stated consent with effect for the future
A revocation of your stated consent may occur at any time with effect for the future. No fees are incurred in case of a revocation, an objection or information. Please direct the revocation via email to  info@veka.com . 

+ Right of complaint to the data protection supervisory authority
Should you be of the opinion that the processing of your personal data infringes on data protection provisions, then you have the right, acc. Article 77 GDPR, to file a complaint with the supervisory authority responsible for your federal state at any time. 

Further data protection declarations regarding third party services used within the scope of our website:

Usercentrics

This website uses the cookie consent technology of Usercentrics GmbH, Rosental 4, 80331 Munich (https://usercentrics.com/de/) to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law.

  • When you enter our website, the following personal data is transferred to Usercentrics:
  • Your consent(s) or the revocation of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Matomo
Description of Service
This is an open source web analytics service.

Processing Company
InnoCraft
150 Willis St, 6011 Wellington, New Zealand

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
privacy@matomo.org

Data Purposes
This list represents the purposes of the data collection and processing.

  • Analytics
  • Optimization

Technologies Used
This list represents all technologies this service uses to collect data.

  • Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

  • Anonymised IP address
  • Browser information
  • Date and time of visit
  • Device information
  • Files clicked or downloaded
  • Geographic location
  • Links to outside domain clicked
  • Number of visits
  • Page title
  • Referrer URL
  • Screen resolution
  • Time of users first visit
  • Time of users previous visit
  • Time zone
  • Usage data
  • User agent
  • User ID
  • Page URL

Legal Basis
In the following the required legal basis for the processing of data is listed.

  • Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  • European Union

Retention Period
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.

  • The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients
In the following the recipients of the data collected are listed.

  • InnoCraft

Click here to read the privacy policy of the data processor
https://matomo.org/privacy-policy/

Click here to read the cookie policy of the data processor
https://matomo.org/privacy-policy/

Click here to opt out from this processor across all domains
https://matomo.org/privacy-policy/#optout

Storage Information
Below you can see the longest potential duration for storage on a device, as set when using any method of storage.

  • Maximum age of cookie storage: 1 year, 1 month
  • Non-cookie storage: no

Stored Information
This service uses different means of storing information on a user’s device as listed below.

  • _pk_id
    This is used to store a few details about the user such as the unique visitor ID.
    Type: cookie
    Duration: 1 year, 1 month
  • _pk_ref
    This is used to store the attribution information, the referrer initially used to visit the website
    Type: cookie
    Duration: 6 months
  • _pk_ses
    This is used to store a unique session ID.
    Type: cookie
    Duration: 30 minutes
  • _pk_cvar
    This is used to store a unique session ID.
    Type: cookie
    Duration: 30 minutes
  • _pk_hsr
    This is used to store a unique session ID.
    Type: cookie
    Duration: 30 minutes
  • _pk_testcookie
    This is used to check whether the visitor’s browser supports cookies.
    Type: cookie
    Duration: Session

YouTube:

This website uses the YouTube API interface to display videos. By using this service on our website, you also agree to the YouTube Terms of Use, which you can access at the following link: https://www.youtube.com/t/terms

Description of Service:
This is a video player service.

Processing Company:
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Protection Officer of Processing Company:
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Data Purposes:
This list represents the purposes of the data collection and processing.
Displaying Videos

Technologies Used:
This list represents all technologies this service uses to collect data. Typical technologies are Cookies and Pixels that are placed in the browser.
Cookies (if Privacy-Enhanced Mode is not activated)

Data Collected:
This list represents all (personal) data that is collected by or through the use of this service.

  • Device information
  • IP address
  • Referrer URL
  • Videos viewed

Legal Basis:
In the following the required legal basis for the processing of data is listed.

  • Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing:
This is the primary location where the collected data is being processed. If the data is also processed in other countries, you are informed separately.

  • European Union

Retention Period:
The retention period is the time span the collected data is saved for the processing purposes. The data needs to be deleted as soon as it is no longer needed for the stated processing purposes.
The data will be deleted as soon as they are no longer needed for the processing purposes.

Transfer to Third Countries:
Some services forward the collected data to a different country. Below you can find a list of countries to which the data is being transferred. This can be for different reasons like storing or processing.

  • Worldwide

Data Recipients:
In the following the recipients of the data collected are listed.

  • Alphabet Inc.
  • Google LLC
  • Google Ireland Limited

Click here to read the privacy policy of the data processor:
https://policies.google.com/privacy?hl=en

Click here to read the cookie policy of the data processor:
https://policies.google.com/technologies/cookies?hl=en

Click here to opt out from this processor across all domains:
https://safety.google/privacy/privacy-controls/

Storage Information:
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.

  • Maximum age of cookie storage: 10 years
  • Non-cookie storage: no

Updating this Data Protection Declaration 
From time to time, an update of this Data Protection Declaration may become necessary, for example, through new legislative or official regulations and new offers on our website. In this case, we will inform you accordingly. In general, we recommend that you regularly call up this Data Protection Declaration to check whether there have been any changes. Amongst other things, you can recognise whether any changes have occurred through the update status at the bottom of this document.  

Printing and storing this Data Protection Declaration 
This Data Protection Declaration can be directly printed and stored, e.g. through the print or save function in your browser.
09.03.2023