Data protection

The protection of personal data is important to us. We therefore process personal data in accordance with the applicable legal provisions on the protection of personal data and data security, in particular the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). We would like to inform you below about when we process which data when you use our website.

I. Person responsible

The controller within the meaning of the GDPR and other national data protection laws of the EU member states as well as other data protection regulations is

vountain GmbH
Kopernikusstr. 14, 30167 Hanover, Germany
E-mail: info@vountain.io
Phone: +49 511 936 783 76
Website: www.vountain.io

II Contact details of the supervisory authority

The contact details of the data protection supervisory authority responsible for the registered office of our company are

The State Commissioner for Data Protection of Lower Saxony
Prinzenstr. 5, 30159 Hanover
Telephone: +49 (0511) 120 45 00
E-mail: poststelle@lfd.niedersachsen.de
Website: www.lfd.niedersachsen.de

III General information

  1. Lawfulness of data processing

Your personal data will only be collected and used if the processing of the data is permitted by law or with your consent. The specific legal bases for the processing of personal data are listed below as part of the description of the individual data processing operations.

  1. Storage period

Your personal data will be deleted as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which our company is subject. Further information on the storage period can be found below for the individual data processing operations.

  1. Disclosure of personal data

When we pass on personal data, we do so primarily to service providers who support us in the fulfilment of the purposes listed below. These companies may only use your personal data as so-called processors to fulfil their tasks on our behalf and are obliged to comply with the relevant data protection regulations. The processors we use are named below for the individual data processing operations.

  1. Place of data processing

The processing of your personal data stored by us takes place in countries of the European Union (EU) or the European Economic Area (EEA). With regard to any processing of personal data by service providers or other third parties based outside the EU/EEA, please refer to the descriptions of the individual data processing operations below.

IV. Processing of personal data on the website

  1. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects information from the computer system of the accessing computer. The following information is collected:

  • IP address (anonymised)
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time at which our website was accessed

We expressly point out that no complete IP addresses of website visitors are stored on our website. This is done by deleting 2 bytes of the IP address in the log file by default (e.g. 192.168.xxx.xxx). It is then no longer possible for us to establish a personal reference.

Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing.

The legal basis for processing is Art. 6 para. 1 lit. f GDPR.

Right to object:

You have the right to object. The objection can be addressed at any time to the contact information in Section I. of the data protection information.

  1. Contact form: Contact form

There is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The processing of personal data serves us primarily to process your enquiry. If you contact us or make an enquiry, this also constitutes the necessary legitimate interest in processing the data. The legal basis for the processing of the data in this case is Art. 6 para. 1 lit. f GDPR.

If you have also given your consent via the checkbox to use your contact data for marketing purposes, i.e. to receive further information about our products and services, we will also use your personal data for these purposes. The legal basis for the processing of data for marketing purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is usually the case when the matter in question has been conclusively clarified and the respective conversation with you has ended or you have withdrawn your consent.

Withdrawal of consent for marketing purposes, right to object:

You can revoke your consent to receive further information about our products and services by email at any time. You will find a link to do so here and in the respective mailing. Alternatively, you can contact us using the contact details provided in section I. of the data protection notice.

You also have the right to object. The objection can also be addressed to the contact information in Section I. of the data protection information.

  1. Matomo

Our website uses the Matomo tool to analyse the surfing behaviour of website visitors (https://matomo.org/). In this context, we also use cookies that help us to avoid errors when analysing user data (see more detailed information on this in Section V. of the data protection information).

If individual pages of our website are accessed, the following information in particular is stored (in aggregated form)

  • Frequency of visits
  • bounce rate
  • Duration of the visit
  • Actions during the visit
  • IP address (anonymised)

The analysis tool is set so that the IP addresses are not saved in full, but 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

The processing of the aforementioned information enables us to analyse the surfing behaviour of website visitors. By analysing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.

The legal basis for the use of Matomo is Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG if you have given your consent.

Revocation:

You can revoke your consent to web analysis in your personal .

  1. YouTube

We occasionally include videos on our website via the YouTube service. YouTube is a service provided by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is an affiliated company of Google Ireland Limited, Gordon House, Barrow St., Dublin 4, Ireland.

When you access a YouTube video on our website, your browser automatically connects to the YouTube or Google servers. In this context, YouTube also uses cookies that store your IP address and the URL of our website. If you are logged into your YouTube account, YouTube may also be able to assign your interactions on our website (e.g. session duration, approximate location) to your profile using cookies. You can find more information on cookies and the option of deactivating them in your browser in section V. of the data protection information.

 

In this context, we would like to point out that in summer 2023 the EU Commission adopted a decision on the adequacy of the level of protection for personal data under the EU-US Data Protection Agreement (EU-US Data Privacy Framework). Google has certified to the US Department of Commerce that it complies with the principles of the EU-US Data Privacy Framework with respect to the processing of personal data. Google also uses the EU standard contractual clauses to ensure the secure transfer of personal data from EU citizens to the USA.

You can find more information in the YouTube and Google privacy policies, which you can access here: https://policies.google.com/privacy?hl=de.

By integrating the YouTube service, we pursue the purpose of being able to present various videos to you so that you can watch them directly on our website.

The processing of your personal data described above is based on your consent in accordance with Art. 6 para. 1 lit. a, which you give us via the settings in the consent tool.

Revocation:

You can revoke your consent to view the videos via YouTube in your personal .

  1. HubSpot

We use the CRM tool of the provider HubSpot on our website. HubSpot is a software company from the USA (HubSpot Inc., 25 First St., Cambridge, MA 02141, USA) with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland). We have concluded a contract with the provider of HubSpot for order processing within the meaning of Art. 28 GDPR.

HubSpot is an integrated software tool that we use to cover the following aspects of our online marketing activities

  • Email marketing
  • Contact management

For these purposes, we may process the following data in particular using HubSpot

  • Name
  • e-mail address
  • Telephone numbers

Notwithstanding this, HubSpot states in its privacy policy that it complies with the principles of the EU-US Privacy Shield Agreement with regard to the processing of personal data (https://legal.hubspot.com/eu-us-dpf). Further information on data processing by HubSpot can be found here: https://legal.hubspot.com/de/dpa

We also use cookies as part of the use of HubSpot (see more detailed information on this in section V. of the data protection information).

The legal basis for the use of HubSpot is Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TTDSG if you have given your consent.

The data collected will be deleted at the latest after you withdraw your consent.

Revocation:

You can revoke your consent to the use of HubSpot in your personal .

V. Use of cookies

  1. General information

We use “cookies” to make your visit to our website more attractive and to enable the use of certain functions. These are small pieces of text information that are stored in the browser or by the browser on the end device. When a visitor accesses a website, a cookie may be stored on the visitor’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

a) Technically necessary and unnecessary cookies, third party cookies

On the one hand, we use technically necessary cookies that are required for the smooth functioning of our website. We also use technically unnecessary and third-party cookies on our website.

The cookies we use in detail, the purposes and the lifespan of the cookies are described in the consent tool itself.

b) Consent tool

When accessing our website, we inform the user about the use of cookies and obtain their consent for the use of technically unnecessary cookies and external media.

Our website uses Borlabs-Cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of the Borlabs cookie.

  1. Legal basis for the use of cookies

The legal basis for the processing of personal data using technically unnecessary cookies is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.

Otherwise, the legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to simplify the use of the website for users.

  1. Deactivation and deletion of cookies, cancellation

Most browsers are set to accept cookies automatically. However, you can deactivate or restrict the storage of cookies on your computer by changing your browser settings accordingly. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Revocation:

You can revoke your consent to the use of technically unnecessary cookies and/or external media at any time in your personal .

Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as the responsible party:

  1. Right to information

You have the right to request information as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

  1. Right to rectification

You have the right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete (Art. 16 GDPR).

  1. Right to restriction of processing

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of the examination as to whether the objection can be upheld.

  1. Right to erasure

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies in detail, e.g. if the data is no longer required for the purposes pursued and the statutory retention requirements do not prevent deletion.

  1. Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format so that you can transmit those data to a third party either yourself or – where technically feasible – through us.

  1. Right to revoke the declaration of consent under data protection law

You have the right to revoke a declaration of consent given to us under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

  1. Automated decision-making in individual cases / profiling

If, in exceptional cases, we use automated individual decision-making – including profiling – we are obliged by law to take precautions to ensure that you can influence the decision (Art. 22 GDPR).

  1. Right to lodge a complaint with a data protection supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection regulations.

The contact details of the data protection supervisory authority responsible for us can be found in Section II. of the data protection information.

  1. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests) (Article 21 GDPR); this also applies to profiling based on this provision (within the meaning of Article 4(4) GDPR). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

  1. Miscellaneous

Please note that the above rights of data subjects may be restricted by EU law or applicable national law.

To assert the above rights, please use the contact information in Section I. of the data protection information. Enquiries that are submitted to us electronically will generally be answered electronically, unless you have specified otherwise in your enquiry.

VII Data security

All data transmitted by you via our website is encrypted using the common and secure TLS (Transport Layer Security) standard. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” or by the lock symbol at the bottom of your browser.  We also implement suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

VIII. External links

Our website may contain links to third-party websites. If this is not obviously recognisable, we will inform you that this is an external link. We have no influence on the content and design of the pages of external providers. In this respect, this data protection information does not apply.

IX. Updating the data protection information

This data protection information is regularly checked to ensure that it is up to date and updated as necessary. You can access and print out the current data protection information at any time on the website at

Version: January 2024