Privacy Policy

Introduction

We take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws. In this privacy policy, we inform you about what personal data we collect from you and for what purpose we use it.

Responsible party

The responsible party in the sense of the data protection laws is:

VisioLab GmbH.

Neumarkt 7.

49074 Osnabrück; Germany.

Person authorized to represent the company: Tim-Oliver Niekamp.

E-mail address: hello@visiolab.io.

Imprint: https://visiolab.io/impressum.html.

Collection of data

We collect personal data when you voluntarily provide it to us in the context of your order when contacting us (e.g. via contact form (landing page) or e-mail). Which data is collected can be seen from the respective input forms. We use the data you provide to process the contract and handle your inquiries.

Use of cookies

Processing of cookie data based on consent: We use a cookie consent management procedure in which the consent of users to the use of cookies, or the processing and providers mentioned in the cookie consent management procedure, can be obtained and managed and revoked by users. In this context, the declaration of consent is stored in order not to have to repeat its request and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. Here, a pseudonymous user identifier is formed and stored with the time of consent, information on the scope of consent (e.g. which categories of cookies and/or service providers) as well as the browser, system and end device used.

Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

Processing by necessary cookies: The data processed with the help of necessary cookies are processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.

Tracking tools

This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. The installation of cookies can be prevented by selecting the appropriate settings on your browser software.

Services used and service providers:

Google Analytics: online marketing and web analytics; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com/

intl/de/about/analytics/; privacy policy: https://policies.google.com/privacy; opt-out: Opt-Out-Plugin: https://tools.google.com/dlpage/

gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/

authenticated.

Targeting with Google Analytics: Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com; privacy policy: https://policies.google.com/privacy.

This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. For more information on Google Tag Manager, please visit https://www.google.com/intl/de/

tagmanager/use-policy.html.

Hosting and Log Files

The hosting platform we use is provided by Webflow. This platform automatically collects information in so-called server log files, which your browser automatically transmits to us. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • Host name of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Contact form, contacting and landing pages

When contacting us (e.g. by mail, contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures. This website uses so-called landing pages. A landing page is a special page to which a user is directed when he or she clicks on a specific link, e.g. an advertisement or a newsletter link. The goal of a landing page is to target the user to a specific offer or action and get them to convert. On our landing pages you can, among other things, leave your contact details or take advantage of special offers. The use of these pages is at your own risk. We assume no liability for incorrect or incomplete information on these pages. We reserve the right to change or delete these pages at any time without prior notice. If you send us inquiries via contact form or e-mail, your data from the inquiry form or your e-mail, including the contact data you provided, will be stored by us in order to process and answer your inquiry. We do not pass on this data without your consent.

Types of data processed: contact data (e.g., email, phone numbers); content data (e.g., input in online forms); usage data (e.g., web pages visited, interest in content, access times); meta, communication, and procedural data (e.g., IP addresses, time information, identification numbers, consent status).
Data subjects: Communication partners.
Purposes of processing: contact inquiries and communication; managing and responding to inquiries; feedback (e.g. collecting feedback via online form); providing our online offer and user experience.
Legal grounds: legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO).
Further notes on processing operations, procedures and services:

Contact form: If users contact us via our contact form, email or other communication channels, we process the data communicated to us in this context for the purpose of processing the communicated request; Legal basis: Contract performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
HubSpot: Customer management as well as process and sales support with personalized customer care with multi-channel communication, i.e. management of customer inquiries from different channels as well as with analysis and feedback functions; service provider: HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA; Legal Grounds: Contractual performance and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b) DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.hubspot.de; Privacy Policy: https://legal.hubspot.com/de/privacy-policy; Order Processing Agreement: https://legal.hubspot.com/dpa; Standard Contractual Clauses (ensuring level of data protection for processing in third countries): https://legal.hubspot.com/dpa.

Hubspot

This website uses Hubspot, a web analytics service provided by Hubspot Inc ("Hubspot"). Hubspot uses cookies to analyze user behavior on our website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Hubspot on servers in the United States. We have entered into an order processing agreement with Hubspot, in which Hubspot undertakes to process the data only as part of the order processing in accordance with the customer's instructions and the applicable data protection laws. hubspot: Email marketing platform; Service provider: HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.hubspot.de; Data protection declaration: https://legal.hubspot.com/de/privacy-policy; Order processing agreement: https://legal.hubspot.com/dpa; Standard contractual clauses (Gew%C3%A4hrleistung Datenschutzniveau bei Verarbeitung in Drittl%C3%A4der): https://legal.hubspot.com/dpa.

Plugins, embedded functions and content and presences in social networks (social media)


We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or city maps (hereinafter uniformly referred to as "content").
The integration always requires that the third-party providers of this content process the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the presentation of these contents or functions. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may further be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer as well as be linked to such information from other sources.
Types of data processed: Usage data (e.g. websites visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status); inventory data (e.g. names, addresses); contact data (e.g. e-mail, telephone numbers); content data (e.g. entries in online forms).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of processing: provision of our online offer and user-friendliness; marketing; profiles with user-related information (creation of user profiles).
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
In addition, we maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us.

Further guidance on processing operations, procedures and services:
Instagram plugins and content: Instagram Plugins and Content - This may include, for example, content such as images, videos or text and buttons that allow users to share content from this online service within Instagram. - We are jointly responsible with Meta Platforms Ireland Limited for collecting or receiving in the course of a transmission (but not further processing) "Event Data" that Facebook collects or receives in the course of a transmission by means of Instagram features (e.g., content embedding features) running on our Online Offer for the purposes of: a) displaying content as well as promotional information that matches users' presumed interests; b) delivering commercial and transactional messages (e.g., targeting users via Instagram); c) providing commercial and transactional messages (e.g., targeting users via Instagram). e.g., targeting users via Facebook Messenger); c) improving ad delivery and personalization of features and content (e.g., improving the detection of which content or advertising information presumably matches users' interests). We have concluded a special agreement with Facebook ("Addendum for Responsible Parties", https://www.facebook.com/legal /controller_addendum), which regulates in particular which security measures Facebook must observe (https://www.facebook.com/legal /terms/data_security_terms) and in which Facebook has agreed to fulfill the data subject rights (i.e., users can direct information or deletion requests to Facebook, for example). note: When Facebook provides us with metrics, analytics, and reports (which are aggregated, i.e., do not obtain information about individual users, and are anonymous to us), this processing is not done under shared responsibility, but on the basis of a data processing agreement ("Data Processing Terms ", https://www.facebook.com/legal/terms/dataprocessing) , the "Data Security Terms and Conditions" (https://www.facebook.com/legal /terms/data_security_terms) and, with regard to processing in the USA, on the basis of standard contractual clauses ("Facebook EU Data%C3%BC Transmission Addendum, https://www.facebook.com/legal /EU_data_transfer_addendum). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook; service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.instagram.com; Privacy statement: https://instagram.com/about/legal/privacy.LinkedIn-Plugins and content: LinkedIn plugins and content- This may include, for example, content such as images, videos or text and buttons with which users can share content of this online offer within LinkedIn; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.linkedin.com; Privacy statement: https://www.linkedin.com/legal/privacy-policy; Order processing agreement: https://legal.linkedin.com/dpa; Standard contractual clauses (guarantee of data protection level for processing in third countries): https://legal.linkedin.com/dpa; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.YouTube-Videos: Video content; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.youtube.com; Privacy statement: https://policies.google.com/privacy; Opt-out: Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=de,%20Einstellungen%20f%C3%BCr %20die%20Darstellung%20von%20 Werbeeinblendungen:%20https:/ /adssettings.google.com/authenticated.

Newsletter and electronic notifications


We send newsletters, e-mails and other electronic notifications (hereinafter referred to as "newsletters") only with the consent of the recipients or a legal permission. If the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us.

In order to subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name, for the purpose of personal address in the newsletter, or further information, if this is necessary for the purposes of the newsletter.

Double opt-in procedure: The registration for our newsletter is always carried out in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove consent formerly given. The processing of this data will be limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a block list (so-called "block list") for this purpose alone.

The logging of the registration process takes place on the basis of our legitimate interests for the purpose of proving its proper course. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.

Contents:
Information about us, our services, promotions and offers.

Types of data processed: inventory data (e.g., names, addresses); contact data (e.g., e-mail, telephone numbers); meta, communication and procedural data (e.g., IP addresses, time data, identification numbers, consent status); usage data (e.g., websites visited, interest in content, access times).
Data subjects: Communication partners; users (e.g., website visitors, users of online services).
Purposes of processing: direct marketing (e.g., by e-mail or postal mail); provision of contractual services and customer service.
Legal grounds: consent (Art. 6 para. 1 p. 1 lit. a) DSGVO); legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Option to object (Opt-Out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent, or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the contact options given above, preferably e-mail, for this purpose.
Further information on processing, procedures and services:

Measurement of opening and click-through rates: The newsletters contain a so-called "web beacon", i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened, or, if we use a shipping service provider, from their server. In the course of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval, are initially collected. This information is used for the technical improvement of our newsletter based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. This information is assigned to the individual newsletter recipients and stored in their profiles until they are deleted. We use the analyses to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Prerequisite for the use of free services: Consent to receive mailings may be made contingent as a condition of receiving free services (e.g., access to certain content or participation in certain promotions). If users wish to take advantage of the free service without subscribing to the newsletter, please contact us.
HubSpot: email marketing platform; service provider: HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.hubspot.de; Privacy policy: https://legal.hubspot.com/de/privacy-policy; Order processing agreement: https://legal.hubspot.com/dpa; Standard contractual clauses (ensuring level of data protection for processing in third countries): https://legal.hubspot.com/dpa.

Personio career website

If you would like to view our job openings, you will be redirected to Personio's career website.
Personio: HR software platform; service provider: Personio SE & Co. KG Seidlstraße 3 80335 Munich Tel.: +49 (89) 1250 1005; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website: https://www.personio.de/; Privacy page: www.personio.de/datenschutz/; Order processing agreement: https://support.personio.de/hc/de /articles/360000852949-Wo-finde-ich- den-Auftragsverarbeitungsvertrag- AVV-von-Personio-.

Passing on of data

Your personal data will only be passed on to third parties within the scope of contract processing, in particular for the delivery of the goods, to the company commissioned with the delivery, insofar as this is necessary for the delivery of the goods, or to the credit institution commissioned with the processing of payments, insofar as this is necessary for the processing of payments. Data will not be passed on to other third parties.

SSL encryption

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or requests. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Your rights

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

  • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
  • Right of revocation for consents: You have the right to revoke any consent you have given at any time.
  • Right of access: You have the right to request confirmation as to whether data in question is being processed and to obtain information about this data, as well as further information and a copy of the data in accordance with the legal requirements.
  • Right to rectification: In accordance with the law, you have the right to request that data concerning you be completed or that inaccurate data concerning you be rectified.
  • Right to erasure and restriction of processing: You have the right, in accordance with the law, to request that data relating to you be erased immediately or, alternatively, to request restriction of the processing of the data in accordance with the law.
  • Right to data portability: You have the right to receive data relating to you that you have provided to us in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another controller.
  • Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the requirements of the GDPR.

Supervisory authority responsible for us:

The State Commissioner for Data Protection of Lower Saxony

Prinzenstrasse 5

30159 Hannover

Phone: 05 11/120-45 00

Fax: 05 11/120-45 99

E-mail: poststelle@lfd.niedersachsen.de

Homepage: https://www.lfd.niedersachsen.de

Changes to this privacy policy

We reserve the right to amend this data protection declaration at any time in compliance with data protection law. The current version of the data protection declaration is always available on our website.

Status: May 2023

Contractual language

The German text of this privacy policy prevails over the English text. The English text is merely a non-binding convenient translation.