Privacy Policy

Dear Visitors of VETACA Website,

welcome. For your security and peace of mind during your visit, we wish to inform you of how we handle your data. The following Privacy Policy is intended to inform you of how we manage the collection, use and passing on of personal data. The party responsible for this website is VETACA GmbH – a member of HOCH.REIN Group.

1. Usage Data

When you visit our website, so called “usage data” is stored on our webserver. The data are stored as a record for statistical purposes, to improve the quality of our website. This data set consists of

The page from which the data was requested,
The name of the data,
The date and time of the request,
The transferred data quantity,
The access status (data transferred, data not found),
The description of the type of the browser used,
The IP-Address of the device from which the request came, minus the last three digits.

We use this information to enable our website to be accessed, and to supervise and administrate our systems, to improve the layout of our website. The data is stored anonymously. Therefore, there is no means of creating personally identifiable user profiles with this data. Data about individuals or individual behaviour is not collected in this data set.

2. Communication by Email / Phone / Post / Contact Form

2.1. Purpose for the Data Processing / Legal Basis:

We treat all personal data that we receive through your communication with us via email, phone, post or through our contact form, confidentially. We will use your data solely to process your request. The legal basis for this processing is Art 6 Para 1 f) GDPR. The legitimate interests from our company’s perspective is to answer the requests of our clients, business partners and other stakeholders, in order to maintain and promote client satisfaction. For the use of our contact form, we require your name and email address. You may give us more information, though you are not required to do so.

2.2. Recipients / Categories of Recipient:

We will not transfer your data from VETACA GmbH, as member of HOCH.REIN Group, to any third parties. As an exception to this, data are processed on our request by sub-processors. Our service providers have been carefully selected by us, are audited by us, and are subject to the contractual obligations of Art 28 GDPR.

2.3. Storage Duration / Criteria for Determining the Storage Duration:

All personal details, that you relay to us in a request, are deleted or are securely anonymized, at the latest, 90 days after you have received our final reply. The retention period of 90 days is needed as it can occasionally come to pass, that you could contact us again regarding the same topic, in which event we need access to our previous correspondence. Our experience has been that, generally, repeat requests do not occur after more than 90 days.

3. Data Processing for Contact Persons

3.1. Purpose for the Data Processing / Legal Basis:

Our company processes the data of contact persons of our clients, stakeholders, suppliers and other business partners for communication via email, telephone, telefax and post. The legal basis for this processing is Art 6 Para 1 f) GDPR. The legitimate interests from our company’s perspective is to carry out or begin a business relationship with our clients, stakeholders, suppliers and other business partners, for which we must make personal contact with the contact persons.

3.2. Recipients / Categories of Recipient:

We will not transfer your data from VETACA GmbH, as member of HOCH.REIN Group, to any third parties. As an exception to this, data is processed on our request by sub-processors. Our service providers have been carefully selected by us, are audited by us, and are subject to the contractual obligations of Art 28 GDPR

3.3. Storage Duration / Criteria for Determining the Storage Duration:

Personal data are stored for the purpose of carrying out the business relationship for as long as there is a legitimate interest in doing so.

4. Data Processing for Marketing Purposes

4.1. Purpose for the Data Processing / Legal Basis:

We use personal data for marketing purposes, particularly for advertising via email, telephone and post. The purpose of data processing in the context of marketing measures is to inform data subjects of our products and services. The legal basis for sending advertisements by post is Art 6 Para 1 f) GDPR. We have a legitimate interest in sending clients and stakeholders information regarding our products and services. The legal basis for marketing measures by email or telephone is generally a declaration of consent that you have given us. Marketing measures for existing clients are subject to further special requirements.

You may choose to opt out of receiving our marketing initiatives anytime with immediate effect, by sending an email to info@vetaca.de

4.2. Recipients / Categories of Recipient:

We will not transfer your data from VETACA GmbH and HOCH.REIN Group to any third parties. As an exception to this, data are processed on our request by sub-processors. Our service providers have been carefully selected by us, are audited by us, and are subject to the contractual obligations of Art 28 GDPR.

4.3. Storage Duration / Criteria for Determining the Storage Duration:

If you opt out of marketing initiatives, your data will be immediately locked and subsequently deleted, provided they are not also used for other purposes.

5. Cookies

Cookies are small pieces of data that are stored on a user’s computer. They make it possible for information to be assessed over a defined time period and allow the user’s device to be identified. For an improved user experience and optimized performance, we use permanent cookies. Furthermore, we also use so called “session cookies” that are automatically deleted when you close your browser. You can set up your browser in such a way that you are informed when cookies are being placed. This will make the use of cookies more transparent for you.

6. Google Analytics

6.1. Purpose for the Data Processing / Legal Basis:

For the needs-based layout of our website, we create pseudonymised user profiles with the help of Google Analytics. Google Analytics use so called “cookies”, or text data, that are stored on your computer and that enable an analysis of the use of our website. The data that is generated by the cookie regarding your use of our website is, generally, transferred to a Google server in the USA and is stored there. As we have activated IP-anonymisation on this website, your IP addresses are abbreviated by Google within member states of the European Union or in other states party to European Economic Area agreement. In exceptional circumstances, the full IP-address could be transferred to the Google servers in the USA and to be abbreviated there. Google will use this

information to assess your use of our website, to assemble reports on website activity, and to provide us with other services connected to the use of our website and the use of connected internet services. The legal basis for the data processing is Art 6 Para 1 f) GDPR. We have a
legitimate interest in gathering information on the use of our website.

You can object to the creation of a pseudonymized user profile at any time. To do so, you have multiple options:

1.)

To object to web analysis through Google Analytics you can place an Opt-Out-Cookie, which will show Google that your data cannot be used or stored for web analysis. Please note, that this solution only works for as long as your browser stores the Opt-Out-Cookie. If you wish to place
an Opt-Out-Cookie, please click here.

2.) You can also hinder the storage of the cookies required to create a profile through appropriate
settings in your browser-software.

3.) Depending on the browser that you use, you may have the option of installing a Browser-Plugin, which prevents tracking. For this please click here and install the Browser-Plugin available.

6.2. Storage Duration / Criteria for Determining the Storage Duration:

We do not store any personally identifiable user profiles.

7. Google Webfonts

To optically improve the display of information on this site, Google Webfonts (http://www.google.com/webfonts/) are used. The webfonts are transferred when the page is called up into the cache of the browser in order to be able to use it for the presentation. If the browser does not support Google Web fonts or prohibits access, the text will be displayed in a standard font. When the page is accessed, no cookies are set for the website visitor. The data submitted in connection with the page view is sent to resourcespecific domains such as fonts.googleapis.com or fonts.gstatic.com. You will not be associated with any information collected or used in connection with the parallel use of authenticated Google services such as Gmail. The legal basis for the data transmission to Google is Art. 6 para. 1 lit. f) GDPR. The operator of the homepage has a legitimate interest in the use of Google Webfonts for visually enhanced presentation.

You can set your browser so that the fonts are not loaded by the Google servers (for example, by installing add-ons such as NoScript or Ghostery for Firefox). For information about the privacy policy of Google Webfonts, please visit: https://developers.google.com/fonts/faq#Privacy For general privacy information, visit the Google Privacy Center at: http://www.google.com/intl/ en-us / privacy/

8. Encryption

In order to protect your data against unauthorized access, we implement an encryption process on most sites. The details transmitted from your device to our service, and vice versa, are secured using a 256 Bit SSLencryption (Secure Socket Layer). This is demonstrated by the symbol of the lock on the status strip of your browser, and as the address line begins with https://. We only do not encrypt information that is publicly available.

9. Application

VETACA GmbH as memberof HOCH.REIN Group is constantly looking for qualified and motivated employees and would like to inform you about the way we collect and process your personal data when you apply for one of our open positions. Please note that applications sent to us by e‑mail are transmitted to us unencrypted. Therefore, please use the fields provided by us below the respective job offer. The data transmission will then be encrypted according to the current state of the art.

9.1 Purpose of data processing, legal basis/ mode of operation:

We collect and process personal data which we require for the application process and applicant selection. In particular, this includes your contact details, such as your name and address, as well as all data related to the application, such as your CV, references and qualifications. If you submit an application for reimbursement of travel expenses, we may also need your bank details. The legal basis for the processing of your data is Art. 88 GDPR in conjunction with § 26 (1) (1) Federal Data Protection Act (hereinafter BDSG) respectively Art. 6 (1) (1) b GDPR.

In the further process, your CV will be digitized and the data will be stored in an applicant database. Your original documents will be converted to PDF documents and also saved to your record. Your original files will be deleted. All documents sent with your application (cover letter, CV, references and other supporting documents) and the information contained therein will be saved. If you still send us your application documents in person or by mail, we first digitize them and then also record them in our applicant management system. We will return the original documents to you immediately.

If you voluntarily provide us with additional personal data (e.g. in a field marked as voluntary or optional below the job offer), we process this on the basis of your revocable consent in accordance with Art. 6 (1) (1) a, Art. 7 GDPR in conjunction with § 26 (2) BDSG.

Talent pool

If you are not hired, but your application is still of interest to us, we will ask you whether we may continue to keep your application for future vacancies within the HOCH.REIN Group. This longer retention is based on your revocable consent in accordance with Art. 6 (1) (1) a, Art. 7 GDPR in conjunction with § 26 (2) BDSG. Participation in our talent pool is voluntary. If you choose not to consent, this will not impact any ongoing application processes. We will then obtain your consent separately.

9.2 Recipients/categories of recipients:

Needless to say, we treat all your data confidentially. Without separate consent, your data can only be viewed by the recruiter responsible for the position to be filled and responsible supervisors within the HOCH.REIN Group or the VETACA company which you are applying for. In addition, we do not transfer your application data to third parties outside the HOCH.REIN Group.

If necessary, we appoint data processors who are strictly bound by documented instructions and who support us e.g. in the areas of IT or the archiving and destruction of documents, and with whom separate data protection agreements have been signed.

As a matter of principle, your data will not be transferred to countries outside the EU.

9.3 Data erasure:

If you are hired, your transmitted data may be stored by us in your personnel file for the purpose of the usual organizational and administrative process in compliance with the relevant legal provisions.

If you are not hired, the data you submitted will usually be deleted after 90 days (or after 6 months at the latest) after completion of the application process or after receiving a rejection of your application. We also erase your data if you withdraw your consent.

10. No Obligation to Provide Personal Data

Provided that the previous sections have not stated otherwise, the provision of personal data is neither legally nor contractually required, nor is it necessary to conclude a contract. You are under no obligation to provide personal data, provided there is no requirement to the contrary. If you do not make your personal data available to us, the result will be that we cannot answer your contact request, or that you cannot take part in an application process or another event.

11. Your Rights as a Data Subject

In accordance with Art 15 GDPR, you have the right to request a copy of the personal information that we hold about you, free of charge. Furthermore, when the legal requirements have been met, you have a right to the correction (Art 16 GDPR), deletion (Art 17 GDPR) and restriction of the processing (Art 18 GDPR) of your personal data. If the data processing occurs on the basis of Art 6 Para 1 e) or f) GDPR, you have the right to object to the processing of your data under Art 21 GDPR.

If you object to the processing of your data, the processing will cease, unless the data controller has protected obligatory reasons to continue the processes, such that they outweigh the interests of the data subject to object. If you have made the processed data available yourself, you have a right to data portability under Art 20 GDPR.

If the data processing occurs on the basis of consent in accordance with Art 6 Para 1 a) or Art 9 Para 2 a), you have the right to revoke this consent at any time with immediate effect, but with no effect on the legality of the processing up to that point. For any of the above-named cases, or in the event of questions or complaints, please contact our Data Protection Officer in writing or via email.

Furthermore, you have a right to complain to a Data Protection Supervisory Authority. You may contact the Data Protection Supervisory Authority of the state in which you live in, or the state in which the data controller is based.

12. Contact Details of our Data Protection Officer

Our company data protection officer is available for you for further information on the topic of data protection:
Dr. iur. Christian Borchers
datenschutz süd GmbH
Wörthstrasse 15
97082 Würzburg
datenschutz@hoch-rein.com

Controller as defined by Art. 4 No. 7 DSGVO
VETACA GmbH
Gräsleinsgasse 1 – 97509 Kolitzheim – Germany
Phone: +49 (0) 9385980 43333 – E-Mail: info@vetaca.de