Privacy Policy

This policy uses the terminology of the General Data Protection Regulation (GDPR). So that it stays readable, we explain the most important terms first.

Personal data

Any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified directly or indirectly, in particular by reference to a name, an identification number, location data or an online identifier.

Data subject

Any natural person whose personal data is processed. In this policy we address you as the data subject.

Processing

Any operation performed on personal data — collecting, recording, storing, using, disclosing, restricting or erasing it — whether or not by automated means.

Restriction of processing

Marking stored personal data with the aim of limiting its processing in the future.

Profiling

Automated processing used to evaluate, analyse or predict personal aspects of a natural person, such as interests, behaviour or location.

Pseudonymisation

Processing personal data in such a way that it can no longer be attributed to a specific person without additional information, which is kept separately.

Controller

The body that determines the purposes and means of processing. For this website that is the company named in section 02.

Processor

A body that processes personal data on our behalf and on our instructions.

Recipient

A body to which personal data is disclosed, whether a third party or not. Public authorities that receive data in the framework of a particular inquiry are not regarded as recipients.

Third party

Any body other than the data subject, the controller, the processor and the persons authorised to process data under their direct authority.

Consent

A freely given, specific, informed and unambiguous indication of your wishes by which you agree to a processing operation.

The controller within the meaning of the GDPR and other data protection provisions is:

Represented by

Dr. Klaus-Uwe Koschnick

Phone

+49 6103 388 90 60

Email

info@via-software.de

Register court

Amtsgericht Offenbach, HRA 9442

VAT identification number

DE 191528890

Website

www.via-software.com

This policy applies to the website on which we present our product iplan. It does not apply to the use of the iplan application itself: if you use iplan as a customer, we process personal data there on behalf of your organisation under a separate agreement pursuant to Art. 28 GDPR.

Cookies are small text files that a website stores on your device through your browser. Many contain a cookie ID, which allows a browser to be recognised on a later visit.

When you first open this website, no cookies are set beyond those that are technically necessary. Analytics services are loaded only after you have agreed in the consent banner. If you decline, they are not embedded at all.

Your decision itself is kept in your browser's local storage. The entry records only whether you accepted or declined, contains no identifier that identifies you, and never leaves your device. It spares you the banner on every subsequent page view. The legal basis is Section 25(2) no. 2 TDDDG, as this storage is strictly necessary to fulfil your explicit request.

You can change your choice at any time: the “Cookie settings” link is permanently available in the footer of every page. If you withdraw your consent, Google Analytics is no longer loaded and the cookies set by that service are deleted. Independently of this, you can restrict cookies generally in your browser settings and delete cookies already set. If you disable cookies entirely, some functions of this website may not be fully usable.

This website runs on a virtual server infrastructure we rent. The provider is OVH GmbH, Christophstraße 19, 50670 Cologne, Germany (OVH Group, France). The servers are located within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Each time this website is accessed, our server collects a series of general data and information and stores it in log files. The following may be recorded:

• browser type and version used
• operating system used by the accessing system
• website from which you reached us (referrer)
• sub-pages of this website that were accessed
• date and time of access
• IP address of the accessing system
• internet service provider of the accessing system
• other comparable data used to avert danger in the event of attacks

We draw no conclusions about you from this data. We need it to deliver the content of this website correctly, to ensure its continued operation, and to provide law enforcement authorities with the information necessary in the event of an attack. It is evaluated statistically and with the aim of raising the level of protection for the data we process. Log files are stored separately from any data you provide to us yourself. The log data is deleted after no more than 30 days, unless it is exceptionally needed for a longer period to investigate a specific security-related incident. The legal basis is Art. 6(1)(f) GDPR.

You can send us an enquiry using the contact form on this website. To process it, your details are transmitted to an enquiry backend operated by us and hosted on the OVH infrastructure described in section 04. The data is not passed on to third parties and is not transferred to a third country. The following is collected:

Name

required, so we can address you personally

Email address

required, for our reply

Company

optional, to help us understand your request

Message

required, the content of your enquiry

Before submitting, you confirm via a checkbox that you have taken note of this privacy policy. Without this confirmation, the form is not transmitted.

The processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases it rests on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).

The data you enter in the form remains with us until you ask us to erase it or the purpose for storing it no longer applies, for example once your enquiry has been dealt with. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Because the law requires it, this website contains details that enable quick electronic contact with us, including an email address. If you contact us that way or by telephone, we store your enquiry together with the personal data arising from it in order to handle your request. It is not passed on to third parties.

The legal basis is Art. 6(1)(b) GDPR where your enquiry serves to prepare or perform a contract, and otherwise Art. 6(1)(f) GDPR. The data remains with us until you ask us to erase it or the purpose for storing it lapses; statutory retention periods remain unaffected.

We process and store personal data only for the period necessary to achieve the respective purpose of storage, or as far as laws and regulations to which we are subject provide for it.

If the purpose of storage ceases to apply, or a prescribed storage period expires, the data concerned is routinely blocked or erased in accordance with statutory requirements.

You have the following rights in relation to us. For all of them, an informal message to info@via-software.de or to the address given in section 02 is sufficient.

a) Right of confirmation

You may request confirmation at any time as to whether we process personal data concerning you.

b) Right of access

You may request free information about the data stored about you and a copy of it. This covers the purposes of processing, the categories of data, the recipients, the envisaged storage period, the existence of rights to rectification, erasure, restriction and objection, the right to lodge a complaint with a supervisory authority, the source of the data, and the existence of automated decision-making. Where data is transferred to a third country, you may request information about the appropriate safeguards.

c) Right to rectification

You may request that inaccurate data be corrected without undue delay and that incomplete data be completed.

d) Right to erasure

You may request erasure of your data where it is no longer necessary for its purpose, where you withdraw consent and no other legal basis applies, where you object and no overriding legitimate grounds exist, where the data has been processed unlawfully, or where a legal obligation requires erasure.

e) Right to restriction of processing

You may request restriction where you contest the accuracy of the data, where the processing is unlawful and you oppose erasure, where we no longer need the data but you require it to pursue legal claims, or while a decision on your objection is pending.

f) Right to data portability

You may receive the data you provided to us in a structured, commonly used and machine-readable format and transmit it to another controller, provided the processing is based on consent or a contract and is carried out by automated means. Where technically feasible, you may request direct transmission.

g) Right to object

You may object at any time, on grounds relating to your particular situation, to processing we base on Art. 6(1)(e) or (f) GDPR. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

h) Automated individual decision-making

You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. No such decision-making takes place on this website.

i) Right to withdraw consent

You may withdraw consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

Independently of this, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Art. 6(1)(a) GDPR serves as the legal basis for processing for which we obtain consent — on this website that means web analytics.

Where processing is necessary for the performance of a contract to which you are party, it is based on Art. 6(1)(b) GDPR. The same applies to pre-contractual measures, for example enquiries about iplan.

Where we are subject to a legal obligation requiring processing, such as fulfilling tax obligations, we rely on Art. 6(1)(c) GDPR.

Finally, processing may be based on Art. 6(1)(f) GDPR where it is necessary to pursue a legitimate interest and your interests, fundamental rights and freedoms do not override it. We rely on this for operating and securing this website and for embedding the product video.

For storing information on your device and accessing information already stored there, Section 25 TDDDG applies in addition. Access that is not strictly necessary takes place only with your consent under Section 25(1) TDDDG.

Web fonts

To display fonts consistently, this website uses the “Inter” typeface. The font files are stored on our own server and delivered together with the rest of the content. Your browser establishes no connection to Google or any other external font provider when you open a page, and no data is transmitted to such providers for this purpose.

Google Analytics

This website uses the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use the measurement ID G-NETZNHL9EZ.

Google Analytics lets us evaluate how our website is used. For this purpose cookies are stored on your device that allow an analysis of your use. The information generated is transmitted to a Google server and stored there. Google Analytics does not log or store individual IP addresses; your IP address is used only to derive approximate location information and is discarded immediately afterwards.

Google Analytics is loaded only after you have given your consent. Until then no connection to Google is established and no data is transmitted. The legal basis is therefore your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw it at any time with effect for the future via the “Cookie settings” link in the footer.

Data collected at user and event level is automatically deleted after 14 months. Insofar as personal data is transferred to the United States, Google is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. You can additionally prevent collection by Google Analytics by installing the browser add-on available at tools.google.com/dlpage/gaoptout. Further information is available in Google's privacy policy at policies.google.com/privacy.

Product video (KlickPlayer)

This website embeds an interactive product video via the KlickPlayer service. The provider is Altenburger Bahnmüller Webperformance UG (haftungsbeschränkt), Jurastraße 27/1, 72072 Tübingen, Germany.

The video is loaded in an embedded frame as soon as the page opens. For technical reasons your browser establishes a connection to the provider's servers and to its content delivery network, transmitting your IP address along with technical details about your browser and operating system. Without this connection the video cannot be delivered.

According to the provider, end users' IP addresses are not stored and no tracking cookies are used. For counting views, an identifier is placed solely in your browser's sessionStorage and deleted automatically as soon as you close the browser tab.

The provider in turn uses BunnyWay d.o.o., Cesta komandanta Staneta 4a, 1215 Medvode, Slovenia, to deliver the video files, and Supabase Inc., 970 Trestle Glen Rd, Oakland, CA 94610, USA, for data storage. According to the provider, processing takes place exclusively within the European Union; Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are in place for the US company Supabase Inc.

The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in presenting iplan clearly. The provider's privacy policy is available at klickplayer.de/datenschutz.

Where we base processing on Art. 6(1)(f) GDPR, our legitimate interest is to operate this website securely and reliably, to handle enquiries effectively and to present our product comprehensibly — and thereby to carry out our business in favour of the well-being of our employees and shareholders.

The criterion for the storage period is the respective statutory retention period. Once it expires, the data concerned is routinely deleted, provided it is no longer necessary for the performance or initiation of a contract. Server log files are deleted after no more than 30 days. Data collected through Google Analytics is automatically deleted after 14 months.

Providing personal data is in part required by law, for example by tax regulations, or may follow from contractual provisions. Concluding a contract may require you to provide us with personal data that we then have to process. If that data is not provided, the contract cannot be concluded.

Simply using this website requires no personal data from you. The entries in the contact form are voluntary; without a name, email address and message, however, we cannot answer your enquiry.

As a responsible company, we do not use automated decision-making or profiling.

For security reasons, and to protect the transmission of confidential content such as the enquiries you send us, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of your browser switching from “http://” to “https://” and by the lock icon in the browser bar. While encryption is active, the data you transmit cannot be read by third parties.