Privacy Policy

Last updated on: 12.06.2025

1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when you use our website. Personal data in this context means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

VanSite UG (haftungsbeschränkt)

Am Südhang 8 33739 Bielefeld

Phone: +49(0)521 759 863 31

E-mail: datenschutz@vansite.eu

The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/referrer from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (where applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3) Hosting

3.1 External hosting by Sharetribe

This website is hosted by an external service provider (host). The host is Sharetribe Oy, Erottajankatu 19 B, 00130 Helsinki, Finland (hereinafter "Sharetribe"). Personal data collected on this website is stored on Sharetribe's servers. This may include, among other things, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. Sharetribe is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). Sharetribe will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data. Further processing on servers other than the aforementioned ones of Sharetribe only takes place within the scope set out below. To ensure data protection-compliant processing, we have concluded a data processing agreement with Sharetribe. You can find more information on the handling of user data in Sharetribe's privacy policy: https://www.sharetribe.com/privacy-policy/

3.2 External hosting by Amazon Web Services (AWS)

This website is hosted by an external service provider (host). The host is Amazon Web Services Inc. (hereinafter "AWS"), 410 Terry Avenue North Seattle WA 98109, USA. Personal data collected on this website is stored on AWS servers. This may primarily include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. AWS is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR). AWS will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data. Further processing on servers other than the aforementioned ones of AWS only takes place within the scope set out below. Conclusion of a data processing agreement To ensure data protection-compliant processing, we have concluded a data processing agreement with AWS. You can find more information on the handling of user data in AWS's privacy policy: https://aws.amazon.com/de/compliance/eu-data-protection/

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted again after the end of the browser session, that is, after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to perform the contract or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit. We may work together with advertising partners who help us make our online offering more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below. Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains to you how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting us

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form is apparent from the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry or for making contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your enquiry pursuant to Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your enquiry has been finally processed. This is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Online appointment booking

We process your personal data within the scope of the online appointment booking made available. Which data we collect for online appointment booking can be seen from the respective input form or the appointment request for booking an appointment. Insofar as certain data is necessary in order to carry out online appointment booking, we mark it accordingly in the input form or in the appointment request. If we provide you with a free-text field in the input form, you can describe your request in more detail there. You can then also decide for yourself which data you wish to enter in addition. The data you provide is stored and used exclusively for the purpose of booking the appointment. When processing personal data that is required to fulfil a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. If you have given us consent to process your data, the processing is carried out on the basis of Art. 6 (1) (a) GDPR. Consent that has been given can be revoked at any time by sending a message to the controller named at the beginning of this declaration.

7) Registration on the portal

You can register on our website by providing personal data. Which personal data is processed for registration is shown by the input form used for registration. We use the so-called double opt-in procedure for registration, meaning that your registration is only complete once you have confirmed your sign-up beforehand by clicking the link contained in a confirmation email sent to you for this purpose. If your confirmation is not given within 24 hours, your sign-up will be automatically deleted from our database. Providing the data mentioned above is mandatory. You can provide all further information voluntarily by using our portal. When you use our portal, we store the data required to fulfil the contract, including any details about your payment method, until you permanently delete your account. We also store the voluntary data you have provided for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 (1) (f) GDPR.

8) Comment function

As part of the comment function on this website, in addition to your comment we also store and publish on this website the time the comment was created and the commenter name you have chosen. Your IP address is also logged and stored. This storage of the IP address is carried out for security reasons and in case the person concerned violates the rights of third parties or posts unlawful content through a comment submitted. We need your email address in order to contact you should a third party object to your published content as unlawful. The legal bases for storing your data are Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

9) Use of customer data for direct marketing

9.1 Subscribing to our email newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory detail for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving newsletters. We then send you a confirmation email asking you to confirm, by clicking the relevant link, that you wish to receive the newsletter in future. By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you subscribe to the newsletter, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of subscription, in order to be able to trace possible misuse of your email address at a later point. The data collected by us when you subscribe to the newsletter is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After you have unsubscribed, your email address is deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this declaration.

9.2 SendGrid

This website uses the services of SendGrid for sending emails for the newsletter and system mails. The provider is SendGrid Inc., 1801 California Street, Suite 500, Denver, CO 80202. SendGrid is a service that can be used to send and analyse emails. When you enter data for the purpose of receiving the newsletter (e.g. email address), it is stored on SendGrid's servers. SendGrid is certified under the "EU-US Privacy Shield". The "Privacy Shield" is an agreement between the European Union (EU) and the USA intended to ensure compliance with European data protection standards in the USA. You can find further information on SendGrid's certification here: SendGrid Privacy Shield certification. The data processing is carried out on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time by contacting us. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal. For more details, please refer to SendGrid's privacy policy.

10) Use of social media: videos

Use of YouTube videosThis website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information once the video(s) are played. When playback of embedded YouTube videos is started, the provider "YouTube" sets cookies to collect information about user behaviour. According to "YouTube", these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want your activity to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates it. Such an evaluation is carried out in particular in accordance with Art. 6(1)(f) GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. The use of YouTube may also result in the transfer of personal data to the servers of Google LLC in the USA. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control. Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy Where legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option for objecting described above.

11) Tools and other matters

11.1 GDPR Cookie Compliance by Moove Agency

This website uses the GDPR Cookie Compliance by Moove Agency, 35 Kingland Rd, London E2 8AA ("Moove Agency"), which sets technically necessary cookies to store your cookie preferences. This data processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing a cookie consent management service for website visitors.

11.2 Google Maps

This website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer. Google Maps is used in the interest of an appealing presentation of our online offerings and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. More information on how user data is handled can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

11.3 Voucherify

We use Voucherify to create and send a "voucher code" to our registered customers, through which they can receive discounts on the VanSite platform. Business address: Rspective P. Rychlik Sp. J, Porcelanowa 23, 40-246 Katowice, Poland Privacy policy: https://www.voucherify.io/legal/privacy-policy/v1-2–

11.4 HelpCrunch as support chat

For the purpose of customer management and, above all, to ensure the fastest possible support for the best possible user experience, we use the HelpCrunch service from HelpCrunch Inc. (1811 Silverside Rd, Wilmington, DE 19810, USA) for sending notifications by email and for live chats. HelpCrunch uses users' data only for the technical processing of enquiries and does not pass it on to third parties. HelpCrunch can be used pseudonymously. In the course of processing service enquiries, it may be necessary to collect additional data you provide. The use of HelpCrunch is optional and serves to improve and speed up our customer and user service. If users do not agree to data being collected via and stored in HelpCrunch's external system, we offer them alternative contact options for submitting service enquiries by email, telephone or post. Further information on the processing of personal data by HelpCrunch can be found in the service's privacy policy: https://helpcrunch.com/terms-of-service.html

11.5 LimeSurvey

We use software from LimeSurvey GmbH, Barmbecker Straße 7a, 22303 Hamburg, to embed surveys on our website. When you open a website containing the LimeSurvey survey software, a connection to the company's servers is established. The following information is collected without any action on your part and stored until it is automatically deleted: the IP address of the requesting computer, the date and time of access, the name and URL of the file retrieved, the volume of data transferred, whether the download was successful, the website from which the access originated (referrer URL), the browser used and, where applicable, your computer's operating system, and the name of your access provider. We process the data listed above for the following purposes: to ensure a smooth connection to the website, to ensure comfortable use of our website, to evaluate system security and stability, and for other administrative purposes. For more information on data processing and on data protection by Lime Survey, please see https://www.limesurvey.org/de/data-protection-statement We base our use of Lime Survey on Art. 6(1)(a) GDPR. By using the surveys provided, you give us your consent to data processing.

11.6 HeyFlow

We have embedded forms from HeyFlow on our websites. The provider is Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg (hereinafter HeyFlow). HeyFlow provides technology for creating online interaction tools (click funnels) that allow (potential) customers or other third parties (hereinafter "requesters") to get in touch with us. To do so, requesters enter their request and the other data requested (e.g. name, contact details and similar) into the form and submit it. Where applicable, you have the option of uploading your own files; the following explanations apply to these as well. All requests are processed in HeyFlow's systems on our behalf. We have concluded a data processing agreement with HeyFlow. This agreement ensures that HeyFlow processes the data in compliance with the GDPR and exclusively on the basis of our instructions. Further details can be found in HeyFlow's privacy policy at https://heyflow.app/de/datenschutz The processing of this data with the help of HeyFlow is carried out on the basis of our legitimate interest in communicating with requesters in a manner that is as interactive and user-friendly as possible (Art. 6(1)(f) GDPR). The data you enter remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

11.7 OneSignal

We use OneSignal, a push notification service from OneSignal Inc., 2194 Esperanca Avenue, Santa Clara, CA 95054, United States (hereinafter 'ONESIGNAL'), to send push notifications to users and to organize, optimize, and tailor the sending of push notifications to our users. The personal data collected by ONESIGNAL includes your IP address and is transferred to and processed in the USA. You can find more information in OneSignal's privacy policy, available at https://onesignal.com/privacy_policy. The processing of your data via OneSignal is carried out on the basis of your consent (Art. 6(1)(a) GDPR). You can decline to receive push notifications by adjusting the relevant settings on your device.

11.8 Zapier

This website uses the integration service provider Zapier, a service from Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA (hereinafter "Zapier"). We use Zapier to integrate various databases and web tools. Zapier is a web service that automatically links actions between different web tools and synchronizes their applications with one another so that they carry out the desired processes. In doing so, Zapier automates our processing operations and provides various workflows in order to make work processes in our processing system more efficient. The data processing described is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organization of our work processes. We have concluded a data processing agreement with Zapier, by which we oblige Zapier to protect the data of our website's visitors and not to pass it on to third parties. You can find more information on Zapier's use of data in the Zapier privacy policy at https://zapier.com/privacy.

11.9 UX Cam

In our apps we use technologies from UXCam Ltd (www.uxcam.com) to collect and store data for optimization purposes. This data makes it possible to create usage profiles under a pseudonym. The data collected with the UXCam technologies is not used to identify you personally without your express consent. It is not linked to any personal data about the bearer of the pseudonym. You can object to the collection and storage of the data at any time with effect for the future.

The legal basis for using this analytics tool is Art. 6(1)(f) GDPR. The processing serves to analyse usage behaviour and is therefore necessary to safeguard our legitimate interests.

11.10 Twilio

Our website uses services from Twilio, Inc. ("Twilio") to provide certain functions, such as SMS notifications and other communication services. By using our services, you also agree to Twilio's terms of use, which can be found under Twilio Terms of Use. We accept no liability for Twilio's services or data processing practices. All data collected in connection with the use of Twilio services is subject to Twilio's privacy policies. It is your responsibility to inform yourself about these terms and policies and to accept them.

12) Our social media presence

Data processing by social networks

We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below. Social networks such as Facebook, Twitter etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations that are relevant to data protection. In detail: if you are logged into your social media account and visit our social media presence, the operator of the social media portal can attribute this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, the data is collected, for example, via cookies stored on your device or by recording your IP address. Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be shown to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or have been logged in. Please also note that we cannot trace all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media presence is intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which the operators of the social networks are required to specify (e.g. consent within the meaning of Art. 6(1)(a) GDPR).

Controller and exercising of rights

When you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can in principle exercise your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook). Please note that, despite our joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data we collect directly via the social media presence is deleted by our systems as soon as the purpose of its storage no longer applies, you request us to delete it, you revoke your consent to its storage, or the purpose of the data storage ceases to apply. Stored cookies remain on your device until you delete them. Mandatory legal provisions, in particular retention periods, remain unaffected. We have no influence over the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please inform yourself directly with the operators of the social networks (e.g. in their privacy policy, see below).

Individual social networksFacebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and to other third countries. We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings yourself in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads. For details, see Facebook's privacy policy: https://www.facebook.com/about/privacy/.

X

We use the X messaging service. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. You can adjust your Twitter privacy settings yourself in your user account. To do so, click the following link and log in: https://twitter.com/personalization. For details, see Twitter's privacy policy: https://twitter.com/de/privacy.

Instagram

We maintain a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal data, see Instagram's privacy policy: https://help.instagram.com/519522125107875.

LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you want to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. For details on how they handle your personal data, see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

Youtube

We maintain a profile on Youtube. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. For details on how they handle your personal data, see Instagram's privacy policy: https://www.google.de/intl/de/policies/privacy.

13) Rights of the data subject

13.1 Applicable data protection law grants you, vis-à-vis the controller, extensive rights as a data subject regarding the processing of your personal data (rights to information and intervention), which we set out below:

  • Right of access pursuant to Art. 15 GDPR: In particular, you have a right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, or to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed of the safeguards in place pursuant to Art. 46 GDPR when your data is transferred to third countries;

  • Right to rectification pursuant to Art. 16 GDPR: You have the right to the prompt rectification of inaccurate data concerning you and/or the completion of incomplete data stored by us;

  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data where the conditions of Art. 17(1) GDPR are met. This right does not apply, however, in particular where processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims;

  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you contest, is being verified, if you object to the erasure of your data on grounds of unlawful processing and instead request that its processing be restricted, if you need your data for the establishment, exercise, or defence of legal claims after we no longer need it once its purpose has been achieved, or if you have objected on grounds relating to your particular situation for as long as it has not yet been established whether our legitimate grounds override yours;

  • Right to notification pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you was disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.

  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, where this is technically feasible;

  • Right to withdraw consent given pursuant to Art. 7(3) GDPR: You have the right to withdraw consent to the processing of data once given at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without undue delay, unless further processing can be based on a legal ground for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal;

  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR WHERE THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. WHERE YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of storage of personal data is determined by the relevant legal basis, the purpose of processing and, where applicable, additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law). Where personal data are processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, these data are stored until the data subject withdraws their consent. Where statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, these data are routinely deleted after the retention periods have expired, provided they are no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in continued storage. Where personal data are processed on the basis of Art. 6(1)(f) GDPR, these data are stored until the data subject exercises their right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. Where personal data are processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, these data are stored until the data subject exercises their right to object under Art. 21(2) GDPR. Unless otherwise indicated in the other information in this declaration about specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

15) Web analytics

15.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de">https://tools.google.com/dlpage/gaoptout?hl=de As an alternative to the browser add-on, or within browsers on mobile devices, please click this link to prevent collection by Google Analytics within this website in future (the opt out only works in this browser and only for this domain). In doing so, an opt-out cookie is placed on your device. If you delete your cookies in this browser, you will have to click this link again.

15.2 Facebook Pixel

We use the Facebook Pixel from Facebook on our website. For this purpose we have implemented a piece of code on our website. The Facebook Pixel is a snippet of JavaScript code that loads a collection of functions which allow Facebook to track your user actions, provided you reached our website via Facebook ads. For example, if you purchase a product on our website, the Facebook Pixel is triggered and stores your actions on our website in one or more cookies. These cookies allow Facebook to match your user data (customer data such as IP address, user ID) with the data of your Facebook account. Facebook then deletes this data again. The collected data is anonymous to us and cannot be viewed by us, and can only be used in the context of running advertisements. If you are a Facebook user yourself and are logged in, your visit to our website is automatically assigned to your Facebook user account. We want to show our services and products only to those people who are genuinely interested in them. With the help of the Facebook Pixel, our advertising measures can be better tailored to your wishes and interests. This way, Facebook users (provided they have allowed personalised advertising) get to see relevant advertising. Facebook also uses the collected data for analysis purposes and for its own advertisements. In the following, we show you those cookies that were set by embedding the Facebook Pixel on a test page. Please note that these are only example cookies. Depending on the interaction on our website, different cookies are set. Name: fbp Value: fb.1.1568287647279.257405483-6331611828662-7 Purpose: Facebook uses this cookie to display advertising products. Expiry date: after 3 months Name: fr Value: 0aPf312HOS5Pboo2r..Bdeiuf…1.0.Bdeiuf. Purpose: This cookie is used so that the Facebook Pixel also works properly. Expiry date: after 3 months Name: commentauthor_50ae8267e2bdf1253ec1a5769f48e062331611828662-3 Value: name of the author Purpose: This cookie stores the text and name of a user who leaves a comment, for example. Expiry date: after 12 months Name: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062 Value: https%3A%2F%2Fwww.testseite…%2F (URL of the author) Purpose: This cookie stores the URL of the website that the user enters in a text field on our website. Expiry date: after 12 months Name: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062 Value: email address of the author Purpose: This cookie stores the email address of the user, provided they have disclosed it on the website. Expiry date: after 12 months Note: The cookies mentioned above relate to individual user behaviour. Especially when using cookies, changes at Facebook can never be ruled out. If you are logged in to Facebook, you can change your settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen yourself. If you are not a Facebook user, you can manage your usage-based online advertising at https://www.youronlinechoices.com/de/praferenzmanagement/grundsätzlich manage. There you have the option to deactivate or activate providers. If you want to learn more about Facebook's data protection, we recommend the company's own data policy at https://www.facebook.com/policy.php Source: Created with the privacy generator from AdSimple in cooperation with fashiongott.de

15.3 Facebook Conversion API

We use the tracking tool Facebook Conversion API from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA. This is a data interface through which we transmit data about your behaviour on our website to Facebook for analysis. This allows us to show you advertisements that match your user behaviour on our website. In connection with the Conversion API, we use the following data:

  • Email address

  • Phone number

  • First and last name

  • User IDs

  • IP address

  • Client user agent (the browser and operating system you use)

  • Listing IDs

  • Click IDs

We transmit the data to Facebook. In doing so, the data is also transferred to Facebook in the USA. There is no adequacy decision by the EU Commission for data transfers to the USA. Facebook ensures an adequate level of data protection through the EU Standard Contractual Clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum The legal basis for the data processing is your consent in accordance with Art. 6(1)(a) GDPR. Consent can be withdrawn via the cookie settings.

15.4 Hotjar

This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com). Hotjar is a tool for analysing your user behaviour on our website. With Hotjar we can record, among other things, your mouse and scroll movements and clicks. Hotjar can also determine how long you kept the mouse pointer over a particular spot. From this information, Hotjar creates so-called heatmaps that show which areas of the website visitors prefer to look at. We can also determine how long you stayed on a page and when you left it. We can also see where you stopped your entries in a contact form (so-called conversion funnels). In addition, Hotjar can be used to collect direct feedback from website visitors. This function serves to improve the website operator's web offering. Hotjar uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. They serve to make our offering more user-friendly, effective and secure. In particular, these cookies can be used to determine whether our website was visited with a particular device or whether Hotjar's functions have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them. You can set your browser so that you are informed about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited. The use of Hotjar and the storage of Hotjar cookies take place on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.

16) Sharing of data within the scope of VanSite travel protection

Within the scope of the optional VanSite travel protection, personal data is forwarded to our cooperation partner, the Deutsche Schutzbrief Gesellschaft mbH(https://deutsche-schutzbrief.de), for the purpose of initiating and concluding an insurance contract.

The data is transmitted only if users actively decide to take out the travel protection. The following details are collected and shared via a form:

  • First name

  • Last name

  • Date of birth

  • Email address

  • Home address

  • IBAN

This data is transmitted directly to Deutsche Schutzbrief Gesellschaft mbH for the purpose of drawing up and processing the contract. The legal basis for this data processing is Art. 6(1)(b) GDPR (performance of a contract).

Further information on the data processing by Deutsche Schutzbrief Gesellschaft mbH can be found in their privacy policy at: https://deutsche-schutzbrief.de/datenschutz.

17) VanSite Shop

This privacy policy describes how your personal data is collected, used and shared when you use www.shop.vansite.eu (the "Website") or make a purchase there.

PERSONAL DATA WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as "Device Information".

We collect Device Information using the following technologies:

- "Cookies" are data files that are stored on a device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable cookies, visit http://www.allaboutcookies.org.

- "Log files" track actions occurring on the Site and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- "Web beacons", "tags", and "pixels" are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you. This includes your name, billing address, shipping address, payment information (including credit card numbers, bank details), email address, and phone number. We refer to this information as "Order Information".

When we use the term "personal information" in this Privacy Policy, we mean both Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We generally use the Order Information that we collect to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).

We also use this Order Information to:

communicate with you;

screen our orders for potential risk or fraud; and

provide you with information or advertising relating to our products or services, where this is in line with your privacy preferences.

We use the Device Information that we collect to screen for potential risk and fraud (in particular, your IP address) and, more generally, to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site and to assess the success of our marketing and advertising campaigns).

We share your personal information with third parties who help us use your personal information as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal information here: https://policies.google.com/privacy?hl=en. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIOURAL ADVERTISING

As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising here:

FACEBOOK – https://www.facebook.com/settings/?tab=ads

GOOGLE – https://www.google.com/settings/ads/anonymous

BING – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site's data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access the personal information we hold about you and to ask that it be corrected, updated, or deleted. If you would like to exercise this right, please contact us using the contact details below.

If you are a resident of Europe, we also note that we process your information to fulfil contracts we may have with you (for example, if you place an order through the Site) or to pursue our legitimate business interests listed above. Please also note that your information will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION

When you place an order through the Site, we will keep your order information for our records unless and until you ask us to delete this information.

CHANGES

We may update this privacy policy from time to time in order to reflect changes to our practices or for other operational, legal or regulatory reasons.

CONTACT

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at team@vansite.eu or by post to the address listed below:

Am Südhang 8, Bielefeld, NRW, 33739, Germany