As the person whose personal data is being processed, you are the data subject. Below, we would like to inform you about the processing of your personal data and give you an overview of the accompanying rights.

We exclusively process your personal data in compliance with the regulations of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (FDPA). In addition, we do not process more data than absolutely necessary and, if possible, anonymously.

1. Who is responsible and who can I contact?

We – VNG AG – process your personal data and are therefore controllers. You can reach us at the following address:

Braunstraße 7
04347 Leipzig

Tel.: +49 341 443-0
Fax: +49 341 443-1500


If you have any questions about the information mentioned here, you can reach our occupational Data Protection Officer with the following contact details:

Data Protection Officer

P. O. Box 24 12 63

04347 Leipzig

2. What personal data do we process?

We collect personal data from you in the scope of the use of this website. In particular this includes: personal details (e.g. name, address, contact details, sex), company affiliation and position within the company, your IP address and other data comparable with the named categories.

During the use of this website access data (URL of the website from which the file is requested, name of the accessed file, date and time of the request, volume of data transmitted, the status of access, the browser you used for the purpose of access and the IP address) will be stored.

3. What do we use cookies for?

Cookies are text files, which are placed on your terminal to help the website analyze how users use the site. Most of the cookies we use are so-called “session-cookies”. They are deleted automatically after your visit. Other cookies are saved on your terminal until you delete them. Those cookies allow us to recognize your browser on your next visit.

We use cookies only if you have given consent first. By clicking the respective check box within the information about data privacy on this website, you give your explicit consent (so-called “opt-in procedure”). Please note that you may not be able to use this website if you refuse to give your consent for the use of cookies.

4. What is etracker?

On this website we use the services of etracker GmbH, Hamburg, Germany to analyze usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. etracker cookies do not contain any information that could identify a user.

The data generated with etracker is processed and stored by etracker solely in Germany by our commission and is thus subject to strict German and European data protection laws and standards. In this regard, etracker was checked, certified and awarded with the data protection seal of approval.

As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key with which, however, no connection to any specific person can be made with. etracker does not use it for any other purpose, combine it with other data or pass it on to third parties

Further information on data protection with etracker can be found here.

5. For what do we use Conversion Tracking?

This website also uses the Google Conversion Tracking. Google Adwords places a cookie on your computer if you came to our website via a Google advertisement. These cookies persist for only 30 days and do not serve for personal identification. If the user visits certain pages of the Adwords-customer and the cookie has not yet expired, Google and the customer can detect that the user clicked on the ad and was forwarded to this site. Every Adwords-customer gets a different cookie. Cookies can therefore not be tracked via the websites of Adwords-customers. Information gathered by means of the conversion cookies serve for creating conversion statistics for Adwords-customers who decided to use conversion tracking. Adwords-customers are informed about the total number of users that clicked on the ad and were forwarded to a site with a conversion tracking tag. However, they do not get any information that could identify the user. For Google’s data privacy on conversion tracking see here.

6. What about sharing?

You have the possibility to share specific content via our website with social media. Therefore, we use the Drupal Plugin AddToAny – Bookmark & Share.

Within this plugin personal data will only be collected if you use the various social media. To use those, you need to have a user account and log in with your personal login details. The responsibility for the social media is not with us but with the respective operators. For the usage of social media, we therefore refer you to their privacy statements.

AddToAny does not store personal data. We do not receive personal data from AddToAny resulting from the usage of the share button.

7. Where we do we get this data from?

We process personal data which you provide us with while using this website or by other means. In addition, data of interested parties who contact us will be processed.

8. Why do we process your data and on what legal basis?

There are several bases for processing your personal data:

Your personal data is processed on the basis of your consent. Your data is exclusively processed within the scope of the consent provided, and only for the purposes that you consented to. For instance, those purposes are the consignation of information material and information about and invitations to events.
In order to fulfil our non-contractual obligations to you, we must process your data. Data processing takes place to carry out pre-contractual measures at the request of the interested party. Namely this means the processing for the purposes of applications.
If necessary, we process your personal data beyond the actual fulfilment of contractual or legal obligations to safeguard justified interests of us or third parties. The reasons for such processing are for example intra-corporate statistical purposes and the optimization of our online offer and our website.

9. Who receives your data?

Within the company, only those bodies will be given access to your data who need it to fulfil our legal and contractual obligations.

Your personal data will also be passed on to service providers (above all processors) and vicarious agents. These are IT supporters and service providers. Such a transfer takes place on the basis of justified interests.

Your data will not be sold or capitalized otherwise.

10. How long will your data be saved?

We process and save your personal data for as long as it is necessary. Specifically, this means that we will save your data for 30 days.

If the collection fulfilled the basic purpose, then the data will be regularly deleted, unless limited further processing is required. This includes, for example, the fulfilment of commercial and tax law retention periods (German commercial code, regulation of taxation, anti-money laundering law – retention for up to ten years) and the maintenance of evidence in the scope of the legal statute of limitations regulations (up to 30 years – regular statute of limitations is three years).

11. What rights do you have as data subject?

As data subject you have various rights:

The right to information (Art. 15 GDPR)
The right to amendment (Art. 16 GDPR)
The right to deletion (Art. 17 GDPR)

The right to the limitation of processing (Art. 18 GDPR)
The right to data transferability (Art. 20 GDPR)
The right to object (Art. 21 GDPR)
The right to withdraw consent provided (Art. 7 para. 3 GDPR)
The right to complain to a supervisory authority (Art. 77 GDPR)

Your rights are subject to some legal exceptions. For example, your rights are limited on the basis of research and statistics purposes (sect. 27 para. 2 FDPA) or due to archiving purposes in the public interest (sect. 28 paragraph 2 and 3 FDPA). Further exceptions are amongst others: sect. 34 and 35 FDPA and Art. 17 para. 3 GDPR.

You can find extensive information on your right to object in accordance with Art. 21 GDPR at the end of the section “Your rights to object”.

Furthermore, in the case that your personal data is collected on the basis of your consent, you have the right to withdraw this consent at any time. However, it should be noted that such a withdrawal is only effective in future, and the processing that has occurred until then remains lawful.

12. Are you obliged to provide us with your personal data?

In the scope of your enquiry, we require the data which is necessary to process your enquiry and the data which we are legally obliged to collect.

As a rule, without this data, we are not in a position to process your enquiry or contact you.

13. Is there an automated decision?

Ultimately, no automated decision takes place. If we do use such a procedure in exceptional cases, we will inform you separately in advance if this is legally required.

14. Information in the case of change of purpose

If there is a change in the reason for processing your personal data, we will of course inform you immediately.


1. Right to object relating to individual case

We have already informed you about the right to object in accordance with Art. 21 GDPR. Specifically, this means that you have the right to object to the processing of your personal data at any time, for reasons that arise from your particular situation. The requirement for this is that the data processing is in the public interest or is taking place on the basis of a weighing up of interests (Art. 6 para. 1 letter e or f GDPR). This also applies to corresponding profiling.

If you make an objection against the processing of your personal data, we will no longer process it. Unless we can prove necessary, legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to enforce, practice or defend legal claims.

2. Right to object to processing for purposes of direct advertising

In accordance with Art. 21 para. 2 GDPR, you as data subject have a separate right to object if your personal data is used for direct advertising. This also applies for profiling if it relates to direct advertising.

If you make use of this right to object, we as controllers will no longer process your data for this purpose.

3. Who should I send my objection to?

The objection does not require any particular form and, where possible, should be sent to:


P. O. Box 24 12 63

04347 Leipzig