Mechanische Teilefertigung bei VARIOVAC in Zarrentin
Legal

Privacy Policy

As at: 02.11.2026 (English translation, the German version is authoritative)

1. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible party

The party responsible for data processing on this website is:

VARIOVAC PS SystemPack GmbH
Ernst-Litfaß-Str. 3 and 5
19246 Zarrentin am Schaalsee
Phone: +49 (0) 38851-823 0
Email: info@variovac.de

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).

Data protection contact

To exercise your rights as a data subject, please contact: datenschutz@variovac.de. The same applies if you have any questions about data processing in our company.

Storage period

Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

Please note that numerous retention periods mean that data continue to be (or must continue to be) stored. This applies in particular to retention obligations under commercial or tax law (e.g. under the German Commercial Code or the German Fiscal Code). In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the statutory limitation periods, which can be up to thirty years; the regular limitation period is three years. Specific retention periods are stated in the individual sections.

General information on the legal bases for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1) sentence 1 lit. a GDPR or Art. 9(2) lit. a GDPR if special categories of data under Art. 9(1) GDPR are processed. In the case of express consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1) lit. a GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), data processing is additionally based on Section 25(1) TDDDG. Consent can be revoked at any time. If your data are required to perform a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1) sentence 1 lit. b GDPR. Furthermore, we process your data if they are required to fulfil a legal obligation, on the basis of Art. 6(1) sentence 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest under Art. 6(1) sentence 1 lit. f GDPR. The following paragraphs of this privacy policy provide information on the legal bases relevant in each individual case.

Recipients of personal data

Within our company, we ensure that only those persons receive your data who need them to fulfil contractual and legal obligations.

In the course of our business activities, we work with various external parties. In some cases, this also requires personal data to be transferred to these external parties. We only pass on personal data to external parties if this is necessary to perform a contract, if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in the disclosure under Art. 6(1) sentence 1 lit. f GDPR or if another legal basis permits the disclosure. When using processors, we only pass on our customers' personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Data transfer to third countries

Data are only transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, required by law or if you have given us your consent.

Some of the service providers named in this privacy policy are based outside the European Economic Area. Details can be found in the description of the individual services. Compliance with the level of data protection is ensured in particular by certification under the EU-US Data Privacy Framework or by EU standard contractual clauses.

Your rights as a data subject

First of all, we would like to inform you here about your rights as a data subject. These rights are set out in Art. 15 - 22 GDPR. They include:

  • The right of access (Art. 15 GDPR),
  • The right to erasure (Art. 17 GDPR),
  • The right to rectification (Art. 16 GDPR),
  • The right to data portability (Art. 20 GDPR),
  • The right to restriction of data processing (Art. 18 GDPR),
  • The right to object to data processing (Art. 21 GDPR).

To exercise these rights, please contact: datenschutz@variovac.de. The same applies if you have questions about data processing in our company or wish to revoke consent you have given. You also have the right to lodge a complaint with a data protection supervisory authority.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Obligation to provide data

Various personal data are necessary for the establishment, performance and termination of the contractual relationship and the fulfilment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

In certain cases, data must also be collected or provided on the basis of statutory provisions. Please note that it is not possible to process your enquiry or to perform the underlying contractual relationship without providing these data.

Automated individual decision-making

We do not use purely automated processing to reach a decision.

2. Data collection on this website

CCM19

Our website uses CCM19 to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in compliance with data protection law. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter “CCM19”).

When you enter our website, a connection is established to the CCM19 servers in order to obtain your consent and other declarations regarding the use of cookies. CCM19 then stores a cookie in your browser so that the consents given or their revocation can be assigned to you. The data collected in this way are stored until you ask us to delete them, delete the CCM19 cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

CCM19 is used to obtain the legally required consents for the use of cookies and for the purpose of consent management that is as simple and centralised as possible, covering all third-party data connections and tools requiring consent and offering you, among other things, a simple way to revoke your consent. The legal basis for this is Art. 6(1) sentence 1 lit. f GDPR, Section 25(2) no. 2 TDDDG.

Cookies

Our website uses so-called cookies. They serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are placed on your terminal device and stored by your browser. Some cookies remain for the duration of a browser session (so-called session cookies), others are stored for a longer period (so-called persistent cookies, e.g. consent settings). The latter are deleted automatically after the specified time. In addition to our own cookies, cookies controlled by third-party providers are also used.

On the basis of our legitimate interest (Art. 6(1) sentence 1 lit. f GDPR), we use technically necessary cookies that are essential for the operation of the website and to ensure its functionality. Without your consent, we only use cookies insofar as their sole purpose is the transmission of messages or they are strictly necessary to provide the service you have expressly requested (Section 25(2) TDDDG).

Subject to your consent, further cookies are used which enable us or third parties, for example, to analyse how our services are used. The legal basis for this is your express consent (Art. 6(1) sentence 1 lit. a GDPR, Section 25(1) TDDDG).

You can revoke your consent at any time with effect for the future via our consent banner and change the cookie settings. Please note that changes must be made separately for each terminal device.

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can prevent such linking by not giving or revoking your consent to the relevant cookies or by logging out of the respective third-party providers beforehand.

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your terminal device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, our website can only be used to a limited extent or not at all.

Please also note our information in the section on the respective service that uses cookies.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

These data are not merged with other data sources.

These data are collected on the basis of Art. 6(1) sentence 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be collected. The data also serve technical security, in particular the defence against attacks on our web server.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on these data without your consent.

In doing so, the principle of data economy and data avoidance is observed: you only have to provide the data that we absolutely need to contact you. These are marked with an asterisk (*) in the contact form. All other information is voluntary. Depending on the form, we collect:

  • Name*
  • Company*
  • Email address*
  • Phone number
  • Machine number
  • Subject
  • Your message

In addition, your IP address is processed for technical reasons and for legal protection. Your enquiry is transmitted to us in encrypted form.

These data are processed on the basis of Art. 6(1) sentence 1 lit. b GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1) sentence 1 lit. f GDPR) or on your consent (Art. 6(1) sentence 1 lit. a GDPR) if this has been requested. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

The data you enter in the contact form remain with us until you ask us to delete them, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of processing your request. We do not pass on these data without your consent.

These data are processed on the basis of Art. 6(1) sentence 1 lit. b GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1) sentence 1 lit. f GDPR) or on your consent (Art. 6(1) sentence 1 lit. a GDPR) if this has been requested. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

The data you send us via contact enquiries remain with us until you ask us to delete them, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

3. Analysis tools and advertising

When you visit this website, your surfing behaviour may be statistically evaluated. This is done mainly with so-called analysis programs.

Detailed information on these analysis programs can be found below.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It only serves to manage and deliver the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States. A corresponding contractual framework under data protection law has been concluded where necessary.

The legal basis for the use of Google Tag Manager is your express consent, Art. 6(1) sentence 1 lit. a GDPR and – insofar as the Tag Manager accesses information on the terminal device – Section 25(1) TDDDG. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. These data are assigned to the respective terminal device of the user. They are not assigned to a user ID.

Furthermore, Google Analytics allows us, among other things, to record your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there. A corresponding contractual framework under data protection law has been concluded where necessary.

This service is used on the basis of your consent under Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymisation

Google Analytics IP anonymisation is activated. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Webflow

The hosting provider of our website is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.

Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the page, providing certain website functions and ensuring security (necessary cookies).

For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.

Webflow is used on the basis of Art. 6(1) sentence 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6365.

4. Plugins and tools

YouTube

This website embeds videos from the website YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our web pages on which YouTube is embedded, a connection to the YouTube servers is established. In the process, the YouTube server is informed which of our pages you have visited.

Furthermore, YouTube may store various cookies on your terminal device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent attempted fraud. In addition, the collected data are processed in Google's advertising network.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used on the basis of Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. You can revoke your consents at any time with effect for the future. To do so, simply open our consent banner and deselect the relevant consent. Please note that the change in the consent banner settings must be made separately for each terminal device.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

MyFonts

This site uses MyFonts. These are fonts that are loaded into your browser when you access our website in order to ensure a uniform typeface when displaying the website. The provider is Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA.

In order to check compliance with the licence terms and the number of monthly page views, MyFonts transfers your IP address together with the URL of our website and our contract data to its servers in the USA. According to Monotype, your IP address is anonymised immediately after the transfer so that no personal reference can be established any longer (anonymisation).

The legal basis for the use is your express consent, Art. 6(1) sentence 1 lit. a GDPR and, insofar as information on the terminal device is accessed, Section 25(1) TDDDG. You can revoke your consent at any time with effect for the future via our consent banner. Please note that the change must be made separately for each terminal device.

For details, please refer to Monotype's privacy policy at https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/datenschutzrichtlinie-zum-tracking-von-webschriften.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6347.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. With the help of this service, we can embed map material on our website.

To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniformly displaying fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

Google Maps is used on the basis of Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. You can revoke your consent at any time with effect for the future via our consent banner. Please note that the change must be made separately for each terminal device.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on how user data are handled, please see Google's privacy policy: https://policies.google.com/privacy?hl=de.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data entered on this website (e.g. in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor spends on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

In this context, Google acts solely as a processor within the meaning of Art. 28 GDPR and will not use the data collected in this way for its own purposes. The tool is used on the basis of a data processing agreement (DPA) with Google.

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. You can revoke your consent at any time with effect for the future via our consent banner. Please note that the change must be made separately for each terminal device.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Cloudflare Turnstile

We use “Cloudflare Turnstile” on this website. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

The purpose of Turnstile is to check whether the use of our website, in particular input into forms, is carried out by a human or by an automated program. It is used to protect our website against unwanted automated access, spam and other misuse and to ensure the security and functionality of our online services.

For this purpose, Turnstile carries out technical checks in the browser and evaluates signals about the browser and the environment used. According to Cloudflare, this includes in particular the IP address, characteristics of the encrypted connection (TLS fingerprint), information about the browser and operating system (user agent), the identifier of the Turnstile integration (sitekey) and the associated website origin. The checks may run in the background without a visible task. According to Cloudflare, Turnstile itself does not access communication content, form entries or other page entries and does not store or transmit them.

A connection to Cloudflare is already established when the Turnstile components are loaded in your browser; in particular, your IP address is transmitted to Cloudflare. When the security check starts, further of the signals mentioned are collected and transmitted. With automatic integration, this may already happen when the relevant page is called up, i.e. before you fill in or submit a form and without you ticking a checkbox. With delayed integration, the check only begins when it is triggered. An invisible check field or one that has not yet been clicked therefore does not mean that no data transfer is taking place yet.

After a successful check, a verification token is generated. For server-side validation, in particular when a protected form is submitted, this token is transmitted to Cloudflare. The validation interface also allows the visitor's IP address to be transmitted additionally. This server-side check is to be distinguished from the connection between your browser and Cloudflare that already takes place beforehand.

Insofar as Cloudflare processes the signals to secure our website, Cloudflare acts, according to its own information, as a processor on our behalf. Cloudflare also processes the signals under its own data protection responsibility in order to improve Turnstile's ability to detect bots. For this own processing, Cloudflare relies on legitimate interests in improving bot detection. The processing is therefore not limited exclusively to activities in accordance with our instructions.

Turnstile is used on our website on the basis of your consent under Art. 6(1) sentence 1 lit. a GDPR and, insofar as information is stored on or read from your terminal device, Section 25(1) TDDDG. Turnstile is only loaded and activated after you have given your consent. You can revoke your consent at any time with effect for the future via our consent banner. Please note that the change must be made separately for each terminal device.

When using Turnstile, personal data may be transferred to and processed by Cloudflare in the USA. Processing exclusively within the European Union or the European Economic Area is not guaranteed by this notice. The possible third-country transfer already concerns the data transmitted when Turnstile is loaded and executed and not only the later validation of the verification token.

Cloudflare, Inc. holds an active certification under the “EU-U.S. Data Privacy Framework” (DPF). For transfers to Cloudflare in the USA covered by the DPF, the corresponding adequacy decision of the EU Commission forms the basis pursuant to Art. 45 GDPR. The certification does not replace the legal basis for the processing and for access to your terminal device. Further information on the certification can be found in the Data Privacy Framework list.

Further information on the handling of personal data can be found in the privacy notice for Cloudflare Turnstile and in Cloudflare's privacy policy.

5. Social media

Links to social networks

On our website you will find links to the social networks Facebook, YouTube, Instagram and LinkedIn. You can recognise links to the websites of the social networks by the respective company logo. If you follow these links, you will reach the company presence of VARIOVAC PS SystemPack GmbH on the respective social network. When you click on a link, a connection to the servers of the social network is established. This transmits to the servers of the social network that you have visited our website. In addition, further data are transmitted to the provider of the social network. These include, for example:

  • Address of the web page on which the activated link is located
  • Date and time of calling up the web page or activating the link
  • Information about the browser and operating system used
  • IP address

If you are already logged into the relevant social network at the time the link is activated, the provider may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account. You can rule out this assignment if you log out of your user account beforehand.

The servers of the social networks are partly located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social network in countries outside the European Union.

Please note that we have no influence on the scope, type and purpose of the data processing by the provider of the social network. Further information can be found in the privacy policy of the respective social network.

Privacy notice for our social media presences (Art. 13 GDPR)

VARIOVAC PS SystemPack GmbH maintains presences on social media, in this case on Facebook, YouTube, Instagram, Xing and LinkedIn. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with. Below you will find the most important information on data protection law with regard to our presences.

Name and address of the parties responsible for operation

In addition to VARIOVAC PS SystemPack GmbH, the respective platform operator is responsible for the company presences within the meaning of the GDPR and other data protection regulations:

  • Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  • Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
  • LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  • Xing: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
  • YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

However, you use these platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Please note that your data may be processed outside the European Union in the process.

Purpose and legal basis

We maintain the presences in order to communicate with the visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimise the content and to make our offering more attractive. The data required for this (e.g. total number of page views, page activities, data provided by visitors and interactions) are prepared by the social networks and made available to us. We have no influence on how they are generated and presented.

In addition, your personal data are processed by the providers of the social media for market research and advertising purposes. For example, usage profiles may be created on the basis of your usage behaviour and the resulting interests. This allows, among other things, advertisements to be placed within and outside the platforms that correspond to your interests. For this purpose, cookies are generally stored on your computer. Irrespective of this, data that are not collected directly on your terminal devices may also be stored in your usage profiles. The storage and analysis also take place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

Beyond this, we do not collect or process any personal data. Your personal data are processed by VARIOVAC PS SystemPack GmbH on the basis of our legitimate interests in effective information and communication pursuant to Art. 6(1) sentence 1 lit. f GDPR. If you are asked for consent to data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for the processing is Art. 6(1) sentence 1 lit. a, Art. 7 GDPR.

Your rights and options to object

If you are a member of a social network and do not want the network to collect data about you via our presence and link it to your stored member data, you can use the following information and options to object:

Overall, you have the following rights with regard to the processing of your personal data: right of access, right to rectification, right to erasure, right to restriction of processing, right to object, right to data portability and right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

As VARIOVAC PS SystemPack GmbH does not have full access to your personal data, you should contact the providers of the social media directly when asserting your rights, as they each have access to their users' personal data and can take appropriate measures and provide information. Should you nevertheless need help, we will of course try to support you. Please contact datenschutz@variovac.de.

Notes on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music, etc. on our presences, you should be aware that you may thereby transfer all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

6. Further data protection information

  • Data protection transparency and information obligations for customers, suppliers and interested parties (PDF): Download
  • Privacy policy for jobs.variovac.de (PDF, in German): Download
  • Transparency and information obligations for applicants (PDF, in German): Download