WEBSITE DATA PROTECTION POLICY

​

The following policy describes how Vertilas GmbH, with registered office in Unterschleißheim, Munich Local Court, No. HRB 141483 (hereinafter also referred to as “VERTILAS”, “we”, “us”) processes your (and possibly third parties’) personal data in connection with the website www.vertilas.com (“website”).
 

We take the confidentiality and protection of your personal data very seriously. For this reason, we process your personal data exclusively insofar as this is legally admissible, in particular on the basis of the requirements of the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”).
 

The following provides an overview of what personal data we collect from you when using our website, how and for what purposes we use this data and what rights you are entitled to. Please note that the website may contain links to websites of other providers over which we have no control and to which this data protection policy does not apply.

​

1. Data-Processing 
 

 a) Visiting the website

aa) In principle, you can visit our website without providing us with any personal data. But our systems automatically record every access or retrieval of our website and store this temporarily in log files. The data stored in this context includes in particular:

•    IP address of the requested device;
•    location of the requested device;
•    name and URL of the accessed file;
•    date and time of access;
•    access status/HTTP status code;
•    amount of data transferred in each case;
•    identification data of the browser used.

​

bb) In principle, we cannot assign this data to a specific person. The aforementioned processing is carried out for the purpose of enabling the use of the website (establishing a connection; session control) and for internal system-related purposes (technical administration, system security). Data is stored in log files to ensure the functionality of the website. In addition, this data is used to optimise the website and to ensure the security of our systems.
Insofar as the processing of data in connection with visiting the website involves personal data, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest). The legitimate interest is derived from the above-mentioned purposes.

​

b) Using the e-mail contact function

aa) Our website offers the opportunity of contacting us by e-mail. If you contact us in this way or send us an enquiry, the personal data you provide will be processed by us to respond to your enquiry. This data is used by us exclusively for the purpose of processing the enquiry.

​

bb) The legal basis for the processing of your personal data as described above is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest). The legitimate interest is derived from the fact that we can only carry out the action desired by the user (e.g. responding to enquiries) by processing the user’s data accordingly. If you are contacting us with the aim of potentially entering into a business relationship a further, or alternative basis for processing is Art. 6 para. 1 sentence 1 lit. b) GDPR (performance of contract and pre-contractual measures).

​

c) Using Links

We use links to other internet presences of third parties, e.g. to social media channels such as LinkedIn. These third parties are exclusively responsible for the data processing by such other service providers on their websites and their data protection notices apply.

​

d) Cookies and web analysis during the use of our website

aa) We use so-called “Cookies” to fashion our website in a most user-friendly way. Cookies are small files stored on the user’s device. They allow the storage of information for a determinate period of time and the identification of the user’s device. For this purpose, also tracking-pixel might be used that are not stored on the user’s hard drive, but that may in the same way help to recognize a user’s device. When using the term “Cookie”, this refers to Cookies in the technical sense as well as tracking pixel and other technologies.
When you visit our website for the first time, the entry page will show information on privacy and respective wording regarding the consent to the use of Cookies. 

bb) On our website we use two types of Cookies: (1) Cookies required for technical purposes, without which the functionality of our website would be reduced, and (2) optional Cookies for analytics. Further, our website uses Google Tag Manager

•     Cookies required for technical purposes:

These Cookies are indispensable if we want to ensure proper functioning and easy navigation of our website. They allow, e.g., the storage of your language selections or store your consent/non-consent to the use of Cookies and your selected Cookie settings. Such Cookies do not collect any information about you for marketing purposes and do not record the sites you visit when surfing the internet. A deactivation of this type of Cookies would reduce all or part of the functions of the website.
The legal basis for the processing of your personal data as described above is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest). These Cookies are specifically set for individual sessions and expire when you leave the website and end the session.

​

•     Cookies for analytics:

Analytics Cookies gather general information on how users use a website, e.g. which pages they visit most frequently and whether they receive any error messages from websites. These Cookies do not collect any data that may lead to an identification of the user. The data collected with these Cookies will not be merged with any other information on the visitors of our website. All information collected with the aid of such Cookies exclusively serves the purpose to comprehend and improve the functionality and services of the website.
If and to the extent that we also use optional Cookies in relation to your visit to our website, then we will always obtain your consent in advance (via a consent management tool) regarding such Cookies on the website. Unless you give your consent, such Cookies will not be used when you visit the website. 
The legal basis for personal data processing associated with such cookies is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

Our website uses the following analytics cookies.

Google Analytics and Wix-Performance

Our website uses Google Analytics and the Wix-Performance web analytics services provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Irland) or Wix (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel).
If you do not consent to the use when (first) accessing our website, none of your personal data will be processed using this tool. 
These services enable us to evaluate the use of our website and collect information about the needs of users to improve the quality and user-friendliness. To be able to carry out these evaluations, predominantly aggregated and anonymous statistical data is collected. 
The information generated by the cookies about your use of the website is generally transmitted to a Google server in the USA or to a Wix server in Israel or the USA and stored there. On behalf of us, Google/Wix will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website use and internet usage to us. The IP address transmitted by your browser will not be merged with other Google or Wix data.
You can prevent such cookies from being stored by changing the settings in your browser soft-ware or by deactivating the use of Google Analytics and/or Wix Performance for our website with regard to your personal data in the consent management tool on our website (you can access the consent management tool for the website by clicking on Consent Preferences.

​

You can find more information about Google Analytics here:
https://www.google.com/analytics/terms
http://www.google.com/intl/analytics/learn/privacy.html
https://policies.google.com/privacy?hl=en-US

​

Although the responsible service provider of Google services is Google Ireland Limited (s.o.), data may be processed by Google also in the USA. There is currently a (restricted) adequacy decision from the European Commission in place regarding data protection in the USA; Google LLC has obtained certification in accordance with this decision. In addition, standard data protection clauses within the meaning of Article 46 (2) (c) GDPR will be used (by Google) (Google can provide you with the corresponding documentation on the standard data protection clauses).

You can find more information about Wix Performance here and about Wix under Clause 2 below:

https://www.wix.com/about/privacy

​

•     Google Tag Manager

Our website uses the Google Tag Manager from Google regarding the use of the website by users – provided users have given their consent. The Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) essentially does not collect any personal data (except for in some cases the user’s IP address). The tool is used for the purpose of triggering other tags, which in turn may process personal data. This kind of data processing can be prevented by deactivating this function at domain or cookie level (or via our consent management tool). 
The legal basis for the processing of personal data by Google Tag Manager directly as described above is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). Data may also be processed by Google in the USA.

​

2. Disclosure of data to third parties

Personal data collected while using the website will not be disclosed or otherwise transferred to third parties without your consent, except in other cases expressly described in this data protection policy.
Exceptions to this are transfers of personal data in cases where there is a legal obligation to disclose (for example to state institutions and authorities), insofar as we are legally obliged to do so. The legal basis for this processing of your personal data is Art. 6 para. 1 sentence 1 lit. c) GDPR (fulfilment of a legal obligation).
For the operation of our website and the services offered on our website (particularly hosting the website), we use Wix (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel) as an external service provider who processes your personal data on our behalf. Wix and any other service providers process the data exclusively in accordance with our instructions. 
Wix processes data on its global servers, which may be located in countries including Israel and the USA. The European Commission has issued an adequacy decision for Israel, legally certifying that the country maintains a level of data protection comparable to that of the EU. To ensure the legal security of data transfers to the USA and other countries outside the EU/EEA, Wix relies on the EU Commission’s Standard Contractual Clauses (SCCs). These clauses oblige Wix to uphold European data protection standards even when processing data in the USA. In addition, Wix has implemented appropriate security measures for data encryption.
The legal basis for the processing of your personal data as described above is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest). We have a legitimate interest in providing our web services in a manner that is technically flawless, secure, and professionally designed.
We have entered into a Data Processing Agreement (DPA - Art. 28 GDPR) with Wix. This ensures that Wix processes our website visitors' data exclusively in accordance with our instructions and in strict compliance with the GDPR. Further details regarding data usage can be found in Wix's privacy policy, https://www.wix.com/about/privacy

​

3. Duration of the retention of your personal data

Insofar as the other provisions of this data protection policy do not specify any other storage period, we will only store your personal data that we obtain in connection with your use of the website for as long as this is necessary to fulfil the corresponding processing purpose (e.g. to process your requests or enquiries to us) and thereafter only to the extent and insofar as we are obliged to do so in accordance with the statutory storage obligations. If we no longer require your data for the purposes described above, then it will only be stored for the respective statutory retention period and will not be processed for other purposes.

​

4. Your rights

Every natural person whose personal data we process has, in principle (i.e. depending on the respective preconditions), the following rights vis-à-vis us:
Should you have questions regarding our processing of your personal data, we would be pleased to provide you at any time and at no charge with information on the data stored about you (Art. 15 GDPR).

• Should you have questions regarding our processing of your personal data, we would be pleased to provide you at any time and at no charge with information on the data stored about you (Art. 15 GDPR).

• You have a right to the correction of incorrect data as well as completion of incomplete data (Art. 16 GDPR).

• You have a right to the blocking/limitation of the processing or to deletion of personal data concerning you which is no longer required or stored on grounds of legal obligations (Art. 17, 18 GDPR).

• You have a right to the transfer of the data in a structured, standard and machine-readable format, insofar as you have provided us with the data on grounds of a consent or contract between us and you (Art. 20 GDPR).

• You have the right to object to a processing on the basis of legitimate interest, in which case we are entitled to demonstrate our compelling reasons (Art. 21 para. 1 GDPR).

• Insofar as you have consented to a data processing, you can revoke this consent at any time with effect for the future, i.e. the legality of the data processing remains unaffected until the date of the revocation. After a revocation of consent, you may no longer be able to use our services.

Please address your concerns in writing (reference: data protection) or by email to the contact details given in point 5 below. We reserve the right to check your identity to ensure that your personal data is not disclosed to unauthorized people.
Furthermore, you are entitled to file a complaint with a supervisory authority for data protection.

​

5. Contact, Data Protection Officer

If you have any questions about data protection (including the assertion of your rights in accordance with Section 4), you can contact us at Vertilas GmbH, Gutenbergstr. 5, 85716 Unterschleissheim, Germany, Mail info@vertilas.com.
Further, we have appointed a data protection officer. You can contact our Data Protection Officer directly at any time via the contact details for provided above as well as at

VERTILAS GmbH
Controller for Data Protection
Daimlerstr. 11d
D-85748 Garching
Telefon: +49 (0)89 37156018-0
Telefax: +49 (0)89 37156018-19
E-Mail: dsgvo@vertilas.com

​

6. Data security

VERTILAS maintains up-to-date technical measures to ensure data security, to protect your personal data from risks during data transmission and against third-party access. These are adapted to the current state of the art.

​

7. Amendments to the data protection policy

From time to time, the content of this Data Protection Policy may have to be modified. We therefore reserve the right to amend them at any time. We will also publish the amended version of the Data Protection Policy at this place. When you revisit us, you should therefore reread the data protection notice.

​

Version dated: July 2026​