Data protection information
We, virtualcitysystems GmbH, Tauentzienstr. 7 b/c, 10789 Berlin, e-mail: firstname.lastname@example.org, would like to inform you here about the processing of personal data carried out by us. You can contact our data protection officer by e-mail at email@example.com or by post at our company address. Please add the words “for the attention of our data protection officer” to the address field in postal letters.
In the following, we have compiled the most important information on typical data processing, separated by data subject groups. For certain data processing operations which only concern specific groups, the information obligations are fulfilled separately.
Where the term “data” is used in the text, only personal data within the meaning of the DSGVO is meant.
- Visitors to the website
- Business partners and their employees
- Interested parties and communication partners
- Applicants for employment
- General information and rights of data subjects
1. Visitors to the website
1.1 Server log data
Our web server processes a series of data with each request, which your browser automatically transmits to our web server. This data includes the IP address currently assigned to your device, the date and time of the request, the time zone, the page or file specifically called up, the http status code and the amount of data transferred; in addition, the website from which your request came, the browser used, the operating system of your end device and the language set. The web server uses this data to display the contents of this website on your device in the best possible way.
The purpose of data processing is to present our company and its offers on the Internet and to exchange information with communication partners. A change of these purposes is not planned.
The legal basis for processing is Article 6 Paragraph 1 letter f) DSGVO (legitimate interest, operation of an Internet presence and exchange with communication partners).
Protocol and communication data will not be passed on to third parties without the occurrence of special circumstances. Data may be transmitted to the police and public prosecutor’s office if a crime is suspected or in preliminary proceedings. We also use service providers in the provision of services by way of order processing, in particular for the provision, maintenance and servicing of IT systems.
IP addresses are anonymised after 24 hours at the latest. Enquiries and communications are automatically deleted after ten calendar years.
Without disclosure of personal data such as the IP address, it is not possible to use the website. Communication via the Website without providing data is not possible.
2. Business partners and their employees
We process your data for the purpose of establishing and implementing the contractual relationship as well as for fulfilling legal requirements. A change of these purposes is not planned.
The legal basis for processing is Article 6 paragraph 1 letter b) DSGVO (preparation and execution of the contract) in the case of contracts with natural persons, Article 6 paragraph 1 letter f) DSGVO (legitimate interest, namely communication with contract-relevant contact persons) in the case of contracts with legal entities and always Article 6 paragraph 1 letter c) DSGVO (legal obligations, in particular tax and commercial law regulations). In the examination, enforcement or rejection of claims, the legal basis is Article 6 para. 1 lit. f) DSGVO (legitimate interest, namely enforcement of claims or defence against claims).
Recipients of data may be banks for the processing of payments. Authorities and offices can be recipients within the scope of their tasks, insofar as we are obliged or entitled to transfer data. Furthermore, in individual cases, data may be transmitted to collection service providers, lawyers and courts. We also use service providers in the provision of services by way of order processing, in particular for the provision, maintenance and servicing of IT systems.
All data relevant to the contract and bookings will be stored in accordance with tax and commercial law retention periods for a period of ten calendar years after the end of the contract. Queries and communications are automatically deleted after ten calendar years.
The provision of data is obligatory for business partners and employees of business partners both legally and contractually. The business relationship cannot be established and carried out without providing data. The provision of data is required for interested parties and communication partners. Communication is not possible without the provision of data.
3. Interested parties and communication partners
We process the data of interested parties and communication partners for the purpose of communicating with the persons concerned.
The legal basis for the processing of interested parties and other communication partners is Article 6 paragraph 1 letter f) DSGVO (legitimate interest, namely communication with interested parties and communication partners).
We use service providers to provide services by way of order processing, in particular for the provision, maintenance and servicing of IT systems.
Enquiries and communications are automatically deleted after ten calendar years.
The provision of data is required for interested parties and communication partners. Communication is not possible without entering data.
4. Applicants for employment
The purpose of data processing is to select applicants for employment. A change of this purpose is not planned.
The legal basis is Section 26 BDSG (2017) in conjunction with Article 6 (1) b (initiation of the employment contract) and Article 88 DSGVO. Voluntary information provided as part of your application will be processed on the basis of section 26 (2) BDSG (2017) in conjunction with article 6 (1) a (consent) and article 88 DSGVO.
Applicant data will be passed on internally to the responsible and decision-making staff. We also use service providers by way of order processing for the provision of services, in particular for the provision, maintenance and servicing of IT systems.
Applicant data will be deleted six months after the end of the specific application procedure. In case of expressed interest in other positions as well, the data will be stored for up to 12 months after the last job offer or the last concrete expression of interest.
Candidates are required to provide data. An application is not possible without providing data.
5. General information and rights of data subjects
Data is not transferred to third countries.
We do not use any procedures of automated individual case decisions.
You have the right to request information about all personal data that we process about you at any time.
If your personal data is incorrect or incomplete, you have the right to have it corrected and supplemented.
You may at any time request the deletion of your personal data, unless we are legally obliged or entitled to process your data further.
If the legal requirements are met, you may request a restriction on the processing of your personal data.
You have the right to object to the processing of your personal data if the data are processed for the purpose of direct marketing or profiling. If the processing is based on a weighing of interests, you may object to the processing by stating reasons arising from your particular situation.
If the data processing is carried out on the basis of your consent or within the framework of a contract, you have the right to transfer the data you have provided, provided this does not affect the rights and freedoms of other persons.
If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with effect for the future. The processing carried out before revocation remains unaffected by the revocation.
You also have the right to appeal to a data protection supervisory authority at any time if you believe that data processing has been carried out in breach of applicable law.
Status as of 1 September 2020