Privacy Policy

1. Controller

The controller for the data processing on this website is VigiPRO® GmbH, Fliederstr. 15, 42109 Wuppertal, Germany, phone +49 202 25 85 91 80, info@vigipro.de.

2. Contact for data protection matters

Please address questions about the processing of your personal data, about exercising your rights or about this policy to info@vigipro.de or by post to the address above, marked “Datenschutz”. Your enquiry will be forwarded to the responsible department; where a data protection officer has been appointed, you can reach them through the same channels.

3. Categories of data and data subjects

In connection with this website we process master data (name, company), contact data (e-mail address, telephone number), content data (the text of your message, the services selected, the time slot requested), application data (the documents you send us) and technical access data (IP address, time of access, page accessed, browser and operating system). The data subjects are prospective clients, clients, business partners, applicants and visitors to this website.

4. Contact, request and appointment forms

If you contact us through the contact form, the request form, the appointment form or by e-mail, we process the data you provide — name, e-mail address, where applicable telephone number, company, the services selected, the time slot you chose and the content of your message — solely in order to handle and answer your enquiry and to arrange and hold an agreed appointment. When you submit a form you confirm that you have taken note of this privacy policy; that confirmation is transmitted and documented together with your enquiry. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract, or performance of a contract) and Art. 6 (1) (f) GDPR (legitimate interest in communicating with prospective clients and business partners). Depending on the form, your name and your e-mail address are required, in the contact form also your message and in the request form also your company; all other fields — telephone number, time frame or free text — are optional. You are under no legal or contractual obligation to provide this data. Without the required details, however, we cannot assign your enquiry and cannot answer it; no further disadvantages arise for you, and you can reach us instead at any time by phone on +49 202 25 85 91 80 or by post. We do not use an external calendar or booking service for appointments; your details are transmitted exclusively through the form service named under section 5.

5. Processing on our behalf — form delivery (Netlify)

The details submitted through the forms are processed by the form service of Netlify (Netlify, Inc., 101 2nd Street, Suite 575, San Francisco, CA 94105, USA) and forwarded to us. An automatic spam filter field (honeypot) prevents abusive submissions. Netlify, Inc. is listed by the U.S. Department of Commerce under the EU-U.S. Data Privacy Framework, where the EU certification carries the status “Active” (checked by us on 5 September 2026). The transfer to the USA is therefore based on the adequacy decision of the European Commission pursuant to Art. 45 GDPR. In its own privacy notice, Netlify additionally names the standard contractual clauses of the European Commission (Art. 46 (2) (c) GDPR); these apply insofar as a transfer is not covered by the adequacy decision. For processing on our behalf pursuant to Art. 28 GDPR, Netlify provides a data processing addendum which is publicly available at netlify.com/pdf/netlify-dpa.pdf; the entry in the Data Privacy Framework can be viewed at dataprivacyframework.gov. You can also obtain a copy of these documents through the contact channels named under section 2.

6. Hosting and server log files

This website is hosted by Netlify (address as under section 5). When the website is accessed, the host automatically records technical access data (IP address, date and time of access, page accessed, volume of data transferred, browser type and operating system) in server log files. This processing serves solely the secure, stable and functional operation of the website and is based on Art. 6 (1) (f) GDPR. Netlify does not publicly commit to a fixed deletion period for these log files, and we have no direct influence on how long the host stores them. We access the log files only where this is necessary to investigate a specific security or operating problem, and we do not combine them with other data. What is said under section 5 applies to the transfer to the USA.

7. IT and e-mail service providers as recipients

Enquiries submitted through the forms, e-mails and applications reach us through our e-mail accounts and are processed further there. The recipients of your data therefore include IT and e-mail service providers who provide this operation technically. According to our technical configuration, the e-mail traffic of our domain runs through an upstream mail gateway operated by Hornetsecurity, which checks incoming messages for spam and malware, and behind it through Microsoft 365. Both therefore have technical access to the content of your messages. There are further recipients only where this is necessary in order to deal with your request or where we are legally obliged to disclose data; your data is not passed on to third parties for advertising purposes.

8. Applications

On our careers page we invite speculative applications. We use neither a form nor a file upload for this; your documents reach us by e-mail to info@vigipro.de or by post to the address named under section 1. We process the data they contain solely in order to carry out the application procedure. The legal basis is Section 26 (1) BDSG and Art. 6 (1) (b) GDPR (decision on entering into an employment relationship). If we do not work together, we delete your documents as soon as the procedure has been completed and no periods for asserting claims — in particular under the General Equal Treatment Act (AGG) — prevent deletion. They are kept longer for future vacancies only with your express consent.

Please note that the careers page itself is published in German.

9. Cookies, tracking, fonts and external links

This website does not set tracking or marketing cookies and does not embed any external analytics, advertising or social media services. The fonts used are served locally from our own server; no data is transferred to third-party providers such as Google Fonts. A cookie banner is therefore not required. The site does, however, contain links that lead to third-party offerings: in the legal disclosure and in the footer to the LinkedIn and Xing profiles of VigiPRO® GmbH and its managing directors, in the contact section of the start page and on the contact page to Google Maps with our address, and in the partner section to the websites of our partners. In every case these are plain text links without embedded content, maps or preview images; no data is transferred to those providers before you click. After the click, the privacy policy of the respective provider applies, and we have no influence on its processing.

10. Storage periods

Your personal data is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations prevent deletion. Enquiries received through the forms or by e-mail are deleted once the matter has been dealt with conclusively and no follow-up questions are to be expected. Section 6 applies to server log files and section 8 to applications. Where retention obligations under commercial or tax law apply, we retain the documents concerned for six to ten years (Section 257 (4) HGB, Section 147 (3) AO); the exact period depends on the type of document — for accounting vouchers it has been eight years since 1 January 2025, while the ten years apply to commercial books, inventories and annual financial statements. During that time the data is blocked for any other purpose.

11. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7 (3) GDPR). On this website this concerns only the longer retention of your application documents for future vacancies (section 8). The confirmation given when submitting a form is not a consent but the acknowledgement of this policy; the processing of your enquiry is based on Art. 6 (1) (b) and (f) GDPR (section 4) and can therefore not be withdrawn, although it can be objected to under section 12. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected. Withdrawal is possible informally to info@vigipro.de and involves no costs for you other than those of transmission.

13. Your further rights

Within the limits of the statutory provisions you also have the right of access (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). The right to object is set out separately under section 12. To exercise your rights, please contact info@vigipro.de.

14. Right to lodge a complaint

Under Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestr. 2-4, 40213 Düsseldorf.