(Status: April the 15th, 2021)
VLYBY Digital GmbH ("VLYBY") would like to use this privacy notice to provide you with the necessary information about VLYBY's nature and scope of data processing in connection with your visit and activities on our website www.vlyby.com ("Website") in accordance with Article 13 of the General Data Protection Regulation (hereinafter "GDPR"). At the end of this notice, you will also learn what rights you have as a data subject under the relevant provisions of data protection law.
VLYBY Digital GmbH
Schwanthalerstr. 22
80336 Munich
Germany
Email: privacy@vlyby.com
We have appointed a data protection officer for our company.
SECUWING GmbH & Co. KG/ Datenschutz Agentur
Maximilian Hartung
Frauentorstraße 9
86152 Augsburg
Telefon: +49 821 90786450
E-Mail: epost@datenschutz-agentur.de
We process personal data from you when:
If you are interested in our technology and would like to register with us as an enterprise customer, we offer you a registration option on our website. For details on data processing in the context of registration/login as an enterprise customer and the provision of VLYBY technology, please refer to our VLYBY Product Privacy Policy.
When you visit our website, the following information is automatically collected and processed:
The processing of the above information is based on our legitimate interests in providing you with our website and ensuring the stability and security of our website, Art. 6 (1) lit. f) GDPR. In addition, based on our legitimate interests (Art. 6(1) lit. f) GDPR) we process these information for the purposes of troubleshooting, analysing and optimizing our website (e.g. to identify bugs or to determine when the website is particularly heavily used). You have the possibility to object to the above processing based on our legitimate interests at any time by sending us a short message to one of the communication channels named in chapter 1.
Amazon CloudFront CDN
We are hosting our website with AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).
When you visit our website, your personal data will be processed on AWS servers. This may also result in the transfer of personal data to the parent company of AWS in the United States.The transfer of data to the US is based on the EU’s standard contractual clauses. For details please consult: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
For more information, please see the AWS Data Privacy Policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.
AWS is used on the basis of Art. 6(1)(f)GDPR. We have a legitimate interest in a depiction of our website that is as reliable as possible. If your respective consent was obtained, processing will occur exclusively based on Art. 6(1)(a) GDPR. This consent may be revoked at any time.
Webflow
We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter Webflow). When you visit our website, Webflow collects various log files including your IP addresses.
Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, to provide certain website functions and to ensure security (necessary cookies).
For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
The use of Webflow is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://webflow.com/legal/eu-privacy-policy.
Execution of a contract data processing agreement
We have concluded a contract processing agreement with AWS and Webflow. This is a contract mandated by data privacy laws that guarantees that AWS and Webflow processes the personal data of our website visitors only based on our instructions and in compliance with the GDPR.
In addition to the contact options mentioned in chapter1, you can also contact us via our contact form. In this case, we process your name, information about your professional position (optional) , your e-mail address and your request. The processing of your data is carried out for the purpose of processing your request on the basis of your consent, which you express by pressing the "Send" button or by sending your e-mail to us, Art. 6 (1) lit. a) GDPR.
If you decide to apply for a job with us, we process the information that we receive from you as part of the application process. This information includes your contact details, details provided in your application letter, in particular your education and qualifications, curriculum vitae, references, correspondence and telephone or verbal information (so-called applicant data). We use your applicant data for the purpose of reviewing and processing the respective application process and - if your application is successful - for carrying out and termination of an employment relationship with our company.
The processing of your applicant data is based on Section 26 Federal Data Protection Act ("BDSG") and Art. 6 (1) lit. f) GDPR, insofar as this is necessary (i) for the hiring decision and (ii) in the event of success of your application for carrying out and/or terminating the employment relationship with you.
If the case may be that your application is not successful you can opt to allow us to take your applicant data into account for future further job advertisements. In that case, the further processing of your applicant data is based on your consent, Art. 6 (1) lit. a) GDPR.
Cookies are small text files that are stored on the end device you use (e.g. computer, tablet, smartphone) during your visit and specific activities on our website, such as device information or IP addresses.
We use technically strictly necessary session cookies for the operation and security of our website, such as for proper navigation on the website and authentication during account setup or login to VLYBY. Session cookies are stored for the duration of a browser session and are deleted when the browser is closed.
For placing strictly necessary session cookies on our website your consent is not required.
The processing of information collected by means of these cookies for the above technical operational and security purposes is based on our legitimate interests of pursuing our business objectives and securing our website (Art. 6 (1) lit. f) GDPR).
You may object to these processing operations at any time by using one of the communication channels mentioned in chapter 1.
Our website uses social media buttons ("social bookmarks") from the professional network LinkedIn. Social bookmarks are Internet bookmarks/links that allow you to click on our appearances on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). By clicking on the social bookmarks, you will be redirected to our company profile at LinkedIn.
When you visit our company profile on LinkedIn, we process data about you in order to communicate with you or to better understand your behavior on our online presence. We may also use your user behavior on our online presence to serve suitable advertisements within and outside the social network.
For more information on this and on the handling of your personal data within LinkedIn, please see LinkedIn's privacy policy below which inter alia provides you with information on how you can exercise your data subject rights against LinkedIn:
We engage with external service providers, who support us in the technical provision of the website and other services offered thereby accessing personal data (e.g. operation and maintenance of our website; hosting; e-mail communication solutions).
Taking into account our obligations under data protection law, we have concluded appropriate agreements with these recipients to protect your personal data.
In addition, the personal data concerning you will be passed on to public authorities and other recipients who are entitled to receive this information on the basis of statutory provisions (e.g. tax authorities, tax advisors, law enforcement agencies, legal counsel).
If your personal data is processed by us or the aforementioned recipients outside the European Union or the European Economic Area (so-called third countries), we have taken appropriate measures to ensure that, in the event of the transfer and processing of your personal data, an adequate level of data protection is ensured at the recipient of your personal data in a third country, e.g. on the basis of a recognized level of data protection on the recipient side (e.g. adequacy decision of the EU Commission) or other guarantees provided for by law. Please contact us via one of the communication channels mentioned above (Chapter 1) if you would like more information or a copy of the measures taken.
We do not store your personal data for longer than is necessary for the purpose for which it was collected, unless we are entitled or obliged to continue to store it due to legal or contractual regulations.
You have the following rights with respect to VLYBY regarding personal data concerning you:
You have the possibility at any time to withdraw your consent(s) to data processing with effect for the future vis-à-vis VLYBY by sending an e-mail to privacy@vlyby.com.
You also have the right not to be subject to a decision based solely on automated processing (Art. 22 GDPR). In connection with your visit to or activities on our website, your personal data will not be subject to a decision based solely on automated processing which produces a legal effect or otherwise affects you (including profiling within the meaning of Art. 22 GDPR).
You can exercise your rights through any of the communication channels offered by us above in Chapter 1.
You also have the possibility at any time to lodge a complaint against the data processing with the supervisory authority responsible for VLYBY:
Bavarian Data Protection Authority (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de/de/kontakt.html
