1. VPP as the party responsible
VPP is responsible for the processing of data. You can contact VPP regarding the processing of data at any time using the contact details provided in paragraph 10.
2. For users of the web page
2.1. Data processing when the web page is visited
If you visit the web page or use a service via the web page, the device by which you have called up the web page automatically sends log data (connection data) to our server. Log data is also gathered by our servers when visitors call up any of your web pages. Log data contains the following information:
- IP address of the device by which you are accessing the website or a service,
- Type of browser you are using to access the website or service,
- Web page that you have previously visited,
- Your system configuration and
- Date and time details.
We store IP addresses only in so far as is necessary for the performance of our services. Otherwise, IP addresses are deleted or anonymized.
Data is processed for the following purposes:
- so that connections can be established smoothly,
- to enable you to use the web page as easily and comfortably as possible,
- to assess system security and system stability,
- this data is stored for the purposes of technical security, particularly as a defence against attempted attacks on the web server, and
- for other administrative purposes.
The legal basis for the processing of this data is Art. 6(1)(f) GDPR. We have a legitimate interest in providing our web page and services, guaranteeing technical security, clearing faults and uncovering and following up illegal attacks or attempted attacks.
We store your IP address when you visit the website and the IP addresses of visitors to your web pages for a maximum of 7 days to spot and defend against attacks.
2.2. Data processing in online registrations
If you register for an event using a registration form on the web page, we ask you to provide further data (such as your name and contact details) in order to complete the registration and process your participation in the selected events. Data relevant to a list of participants is also prepared in a printed copy with other participant data and made available to those participating in the event. The legal basis for the processing of this data is Art. 6(1)(b) GDPR.
As a rule, in line with the provisions of data protection law, if processing of such data is no longer necessary for your registration and participation, we in principle delete the data at the end of the year following the event. In exceptional cases, data might not be deleted if it needs to be processed to meet a legal obligation or to assert, exercise or defend legal claims.
2.3. Active components
2.4. Data security
When you visit the web page, we use the common SSL (Secure Socket Layer) process. Otherwise, appropriate technical and organizational security measures are used to protect data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. The security measures are continually enhanced in line with technological developments.
2.5. Links to web pages of other suppliers
The web page contains links to web pages of other suppliers. VPP has no influence over the processing of data by these suppliers or their compliance with the provisions of data protection law.
3. For VPP members
3.1. Membership application form
If you are a member of VPP, we process the data provided by you on your membership application form. This includes, for example, your name, your address, your contact details and information on your profession.
We process this data to manage your membership, for example to send you newsletters containing information that is of relevance to members or invoices for membership fees. The legal basis for the processing of this data is Art. 6(1)(b) and (f) GDPR. Provided you have given your consent on the membership application form, some of this data is published in the list of members and in the newsletter. Further details are provided on the membership application form.
The data is deleted when membership comes to an end on 01.01 of the following year. In exceptional cases, data might not be deleted if it needs to be processed to meet a legal obligation or to assert or defend legal claims.
3.2. Data processing on registration
If you register for events using a registration form outside the web page, the provisions laid down in paragraph 2.2 apply.
4. For interested parties or those submitting other requests
If you are interested in VPP or in becoming a member of VPP or send us a request for any other reason, we process the data provided by you in your request in order to deal with your query (Art. 6(1)(b) and (f) GDPR).
In principle, we delete the data no later than 3 months after your query has been dealt with. In exceptional cases, data might not be deleted if it needs to be processed to meet a legal obligation or to assert or defend legal claims.
5. Provision of data
Where we process data on the basis of Art. 6(1)(b) GDPR, the data needs to be provided by you for the conclusion of a contract over your membership or registration for and participation in an event. Membership or registration and participation are not usually possible if you do not provide the data.
6. Sharing data
In principle, VPP does not transfer the data collected in accordance with paragraphs 2 to 4 to third parties either for commercial or for non-commercial purposes. For some activities, we may share data with external service providers within Germany so that they can provide us with their services. For example, we employ IT service providers for website hosting or for maintaining our IT systems or commission a printing company to make copies of lists of members or newsletters. Whenever data is shared, service providers are bound by legal requirements. The processing of data which is subject only to instructions is secured by the conclusion of agreements relating to the processing of contract data in line with GDPR requirements.
Data is also only shared if doing so is necessary in order to fulfil a contract with you or meet a legal obligation or to protect the legitimate interests of VPP or a third party (for example to assert or defend legal claims).
7. Data subject rights
Under statutory requirements, you are entitled to information on the data concerning you and to correct and delete that data, to restrict the processing of it and to transmit the data to another responsible party.
In certain cases, you also have a right to object to the processing of data if this is based on the predominant legitimate interests of VPP or a third party.
8. Right of appeal
You can file an appeal with the supervisory authority regarding the processing of data by VPP at any time.
10. Contact information