Privacy Policy
In the following Privacy Policy, we inform you about the processing of your personal data and the data protection claims and rights to which you are entitled.
- Why Data Protection?
- Who are the controller and contacts?
- Security first!
- What data do we process and for what purpose?
- Who receives the data (data transfer) ?
- How long do we store data?
- What are your rights?
- Services and cookies - what do we use?
- How are changes to this Privacy Policy implemented?
- Country specific – What applies in special cases?
1. Why Data Protection?
The purpose is to protect you and us and to comply with legal requirements.
Specific products and services
For certain products and services (e.g. training, events), we will inform you about the processing of personal data there before collecting such personal data, referencing and linking to this Privacy Policy if required.
Processing on behalf of you as a controller
Where we provide services to you as a processor (on behalf of you as a controller), the provisions of the service-specific agreement on processing shall apply to the processing of personal data.
Companies of the Vector Group
As a company with an international presence, we are subject to different data protection regulations applying in the countries in which we operate. Such country-specific regulations can be found at the end of this Privacy Policy under no. 10.
2. Who are the controller and contacts?
Vector Informatik GmbH is the responsible controller.
Contact details:
Vector Informatik GmbH
Ingersheimer Str. 24
70499 Stuttgart
Germany
Phone: +49 711-80670-0
E-mail: VGDataprotection(at)vector.com
Our Data Protection Officer’s contact details are as follows:
Data Protection Officer of Vector Informatik GmbH
Ingersheimer Str. 24
70499 Stuttgart
Germany
3. Security first!
Which measures Vector takes for data security
The security level required for the protection of your data is ensured by the implementation of suitable technical and organisational measures. These measures are documented by certifications and internal IT security policies and regular monitoring. Within the Vector Group, intercompany agreements on information security and data protection ensure the required security level.
4. What data do we process and for what purpose?
# | Reason for data collection | Data collected | Purpose |
| Processing for contractual or pre-contractual measures | ||
1 | Purchase or commissioning of Vector services | Name, address, telephone number, e-mail address, company, company position (if applicable), country, contract data | Implementation of contractual measures |
2 | Request for information or (test) software | Name, address, telephone number, e-mail address, company; company position (if applicable), country, sector | Implementation of pre-contractual measures |
| Processing based on your consent or overriding interests of Vector | ||
3 | Visit to a Vector website, homepage or landing page | IP address, browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server query. | Data security in order to enable the investigation of unauthorised access or the prevention of misuse of the website |
4 | Registration, login, contact or feedback forms, survey | Name, address, telephone number, e-mail address, company, position, country, participation status | Support of visitors, implementation of pre-contractual measures, provision of information to (potential) customers, receipt of feedback, exchange
|
5 | Customer support | Name, address, telephone number, e-mail address, company, position within the company (if applicable), country, telemetry data (information about devices, systems, applications and processes for reasons of security, stability and compatibility – optional), information from a support ticket (if applicable)
| Implementation of contractual measures, support for customers |
| Processing based on legitimate (general) interests | ||
6 | Building surveillance to provide security for persons and property and for crime prevention | Recordings of persons that are automatically overwritten | Implementation of security measures for buildings and construction sites |
7 | Vehicle test drives (e.g. for testing sensor technology and for autonomous driving) | Implementation of safety measures for occupants and road users | |
5. Who receives the data (data transfer) ?
Your personal data will only be transferred to a third party insofar as this is necessary for the establishment, implementation or termination of a contract with you or for the delivery of goods or services or the commissioning of a service. For certain data processing processes, Vector utilises external service providers who may be given access to personal data of data subjects in order to provide these services. These service providers are carefully selected and are obligated to observe data protection and information security standards and to maintain confidentiality. Such third parties may include other companies within the Vector Group.
Data processing within the European Union is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of an agreement or pre-contractual measures, or on a legitimate interest on our part in the transfer of personal data within the meaning of Art. 6 para. 1 lit. f GDPR, or on your express consent.
The transfer of personal data to recipients based outside of the EEA in so-called third countries is possible but will only occur if the recipient maintains an appropriate level of data protection or if you have given your consent to the transfer. If you wish to receive an overview of the recipients in other countries or information about the agreed rules to ensure an appropriate level of data protection, please use the information provided in the "Contact" section.
6. How long do we store data?
The data are erased as soon as they are no longer required for the purpose for which they were collected.
Data that are stored in log files will be erased after a maximum period of 30 days. It is possible that data will be stored and combined with other data for analysis and optimization purposes, and to improve the information offered on our website. However, in this case, the users’ IP addresses will be erased or altered so that they can no longer be used to identify the accessing client.
Legal and regulatory retention requirements may also require the storing of data for the following purposes:
- Auditing and billing purposes,
- Compliance with statutory retention periods,
- Settlement of conflicts or establishment, exercise or defence of legal claims.
7. What are your rights?
You have the right to:
- Information
As a data subject, you can request information concerning which data about you is being stored or processed. - Rectification
If you discover that the data concerning you is incorrect, you can request that it be corrected promptly. - Erasure
The right to erasure includes the complete removal of your personal data. It is a very strong right that can only be exercised under certain conditions, for example because the processing is no longer necessary. - Restriction of processing
While restriction of processing applies, your data may only be stored but not processed in any other way. - Data portability
You have the right to request the release or transfer of your data. - Objection to the processing of data in individual cases
You may also object to data processing that would generally be considered lawful for reasons that arise from your particular situation. - Withdrawal of consent
You can withdraw your consent at any time. However, all processing of your data that has been carried out up to the withdrawal of consent remains lawful. - Right to file a complaint with a data protection supervisory authority
You are entitled to file a complaint with a competent data protection supervisory authority.
You have the right to:
- Information
As a data subject, you can request information concerning which data about you is being stored or processed. - Rectification
If you discover that the data concerning you is incorrect, you can request that it be corrected promptly. - Erasure
The right to erasure includes the complete removal of your personal data. It is a very strong right that can only be exercised under certain conditions, for example because the processing is no longer necessary. - Restriction of processing
While restriction of processing applies, your data may only be stored but not processed in any other way. - Data portability
You have the right to request the release or transfer of your data. - Objection to the processing of data in individual cases
You may also object to data processing that would generally be considered lawful for reasons that arise from your particular situation. - Withdrawal of consent
You can withdraw your consent at any time. However, all processing of your data that has been carried out up to the withdrawal of consent remains lawful. - Right to file a complaint with a data protection supervisory authority
You are entitled to file a complaint with a competent data protection supervisory authority.
8. Services and cookies - what do we use?
Subject to your consent, we use cookies and third-party services to display and personalise content, analyse traffic to our website or provide convenience features. You can manage the use of cookies with the "Cookie Settings" link shown in the footer of every page on our website, with the exception of the technology required for basic functionalities.
We also collect data in order to obtain statistical information to optimise our products, services and marketing for our business partners and visitors. This is done using various services, which are described below:
9. How are changes to this Privacy Policy implemented?
The nature and scope of the processing of your personal data are subject to change, e.g. for technical reasons, which we take into account by adapting our Privacy Policy. You can find the current version on this page.
10. Country specific – What applies in special cases?
The special regulations for China can be found here: