Thank you for your interest in our website. It is important to us that we protect your privacy and ensure the security of all business data when processing personal data, and we take this into account in our business processes. Here we inform you in detail about how we handle your data.
§ 1 General information on the collection of personal data in connection with visits to our website
(1) In the following, we provide information about the collection of personal data involved with the use of our website. Personal data is all data that can be linked to you personally, e.g. name, address, email addresses, user behaviour. We would like to point out that data transmission over the Internet (e.g. in email communication) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
VEGA Stuttgart GmbH & Co KG
Friedrich-Ebert-Anlage 22
69117 Heidelberg
Telephone: +49 (0)6221 36366-0
Fax: +49 (0)6221 36366-66
E-mail: kontakt@fom-invest.de
(3) This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) (f) GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time. Our hoster will only process your data to the extent necessary to fulfil its service obligations and follow our instructions with regard to this data.
We use the following hoster:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Berlin, Germany
We have concluded a data processing agreement (DPA) with the website hoster. This is a contract required by data protection law, which ensures that the hoster processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
(4) Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.
(5) If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, insofar as special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, we process your data on the basis of Art. 6 (1) (c) GDPR if this is necessary to fulfil a legal obligation. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.
Section 2: Your rights
(1) In the following, we will inform you about the rights you have as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time by contacting us directly. If you assert these rights against us, we will examine them in detail, taking into account the associated legal requirements and conditions. We may request further information from you for this purpose. We will explain the results of our review and our approach to fulfilling your request in detail. It is possible that we will not be able to completely fulfil your wishes in the manner you have requested. This should not prevent you from asserting your rights against us or asking us about them. We will be happy to answer any questions you may have.
(2) Right to information
You have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information on the purposes of the processing, any recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data if we have not collected it directly from you. In addition, you have the right to a one-off copy of your personal data stored by us free of charge. We reserve the right to charge a reasonable administrative fee for the creation of subsequent copies.
(3) Right to rectification
You have the right to demand that we correct any inaccurate personal data that we have stored about you. This also includes the right to have incomplete personal data completed.
(4) Right to erasure
You have the right to request that we erase data that we have stored about you. If we have published data about you, this also includes our obligation to forward all links to this data and copies or replications of this data to other controllers responsible for processing this published personal data as part of the ‘right to be forgotten’ in accordance with Art. 17 (2) GDPR, taking into account available technology and implementation costs.
(5) Right to restriction of processing
You have the right to request that we restrict the processing of data that we have stored about you. This data can then only be processed with your consent or for a few legally defined purposes.
(6) Right to object to processing
Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(7) Right to withdraw consent under data protection law
If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
(8) Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format for the purpose of transmitting it to another controller. At your request and taking into account the available technical possibilities, this also includes direct transfer from us to the other controller.
(9) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data at any time.
Section 3: Collection of personal data when you visit our website
(1) Even when you use our website for purely informational purposes, we collect at least the personal data listed below, which your browser transmits to our server each time you visit our website. This is necessary for technical reasons in order to display our website to you and to ensure its stability and security (legal basis for this is Art. 6 (1) (1) (f) GDPR):
IP address
Host name
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates (referrer)
The specific pages of our website that you have accessed
Browser: type, version and set language
Operating system: type and version
If JavaScript is activated, also:
Screen resolution
Colour depth
Size of the browser window
Installed browser plugins
(2) Use of cookies and other storage technologies:
Cookies are small text files that are stored on your device and associated with the browser you use. Websites can also store so-called HTML5 storage objects on your device. In both cases, information is stored and read out again. This can be done for very different purposes, but it cannot be used to run programs or transmit malware.
a) On our website, we have deliberately decided against the use of tracking technologies that require consent and the placement of elements on your end device that require consent. For this reason, you can also visit our website completely undisturbed without having to click away a so-called ‘cookie banner’ or give your consent or refusal to certain trackers and cookies. Nevertheless – or precisely because of this – you can be sure that we take your privacy seriously when you visit our website and that we respect data protection.
To the extent technically necessary, we also place a few elements on your device. Although this does not affect your data protection and does not require your consent, we are nevertheless obliged to inform you about it, which we are happy to do in the table below. The legal basis for the use of these elements is basically our balancing of interests in operating our website due to technical necessity in accordance with Art. 6 (1) (1) (f) GDPR in conjunction with Section 25 (2) TDDDG. If a different legal basis applies in individual cases, you will be informed of this in the description of the corresponding functionality to which an element is assigned.
| Name | Type | Purpose / Source | Lifetime |
| wpEmojiSettingsSupports | Technically required
HTML5 object |
Used to manage your cookie consent. Give feedback Sidebars History SavedSet by VEGA.Stuttgart |
Session |
| wp-wpml_current_language | Technically required
Cookie |
Used to ensure the correct display of graphic elements.
Set by VEGA Stuttgart |
Session |
b) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies.
We generally recommend that you delete cookies, browser history and other temporary web storage objects automatically or manually on a regular basis in order to increase the protection of your privacy.
Section 4: Other functions and offerings on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Information in fields not marked in this way is purely voluntary.
(2) When you contact us by email or via a contact form, we will store your email address and other data you provide in order to answer your query. If a business relationship exists between you and us or is established as a result of your query, we will store this data for the duration of our business relationship. Otherwise, we will delete this data after storage is no longer necessary to fully process your query. If legal retention periods prevent deletion, we will restrict the processing of the data for the duration of the retention period and then delete it. When contacting us via a contact form, please note the mandatory field markings as described in paragraph 1 to avoid unwanted transmission of unnecessary personal data. By submitting the contact form or your email, you declare your consent that we may process the data you have transmitted in the manner described above (legal basis: Art. 6 (1) (1) (a) GDPR).
(3) We sometimes use external service providers to process your data. We have carefully selected and commissioned these service providers and we have made agreements with them to protect your data to the extent required by data protection law.
(4) We may also pass on your personal data to affiliated companies for administrative reasons. In these cases, we have taken precautions to ensure the confidentiality of your data.
Last revised: 23 July 2024