Privacy notice

Welcome to our website! When viewing content, using the contact form or placing an order, your personal data are processed. The so-called General Data Protection Regulation (GDPR) obliges us to inform you about the frame conditions of processing at the time of data collection. This privacy notice explains what happens to your personal data at our company.

1. Controller
VEREINIGTE FÜLLKÖRPER-FABRIKEN GmbH & Co. KG (VFF)
Rheinstraße 176
D-56235 Ransbach-Baumbach
Telephone: +49 (0) 2623 895-0
Telefax: +49 (0) 2623 895-39
E-Mail: info(at)vff.com
Website: www.vff.com
Managing director: Rainer Korzilius, Matthias J. Letschert, Markus Wingender

2. Data protection officer
You can contact our data protection officer at:
Mr. Thomas Aydemir
Dobatech GmbH
Tel.: +49 (0) 2623 92012-913
E-Mail: datenschutz(at)dobatech.de

3. Your rights as a data subject
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) provided that the respective statutory requirements are met and no exceptions apply. We hereby inform you that you can assert these rights at any time. Fulfilment may however be prevented by legal requirements such as retention obligations. 

If we process personal data to protect our legitimate interests based on Art. 6 para. 1 f) GDPR, you have a general right to object. If there are reasons arising from your particular situation and we don’t have any overriding interest in processing, we will end processing in case of objection. 

If we require your consent for the processing of your personal data, we expressly request this from you in advance. Consent given may be revoked at any time with effect for the future. This will not affect the data processing which has taken place up until that point, however. Revocation of consent may be declared to us e.g. via email: info(at)vff.com or in written form: VEREINIGTE FÜLLKÖRPER-FABRIKEN GmbH & Co. KG, Rheinstraße 176, D-56235 Ransbach-Baumbach

You also have the right to contact the responsible supervisory authority at any time.

4. Data recipients
Your data are viewed and used by the employees responsible for each case. As the data are stored in our systems, we cannot rule out that our IT service providers may become aware of it during troubleshooting.

Should we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, it is only done so either based on a legal authorisation (e.g. if a data transfer to third parties is required to fulfil a contract based on Art. 6 Para. 1 S. 1 b) GDPR) or your given consent, a legal obligation provides for it, or it is based on our legitimate interests (e.g. when using agents or hosting providers, tax, business and legal advisors, as well as customer care, accounting, billing and similar services that allow us to efficiently and effectively fulfil our contractual obligations, administrative tasks and duties).

5. Data transfer to a third country
We generally do not transfer or process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)). However, should this become necessary in exceptional cases to fulfil our obligations, processing will only take place in the context of the use of third-party services or disclosure/transfer of data to third parties if it is either done to fulfil our (pre)contractual obligations, or it is based on your consent, a legal obligation or on our legitimate interests. Except in cases of legal or contractual authorisations, we only process or have the data processed in a third country if the special requirements of Art. 44 ff GDPR are met. This means, for example, that processing takes place based on special guarantees, such as the officially recognised declaration of a data protection level equal to that of the EU (e.g. through an EU adequacy decision for the concerned country or by agreeing on officially recognised EU standard contractual clauses with the recipient of the data).

6. Duration of storage
The duration of storage primarily depends on statutory retention periods as well as our legitimate interests in further storage.

1. Accessing the website
When you visit our website and look at the content, certain user data are automatically collected and stored in so-called server logfiles. This particularly concerns processing of the browser type/version, operating system used, referrer URL (the previously visited website), IP address of your end device and time of the server request.

Processing of the data is lawful based on Art. 6 para. 1 f) GDPR (legitimate interest). We are dependent on presenting our services on a website. The internet is the most important communication medium and of the utmost importance to us as a seller of goods. Without our own website, we are unable to offer our services. In order to visit the website, data processing as described above is necessary.

The server log files are automatically deleted or anonymised after 60 days at most.

2. Various online forms
We have integrated various online forms into our website which you can use to send us an enquiry. We process the data you enter in order to respond to your message and send you a customised offer.

This processing is lawful based on Art. 6 para. 1 b) GDPR (pre-contractual measure). Without your contact details, we are unable to send you a reply.

We will store your enquiry and the data contained therein until the process has been completed. Afterwards, we will delete the message history.

3. Web app „VFF – Random Packing Software“
On our website, you can carry out all calculations for all VFF packings for the hydraulics of a packing bed as well as absorption and desorption applications with our free web-app „VFF Random Packing Software“. As this is a web app, it no longer has to be installed locally on your device and activated. Instead, it is available online via all devices and operating systems with internet access.

To use the software, you need to create a user account on our website.

As part of the registration, we process your personal data (e.g. surname, first name, email address) to offer you access and use of our software. You cannot use the software without registering.

In this context, your personal data is processed based on pre-contractual or contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.

Your registration data will be deleted no later than 24 months after the last login, unless there is a legal obligation for further storage. Furthermore, we only store the project data entered while using the software for the duration of the website visit.

4. Necessary cookies
We use cookies when operating our website in order to implement certain functions and to fulfil the requirements applicable to digital services. This involves processing user data (e.g. the IP address).

Data processing taking place in this context is lawful based on Art. 6 para. 1 f) GDPR (legitimate interest). We want to improve user-friendliness, optimise the display (e.g. on mobile devices), prevent fraud and ensure security. Additionally, we must ensure that data collection requiring your consent only takes place if consent has in fact been given. Therefore, certain technical settings must be logged. The necessary cookies are set automatically and cannot be deactivated.

Individual necessary cookies are deleted at the latest 1 year after leaving the website, more detailed information on the individual storage period can be found in the Cookie Consent Management Tool (under ‘Cookies’ at the bottom left of our homepage).

5. Optional cookies
There are cookies that may only be set with your consent. They belong to analysis tools we use to improve the content of our website. Among other things, this helps us analyse which content is particularly popular, where users are located and which websites they come to our site from. Some cookies are from third-party providers who also receive the generated data and may merge it with other data.

Data processing taking place in this context is lawful based on Art. 6 para. 1 a) GDPR (consent). Optional cookies are only set if you give your consent. You can do this by ticking a box in our Cookie Consent Management Tool. Of course, providing your data for the analysis of your user behaviour is voluntary and has no effect on the use of the website.

The storage period for optional cookies depends on the existence of your consent.

6. Google services
We use content or service offers from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’ for short) within our online offer based on your consent (Art. 6 para. 1 a) GDPR) and our legitimate interest (Art. 6 para. 1 f) GDPR). This requires Google to process certain user data, as it would either not be possible to send the content to your browser or to analyse your surfing behaviour without this data. It would also not be possible to display targeted advertising. Google services are therefore mainly used to improve the quality of our website and its content.

It cannot be ruled out that data may be transferred to the U.S.. Transferring data to the U.S. is permitted without further authorisation as there is an adequacy decision of the EU Commission for the transfer of data to the U.S. in accordance with Art. 45 para. 3 GDPR – the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework and is therefore obliged to comply with European data protection principles. This also applies to all Google subsidiaries, such as Google Ireland Limited. Further information on the Data Privacy Framework can be found here.

According to its own information (see ‘Legal framework for data transfers’), Google has also included standard data protection clauses in order to ensure an adequate level of data protection. If you are logged in with a Google account, data such as those collected by Google Analytics or AdWords can be linked to your account. If you do not wish this to happen, you must log out before visiting our website.

If it is required for the processing of data to store such information in your terminal equipment or access information that is already stored in that terminal equipment, § 25 (1) TDDDG constitutes the legal basis for it.

You can delete the cookies set by Google yourself as described above. If your personal data has been anonymised, we will store these data indefinitely. All other data are regularly erased after 2 months.

Regarding the use of these Google services, you have the right to revoke your consent with effect for the future. To declare your revocation, you can deactivate the services in the Cookie Consent Management Tool (under ‘Cookies’ at the bottom left of our homepage).

You can find more information on the individual Google services below.

6.1 Google Analytics 
The Google Analytics tool is integrated on the website. This tool also sets cookies recording and analysing the IP address, screen size, browser information, location (country), preferred language setting, subpages visited and the date and time of access. This allows us to know which content is particularly popular and to improve our website in this respect. Further information can be obtained directly from Google Ireland Ltd.

Processing is lawful based on your consent (Art. 6 para. 1 a) GDPR). You can consent to the analysis of your user behaviour when you visit the website by ticking a box in the Cookie Consent Tool. Of course, providing your personal data for analysis purposes is voluntary. You may revoke your consent at any time with effect for the future by changing the settings. Analysis of your user behaviour that has taken place up until that point remains lawful. There are no disadvantages for you if you do not give your consent.

The data collected and the analyses based on it are automatically anonymised. As such, no references to individuals can be made. We store the results for 2 years. As this is a service provided by Google Ireland Limited, the data are transferred and may be stored there.

6.2 Google AdWords with Conversion Tracking
We use the ‘Google Ads with Conversion Tracking’ service to draw attention to our website on third-party websites through adverts. With the help of the performance data collected, we also have a better understanding of the needs of website visitors and the impact of our ads. As such, we can offer you a personalised experience and relevant advertising, if desired.

When you click on one of our Google adverts, a cookie is stored in your browser, which is valid for around 30 days. If you then visit our website, we and Google can use the cookie to analyse whether you have visited our website and which of our pages you have visited. Google compiles statistics on this. This helps us recognise how attractive the advertisements are and improve our offer.

This conversion tracking serves the purpose of analysis/performance measurement, optimisation and the economic operation of our advertisements and website.

The legal basis for processing the data is Art. 6 para. 1 a) GDPR. When you visit our website, you are asked to give your consent to the activation of Google Ads in the cookie banner. If you do not give your consent, there will be no analysis of your user behaviour and, as such, you will not see any personalised adverts from us. Your consent is voluntary. There are no disadvantages for you if you do not give your consent.

You can delete the cookies set by Google yourself as described above. If your personal data has been anonymised, we will store these data indefinitely. All other data are regularly erased after 2 months.

6.3 Google Tag Manager
The Google Tag Manager is used on the website. This allows sections of code from various tools to be integrated and managed centrally via a user interface. The Google Tag Manager triggers other tags, which in turn may collect data. However, it does not access these data. In order for this to work, usage data such as the IP address are processed.

Data processing is lawful based on Article 6(1) f) GDPR (legitimate interest). Separately inserting source code is possible but very time-consuming. The Google Tag Manager saves us a lot of time. As such, its use is primarily based on economic reasons. Data processing takes place automatically when electronic consent is given or not given.

Storage of the resulting data depends on the duration of the website visit. However, as this is a service provided by Google Ireland Limited, the data are transferred and may be stored there for longer. Further information on the processing of your data can be found directly at Google Ireland Ltd.

6.4 YouTube
We use YouTube videos on our website. YouTube is a service provided by YouTube LLC (‘YouTube’), 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

By visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. Further information on the use of the website (e.g. date and time of access, IP address, etc.) may also be transmitted to Google servers (possibly in a third country such as the U.S.) and stored there. This occurs regardless of whether YouTube provides a user account you are logged into or no user account exists. 

When using YouTube, data are transferred to third countries. Transferring data to the U.S. is permitted without further authorisation as there is an adequacy decision of the EU Commission for the transfer of data to the U.S. in accordance with Art. 45 para. 3 GDPR – the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework and is therefore obliged to comply with European data protection principles. This also applies to all Google subsidiaries, such as Google Ireland Limited. Further information on the Data Privacy Framework can be found here.

According to its own information (see ‘Legal framework for data transfers’), the provider has also included standard data protection clauses in order to ensure an adequate level of data protection.

The data is not used by Google to personalise surfing on YouTube – neither in embedded data protection mode nor when using YouTube at a later date, as we have embedded the videos in the so-called extended data protection mode. If ads are shown in a video that is played in the extended data protection mode of the embedded player, these ads are also not personalised. In addition, the playback of a video in the extended data protection mode of the embedded player is not used to personalise adverts that are displayed to you outside of our website.

We use YouTube videos to provide you with videos on various VFF topics. Processing is lawful based on Art. 6 para. 1 a) GDPR. Before starting the video, you will be asked to give your consent to activate the YouTube integration. If you do not give your consent, the YouTube services are not activated and your data is not transmitted to Google. Your consent is voluntary.
If it is required for the processing of data to store such information in your terminal equipment or access information that is already stored in that terminal equipment, § 25 (1) TDDDG constitutes the legal basis for it.

The provision of the data is neither required by law nor necessary for the conclusion of a contract. If you do not provide the data, you will not be able to access the video directly from our website. Alternatively, you may watch the video directly on YouTube.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in Google's privacy notice and terms of use.

7. Online presence on social networks
We maintain online presences on social networks and platforms based on our legitimate interests within the meaning of Art. 6 para. 1 f) GDPR in order to communicate with customers, interested parties and users active there and to provide information about us. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of these operators apply.

Unless otherwise stated in our privacy notice, we process a user’s data if they communicate with us within the social networks and platforms, e.g. by writing posts in our online presences or sending us messages.

LinkedIn
When accessing LinkedIn, the terms of use and privacy notice of the operator LinkedIn Ireland Unlimited Company apply.

Further information on data protection at LinkedIn can be found in our separate privacy notice at https://vff.com/en/linkedin-privacy-policy.html .

You may apply for vacancies on our website. To do so, you need to send us various information and documents. We process your personal data in order to carry out the application process, to view and evaluate your documents and to assess you in this context. We also use your personal data to communicate with you and to arrange an appointment for a job interview.

Processing your personal data to carry out the application process is lawful based on Art. 6 para. 1 sentence 1 b) GDPR in conjunction with § 26 para. 1 sentence 1 BDSG and is expressly permitted by law. This applies to all processes specifically related to your application (e.g. storage of your personal data, communication with you and the assessment of your performance and qualifications). It is necessary for you to provide the information we request when you apply in order to participate in the application process. Without this data, we cannot consider you for a position.

Your data are viewed and used by the employees responsible for carrying out the application process, in particular the HR department and the responsible managers. As the data are stored in our systems, we cannot rule out that our IT service providers may become aware of it during troubleshooting.

The duration of storage depends on the duration of the application process, which ends either when the position is filled or for other reasons (e.g. inability to fill a position, the position is no longer needed). After the end of the application process, the relevant data will be deleted within 3 months at the latest.

Current as of February 2025