Privacy policy

1. name and contact details of the responsible persons

Die nachfolgenden Datenschutzhinweise gelten für die Datenverarbeitung durch die Vision Group, Vision Holding GmbH & Co. KG, Vision Consulting GmbH, Vision Development GmbH, vertreten durch deren Geschäftsführer, Felix Balck und Niclas Wallrafen, Glücksteinallee 41, 68163 Mannheim.

Landline: +49 (0) 621 - 76 22 66 30

Fax: +49 (0) 621 - 76 22 66 38



2. definition

Only the necessary personal data of the person concerned is stored by the person responsible.

Personal data:

According to Art. 4 GDPR, personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4 No. 1 GDPR).


Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 No. 2 GDPR).

Restriction of processing:

This means the marking of stored personal data with the aim of restricting their future processing ((Art. 4 No. 3 GDPR).


The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law (Article 4(7) GDPR).


Third party means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor ((Art. 4 No. 10 GDPR).


The data subject's consent is any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her (Art. 4 No. 11 GDPR).

Further explanations of terms can be found in the publicly available text of the Regulation in Art. 4 GDPR.

3. the nature and purpose of the processing and its legal basis

The type and purpose of the collection and processing of personal data depend on the respective reason of the


a) Visiting the website

When you access the contents of our website and the website itself, information is automatically transmitted to the server of our website by the browser used on your end device and temporarily stored without our intervention. This storage is not used to draw conclusions about your person but is essentially for system administration purposes. The following information is affected in this respect:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (referrer URL),
  • The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned personal data is collected on the legal basis of Art. 6 (1) sentence 1 lit. f DSGVO. According to this, data can be processed if the responsible party has a legitimate interest in this. In order for us to be able to offer you our services online at all, we must ensure a smooth connection setup as well as a comfortable use of our website. In addition, we use the data to evaluate system security in order to better protect your data and to ensure our system stability.

b) Use of our contact form

To improve the contact possibilities, we offer you our contact form. You can use this to contact us easily at any time. However, in order for us to be able to answer your enquiry, it is necessary to provide a valid e-mail address. The remaining information is voluntary, which is why all data processing of the data from the contact form is based on your consent. The legal basis for this processing is therefore Art. 6 para. 1 sentence 1 lit. a DSGVO (voluntarily given consent).

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

4. disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO, in the event that there is a legal obligation for the transfer in accordance with Art. 6 Para. 1 Sentence 1 lit. c DSGVO, as well as if this is legally permissible and necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. b DSGVO for the processing of (pre-)contractual relationships with you.

5. cookies

We use cookies on our website. Cookies are small files that your browser automatically creates and stores on your terminal device when you visit our website. This storage does not cause any damage. Furthermore, the cookies themselves do not contain any malware and do not allow us to gain immediate knowledge of your identity.

The data processed by cookies is collected by us pursuant to Art. 6 (1) p. 1 lit. f DSGVO on the basis of our legitimate interest. For a more pleasant use of our website, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. This has the advantage that you do not have to make entries and settings that have already been made again as long as this data is stored. We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already been to our website when you visit it again. These cookies are automatically deleted after a defined period of time.

You can determine the duration of storage and whether cookies are stored at all by configuring your browser accordingly. Please note, however, that the complete deactivation of cookies may mean that you cannot use all the functions of our website. For more information on your browser settings, please refer to the respective help pages provided by Google Chrome, Mozilla Firefox etc..


6. analysis tools (Google Analytics)

We occasionally use analysis tools. This use is based on Art. 6 para. 1 p. 1 lit. f DSGVO, as we have the following legitimate interest in doing so.

  • Website optimisation
  • Improved design of the website
  • Statistical recording of the use
  • Statistical evaluation of visitor numbers
  • Creation of reports on website activity
  • Provision of services for the purpose of market research; and
  • Design of the website to meet the needs of the user

To achieve the aforementioned purposes, we use Google Analytics, a web analytics service provided by Google Inc. ( (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). This tool creates user profiles, which are, however, completely anonymised and are also only sent to the USA in anonymised form and stored there. Cookies are also used and the following data is processed:

  • Your browser type and its version
  • For redirects, the previously visited page (referrer URL)
  • The IP address of the terminal you are using
  • Time of the server request

The aforementioned data will only be transferred to third parties if this is required by law or if third parties use the aforementioned data on our behalf. In any case, it is ensured that an assignment of the IP address with other Google data is not possible (IP masking).

For the possibility of restricting cookies, please refer to section 5 of these notes.

Google also offers a deactivation add-on for the most common browsers. The add-on tells the JavaScript of Google Analytics that no information about the website visit may be transmitted to Google Analytics. To do this, you only need to download and install a browser add-on. This can be found at the following URL:


As an alternative to the browser add-on, especially with browsers on mobile devices, you can also prevent the collection of data by Google Analytics by clicking on the following URL: This sets a so-called opt-out cookie, which prevents the future collection of your data when visiting this website. This cookie is stored on your terminal device, but only applies to this device and our website. General further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (


7. data subject rights

As a data subject, you have a variety of rights, which we will explain to you below:

Right to information according to Art. 15 DSGVO:

You have a right to information about which personal data we process. In detail, you can request information about the following:

  • The processing purposes;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • if the personal data are not collected from the data subject, any available information on the origin of the data;
  • the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
  • transfer of personal data to a third country or to an international organisation. In this case, you have the right to be informed of the appropriate safeguards referred to in Article 46 in relation to the transfer.

Correction of data according to Art. 16 DSGVO

You have the right to request the correction of incorrect or incomplete personal data stored by us without delay.

Right of erasure according to Art. 17 DSGVO:

You have the right to request the deletion of your personal data stored by us if one of the following reasons applies to you:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • The data subject withdraws the consent on which the processing was based pursuant to Article 6 (1)(a) or Article 9 (2)(a) and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Article 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2).
  • The personal data have been processed unlawfully.
  • The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to information society services offered in accordance with Article 8 (1).
  • Restriction request according to Art. 18 DSGVO

You have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.

Right to data portability according to Art. 20 DSGVO:

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request that the data be transferred to another controller by the controller without hindrance.

Right of withdrawal according to Art. 7 para. 3 DSGVO

You have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future.

Right of appeal according to Art. 77 DSGVO

You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our branch office for this purpose.

Right of objection according to Art. 21 DSGVO

You have the right, insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, to object to the processing of your personal data, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection that is implemented by us without specifying a particular situation.

You can send your revocation in writing by post, fax or e-mail to


8. data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

The security of your data is also protected by suitable and tested technical and organisational security measures. This ensures that your data is protected against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.


9. up-to-dateness and amendment of this privacy policy

This data protection declaration is currently valid and was updated in June 2018. It may become necessary to amend this data protection declaration as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current data protection declaration at any time on the website at .