Privacy

Privacy Policy

In the following, we inform you about the processing of your personal data by us. Personal data within the meaning of Art. 4 AVG is any information relating to an identified or identifiable natural person (such as name, address, telephone number, e-mail, invoices, bank details, etc., as well as your user behaviour).​​​​​​​

Content

1.    Contact details
2.    Lawfulness of the processing of personal data
3.    Collection and storage of personal data as well as type and purpose of their use
4.    Storage period and deletion of data
5.    Transfer of data to third parties
6.    Hosting
7.    Cookies
8.    Analysis services
9.    Social Media services
10.    Other online services
11.    Data subject rights
12.    Right to object
13.    Data security
14.    Topicality and amendment of this Data Protection Declaration

1. Contact details

This privacy information applies to data processing by the following data controller:
Person responsible: VidaVilla.com BV
Address: Dr. Nuyensstraat 86, 1617 KE Westwoud
Email: info@vidavilla.com
​​​​​​​ Telephone: +31854016545

2. Lawfulness of the processing of personal data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data regularly only takes place with the user's consent. An exception applies in those cases where it is not possible to obtain prior consent for actual reasons or the processing of the data is permitted by legal regulations. According to Article 6 of the General Data Protection Regulation (AVG), processing of personal data is lawful if one or more of the following points are met:

-    you have given your express consent to the processing pursuant to Article 6 (1) sentence 1 lit. a AVG,
-    the processing is necessary according to Art. 6 para. 1 p. 1 lit. b AVG for the handling of contractual relationships with you or for the implementation of pre-contractual measures, which take place upon your request,
-    there is a legal obligation on our part for the processing pursuant to Art. 6 (1) sentence 1 lit. c AVG,
-    the processing is necessary to protect your vital interests or those of another natural person, Art. 6 para. 1 p. 1 lit. d AVG,
-    processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, Art. 6 para. 1 sentence 1 lit. e AVG,
-    the processing is necessary pursuant to Art. 6 para. 1 p. 1 lit. f AVG for the protection of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, override these interests.

3. Collection and storage of personal data as well as type and purpose of their use

In the course of using our website, we may process personal data such as contact data, usage data and communication data from the users of our website (these may be customers, interested parties as well as visitors to our website).
This is done, among other things, for the purpose of providing a functioning online offer, to communicate with the users of our website, to process contact requests or customer enquiries and for the purpose of contract performance. Furthermore, data may be collected and processed for marketing purposes.

In the following, we will inform you which of your data may be collected and processed and for what purpose.

When visiting the website
When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information can be collected without your intervention and stored until automatic deletion:

-    IP address of the requesting computer
-    Date and time of access
-    Content of the request (specific page)
-    Name and URL of the file accessed
-    Access status/HTTP status code
-    Amount of data transferred in each case
-    website from which the access was made (referrer URL)
-    Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
-    language and version of the browser software

The above data is processed by us - if collected - for the following purposes:
-    Ensuring a smooth connection setup of the website,
-    Ensuring a comfortable use of our website,
-    evaluating system security and stability, and
-    for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f AVG. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
In addition, we may use cookies and online services when you visit our website. You will find more detailed explanations in this data protection declaration.

Contract initiation/fulfillment
We process personal data that we receive in the course of pre-contractual enquiries and in the course of our business relationship. For example, the following personal data may be collected and processed by us in the process: Salutation, first name and surname, address, telephone number, e-mail address, IBAN / credit card number together with check digit (in each case only insofar as this is necessary for the processing of payments). Furthermore, data may be passed on to third parties (see point 5 "Passing on data to third parties" in this data protection declaration).

The processing and storage of your transmitted data is carried out on the basis of Art. 6 para. 1 p. 1 lit. b AVG for the purpose of fulfilling a contract or carrying out pre-contractual measures. In other cases, we process and store your data by means of your consent in accordance with Art. 6 (1) sentence 1 lit. a AVG and on the basis of our legitimate interest in processing the enquiry addressed to us in accordance with Art. 6 (1) sentence 1 lit. f AVG.

When registering for our newsletter
You have the option of registering for our newsletter. For this purpose, we require your e- mail address and, if applicable, your name as voluntary information for the purpose of addressing you in the newsletter.
We work with the so-called double opt-in procedure. This means that you will receive an e- mail from us after you have registered, asking you to confirm your registration. By clicking on the activation link contained in the e-mail, you confirm that you are the owner of the e- mail address and wish to receive the newsletter. If you have given your express consent, we will use your e-mail address on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a AVG to send you our newsletter at regular intervals with information about our offers.
 
If you do not confirm the activation link within three weeks, we will delete the e-mail address registered for the newsletter.
The data collected is only used to send the newsletter and to document your consent. When you register for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorised person.
For the dispatch of our newsletter, we work together with a dispatch service provider. The data is usually transferred directly to servers of the dispatch service provider, possibly in the USA, and stored there. The service provider uses this data to send and statistically evaluate the newsletter on our behalf.

As part of a performance measurement, our newsletters contain so-called web beacons (small invisible graphics) to collect information. These are pixel-sized files that are retrieved from the servers of the dispatch service provider when the e-mails are opened. In this way, it can be seen, for example, whether the e-mail has been opened. Technical data such as IP address, browser type or the time of retrieval are also recorded. This data is evaluated exclusively for the purpose of evaluating the reader behaviour of our newsletter recipients, so that it is possible to adapt the content to the interests of the newsletter recipients. A separate revocation from the performance measurement is not possible. If you do not wish to have your success measured, please unsubscribe from the entire newsletter subscription.

The use of a dispatch service provider for newsletter dispatch as well as the performance measurement are based on our legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f AVG in an efficient, user-friendly and secure newsletter system. An order processing contract has been concluded in accordance with Art. 28 (3) sentence 1 AVG.

You can unsubscribe from the newsletter at any time and revoke your consent with the consequence that the data stored for newsletter receipt will be deleted by us and you will no longer receive a newsletter from us. Data stored by us for other purposes will remain unaffected by this. You can declare the revocation by clicking on the unsubscribe link provided in every newsletter email or by sending a message to the contact details provided in the imprint.

Shipping service provider:
Mailchimp
The dispatch of our newsletter is carried out by the dispatch service provider MailChimp, a newsletter platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
You can view MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/

When using our contact form
For questions of any kind, we offer you the possibility to contact us via a form provided on the website. In doing so, it is necessary to provide a first and last name as well as a valid e-mail address so that we know who the enquiry is from and so that we can answer it. If necessary, the telephone number can be provided voluntarily.
 
The processing and storage of your transmitted data is based on Art. 6 para. 1 p. 1 lit. b AVG for the purpose of processing your enquiry. Furthermore, we process your data on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a AVG as well as on the basis of our legitimate interest in processing the enquiry addressed to us in accordance with Art. 6 Para. 1 Sentence 1 lit. f AVG.

4. Duration of storage and deletion of data

As a matter of principle, we only store personal data until the purpose for which you entrusted us with the data has been fulfilled. After that, the data will be permanently deleted. However, if there are legal retention periods for the storage of personal data, we store it for as long as we are legally obliged to do so. Such obligations regularly result from legal obligations to provide proof and to retain data, which are regulated, among other things, e.g. ten years for tax purposes. After expiry of the legal retention period, the data is permanently deleted.
Consent to the processing and storage of your personal data pursuant to Art. 6 para. 1 p. 1 lit. a AVG can be revoked at any time with the consequence that the data will be permanently deleted - provided that there are no statutory retention periods to the contrary. Further rights, by which we can be prohibited from processing your personal data, result from Art. 21 (1) and (2) AVG.
Information on the right of objection resulting from this can be found in this data protection declaration under section 14 "Right of objection".

5. Passing on data to third parties

We only pass on your personal data to third parties if:

-    you have given your express consent to do so in accordance with Art. 6 para. 1 p. 1 lit. a AVG,
-    the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. f AVG to protect our legitimate interests or those of a third party, such as the exercise, defence or assertion of legal claims, unless your interests or fundamental rights and freedoms, which require the protection of personal data, are overridden,
-    in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c AVG, as well as
this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b AVG.

If necessary, an order processing agreement has been concluded with the service provider used in accordance with Art. 28 (3) sentence 1 AVG.
In the event that personal data of the customer is processed in a third country (outside the EU), this is done within the framework of the previously given consent of the customer, within the framework of the fulfillment of the contract or due to legally existing obligations.
 
The possible transfer takes place in compliance with the legal requirements. In particular, the regulations of Art. 44 to Art. 49 AVG apply here.

6. Hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the hoster's servers, possibly in the USA. This may include, but is not limited to, IP addresses, contact requests, communication data, contract data, contact details, website traffic and other data generated by a website.
Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data. An order processing contract pursuant to Art. 28 (3) sentence 1 AVG has been concluded with the hoster.
The hoster is used for the purpose of contract fulfilllment vis-à-vis our potential and existing customers pursuant to Art. 6 para. 1 lit. b AVG and in the interest of a secure, fast and effective provision of our online offer pursuant to Art. 6 para. 1 p. 1 lit. f AVG.

Hoster:
Hetzner
We host our website with the following service provider: Hetzner Online GmbH, Industriestr. 25 , 91710 Gunzenhausen, Germany.
For more information on Hetzner's data protection, please visit: https://www.hetzner.de/rechtliches/datenschutz

7. Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used.

Cookies that are absolutely necessary for the use of the website are used to ensure the smooth functioning of the website and do not require your consent. The use of these cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies. In this case, a session ID is generated, which assigns the session to the user and is stored temporarily. In this way, several windows of our website can be opened and assigned to the same user, log-in data or the contents of the shopping basket are thus retained. Session cookies are deleted when the browser is closed.

Furthermore, we may use functional cookies. These cookies save the settings made during your last visit to the website, such as the language selection or internal bookmarks, so that these do not have to be selected again. Future visits to our website can thus be made more pleasant.
 
Furthermore, so-called performance cookies may be used. These contain information about how our website is used. For example, we can see how often and for how long our website is visited and which sub-pages are visited. This allows us to see which areas of our website are of particular interest to the user. Performance cookies enable the analysis of your surfing behaviour for the purpose of optimising our online offer. It is not possible to draw conclusions about you as a user.

Marketing cookies from third-party providers may be set on your terminal device. The purpose is to analyse user behaviour over several websites over a longer period of time within the framework of online marketing in order to place personalised advertising accordingly.

8. Analysis services

The tracking measures listed below and used by us are carried out on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a AVG or on the basis of our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f AVG. With the tracking measures used, we want to ensure a needs-oriented design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. If necessary, an order processing agreement has been concluded with the service provider used in accordance with Art. 28 Para. 3 S. 1 AVG. The responsibility for data protection-compliant operation is to be ensured by their respective providers.
You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case not all functions of this website may be fully usable. Unless otherwise specified regarding the storage period, the data will be stored for a period of two years and then deleted.

Google Analytics
We use Google Analytics on our website. The company responsible is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics uses so-called "cookies" (see section 7 "Cookies"). The information generated by the cookies about the use of this website is transmitted directly to Google servers, possibly in the USA, and stored there. We have activated IP anonymisation on this website so that the IP address is shortened beforehand by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The storage period for the personal data collected is 14 months. The data will be deleted after the storage period has expired.
You can also prevent the collection of the data generated by the cookie and related to the use of the website (including the IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
If you do not agree with the display of advertisements, you can deactivate them: https:// www.google.com/settings/ads/onweb.
Further information on Google's privacy policy and usage notices can be found at: https:// policies.google.com/privacy

You can configure your browser settings according to your wishes and refuse to accept cookies. Please note that you may then not be able to use all the functions of this website.

The use of cookies is either based on your consent according to Art. 6 para. 1 p. 1 lit. a AVG or within the framework of our legitimate interests in a functional website according to Art. 6 para. 1 p. 1 lit. f AVG.

9. Social Media services

We do not use social media services on our website.

10. Andere online diensten

On our websites, we make use of online services and advertising tools of the companies listed below on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a AVG or within the framework of our legitimate interest in optimal marketing of our offer pursuant to Art. 6 (1) sentence 1 lit. f AVG. Where necessary, an order processing agreement pursuant to Art. 28 (3) sentence 1 AVG has been concluded with the service provider used. The responsibility for data protection-compliant operation is to be ensured by their respective providers.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Rating tool
You have the option of submitting a rating about our service and the products purchased from us. This allows you to rate the transaction after the contract has been concluded and comment on it if necessary. For this purpose, we work together with a third-party provider. This may involve the transmission of personal data, such as name, e-mail address, invoice number and the rating. The IP address, for example, may also be passed on. The use of a rating system is for the purpose of optimising our service and gaining customer confidence.
In order to make you aware of this possibility, you may be contacted by us or by the supplier in the interest of a serious evaluation in the course of the purchase transaction - subject to your prior consent.
The storage period is the responsibility of the respective provider.

Provider:
Geprüfter webshop
We use the evaluation tool of Tisko Consulting GmbH, Hertzstr. 15 , 53881 Euskirchen, Germany.
Further information on data protection at Tisko Consulting GmbH is available at: https://www.gepruefter-webshop.de/datenschutz/

Gütesiegel Geprüfter Webshop" seal of approval
The seal "Geprüfter Webshop" is integrated on our website. The seal and the services advertised with it are an offer of Tisko Consulting GmbH, Hertzstr.15, 53881 Euskirchen.
 
When the seal is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically deleted at the latest 30 days after the end of your visit to the site.
You can obtain further information about the data protection of Tisko Consulting GmbH at: https://www.gepruefter-webshop.de/datenschutz/

​​​​​​​
Online chat
The customer has the option of contacting us via the online chat offered on our website. On the one hand, an online chat can be carried out within the framework of a chatbot - a virtual communication robot - or by means of communication with a support employee.
The use of an online chat enables us to process customer enquiries quickly and in a service-oriented manner. Art. 6 para. 1 lit. a GDPR serves as the legal basis for the use of online chat. By using the online chat or a chatbot, cookies can be set on the end device, e.g. to recognise whether a user has already seen or closed a message. When using a chatbot, personal data may be transferred to the chatbot provider, such as IP address, location data or access data. The provider can use this data to place targeted adverts. The content of the conversation with the user is stored for a maximum of 2 years. The user has the option of permanently and completely deleting the conversation at any time.

Provider: LiveChat
We offer the possibility to get in touch with us via the chatbot LiveChat. The LiveChat chatbot is a service provided by LiveChat, inc, 101 Arch Street, 8th Floor, Boston MA 02110, USA.
When the chat function is started, technical data such as date and time, browser type/version, operating system, the URL of the previously visited website and the scope of the data sent, as well as personal data such as IP address, name, contact details, content of the communication and consignment number, are stored and processed. Personal data may be transferred to servers in the USA.
The use of the chatbot is only possible with prior consent in the Consent Tool.
We use the chatbot to answer contact enquiries and customer questions, pre-contractual and contractual communication.
We have concluded an AVV contract with Userlike for the transfer of data.
You can object to the use of cookies at any time in the Consent Tool.
You can find information about LiveChat's data protection at
https://www.livechat.com/legal/privacy-policy/

11. Data subject rights

You have the right

-    to request information about your personal data processed by us in accordance with Art. 15 AVG. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and the existence of automated decision- making, including profiling, and, if applicable, meaningful information about its details;
-    in accordance with Art. 16 AVG, to demand the immediate correction of inaccurate or incomplete personal data stored by us;
-    in accordance with Article 17 of the Regulation, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
-    in accordance with Art. 18 AVG, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 AVG;
-    pursuant to Art. 20 AVG, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
-    revoke your consent at any time in accordance with Art. 7 (3) AVG. This has the consequence that we may no longer continue the data processing based on this consent for the future; and
-    complain to a supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of your personal data has been carried out unlawfully. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

12. Right of objection

IF YOUR PERSONAL DATA IS PROCESSED ON THE BASIS OF OUR LEGITIMATE INTERESTS PURSUANT TO ART. 6 ABS. 1 S. 1 LIT. F AVG, YOU HAVE THE RIGHT TO OBJECT PURSUANT TO ART. 21 ABS. 1 AVG AGAINST THE PROCESSING OF YOUR PERSONAL DATA, INSOFAR AS THERE ARE GROUNDS FOR DOING SO WHICH ARISE FROM YOUR PARTICULAR SITUATION. AS A RESULT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
YOU MAY ALSO OBJECT PURSUANT TO. ART. 21 ABS. 2 AVG AGAINST THE PROCESSING OF PERSONAL DATA BY US, WHICH IS CARRIED OUT IN ACCORDANCE WITH ART. 6 ABS. 1 S. 1 LIT. F AVG FOR THE PURPOSE OF DIRECT MARKETING WITH THE CONSEQUENCE THAT WE NO LONGER PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING.
IF YOU WISH TO MAKE USE OF YOUR RIGHT OF REVOCATION OR OBJECTION, IT IS SUFFICIENT TO SEND AN E-MAIL TO THE E-MAIL ADDRESS STATED IN THE IMPRINT.

13. Data security

We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

14. Topicality and amendment of this Data Protection Declaration

This data protection declaration is currently valid.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on this website.
This data protection declaration was created by the contract lawyers of TISKO Consulting GmbH ( www.Gepruefter-Webshop.de ) and is subject to copyright protection. Any use other than the contractual agreement or copying and unauthorised use of the texts is not permitted and constitutes a copyright infringement that will be legally punished.

Platform operator

VidaVilla.com
Dr. Nuyensstraat 86
1617 KE Westwoud, Netherlands
Phone: +31854016545
E-Mail: info@vidavilla.com
​​​​​​​Ust-ID: NL855781919B01