1. Name and Contact Details of the Controller
VX Instruments GmbH
Roedersteinstraße 10
84034 Landshut
Germany
Tel. +49 (0)871 93 15 55-0
E-Mail: info@vxinstruments.com
vxinstruments.com
authorized representative: Dipl.-Ing. Christian Degenhart
2. Questions Regarding Data Protection
If you have any questions in regard to data protection, please turn to:
datenschutz@vxinstruments.com
Tel. +49 (0)871 93 15 55-0
3. General Information on Data Processing
3.1 Scope of the Processing of Personal Data
We generally process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user’s consent. An exception applies in cases in which obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.
3.2 Legal Basis for the Processing of Personal Data
Where we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre‑contractual measures.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.
3.3 Erasure of Data and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
4. Rights of the Data Subject
If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis‑à‑vis the controller:
4.1 Right of Access (Art. 15 GDPR)
You may request confirmation from the controller as to whether personal data concerning you are being processed.
Where such processing is taking place, you may request access to the following information from the controller:
- the purposes for which the personal data are processed;
- the categories of personal data which are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been disclosed or are still being disclosed;
- the envisaged period of storage of the personal data concerning you or, if specific information is not possible, the criteria used to determine the storage period;
- the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information on the source of the data if the personal data are not collected from the data subject;
- the existence of automated decision‑making, including profiling, referred to in Article 22(1) and (4) GDPR and—at least in those cases—meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether personal data concerning you are transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
4.2 Right to Rectification (Art. 16 GDPR)
You have the right to obtain from the controller the rectification and/or completion of personal data concerning you if the processed personal data are inaccurate or incomplete. The controller must carry out the rectification without undue delay.
4.3 Right to Restriction of Processing (Art. 18 GDPR)
You may request the restriction of the processing of personal data concerning you under the following conditions:
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise, or defence of legal claims; or
- you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
Where the processing of personal data concerning you has been restricted, such data shall—apart from their storage—only be processed with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted on the basis of the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
4.4 Right to Erasure (“Right to be Forgotten”, Art. 17 GDPR)
You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete such data without undue delay where one of the following grounds applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
- The personal data concerning you have been unlawfully processed.
- Erasure of the personal data concerning you is required for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data concerning you have been collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.
Exceptions to the Right to Erasure
The right to erasure does not exist to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise, or defence of legal claims.
4.5 Right to Notification (Art. 19 GDPR)
If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients by the controller.
4.6 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine‑readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
- the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and
- the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons must not be adversely affected thereby.The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
4.7 Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services—without prejudice to Directive 2002/58/EC—to exercise your right to object by automated means using technical specifications.
4.8 Right to Withdraw Consent to Data Protection Declarations (Art. 7(3) GDPR)
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4.9 Automated Individual Decision‑Making, Including Profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
- is necessary for entering into or the performance of a contract between you and the controller,
- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms as well as your legitimate interests, or
- is based on your explicit consent.
However, such decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests have been taken.
With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
4.10 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy under Article 78 GDPR.
Competent supervisory authority:
BayLDA
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
Tel.: +49 (0)981 18 00 93-0
E-mail: poststelle@lda.byern.de
Web: lda.bayern.de
A list of data protection authorities and their contact details can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
5. Provision of the Website and Creation of Log Files
5.1 Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data are collected:
- Information about the browser type and the version used
- The user’s operating system
- The user’s internet service provider
- The user’s IP address (anonymised)
- Date and time of access
- Websites from which the user’s system reaches our website (referrer)
- Websites that are accessed by the user’s system via our website
The data are also stored in the log files of our system. These data are not stored together with other personal data of the user.
5.2 Legal Basis for Data Processing
The legal basis for the temporary storage of the data and the log files is Article 6(1)(f) GDPR.
5.3 Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is carried out to ensure the functionality of the website. In addition, the data help us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.
5.4 Duration of Storage
The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
In the case of storage of the data in log files, this is the case after no later than seven days. Storage beyond this period is possible. In this case, the IP addresses of users are deleted or altered so that assignment to the accessing client is no longer possible.
5.5 Possibility of Objection and Removal
The collection of data for the provision of the website and the storage of data in log files are absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
6. External Website Hosting with Raidboxes
6.1 Description of the Hosting Provider
This website is hosted on servers of Raidboxes GmbH. Raidboxes is a German provider of managed WordPress hosting based in Germany.
Provider:
Raidboxes GmbH
Friedrich‑Ebert‑Straße 7
48153 Münster
Germany
Website: https://raidboxes.io
Privacy Policy: https://raidboxes.io/datenschutz/
6.2 Scope of Data Processing
Raidboxes GmbH automatically collects and stores server log files with information that your browser transmits when requesting the website. This includes the following data:
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
- Host name and IP address
- Date and time of access
- Amount of data transmitted (bytes)
- HTTP status code
In addition, the following personal data may be processed that you enter via forms, newsletter sign‑ups, or other functions of the website:
- Contact details (name, e‑mail, phone)
- Address data
- Contents of contact forms and messages
- Order data (if applicable)
- Other data that you voluntarily submit
6.3 Purpose of Data Processing
- Provision of the website: Technical delivery of website content to your web browser
- Technical functionality: Ensuring a stable and functional website
- Security: Identification and defence against cyberattacks, spam, and misuse
- Performance optimisation: Analysis and improvement of website performance
- Statistics and evaluation: Anonymised statistical evaluation of website traffic
- Error diagnosis: Rectification of technical problems and errors
- Legal protection: Assertion and defence of legal claims
6.4 Legal Basis for Data Processing
The processing of personal data by Raidboxes is based on the following legal grounds:
- Article 6(1)(b) GDPR: Performance of a contract – External hosting is required to provide the website and thus to perform the contract with you as a website visitor
- Article 6(1)(f) GDPR: Legitimate interests – Raidboxes has a legitimate interest in the security, stability, and performance of the technical infrastructure which is not overridden by the rights and freedoms of data subjects
6.5 Server Location and Data Storage
Server location: Germany
The data are stored on servers of Raidboxes GmbH in Germany. No transfer to third countries outside the European Union takes place. This ensures compliance with the GDPR and German data protection regulations.
Security certifications of Raidboxes:
- ISO 27001: Certification for information security
- ISO 22301: Certification for resilience and business continuity
- SOC 2 Type 2: Audit confirming operational excellence
6.6 Security Measures
Raidboxes implements the following technical and organisational measures (TOMs) to protect your data:
Technical measures:
- SSL/TLS encryption: All data are transmitted in encrypted form (HTTPS)
- Security Shield: Web application firewall (WAF) with DDoS protection
- Exploit Detector: Automatic detection and defence against attack methods
- Automatic backups: Regular automated backups
- Automatic updates: Automated updates of WordPress, plugins, and themes
- Login protection: Brute‑force protection for administration areas
- IP blocking: Ability to block suspicious IP addresses
Organisational measures:
- Access restrictions to servers and data
- Encrypted communication between systems
- Regular security audits
- Incident response procedures
- Data protection training for staff
6.7 Processing on Behalf (Data Processing Agreement)
We have concluded a data processing agreement (DPA) with Raidboxes GmbH in accordance with Article 28 GDPR. This agreement governs:
- Scope of processing: Which personal data Raidboxes is permitted to process
- Purpose of processing: Solely for the provision of hosting services
- Duration of storage: Retention periods in accordance with the Raidboxes privacy policy
- Instruction‑bound processing: Raidboxes processes data only on our instructions
- Sub‑processors: All sub‑processors of Raidboxes are likewise contractually bound
- Data subject rights: Support in the exercise of data subject rights
- Data security: Implementation and maintenance of appropriate security measures
6.8 Duration of Storage
Server log files:
The IP addresses and technical data recorded in server log files by Raidboxes GmbH are automatically deleted after statistical analysis at the latest after 7 days. These data are not merged with other data sources.
For the identification and defence against attacks, the stored IP data may be deleted through anonymisation when they are no longer required for the detection or defence of an attack.
Other personal data:
Personal data that you enter via forms or other functions are stored for as long as necessary to fulfil the contractual purpose (e.g. contact enquiries until answered). Thereafter, they are automatically deleted after [INSERT HERE: e.g. 30 days / 6 months], insofar as no statutory retention period applies.
6.9 Sub‑processors
Raidboxes GmbH cooperates with the following sub‑contractors (sub‑processors), who are likewise bound to confidentiality and data protection. A complete, up‑to‑date list of sub‑contractors can be found in the Raidboxes privacy policy or can be requested via Raidboxes support.
6.10 Possibility of Objection and Removal
As external hosting is technically necessary in order to provide the website, there is no possibility to object to data processing by the hosting. A website cannot be operated without a hosting provider.
However, you can take the following measures:
- Minimise the information you provide: Only enter necessary information in forms
- Privacy settings: Use your browser’s privacy settings (e.g. Do‑Not‑Track)
- Browser extensions: Use privacy‑friendly browsers and extensions
6.11 Further Information
For further information on data processing by Raidboxes, we refer to:
- Raidboxes privacy policy: https://raidboxes.io/datenschutz/
- Raidboxes legal notice (Impressum): https://raidboxes.io/impressum/
- Raidboxes Help Centre: https://helpcenter.raidboxes.de/
- Data processing agreement: Available in your Raidboxes account under Contracts/DPA
6.12 Contact for Data Protection Queries
If you have questions regarding data processing by Raidboxes, you can contact Raidboxes support:
Raidboxes GmbH – Support
Website: https://raidboxes.io
Live chat: Daily 8:00–22:00 (https://raidboxes.io/company/contact/)
7. WordPress as a Content Management System
This website uses WordPress as a content management system (CMS). WordPress is hosted on a server in Germany or the EU.
7.1 Processing of Personal Data by WordPress
WordPress itself does not store personal data unless you use specific functions such as comments (see separate notice).
7.2 WordPress Cookies
WordPress sets technically necessary cookies to ensure the functionality of the website. These cookies do not contain personal data and are set automatically.
8. Cookies
8.1 Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. If a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user‑friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
8.2 Essential Cookies (Technically Necessary)
The following essential cookies are used on our website, which are strictly necessary for the operation of the website and do not require consent:
8.2.1 WPML Language Cookie (wp-wpml_current_language)
Purpose: Storage of the language selected by the user
Cookie name: wp-wpml_current_language
Provider: Own server
Lifetime: Session/1 year
Legal basis: Article 6(1)(f) GDPR (legitimate interests)
This cookie stores the user’s language setting so that the website can be displayed in the selected language.
8.2.2 Cookie Consent Cookie (_icl_visitor_lang_js)
Purpose: Storage of the user’s cookie consent decision
Cookie name: _icl_visitor_lang_js
Provider: Own server
Lifetime: 1 year
Legal basis: Article 6(1)(c) GDPR (legal obligation)
This cookie stores whether the user has consented to the use of cookies and prevents the cookie banner from being displayed again on each visit.
8.3 Possibility of Objection and Removal
You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are necessary for carrying out the electronic communication process or for providing certain functions that you have requested are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error‑free and optimised provision of its services.
9. Google reCAPTCHA
To protect against spam and misuse, we use the reCAPTCHA service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on some forms of this website.
9.1 Scope of Data Processing
By integrating reCAPTCHA, data are transmitted to Google to determine whether the input is made by a human or is abusive through automated, machine processing.
The following data may be processed:
- IP address of the user
- Referrer URL (previously visited page)
- Date and time of the page visit
- Mouse movements and keystrokes
- Browser information (user‑agent)
- Operating system
- Google cookies (if present)
9.2 Legal Basis
The use of reCAPTCHA is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be withdrawn at any time.
9.3 Purpose of Data Processing
The use of reCAPTCHA serves to protect our website from spam and misuse by automated bots.
9.4 Duration of Storage and Data Transfer to Third Countries
Google also processes the data in the USA. Google is certified under the EU–US Data Privacy Framework. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy
9.5 Right to Object
You can withdraw your consent at any time via our cookie‑consent tool. You can manage data already processed via the privacy settings of your Google account.
10. Google Analytics (Site Kit)
This website uses features of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
10.1 Scope of Data Processing
Google Analytics uses cookies and similar technologies to analyse user behaviour. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.
The following data are collected:
- Anonymised IP address (IP anonymisation is activated)
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- Pages visited and time spent
- Interactions with the website
10.2 IP Anonymisation
We have activated IP anonymisation on this website. This means that your IP address will be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
10.3 Legal Basis
The use of Google Analytics is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be withdrawn at any time.
10.4 Purpose of Data Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services relating to website and internet usage.
10.5 Duration of Storage
The data sent by us and linked with cookies are automatically deleted after 14 months. Deletion of data whose retention period has been reached takes place automatically once a month.
10.6 Data Transfer to Third Countries
Google also processes data in the USA. Google is certified under the EU–US Data Privacy Framework. In addition, we have concluded standard contractual clauses with Google pursuant to Article 46(2)(c) GDPR.
Further information: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en
10.7 Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
10.8 Right to Object
You can prevent the storage of cookies by selecting the appropriate settings in your browser. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of these data by Google, by downloading and installing the browser plug‑in available at the following link: https://tools.google.com/dlpage/gaoptout
Alternatively, you can withdraw your consent via our cookie‑consent tool.
Further information on the handling of user data by Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245
11. Google Maps
This website uses the Google Maps mapping service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
11.1 Scope of Data Processing
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there.
The following data may be processed:
- IP address
- Location data (if location sharing is enabled)
- Date and time of the visit
- Inputs in the mapping service (e.g. route search)
- Google cookies
11.2 Legal Basis
The use of Google Maps is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be withdrawn at any time.
11.3 Purpose of Data Processing
Google Maps is integrated to present our location clearly and to make it easier to find our company.
11.4 Duration of Storage and Data Transfer to Third Countries
The provider of this page has no influence on the data transfer. Google also processes data in the USA. Google is certified under the EU–US Data Privacy Framework.
Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy
11.5 Data Processing Agreement
We have concluded a data processing agreement with Google.
11.6 Right to Object
You can prevent Google Maps from being displayed by refusing or withdrawing consent in our cookie‑consent tool. Maps already loaded will then no longer be displayed.
12. CleverReach (Newsletter)
We send newsletters using CleverReach. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.
12.1 Scope of Data Processing
If you subscribe to our newsletter, we process the following data:
- E‑mail address (mandatory)
- Salutation, first and last name (optional, if provided)
- IP address and time of subscription (for documentation)
- Information about newsletter opens and clicks
12.2 Double‑Opt‑In Procedure
Subscription to our newsletter takes place using the so‑called double‑opt‑in procedure. This means that after your registration you will receive an e‑mail in which you are asked to confirm your subscription. This confirmation is necessary so that no one can register with other people’s e‑mail addresses. Newsletter subscriptions are logged in order to be able to prove the subscription process in accordance with legal requirements.
12.3 Legal Basis
Data processing is based on your consent pursuant to Article 6(1)(a) GDPR. You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.
12.4 Purpose of Data Processing
Your e‑mail address is collected in order to send you the newsletter. The collection of other personal data during the subscription process serves to prevent misuse of the services or of the e‑mail address used.
12.5 Duration of Storage
The data are deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s e‑mail address is therefore stored for as long as the newsletter subscription is active.
The other personal data collected during the subscription process are usually deleted after a period of seven days.
12.6 Data Processing Agreement
We have concluded a data processing agreement (DPA) with CleverReach. This ensures that CleverReach processes the data of our newsletter recipients only in accordance with our instructions and in compliance with the GDPR.
12.7 Data Transfer
CleverReach stores all data on servers in Germany or the EU. Data are not transferred to third countries.
12.8 Analysis and Statistics
CleverReach enables us to analyse whether and how newsletters are opened and which links are clicked. This information is used to optimise and make our newsletter more relevant.
12.9 Right to Withdraw and Unsubscribe
You can unsubscribe from our newsletter at any time, i.e. withdraw your consent. This simultaneously revokes your consent to the sending of the newsletter. A link to unsubscribe can be found at the end of each newsletter.
Further information can be found in the CleverReach privacy policy: https://www.cleverreach.com/de-de/datenschutz/
13. Contact Form
13.1 Description and Scope of Data Processing
Our website contains a contact form which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask are transmitted to us and stored.
At the time the message is sent, the following data are also stored:
- The user’s IP address
- Date and time of submission
During the submission process, your consent is obtained for the processing of the data and reference is made to this privacy policy.
The data entered via the contact form are not temporarily stored on our server but are sent directly as an e‑mail to the e‑mail address stored in the form. The data are stored exclusively in our e‑mail inbox.
13.2 Legal Basis for Data Processing
The legal basis for processing the data is Article 6(1)(a) GDPR where the user’s consent has been obtained.
The legal basis for processing data transmitted in the course of sending an e‑mail is Article 6(1)(f) GDPR. If the e‑mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR.
13.3 Purpose of Data Processing
The processing of personal data from the input mask serves solely to process the contact. The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
13.4 Duration of Storage
The data you send to us via contact enquiries will remain with us until you ask us to delete them, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions—particularly statutory retention periods—remain unaffected.
13.5 Possibility of Objection and Removal
The user has the possibility at any time to withdraw his or her consent to the processing of personal data. If the user contacts us by e‑mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.
For a withdrawal or objection, please send an e‑mail to: datenschutz@vxinstruments.com
All personal data stored in the course of contacting us will be deleted in this case.
14. Social Media Links (LinkedIn, Facebook, Instagram)
14.1 Description of Integration
Our website contains links to our social‑media profiles on LinkedIn, Facebook, and Instagram. These links are integrated as simple hyperlinks and do not constitute plug‑ins or embeddings.
14.2 Scope of Data Processing
By merely linking to our social‑media profiles, no data are transmitted to LinkedIn, Facebook, or Instagram when visiting our website. Data transfer only takes place when you actively click on the link and are redirected to the respective social network.
As soon as you click on the link, you leave our website and are redirected to the respective social‑media platform. From that point on, the privacy policies of the respective platform apply.
14.3 Responsibility
The operators of these platforms are solely responsible for data processing on the linked social‑media platforms:
LinkedIn:
LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Facebook:
Meta Platforms Ireland Limited
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: https://www.facebook.com/privacy/explanation
Instagram:
Meta Platforms Ireland Limited
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy policy: https://help.instagram.com/519522125107875
14.4 Purpose of Linking
Linking to our social‑media profiles serves to inform our website visitors about our presence on these platforms and enables further contact and information about our activities.
14.5 Legal Basis
The linking is based on our legitimate interest in effectively informing our website visitors pursuant to Article 6(1)(f) GDPR.
15. SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content—such as enquiries that you send to us as the site operator—this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
16. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your subsequent visit.
—
Status of this privacy policy: November 2025
