1. Scope of application
This privacy statement explains the type, scope and purpose of the collection and use of personal data on this VDE-Website (hereinafter referred to as the "Website").
2. Identity of the data controller
VDE Prüf- und Zertifizierungsinstitut GmbH
Represented by managing directors Dr Udo Niehage and Wolfgang Niedziella
Phone: +49 69 6306-0
(hereinafter referred to as "VDE") is the data controller for all personal data processed on this Website, unless this privacy statement contains information to the contrary.
3. Data Protection Officer
You can contact our Data Protection Officer at:
VDE Verband der Elektrotechnik Elektronik Informationstechnik e.V.
60596 Frankfurt am Main
Phone +49 69 6308-0
4. Personal data
Personal data are information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes their name, e-mail address or phone number. However, purely technical data that can be ascribed to a person is also to be considered personal data.
5. Overview of individual procedures
Personal data are processed on this website during the following procedures:
Automatic collection of access data / server log files
Each time the website is accessed, we automatically collect a series of technical data that involve personal data. These may include:
- User IP address
- Name of the website or file retrieved
- Date and time of access
- Quantity of data transferred
- Successful retrieval message
- Browser type and version
- User operating system
- End device implemented by the user, including MAC address
- Referrer URL (the website visited beforehand)
These data are not merged with other personal data that you actively disclose on the website. We collect server log files to allow us to administrate the website and to detect and prevent unauthorised access.
The server log files with the data specified above are automatically deleted after 7 days. We reserve the right to save the log files for longer if there are facts that give grounds for suspicion of unauthorised access (e.g. attempted hacking or a DOS attack).
The legal basis for the above data processing is Article 6 (1f) of the EU General Data Protection Regulation (GDPR). This statutory authority allows for the processing of personal data as part of the controller's "legitimate interest", provided that your fundamental rights, fundamental freedoms or interests are not overriding. The described data protection serves to ensure the functionality of our website, to optimise our website and to ensure the security of our information technology systems. This is the basis of our legitimate interest. You can object to this data processing at any time if there are reasons opposing the data processing that are related to your particular situation. An e-mail sent to the Data Protection Officer is sufficient for this.
What is an IP address?
An IP address is a globally valid identifier that is assigned to an end device (e.g. your computer, smartphone or tablet) either directly by an internet provider or via a WLAN router at the time of allocation. In the form currently most prevalent (IPv4), IP addresses consists of four groups of characters separated by full stops. As a private user, you typically do not always use the same IP address since it is assigned to you only temporarily by your provider (known as a "dynamic IP address"). In theory, it is possible to clearly identify user data using this marker for a permanently assigned IP address (known as a "static IP address"). Aside from the purpose of tracking unauthorized access on our internet presence, VDE does not generally use these data in a personalised manner; instead it only analyses them anonymously to determine which of our web pages are favoured, how many times they are accessed each day, etc.
Our Website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also know the following: IPV6 addresses consist of eight groups of four characters. Just as with an entire IPv4 address, the first four groups are typically assigned dynamically for private users. However, the last four groups of an IPv6 address (known as the "interface identifier") are determined by the end device used to browse the Website. Unless otherwise configured in your operating system, the MAC address is used for this. A MAC address is a sort of serial number that is assigned once globally for each IP-compatible device. As a result, we do not save the last four groups of your IPv6 address. We generally recommend you enable what are known as "privacy extensions" on your end device in order to better anonymise the last four groups of your IPv6 address. The most common operating systems have a privacy extensions feature that is sometimes not pre-configured by factory default, however.
If you contact us (e.g. using a contact form or e-mail) the information provided by you is processed for the purpose of handling your query and in the event that follow-up questions arise. The data you provide are processed solely for handling your query.
The information provided as part of this contact is processed on the basis of Article 6 (1f) GDPR. This authority allows for the processing of personal data as part of the controller's "legitimate interest", provided that your fundamental rights, fundamental freedoms or interests are not overriding. We have a legitimate interest in handling your query. You can object to this data processing at any time if there are reasons opposing the data processing that are related to your particular situation. An e-mail sent to the Data Protection Officer is sufficient for this. If contact is aimed at the conclusion of a contract, an additional legal basis for processing is Article 6 (1b) GDPR.
The personal data saved as part of this contact are deleted once the matter associated with the contact has been resolved in full and it can also be presumed that this particular contact will not be relevant again in future.
5.3. Google Analytics
This Website uses Google Analytics, a web analysis service by Google Inc. (hereinafter referred to as "Google"). The information generated on your use of this Website by Google Analytics are generally transferred to a Google server in the US and saved there. However, this Website has activated the Google Analytics's IP anonymisation feature, meaning that your IP address is first shortened in member states of the European Union or in other countries that have signed the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server in the US and then shortened there. Google will use this information on our behalf to analyse your use of the Website, to compile reports on Website activities, and to provide us with other services associated with Website use and internet use. The IP address transferred from your browser as part of Google Analytics is not combined with other data from Google. You can prevent the data generated by Google Analytics from being recorded and processed by Google by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en
This creates an opt-out cookie that prevents your data from being recorded when visiting this Website in future. You can find more information on the terms of service and data protection at https://www.google.com/analytics/terms/us.html
The legal basis for the processing of your data is Article 6 (1f) GDPR (legitimate interest). We have a legitimate interest in analysing the use of our Website in order to continuously improve our Website offering.
5.4. Social Plugins
We use social plugins from social networks (e.g. Facebook, Twitter, Xing, LinkedIn and YouTube) on our Website. You can use these functions to share specific content of the Website with your friend on the respective social networks or to recommend this content.
Please note that we not use any social plugins that automatically collect data during your time on the Website and forward this data to the operators of the social media platforms.
We would also like to point out that the data collected in conjunction with the social plugins can be shared exclusively between your browser and the operator of the social networks. We have no knowledge of the content, the processing or the scope of the data that is collected and transferred. With this in mind, we recommend that you read the current privacy notices of the respective social network providers. The address of each social plugin provider and the URL with their privacy notices can be found at:
• Facebook Irland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland;
additional data on data collection:
Facebook has agreed to comply with the EU–US Privacy Shield:
• Google LLC., 1600 Amphitheater Parkway, Mountainview, California 94043, USA:
Google has agreed to comply with the EU–US Privacy Shield:
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA:
Twitter has agreed to comply with the EU–US Privacy Shield:
• Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany:
• LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 Ireland:
LinkedIn has agreed to comply with the EU–US Privacy Shield:
• YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA:
Google has agreed to comply with the EU–US Privacy Shield:
5.5. VDE4YOU customer portal – feedback form for VDE Institute
Our VDE4YOU customer portal is provided for you to securely transfer data and to access various information. You also have the option of sending us feedback.
If you would like to use the VDE4YOU customer portal, you first need to have registered in writing by providing your first name, surname, e-mail address, your company and your company's customer number. You will then be given the option of authorising additional users from your company to have access to the customer portal.
After registration, your authentication information will be e-mailed to you, which will allow you to have access the customer portal and thus access to order documentation, order status and information we have compiled for you.
We process the data you provide during registration in order to offer you the services on our customer portal and to prevent unauthorised use of the customer portal. Your data are not shared with third parties and are not used for any purpose other than the one specified. No cookies are used on the customer portal site.
The legal basis for the processing of your personal data is Article 6 (1b) GDPR, particularly the existing agreement with us regarding the services offered on the customer portal.
You have the option of sending us feedback using a contact form with your first name, surname, email address, phone number and your customer/order/certificate number.
These data are processed in order to examine the feedback and for anonymous evaluation as part of our company purpose. By contacting us, you consent to having us process your data for this purpose pursuant to Article 6 (1a) GDPR. You can withdraw your consent at any time with future effect. It is then not possible to process the feedback, however.
The data processed by us during the use of certain Website features, e.g. e-mail contact or use of the VDE4YOU customer portal, are saved only as long as needed to perform or carry out the particular function or service.
5.6. Newsletter and updates
We use the information you enter on our Website, e.g. title, academic title, first name, surname and e-mail address to send you the newsletter and event updates.
Once you have registered on our Website, we e-mail you at the address to request your confirmation in order for you to subscribe to our newsletter and to event updates. If you do not confirm your registration within [24 hours], your information is blocked and deleted. We also save the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to verify your registration and to be able to shed light on any misuse of your personal data.
This data processing is based on your consent, which you gave upon subscribing to the newsletter and the event updates. Pursuant to Article 6 (1a) GDPR, data processing is permitted if you have given consent for data processing for one or more specific purposes.
Your consent to sending the newsletter and to the event updates can be withdrawn at any time. An e-mail sent to the Data Protection Officer is sufficient for this.
The personal data saved during subscription to the newsletter and to the event updates are deleted if you have successfully unsubscribed from the newsletter and the event updates.
6. Recipients of personal data
Unless otherwise specified in this privacy statement, your personal data are generally processed on our Website by VDE Services GmbH with registered offices in Frankfurt am Main, which has been commissioned with this processing. VDE Services GmbH was carefully selected and commissioned for this. VDE Services GmbH is also bound to our instructions and is checked regularly. VDE Services GmbH is a subsidiary of VDE e.V.
7. Data security
The personal data processed by us are treated confidentially and suitable technical and organisational precautions are used to protect them from loss and changes as well as unauthorised access by third parties. E-mail communication is not suitable for the unencrypted transfer of confidential information. In order to exchange messages that require protection, we strongly recommend the use of the latest encryption processes.
8. Your rights
If the statutory requirements are met, you have the right to request access to your personal data and data processing (Article 15 GDPR), correction, deletion and restriction of your personal data and data processing (Articles 16 through 18 GDPR) and transmission of your personal data (Article 20 GDPR).
If the statutory requirements are met pursuant to Article 21 GDPR, you also have a right to object to data processing. If the statutory requirements are met, you can withdraw the consent you have given in full or in part at any time with future effect.
In order to exercise any of these rights, it is sufficient to send an e-mail to firstname.lastname@example.org or a letter to:
VDE Verband der Elektrotechnik Elektronik Informationstechnik e.V.
60596 Frankfurt am Main
In accordance with Art. 77 Para. 1 GDPR, you also have the right to complain to the supervisory authority, if you are of the opinion that the processing of your personal data is not done in a lawful manner, in particular that it violates the GDPR.
The address for our competent supervisory authority is:
Der Hessische Datenschutzbeauftragte
Tel. +49 611 1408-0,
9. Voluntary nature of provision of data
You are generally neither legally nor contractually bound to provide your personal data on this Website. You are not required to furnish personal data on this Website, unless we specifically point this out in this privacy statement. Nevertheless, your personal data must be processed in order to provide the features of this Website and to carry out an order.