Last update: Aug 8th 2023
1. Name and Contact Details of the Controller as well as Operational Data Protection Officer
Ververica GmbH (hereinafter referred to as “Ververica”), Chausseestrasse 20, 10115 Berlin.
For any data protection-related inquiries, please contact us at firstname.lastname@example.org.
2. Collection and Storage of Personal Data as well as the Nature and Purpose of their Processing
a. When Visiting Ververica’s Websites
www.ververica.com, www.flink-forward.org, www.ververica.cloud, app.ververica.cloud, www.ververica.academy, docs.ververica.cloud, docs.ververica.com, ververica.zendesk.com (each a “Website”)
When calling our Website, the browser used on your end device will automatically send information to the server of our Website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your end and stored until automated erasure after 6 months:
The data mentioned are processed by us for the following purposes:
b. Subscribing to our Newsletter
If you have explicitly consented pursuant to Article 6(1)(a) GDPR, we will use your email address to send you our newsletter at regular intervals.
If you acquire any goods or services from us and provide your email address for this, such address may be used by us for sending out a newsletter subsequently. In this case, the newsletter is only used to send out direct marketing for own similar goods or services. The legal basis for sending out the newsletter due to sale of goods or services shall be § 7 para. 3 of the Gesetz gegen den unlauteren Wettbewerb (the Act Against Unfair Competition) in conjunction with Article 6(1)(f) GDPR in such a case. Our legitimate interests follow from the interest in direct marketing vis-à-vis our existing customers.
Unsubscription is possible at any time, independently of whether the newsletter was sent based on consent or based on our legitimate interest in direct marketing, e.g. by using a link at the end of each newsletter. As an alternative, you may also send your unsubscription request to us at any time by email to: email@example.com. The only costs resulting from this are the transfer costs according to the basic rates.
The personal data required for sending out the newsletter shall be erased as soon as they are no longer required for achieving the purpose of their collection and as far as no other legal authorization basis applies for further processing, such as for customer management purposes. Your email address for sending out the newsletter will be stored until you revoke your consent or until you object to submission of the newsletter.
c. When Using our Contact Form and Email Contact
If there are any questions, we offer the option of contacting us using a form provided on the Website. A valid email address must be indicated there, so that we will know where the query comes from and to answer such. Further information can be provided freely.
Alternatively, contact via the provided email address is possible. In such a case, your personal data transmitted in the email will be stored.
Data processing activities for the purpose of contacting is carried out according to Article 6(1)(f) GDPR. Our legitimate interests follow from our interest in responding to inquiries. If the contact is targeted at the conclusion of a contract, Article 6(1)(b) GDPR shall be the legal basis for processing.
As far as no other legal basis is applicable in regard to any further processing of your personal data, the personal data collected by us for the above purposes shall be erased after completion of the request submitted by you.
d. Downloading of Free Material
We provide free download files on our Website, such as whitepapers, software trial versions and other marketing material. As part of the download, we ask for personal data such as name, first name, organization, and email address. The legal basis for data processing is Article 6(1)(b) GDPR. Your data will be automatically deleted upon termination of the customer relationship, unless another legal basis for any further processing of such data is applicable.
e. When Making Purchases on Website
When you make a purchase on our Websites, we may collect certain personal data such as your name, billing and shipping addresses, contact details, payment information (except cardholder data) and transaction history. We may collect this information to process your order, deliver products/services, and communicate with you regarding your purchase.2. Data Usage and Storage:
We use the personal data you provide solely for the purpose of fulfilling your purchase order. This may include verifying your identity, processing payments, arranging delivery, and providing customer support. We retain your information only as long as necessary to complete the transaction and comply with legal obligations.3. Third-Party Service Providers:
To ensure smooth and secure purchase transactions, we may engage trusted third-party service providers. These providers may have access to your personal data only to the extent necessary to perform their services for us. We carefully select and enter into agreements with these providers to ensure they adhere to the same level of privacy and data protection standards as required by the GDPR.4. Data Security:
We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. We use secure payment gateways and encryption protocols to protect your financial details during the purchase process.5. Marketing Communications:
We may use your email address to send you transactional and service-related communications, such as order confirmations and shipping updates. With your explicit consent, we may also send you marketing communications about our products, promotions, and special offers. You can unsubscribe from marketing communications at any time by following the instructions provided in the email or contacting our customer support.6. Data Subject Rights:
Under the GDPR, you have the right to access, rectify, and delete the personal data we hold about you. If you would like to exercise any of these rights or have questions regarding our privacy practices, please contact our Data Protection Officer using the contact details provided at the end of this policy.
We regularly review and update our privacy practices to ensure compliance with applicable laws and provide transparency about our data processing activities. By making a purchase on our Websites, you acknowledge and consent to the collection, use, and storage of your personal data as described in this Paragraph e.
f. When using our Ververica Academy Services
3. Passing on Data
We shall only pass on your personal data to third parties (“Recipients”) if we are entitled to do so under the provisions of data protection law. Below we inform you about the circumstances in which this may be the case. We can pass on your personal data to Recipients, if:
In particular, we pass on personal data to the following (categories) of Recipients:
Specifically, we pass on personal data to the following listed third-party providers in order to create accounts, assign learning courses, and issue digital learning credentials:
Specifically, the personal data shared to the above listed third-party providers is:
We intend to transfer the personal data to third countries. In particular, we may transfer personal data to countries outside the EEA, in particular the USA. There is no adequacy decision by the EU-Commission with regards to most of these countries, in particular the USA. Our data transfers into such countries are covered by standard contractual clauses. You may obtain more details on the transfer of your personal data and a copy of the used standard contractual clauses from our data protection officer.
The cookie is used to store information that results from the respective context of the specifically used end device.
Furthermore, we also use temporary cookies to optimize user friendliness which are stored on your end device for a certain specified period. When you visit our Website again in order to use our services, it will be automatically recognized that you have visited us before and which input and settings you have made so that you will not have to enter them again.
Where the storage or access to cookies on your end device is necessary in order for us to be able to provide our Website or the services provided thereon and expressly requested by you (strictly necessary cookies), we do not require your consent for this. Where this is not the case, we will ask for your consent. Most browsers accept cookies automatically. You may, however, configure your browser so that no cookies will be stored on your computer or that you will always be informed before a new cookie is set up. Complete deactivation of cookies may, however, render you unable to use all functions of our website.
5. Website Tools
We use the consent management service Cookiebot, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). This allows us to obtain and manage consent from Website users for data processing. The processing is necessary for the fulfillment of a legal obligation to which we are subject (Art. 6 (1)(c) GDPR). For this purpose, the following data is processed with the help of cookies:
The key and consent status are stored in the browser for 12 months using the "CookieConsent" cookie. This preserves your cookie preference for subsequent page requests. With the help of the key, your consent can be proven and tracked.
If you enable the "Collective Consent" service feature to enable consent for multiple web pages through a single end-user consent, the service will also store a separate, random, unique ID with your consent. If all the following criteria are met, this key is stored in the third-party cookie "CookieConsentBulkTicket" in your browser in encrypted form:
Usercentrics is a recipient of your personal data and acts as a processor for us. Your personal data will be deleted on an ongoing basis after 12 months or immediately after termination of the contract between us and Usercentrics.
aa. Google Analytics
This Website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable the analysis of your user interactions on the Website and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.
We collect the interactions between you as a user of the Website and our Website primarily with the help of cookies, device/browser data, IP addresses and Website activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the Website provider, with information about the country, region, or location from which the respective user originates (so-called "IP location determination"). However, we use the anonymization function ("IP masking"), i.e. that Google truncates the IP addresses by the last octet within the EU/EEA.
We have concluded a data processing agreement with Google.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your given consent (Art. 6 (1)(a) GDPR). The revocation of your consent is possible at any time, without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our Consent Manager, or to click here to install the opt-out browser add-on, which can also be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=en/.
We use the services HubSpot, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, a software company from the USA (“HubSpot”). HubSpot is a service platform. The service is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing. This includes, among other things, the analysis of landing pages and reporting. In the process, cookies are stored on the end device used by you. We use HubSpot to analyze the use of our Website. This allows us to constantly optimize our Website and make it more user-friendly. We also use information to determine which of our services are of interest to customers and newsletter subscribers and to contact them for advertising purposes. In addition, we use the analysis to optimize our Website for you.
In the process, the following personal data may be collected, for example:
The cookies have a usual lifetime of 13 months. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which it was collected has been achieved, unless deletion conflicts with legal retention periods.
The data processing is based on your consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time. Please follow this link.
cc. Google Tag Manager
We use the Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it.
c. DoubleClick for GoogleAds
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our Website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that Google learns your IP address and stores it.
You can prevent participation in this tracking process in several ways:
6. Social Media
The legal basis for the processing of your personal data in this regard is your consent under Art. 6 (1)(a) GDPR which you provide by clicking on the respective sharing button.
Please see below for more details about the respective social media platform:
7. Rights of the Data Subject
You have the right:
8. Right to Object
As far as your personal data are processed based on legitimate interests in accordance with Article 6(1)(f) GDPR, you have the right to object to processing of your personal data in accordance with Article 21 GDPR, to the extent that there are grounds relating to your particular situation. We will no longer process the personal data unless (i) we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or (ii) for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
If you want to exercise your withdrawal right or right to object, simply send us an email to firstname.lastname@example.org.
9. Further information
10. Data Security
Within the website visit, we use SSL/TLS with at least TLS 1.2. Whether an individual Website is transmitted encrypted or not is evident by the closed display of the key or lock symbol in the lower status bar of your browser. Apart from this, we use appropriate technical and organizational security measures in order to protect your data from accidental or willful manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures will be improved continually according to the technological developments.