This is a courtesy translation. The German version is legally binding.
1. Controller
The controller responsible for the processing of personal data on this website is:
VENA-GmbH
Lindestraße 7
57234 Wilnsdorf
Germany
Represented by the managing director Joseph Navarro Schäfer
Phone: +49 2737 914 84
Email: info@vena-d.de
We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, please contact us at the address or email address above.
2. General information and legal bases
We process personal data only to the extent necessary to provide this website, to handle your enquiries and to conduct our business relationships. The legal bases are in particular:
- Art. 6(1)(a) GDPR – your consent;
- Art. 6(1)(b) GDPR – the performance of a contract or of pre-contractual measures, e.g. handling enquiries and orders;
- Art. 6(1)(c) GDPR – compliance with legal obligations, e.g. retention obligations under commercial and tax law;
- Art. 6(1)(f) GDPR – our legitimate interests, e.g. in the secure and trouble-free operation of the website and in communicating with business partners.
Information is stored on or accessed from your device on the basis of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). We only use technically necessary procedures for this purpose (Section 25(2) No. 2 TDDDG).
Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. We retain documents relevant under commercial and tax law for six or ten years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
3. Hosting and server log files
This website is operated on rented server space provided by: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. We have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR.
Each time the website is accessed, information transmitted by your browser is automatically stored in log files (server log files):
- IP address of the requesting device,
- date and time of access,
- page or file accessed and amount of data transferred,
- website from which the access was made (referrer URL),
- browser and operating system used.
This processing serves to deliver the website and to ensure its stability and security, e.g. to fend off attacks (Art. 6(1)(f) GDPR). IP addresses are stored in STRATO’s log files in anonymised form only. The log files are deleted after six weeks at the latest.
Our email mailboxes and the sending of emails, e.g. notifications from the contact form, are also handled via STRATO’s servers.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
5. Cookies and consent management
We only use technically necessary cookies. These are small text files stored by your browser. Without them, certain functions of the website could not be provided. We do not use cookies for analytics, marketing or advertising purposes.
- Language setting: stores the language you have selected (storage period: 1 year).
- Login to the customer area: keeps you logged in after logging in (storage period: until the end of the session, or up to 14 days if you select “Remember me”).
- Cookie choice (“real_cookie_banner…” cookies and an entry in your browser’s local storage): stores your decision in the cookie banner (storage period: 1 year; the local storage entry: 1 day).
To manage the cookie notice, we use the WordPress plugin “Real Cookie Banner” by devowl.io GmbH. The plugin runs on our own server; no data is transmitted to the manufacturer. Your choice, a timestamp and a pseudonymous identifier are stored so that your choice can be proven (Art. 6(1)(c) GDPR); your IP address is not stored. These records are automatically deleted after three years.
You can change or withdraw your choice at any time: Change cookie settings. The “Cookie settings” link is also available at the bottom of every page.
The legal basis for technically necessary cookies is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
6. Contact form, email and telephone
If you send us an enquiry via the contact form, we process the data you enter: first name, last name, company, email address, the selected area and your message. In addition, your IP address and information about the browser and device used are stored in order to detect misuse of the form (Art. 6(1)(f) GDPR). The form is operated with the WordPress plugin “Fluent Forms”; enquiries are stored in the database of our web server and sent to us by email.
If you contact us by email or telephone, we process the data you provide.
We process this data to handle your enquiry and for any follow-up questions. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or is necessary for pre-contractual measures; otherwise, our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). The consent given with the form refers to storage for the purpose of handling the enquiry.
The data is deleted once your enquiry has been fully dealt with, unless statutory retention obligations prevent this – for example, if the enquiry leads to a quotation or an order.
7. Customer area and registration
Business customers and dealers can register on our website for a protected customer area in which technical data sheets and dealer documents are available. In doing so, we process the data provided during registration (in particular name, company, email address, user name and password – the password is only stored in encrypted form) as well as the date, time and IP address of the registration and of logins. To manage the accounts, we use the WordPress plugin “Simple Membership”, which runs on our own server.
We check every registration and then activate the account. The processing serves to provide the customer area (Art. 6(1)(b) GDPR); storing the IP address serves security and the prevention of misuse (Art. 6(1)(f) GDPR).
Profiles are not public. You can have your account deleted at any time; an informal message to info@vena-d.de is sufficient. The data will then be deleted unless statutory retention obligations apply.
8. Protection of the login area
To protect against unauthorised login attempts, we use the WordPress plugin “Limit Login Attempts Reloaded” in local mode on our own server. In the event of failed login attempts, the IP address, the user name used and the date and time are stored; after several failed attempts, access is temporarily blocked. The legal basis is our legitimate interest in the security of the website (Art. 6(1)(f) GDPR). Failed attempts are counted for 12 hours; a lockout initially lasts 20 minutes. Logs of blocked access attempts are deleted regularly, at the latest after 30 days.
9. Data backup
To prevent data loss, we regularly create backup copies of the website, including the database, using the WordPress plugin “UpdraftPlus”. Backups are created daily, stored on our host’s server (see section 3) and not transmitted to third parties. The two most recent backups are kept; older ones are deleted automatically. The legal basis is our legitimate interest in the availability and integrity of our data (Art. 6(1)(f) GDPR).
10. Fonts and videos
The fonts used on this website are loaded from our own server. No connection to third-party servers (e.g. Google Fonts) is established.
The application videos on this website are stored on our own server. No video platforms such as YouTube or Vimeo are embedded.
11. Links to social networks and external websites
Our website contains links to our profiles on Facebook, Instagram and LinkedIn. These are simple links; no data is transmitted to these networks when you visit our website. Only when you click on a link are you taken to the respective provider’s page, where its privacy policy applies.
The same applies to the “Open route in Google Maps” link on our contact page and to links to the websites of our sales partners.
12. Our profiles on social networks
We maintain company profiles on Facebook and Instagram (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) and on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) in order to communicate with customers and prospective customers and to provide information about our products (Art. 6(1)(f) GDPR).
When you visit these profiles, the network operators process your data in accordance with their own privacy policies, including in third countries such as the USA. We are jointly responsible with the respective provider for the page statistics (“Insights”) (Art. 26 GDPR); the providers make the corresponding agreements available. You can exercise your rights most effectively directly with the respective provider; of course, you can also contact us.
13. Business relationships
In the context of our business relationships with customers, prospective customers, dealers and suppliers, we process the data required to initiate and perform contracts, such as contact details of contact persons, order and delivery data and correspondence (Art. 6(1)(b) and (c) GDPR). The data is deleted after the statutory retention periods have expired.
14. What we do not use
On this website, we do not use any analytics or statistics tools, advertising or tracking services, newsletters or embedded third-party content (such as maps, videos or social media posts). There is no automated decision-making, including profiling.
15. Recipients and transfers to third countries
We only pass on your data where this is necessary to fulfil the purposes stated, e.g. to our host as a data processor, or where we are legally obliged to do so. We do not transfer data to countries outside the European Union or the European Economic Area; regarding social networks, see section 12.
16. Your rights
Within the framework of the statutory provisions, you have the following rights:
- access to the data we hold about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdrawal of consent with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, a message to info@vena-d.de is sufficient.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
17. Obligation to provide data
The provision of personal data is neither required by law nor by contract. However, we cannot process your enquiry without the information marked as mandatory in the contact form; the customer area cannot be used without registration.
18. Changes to this privacy policy
We will adapt this privacy policy as soon as changes to the website or to the legal situation make this necessary. The version published on this page applies.
Last updated: October 2026