این ترجمه فقط برای راحتی شماست. تنها نسخهٔ آلمانی از نظر حقوقی معتبر است.
Last updated: November 2026
This privacy policy explains which personal data we process when you visit vitrinnetwork.com, for what purposes and on what legal basis, and which rights you have.
1. Controller
Vitrin Network GmbH
Zollstockgürtel 65, 50969 Köln, Germany
Represented by the managing directors Amin Fardin and Shahab Mollaian
E-mail: info@vitrinnetwork.com
We have not appointed a data protection officer because there is no legal obligation to do so. Please send any data protection questions to the e-mail address above.
2. Hosting and server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in a data centre in Germany. Hetzner processes data solely on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
When you open the website, your browser automatically transmits information that is stored in server log files:
- IP address of the requesting device
- date and time of access
- page or file requested and amount of data transferred
- status code (e.g. successful, not found)
- referrer URL (previously visited page), if transmitted
- browser type, operating system and language setting
This processing is necessary to deliver the website and to ensure stability and security (e.g. to defend against attacks). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and error-free operation of the website. Log files are only kept for as long as necessary for these purposes and are then deleted.
3. Encryption
For security reasons this website uses TLS encryption (recognisable by “https://” and the lock icon in your browser). Data you send to us cannot be read by third parties.
4. Cookies and local storage
We only use technically necessary cookies:
- vitrin-network-session – keeps your session, e.g. so that form entries are kept after an error (lifetime: 2 hours)
- XSRF-TOKEN – protects forms against cross-site request forgery (lifetime: 2 hours)
These cookies are strictly necessary for operating the website (§ 25 (2) no. 2 TDDDG); no consent is required. The related data processing is based on Art. 6 (1) (f) GDPR. We do not use marketing or tracking cookies. Details can be found in our cookie policy.
5. Cookie-free audience measurement
To understand which pages are used, we count page views on our own server. We store the date, the page requested and the language version. To count unique visitors per day, we create a non-reversible hash (SHA-256) from the IP address and browser identifier; the IP address itself is not stored for this purpose. No cookies are set, no profiles are created and no data is passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is designing our website according to demand.
6. Contact form, project request and e-mail
If you contact us via the contact form, the project form or by e-mail, we process the data you provide (name, e-mail address, optionally company, phone number, country, budget, timeline and your message), the selected language and a hash of your IP address to prevent abuse. We are notified of new requests by e-mail on our own mail server.
The purpose is to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering requests). We delete the data once your request has been fully handled, unless statutory retention obligations (e.g. under German commercial or tax law if a contract is concluded) apply.
7. Job applications
If you apply for a position, we process your details and documents (e.g. name, contact details, CV, message) to carry out the application process. The legal basis is Art. 6 (1) (b) GDPR in conjunction with § 26 BDSG. If no employment relationship results, we delete the documents no later than six months after the end of the process, unless you have consented to longer storage.
8. Fonts
The fonts used on this website are hosted locally on our server. No connection to third-party servers (e.g. Google) is made when you open the page.
9. External links
Our website links to our own products (e.g. vitrincar.com, vitrinpos.com) and to third-party websites. Data is only transferred to the respective provider when you click a link. The privacy policy of the linked website applies to its data processing.
10. Recipients and transfers to third countries
Your data is only accessible to staff who need it to handle your request and to our hosting provider as processor. No data is transferred to countries outside the EU/EEA in connection with this website. We do not sell personal data.
11. Your rights
You have the following rights regarding your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object to the processing at any time on grounds relating to your particular situation.
To exercise your rights, an informal message to info@vitrinnetwork.com is sufficient.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de
13. Obligation to provide data, automated decisions
Providing data in our forms is voluntary. Without the fields marked as required, however, we cannot handle your request. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
14. Changes
We update this privacy policy when the website or legal requirements change. The version published here applies.