Privacy policy for the use of this model website

This website presents one of our VIST-X models. Interactions, contracting or similar are not possible on this site. Should you be interested, you will be redirected to the website www.visit-x.net when clicking on the corresponding buttons. A separate privacy policy applies there.

We would like to offer you the highest possible transparency with regard to the use of your data. Although interactions are not possible on this website, personal data is already processed when you visit the site.

Term: Personal data is data that can be used to identify you personally.

We are aware of the responsibility we bear in receiving your data. Therefore, we also handle them with appropriate care and observe the regulations of the Basic Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature.

• who is responsible and helpful for questions and concerns regarding the protection of your data (I. and II).   
• what specific personal data we collect, why we collect it, and the legal basis for doing so
• when and how we may share personal data with third parties, and of course
• what rights you have in relation to the data we process (VIII).

You will find the answers to these questions in this Privacy Policy.

Table of contents

I. Responsible body for data processing
II. Data protection officer
III. Use of cookies
IV. Accessing the website (log files)
V. Contacting us
VI. Use of the chat function
VII. Data transfer to third parties/third countries

1. Hotjar
2. Google services

VIII. Storage period/routine deletion
IX. Rights of the data subject
X. Changes to the privacy policy

I. Responsible body for data processing  

We are the data controller within the meaning of the GDPR for the processing of your data on this website.

"We", that is 

VISIT-X B.V.
IJburglaan 634E
1087 CE Amsterdam
Netherlands
E-mail: support@VISIT-X.net

Terms:
Controller = the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, or the like).   Data processing = any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

II. Data Protection Officer

If you have any questions or concerns about data protection on VISIT-X, you can also contact our data protection officer at any time. You can reach him by mail at the address mentioned under I. with the addition "data protection officer" or by e-mail at datenschutzbeauftragter@visit-x.net.

III. Use of cookies

We use cookies on our website. These are small files that are automatically created by your Internet browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain immediate knowledge of your identity, but your browser can be recognized and identified via a cookie ID.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again via the same device and the same browser, it is automatically recognized that you have already been to our site and which entries and settings you may have made. You then do not have to enter them again.

In addition, information is stored to identify a so-called affiliate. This is the operator of a website who has placed an advertising medium on his website that refers to this website. By clicking on this advertising material, you can access our website. The information to identify the affiliate is for the purpose of being able to allocate the operator a remuneration for the successful promotion of our site.

On the other hand, we use cookies to statistically record the use of our website. We evaluate these statistics for the purpose of optimizing our offer and the visitor experience.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer and thus permanently object to their storage. It is also possible to configure your browser so that a message always appears before a new cookie is created.

In addition, when you access the website, a window opens to ask you about your personal data protection settings and you have the option of accepting all cookies, rejecting all cookies or individually accepting certain cookies and rejecting others.

However, completely deactivating cookies may mean that you cannot use all the functions of the website.

If certain cookies are set on the basis of your consent and the data is processed in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, you can revoke your consent at any time with effect for the future e.g. by changing your cookie settings on our website without affecting the legality of the processing of your data up to that point.

IV. Calling up the website (log files)

Each time the model website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is stored in the log files (log files) of our system:  

• user’s operating system
• browser type and browser version
• user’s Internet service provider
• internet protocol address ("IP address") of the user
• date and time the website was accessed
• websites from which the user’s system accesses our website. (called "referrer")
• websites that are accessed by the user’s system via our website.
• other, similar data and information used to avert the risk of an attack on our information technology systems.  
• other, similar data and information that serve to avert the risk of an attack on our information technology systems.

This data has no direct personal reference and we can therefore not draw any direct conclusions about your person. The storage of this data is necessary in order to 

• to transmit the contents of our web pages correctly
• to constantly optimize our web pages
• to analyze errors
• to guarantee the functions of our IT systems and technology of our web pages permanently and
• to provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack.

This data is statistically evaluated by us.  In addition, an evaluation is carried out to ensure data protection and data security on the website and the level of protection for the personal data we process.

This data is not merged with other data sources. They are stored separately from other personal data provided by you.

We have a legitimate interest in the technically error-free presentation and optimization of the website, as well as the protection of our equipment and systems against attacks – for this purpose, the data must be collected. The collection of this data is therefore based on Art. 6 para. 1 f) GDPR.

V. Contacting us

You can contact us by phone, mail or e-mail. The following applies to all types of contact:

The data will be deleted (taking into account any statutory retention periods that may need to be observed) as soon as the purpose of the correspondence has been achieved.

The legal basis of the processing is, insofar as your consent exists, Art. 6 para. 1 sentence 1 a) GDPR, otherwise b), insofar as the processing of your inquiry applies to the preparation or implementation of a contractual relationship, as well as lit. f), insofar as no contractual relationship exists, whereby our legitimate interest in this case is the improvement and acceleration of our customer and user service and efficient response to your inquiry.

The following details apply to the respective type of contact:

1. telephone contact:

If you call us, we process your voluntary information during the call (e.g. surname, first name, street, city, zip code) as well as the date and time of the call, the telephone number sent with the call and the content of the conversation. This data is used to process your request that you communicate to us.

2. postal contact:

If you write to us by post, we will process the address data you provide in the letter (e.g. surname, first name, street, town, zip code), the date and time of receipt of the post, the content of your message and any attachments sent with it. Depending on the data you enter here, we may then contact you again by mail or e-mail to answer your inquiry.

3. message by e-mail

You have the option to send us an e-mail message by clicking on one of our e-mail addresses on the website. Your e-mail application will be used for this service. You also have the option to send us an e-mail directly through your e-mail application. We receive your e-mail address as well as the content of your message and any e-mail attachments you may have sent. This data is used to process the request you send us. If necessary, we will contact you again by e-mail to answer your inquiry.

We may use the CRM system "Zendesk", from the provider Zendesk, Inc, 989 Market Street #300, San Francisco, CA 94102, USA, to answer email inquiries. Zendesk only uses the above-mentioned data for the technical processing of inquiries and does not pass it on to third parties.

We have concluded a contract with Zendesk for commissioned data processing. Through this contract, Zendesk ensures that the data is processed in accordance with the GDPR and that the rights of the data subject are protected.

Users can find further information in Zendesk’s privacy policy: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/

It cannot be ruled out that data may be transferred to the USA during processing by Zendesk. An adequacy decision of the European Commission pursuant to Art. 45 GDPR exists for this country. This is based on the EU-U.S. Data Privacy Framework under which Zendesk is certified. The certificate is available here: https://www.dataprivacyframework.gov/s/participant-search

If you do not agree to this data processing, you can use our alternative contact options for submitting service requests by telephone or post.

VI. Use of the chat function

To make optimal use of the chatbot on our website, we use the service provided by Totally Human GmbH (hereinafter referred to as “Totally Human”), Dr.-Hermann-Neubauer-Ring 32, 63500 Seligenstadt, Germany. The service is integrated into our website via an interface in order to provide you with the best possible quality when using the chatbot. If you use the chatbot to communicate and enter a chat message, the following data will be collected:

• the text you entered
• the time at which you entered the text
• your IP address at the time of the chat

forwarded to Totally Human’s servers and processed there in order to provide appealing responses and content. There is no link to your VISIT-X account or the data stored there.

We have a legitimate interest in ensuring that the services on our website can be provided to you in an attractive, simple manner and in the best possible quality. The legal basis for this is Art. 6 (1) (f) GDPR.

We have concluded a contract with Totally Human for commissioned data processing. Through this contract, Totally Human assures that the data will be processed in accordance with the GDPR and that your rights as a data subject will be protected. Please note that Totally Human may also use third-party providers (subcontractors) to perform the services. It cannot be ruled out that these may also originate from the USA and that your data may therefore be transferred to the USA. An adequacy decision by the European Commission pursuant to Art. 45 GDPR exists for this country. This is based on the EU-U.S. Data Privacy Framework, provided that the company is certified under the Data Privacy Framework. In our contract for commissioned data processing, Totally Human guarantees that it will only use subcontractors who are certified under the Data Privacy Framework.

If you do not want this, please do not use the chatbot.

VII. Data transfer to third parties/third countries

Terms:

Third party = A natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Third country = A country outside the European Economic Area in which the GDPR is not directly applicable.

Unsecure third country = A third country for which the EU Commission has not issued an adequacy decision pursuant to Art. 45 (1) GDPR confirming that adequate protection for personal data exists in that country.

Consent = Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Recipient = A natural or legal person, public authority, agency, or other body to which personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered recipients.

We only disclose your personal data to third parties if:

• You have given your express consent in accordance with Art. 6 (1) (a) GDPR
• the disclosure is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) (c) GDPR
• this is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6 (1) (b) GDPR.

We may arrange for the disclosure of your personal data to processors who may use your data exclusively for the processing of our order. Insofar as the disclosure of data involves order processing, we have concluded a contract for order processing with the service providers and complied with all other legal requirements for order processing.

Our service providers are mainly based in the European Union, but also in the USA and India.

For data transfers to the USA, an adequacy decision pursuant to Article 45 applies on the basis of the EU-U.S. Data Privacy Framework, provided that the companies are certified under the Data Privacy Framework. Certificates are available here https://www.dataprivacyframework.gov/list.

If no such certificate is available, standard contractual clauses (SCC) in accordance with Art. 46 GDPR are concluded as appropriate safeguards in order to ensure a level of data protection comparable to that of the European Union in this regard as well.

Further information on this can be found here https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de.

1. Hotjar

We use the web analytics service provided by Hotjar Ltd. (hereinafter referred to as Hotjar), Dragonara Business Center, 5th Floor, Dragonara Road, Paceville St. Julian’s STJ 3141, Malta, on our website to better understand the needs of our users and to optimize the content and user experience on our website. With the help of this service, we gain insights into the experiences of our users (e.g., how much time users spend on which pages, which links they click on, what they like and dislike, etc.). Based on this, we are able to improve and optimize our offerings. The service uses cookies and other technologies to collect data about our users’ behavior and their end devices. In particular, the following data is processed:

• IP address of the device (only in anonymized form)
• Screen size
• Device type (unique device identifiers)
• Browser information
• Location (country only)
• Language used to display the website.

Hotjar stores this information on our behalf in a pseudonymized user profile. The information is not used by Hotjar or us to identify individual users or merged with other data about individual users.

We have entered into a contract with Hotjar for commissioned data processing.

Data collection and storage only takes place with your express consent in accordance with Art. 6 (1) (a) GDPR. This consent can be revoked at any time with future effect by accessing the cookie settings on the website and changing your selection there. You can also deactivate Hotjar by clicking on the following link and following the instructions there: https://www.hotjar.com/policies/do-not-track/

Please note that Hotjar must be deactivated separately for each browser or device. Please also remember that you must renew this opt-out cookie if you delete this or all cookies via your browser settings.

For more information about data protection at Hotjar, please refer to their privacy policy at: https://www.hotjar.com/privacy/

2. Google services (general note for all services)

We use various services provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, on our website. Within the EU, Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.

Here you will first find general information about the integration of Google services. More detailed information on the specific Google services we use can be found in this section under the other sub-items of this section.

By integrating Google services, Google may collect information (including personal data) and process it. Google reserves the right to make the information available to affiliated companies. This includes the parent company Google LLC in the USA. This does not rule out the possibility that data may be transferred to a server in the USA as a third country. An adequacy decision by the European Commission pursuant to Art. 45 GDPR exists for this country. This is based on the EU-U.S. Data Privacy Framework under which Google LLC is certified. The certificate is available here: https://www.dataprivacyframework.gov/list

Further information from Google can be found at: https://policies.google.com/privacy/frameworks?hl=de

We have no influence on what data Google actually collects and processes. However, Google states that, among other things, the following information (including personal data) may be processed:

• Log data (in particular the IP address)
• Location-related information
• Unique application numbers
• Cookies and similar technology

Information about the types of cookies used by Google can be found at: https://policies.google.com/technologies/types

If you are logged into your Google account, Google may add the processed information to your account depending on your account settings.

You can prevent this data from being added directly by logging out of your Google account or by adjusting the relevant account settings in your Google account.

For details on the use, function, and deactivation of cookies and changing cookie settings, please refer to “Use of Cookies” in this privacy policy.

You can access Google’s privacy policy here: https://www.google.com/policies/privacy/

Information on Google’s privacy settings can be found at: https://privacy.google.com/take-control.html

a. Google Analytics

For the purpose of designing our website in line with user needs and continuously optimizing it, we use Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”), as well as the Google Optimize extension.

If you have given your consent, pseudonymized user profiles are created and cookies (see “Use of cookies” in this privacy policy) are used in this context. So-called web beacons (invisible graphics) may also be used to evaluate information such as visitor traffic on websites. The information generated by the cookie and the beacons about your use of this website, such as

• browser type/version, operating system used
• referrer URL (the previously visited page)
• host name of the accessing computer
• time of the server request
• the pages you have accessed
• your “click path”
• Achievement of “website goals” (conversions, e.g., newsletter registrations, downloads, purchases)
• Your user behavior (e.g., clicks, length of stay, bounce rates)
• Your approximate location (region)

is transferred to Google Ireland Limited in Ireland on the basis of a data processing agreement between us and Google.

The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website and internet usage for the purposes of market research and the needs-based design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other Google data.

The tracking measures with Google Analytics are carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating the cookie, without this affecting the lawfulness of the processing of your data that has taken place up to that point. Details on deactivating cookies and changing your cookie settings can be found under “Google Services” and “Use of Cookies” in this privacy policy.

You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Google, by downloading and installing a browser add-on https://tools.google.com/dlpage/gaoptout?hl=de.

Further important information on data processing by Google can be found under “Google Services”.

Google provides information about its data protection in connection with Google Analytics, for example, in the Google Analytics Help Center at: https://support.google.com/analytics/answer/6004245?hl=de.

b. Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a service provided by Google Ireland Limited (hereinafter “Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The integration of Google Tag Manager (GTM) enables us to integrate various services in a simplified and clear manner under a uniform user interface. In addition, the integration of Google Tag Manager optimizes the loading times of the various services.

The services are integrated using tags. A tag is a program logic, i.e., a section of code that ensures the loading of other components. GTM stores cookies in the process. GTM does not access data from the services. Nevertheless, it is possible that Google may process information (including personal data) when a tag is triggered, in particular:

• Online identifiers (including cookie identifiers)
• IP address

You will be informed separately in this privacy policy about all services we integrate via GTM.

We have concluded a data processing agreement with Google for the use of Google Tag Manager (Art. 28 GDPR). Google processes the data on our behalf in order to trigger the stored tags and display the services on our website. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google.

The legal basis for the processing of personal data described here within the scope of the measurement procedure is your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating the cookie, without this affecting the lawfulness of the processing of your data that has taken place up to that point.

Details on deactivating cookies and changing your cookie settings can be found under “Google Services” and “Use of Cookies” in this privacy policy.

Further important information on data processing by Google can be found under “Google Services” in this privacy policy.

Google provides information about its data protection practices in connection with the use of Google Tag Manager at: https://support.google.com/tagmanager/answer/9323295?hl=de

and at

https://www.google.com/intl/de/policies/privacy/index.html

under the section “Data we receive based on your use of our services.”

VIII. Storage period/routine deletion

In general, we retain your personal data for as long as necessary to fulfill our obligations to you and to comply with legal or regulatory requirements.

If there is a business relationship between us, we will retain personal data for at least the duration of our relationship. However, certain personal information may be retained longer, for example, to ensure that we have an accurate record of your dealings with us in the event of a complaint or challenge, or if we reasonably believe that litigation is imminent in connection with your relationship with us.

If you have contacted us – without a business relationship existing between us – to ask a question, obtain a quote, or contact a staff member, your information will be removed after your request has been addressed.

In any case, the personal data will be routinely blocked or deleted in accordance with legal requirements if the purpose of storage no longer applies or a legally prescribed storage/retention period expires.

IX. Rights of the data subject  

Term: data subject is any identified or identifiable natural person whose personal data, are processed by the controller.   You have the right to:

Confirmation
You, as a data subject, have the right to request confirmation from us as to whether we are processing personal data relating to you. If you, as a data subject, would like such confirmation, you can contact us or our data protection officer (see points I and II) at any time.

Information
As a data subject, you are entitled under the GDPR to request information about your personal data processed by us free of charge at any time and to receive a copy of this information. In particular, you can request information about:

• the purposes of processing
• the category of personal data
• the categories of recipients to whom your data have been or will be disclosed
• the planned storage period
• the existence of a right to rectification, erasure, restriction of processing or objection
• the existence of a right of appeal
• the origin of your data, if it has not been collected by us, as well as
• about the existence of automated decision-making including profiling (Art. 22 para. 1 and 4 GDPR) and, if applicable, request meaningful information about its details, scope and effects
• whether personal data have been transferred to a third country or to an international organization and – if this is the case – to receive information about the appropriate safeguards in connection with the transfer.

If you, as a data subject, would like to exercise this right of access, you can contact us or our data protection officer ( I and II) at any time for this purpose:

Correction
As a data subject, you may, in accordance with the GDPR, immediately request the correction of inaccurate or the completion of incomplete personal data stored by us about you;   If you, as a data subject, would like to request correction or completion, you can contact us or our data protection officer (see points I and II) at any time.

Deletion
As a data subject, you may request the immediate deletion of your personal data stored by us in accordance with the GDPR if:

• the storage was made for a specific purpose and this purpose has been achieved or the storage is no longer necessary for this purpose
• the processing of the personal data is based on your consent pursuant to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR, you revoke this consent and there is no other legal basis for the processing
• you object to the processing of the personal data pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing
• you object to the processing of the personal data pursuant to Art. 21, para. 2 GDPR
• the personal data has been processed unlawfully,
• the erasure of the personal data is necessary for the fulfillment of an obligation under the data protection rules applicable to us
• the personal data has been collected in relation to services offered in the information society pursuant to Art. 8, para. 1 GDPR.

If you as a data subject would like us to delete your personal data, you can contact us or our data protection officer (points I and II) at any time.

If it is personal data that has been made public and we are obliged to erase this personal data pursuant to Art. 17 para. 1 of the GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers processing the personal data that you have requested the erasure of all links to or copies or replications of such personal data.

We or our data protection officer will take the necessary steps in individual cases.

Restriction of processing
According to the rules of the GDPR, you as a data subject have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

• the accuracy of the personal data is contested by you, for a period of time which allows us to verify the accuracy of the personal data
• the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data
• we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims, or
• if you have objected to the processing pursuant to Art. 21 GDPR, as long as it has not yet been determined whether our legitimate reasons outweigh yours.

If one of the above-mentioned conditions applies and you, as the data subject, request the restriction of the data stored by us, you can contact us or our data protection officer (see points I and II) at any time.

Data portability
Pursuant to GDPR, you have the right as a data subject to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us.

These rights exist if the following conditions are met:

• the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 b) or on a contract pursuant to Art. 6 para. 1 b), and 
• the processing is carried out with the aid of automated procedures, and
• the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Right of revocation in case of consent
As the data subject, you may revoke your consent to the processing of your personal data at any time. This has the consequence that we no longer continue the data processing based on this consent for the future. The revocation does not affect the lawfulness of the processing of your data based on your consent until then.
For a corresponding revocation, you can contact us or our data protection officer (see points I and II) at any time.

Right to object to the processing of data pursuant to Art. 6 para. 1 f) GDPR
Insofar as we process personal data on the grounds that this is done to protect our legitimate interests pursuant to Art 6 para. 1 f) GDPR, you as the data subject have a right of revocation at any time under the GDPR. This also applies to profiling based on these provisions.

If you issue a corresponding revocation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims (see, for example, Art. 21 para. 1) GDPR, so-called "limited right of objection"). In this case, you must provide reasons for the objection that arise from your particular situation.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

For a corresponding revocation, you can contact us or our data protection officer (cf. points I and II) at any time.

Right of complaint
If you believe that the processing of personal data concerning you violates data protection rules, you have the right to lodge a complaint with a data protection supervisory authority under the GDPR, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

X. Changes to the data protection declaration

Due to the further development of the website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration on this website at any time.

Status: November 2025