Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

E-Mail: info@vdit.nrw

2. Hosting

This website is operated on server infrastructure of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server location is in Germany. Hetzner provides the infrastructure and may, as part of this activity, access data processed in connection with the operation of the website.

The hosting provider is used on the basis of a data processing agreement pursuant to Art. 28 GDPR and the legitimate interest in a secure and efficient provision of this website pursuant to Art. 6 (1) (f) GDPR.

3. Server log files

When you visit this website, information is automatically processed in server log files. This includes:

• IP address of the accessing device
• Date and time of access
• HTTP method and the full address of the requested resource, including any URL parameters
• Amount of data transferred and response status
• The previously visited page (referrer URL), if transmitted
• Browser type and operating system (user agent)

These data are technically necessary to deliver the website, ensure its stability and security, and detect misuse. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient operation of the website).

The log files are rotated daily and automatically deleted after at most 14 archived generations; the retention period is therefore regularly no longer than about 14 days. Any separate logging by the hosting provider (e.g. for network security and abuse prevention) takes place independently under its own responsibility.

4. Contact by e-mail or phone

If you contact us by e-mail or phone, we process the data you provide (e.g. name, e-mail address, phone number, content of the message) in order to handle your request. This processing is based on Art. 6 (1) (b) GDPR where the request is related to the performance of a contract or pre-contractual measures, and otherwise on Art. 6 (1) (f) GDPR (legitimate interest in handling enquiries).

The data will be deleted as soon as they are no longer required for handling the request and no statutory retention obligations apply. Where business correspondence arises from the contact, statutory retention periods (e.g. pursuant to § 147 AO or § 257 HGB) may apply.

5. No cookies, no analytics, no third-party content

This website does not use cookies. No analytics or tracking tools are operated, no marketing cookies are set and no third-party content (e.g. embedded videos, external fonts or social media plugins) is loaded. All fonts and resources are served directly from this website. As no consent-requiring technologies are used, no cookie banner is shown.

6. Data security

The website is delivered encrypted via a TLS/HTTPS connection. Technical and organisational measures are in place within the website to protect your data against accidental or intentional loss, access or manipulation.

7. Your rights as a data subject

Within the scope of the statutory provisions, you have the right to:

• Access to your processed data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consents given, with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, an informal e-mail to info@vdit.nrw is sufficient. You will usually receive a reply within one month.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The competent authority is in particular the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

9. Version and changes

Version of this privacy policy: October 2026. This policy will be adapted if the technical implementation or the legal requirements change.