Privacy policy

Last updated: September 2026

1. Controller

vaiovis GmbH
Am Goldgraben 12
37073 Göttingen
Germany

Represented by Dr. Andreas Keil, Managing Director
Email: datenschutz@vaiovis.com

2. Summary

• Fonts, images and our film are loaded from our own server, not from third parties.
• The contact form reaches us through a Google service and is protected against spam with Google reCAPTCHA. reCAPTCHA is only loaded when you send the form.
• We only use Google Analytics if you consent in the cookie banner. Without your consent, no data is transferred to Google.
• You can change your choice at any time under “Cookie settings” at the bottom of the page.

3. Hosting and server log files

This website runs on a server of vaiovis's own. The server is located in a data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in Falkenstein (Vogtland), Germany. When you visit the website, our server automatically processes data that your browser transmits:

• IP address,
• date and time of access,
• the page or file requested and the amount of data transferred,
• the page visited before (referrer),
• browser and operating system.

This data is technically necessary to deliver the website, keep it secure and fix errors (Art. 6(1)(f) GDPR). The log files are deleted after 7 days. A data processing agreement under Art. 28 GDPR is in place with Hetzner as the operator of the data centre.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

5. Fonts, images and film

The fonts (Jost and Source Sans 3) are stored on our server; there is no connection to Google Fonts or other providers. The HistoLogiq film and its subtitles are also loaded directly from our server.

6. Cookies and consent management

We store your choice in the cookie banner in the cookie cc_cookie on your device, so that the banner does not reappear on every page view and we can prove your consent. This cookie is strictly necessary for operating the website (§ 25(2) no. 2 TDDDG, Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR) and is deleted after 6 months. We set all other cookies only with your consent.

7. Web analytics with Google Analytics

If you consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us how our website is used, so that we can improve it for you.

What data is collected

• the pages viewed, the time spent on them and the website you came from,
• how our film is used: start, pause (with the position in the film), how far it was watched and whether subtitles are switched on or off,
• device and browser information and the approximate location (country, region),
• a random identifier in a cookie that recognises returning visits.

Google Analytics 4 does not store IP addresses; for users in the EU, the IP address is only used to determine the approximate location and is then discarded. We have switched off the advertising features and “Google signals”.

Cookies

Legal basis and withdrawal

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time with effect for the future, under “Cookie settings” at the bottom of the page. This deletes the Google Analytics cookies.

Recipients, transfers to third countries and retention

Google processes the data on our behalf; we have concluded a data processing agreement with Google (Art. 28 GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). The data collected is deleted after 14 months. More in Google's privacy policy: policies.google.com/privacy.

8. Contact form and email

If you write to us through the contact form or by email, we process your details (name, email address, institution and your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to steps before entering into one, otherwise our legitimate interest in answering it (Art. 6(1)(f) GDPR). We delete the data as soon as it is no longer needed, unless statutory retention obligations apply.

The contact form transmits your details to a service based on Google Apps Script, which forwards them to us by email and sends you an automatic confirmation of receipt at the email address you gave. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf; we have concluded a data processing agreement with Google (Art. 28 GDPR). A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

9. Spam protection with Google reCAPTCHA

To protect against spam and automated requests, the contact form uses Google reCAPTCHA from Google Ireland Limited. reCAPTCHA is only loaded when you send the form, and checks whether the request comes from a human. For this, data such as your IP address, browser and device information, the page visited and how you use the page are transmitted to Google, including to Google LLC in the USA (EU-US Data Privacy Framework, Art. 45 GDPR). reCAPTCHA may use cookies from Google.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give by sending the form after the notice below it. If you do not want to use reCAPTCHA, you can reach us by email at any time. Google'sPrivacy Policy andTerms of Service apply.

10. Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have data erased (Art. 17 GDPR) and its processing restricted (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent you have given, with effect for the future (Art. 7(3) GDPR).

Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To do so, simply write to datenschutz@vaiovis.com.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany,www.lfd.niedersachsen.de.

12. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.