1. Data Protection Overview

​

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. For more detailed information on data protection, please refer to our privacy policy provided below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the operator's contact details in the section titled “Information on the Responsible Party” in this privacy policy.

How do we collect your data?
Your data is collected in two main ways:

1. When you provide it to us, for example, by entering information into a contact form.

2. Other data is automatically collected by our IT systems upon your visit to the website. This data includes technical information (e.g., your internet browser, operating system, or the time of your visit). This data is collected automatically as soon as you enter the website, either based on your consent or through necessary technical operations.

What do we use your data for?
Part of the data is used to ensure the website is provided without errors. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via the website, the data may also be processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?
You have the right to obtain, at any time and free of charge, information regarding the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time with future effect. Under certain circumstances, you also have the right to request that the processing of your personal data be restricted. Additionally, you have the right to file a complaint with the appropriate supervisory authority.

For more information or any questions regarding data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily carried out through analysis programs. Detailed information about these analysis programs can be found in the following sections of this privacy policy.

​

2. Hosting

​

We host our website content with the following provider: WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as "WIX").

WIX is a tool used for creating and hosting websites. When you visit our website, WIX helps analyze user behavior, visitor sources, the region of visitors, and visitor numbers. WIX stores cookies on your browser that are necessary for displaying the website and ensuring security (necessary cookies).
The data collected by WIX may be stored on various servers worldwide, including servers located in the USA.

For more information, please refer to WIX’s privacy policy: https://www.wix.com/about/privacy.

Data transfers to the USA and other third countries are based on the EU Commission's standard contractual clauses or equivalent guarantees under Article 46 of the General Data Protection Regulation (GDPR).
Further details can be found here: https://www.wix.com/about/privacy-dpa-users.

The use of WIX is based on Article 6(1)(f) GDPR, as we have a legitimate interest in the reliable presentation of our website. If explicit consent is requested, data processing is based solely on Article 6(1)(a) GDPR and Section 25(1) TTDSG (Telecommunications and Telemedia Data Protection Act), where consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent can be revoked at any time.

WIX is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Companies certified under the DPF commit to adhering to these standards. More information is available at: https://www.dataprivacyframework.gov.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with WIX. This is a legally required contract that ensures WIX processes personal data of our website visitors only according to our instructions and in compliance with GDPR.

​

3. General Information and Mandatory Disclosures

​

Data Protection

​

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data includes all data that can personally identify you. This privacy policy explains what data we collect, how we use it, and for what purposes.

Please note that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.

Information on the Responsible Party

The responsible party for data processing on this website is:

​

AVITAS GmbH
Hauptstrasse 35, 93309 Kelheim / Thaldorf, Germany
Email: info@avitasgmbh.com

​

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

​

Storage Duration

​

Unless a specific storage duration is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request the deletion of your data or revoke your consent to data processing, your data will be deleted unless other legally permissible reasons for data storage exist (e.g., tax or commercial law retention periods). In such cases, the data will be deleted after these reasons no longer apply.

Legal Bases for Data Processing

If you have given your consent to data processing, your personal data is processed based on Article 6(1)(a) GDPR or, in the case of special categories of data, based on Article 9(2)(a) GDPR. If data is transferred to third countries with your explicit consent, the processing is also based on Article 49(1)(a) GDPR.
If data processing is necessary to fulfill a contract or carry out pre-contractual measures, it is based on Article 6(1)(b) GDPR. In cases where data processing is required to fulfill a legal obligation, it is based on Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest in accordance with Article 6(1)(f) GDPR. Details on the relevant legal basis for each case are provided in this privacy policy.

Recipients of Personal Data

As part of our business operations, we may share personal data with external entities. We only share personal data when it is necessary for contract fulfillment, when legally required, or when we have a legitimate interest in sharing the data (e.g., with tax authorities). When using data processors, personal data is only shared based on a valid Data Processing Agreement (DPA).

Withdrawal of Your Consent

Many data processing operations require your explicit consent. You can revoke consent at any time with future effect. The legality of data processing carried out prior to the revocation remains unaffected.

Right to Object to Data Processing

If data processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. Once you object, your data will no longer be used for direct marketing.

​

Complaint Right

​

In the event of a GDPR violation, you have the right to file a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or location of the alleged violation. This is without prejudice to other administrative or legal remedies.

​