2.1 Valispace may be processor or controller within the meaning of data protection law, depending on whether Valispace processes data on the basis of a data processing agreement or not.
2.2 If you have questions or concerns relating to the handling of your personal data by us as controller or if you wish to exercise any of your rights as listed in Section 13, please contact us under the following contact details:
– Datenschutz –
2.3 Personal data is also processed by Valispace’s Portuguese subsidiary Galactic Purpose, Unipessoal, Lda., with headoffice at Rua João Saraiva 36, 3º, 1700-250, Lisboa, Portugal, as joint controller.
3. Description and Scope of Data Collection
Valispace processes personal data and other data as described within the following:
4. Log Files
4.1 When visiting the Website, web servers log the interaction of the user with the site in something called a log file. Standard log files contain basic information such as:
4.2 Valispace uses this information to analyze trends, administer the site, track user’s movement, and gather broad demographic information for aggregate use in its server statistical reports. Valispace does not undertake to identify IP addresses with individual users.
6. Further Third Party Services
Apart from the cookies listed in the section above, Valispace uses the following third party services:
Valispace uses Zoho as customer relationship management tools to improve and maintain the quality of Valispace’s customer service.
Valispace uses Slimstat to assess and understand complex data from Valispace’s blog, such as:
GSuite is a Google service which offers different versions of Google products. It is a useful tool for the Valispace team to collaborate more efficiently and share work-related information, including user’s information, in a timely manner.
6.4.2 The user can opt-out to the creation of a user profile, Hotjar’s storing of data about the user’s usage of the Website and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
Valispace uses Greenhouse in order to advertise Valispace’s and Galactic’s Job Positions and receive third parties’ applications. Greenhouse is an applicant tracking system and recruiting software that helps optimize and streamline the recruitment, hiring and onboarding process of candidates and future employees.
All personal data received, stored and handled by Greenhouse is of Greenhouse’s responsibility, except in case the personal data is shared with third parties due to Valispace’s and Galactic’s negligence.
6.6. Open AI
Valispace uses Open AI in order to optimize the user’s experience while using the software. Open AI ensures that users improve their workflow by using artificial general intelligence (AGI), i.e., highly autonomous systems that outperform humans at most economically valuable work.
No personal data is received, stored or handled by Open AI. Any personal data collected from Valispace’s services falling outside the scope of the API integration is of Open AI’s responsibility, except in case the personal data is shared with third parties due to Valispace’s and Galactic’s negligence.
Valispace uses Mixpanel as a product analytics tool to analyze how our customers interact with our product.
7 Demo Signing Up and Newsletter
7.2 By sharing this information through pressing the button Demo “Sign Up” and “Receive Newsletter”, the user consents to receive Valispace’s product information and/or newsletter respectively provided through MailChimp. Valispace uses analytics features from MailChimp to improve the user’s experience and to further improve Valispace’s product, website and newsletter content.
Valispace does not request sensitive personal data.
9. Purposes and Legal Basis of Data Processing
Valispace processes personal data in accordance with applicable data protection laws, in particular with the provisions of the GDPR and the German Data Protection Act (Bundesdatenschutzgesetz – “BDSG”).
This legal basis also allows Valispace to process, jointly with its subsidiary personal data required for recruitment purposes.
9.1 Fulfilment of Contractual Obligations (Art. 6 para. 1 lit. b GDPR)
9.2 Public Interest Requirements (Art. 6 para. 1 lit. e GDPR) and Balance of Interests (Art. 6 para. 1 lit. f GDPR)
When necessary, Valispace processes the personal data of the user beyond the fulfilment of the contract in order to safeguard public interests, Valispace’s legitimate interests or the legitimate interests pursued by third parties. These may be, for example:
10. Who may Access the User’s Data
Within Valispace, employees who are in charge to fulfill contractual and legal obligations by providing Valispace’s services to the user gain access to his/her data. The same applies mutatis mutandis to employees of Valispace’s subcontractor Galactic Purpose and Greenhouse as processor for recruitment purposes only.
11. Safety Control Measures
For data hosted on Valispace servers, in compliance with applicable law, Valispace has implemented appropriate technical and organizational measures in order to prevent the unauthorized, accidental or unlawful access, loss, alteration and leak of personal information. The user’s data is protected against unauthorized access through encrypted transmission and storage, a role and authorization concept, a data backup concept and physical security measures for the servers.
12. Details on the Saving of Personal Data
The personal data collected are stored electronically, either on Valispace’s own servers in Germany or in a data centre of a commissioned service provider. Personal Data collected can also be stored in paper form. All electronic messages which are sent to or from Valispace are automatically stored on an e-mail server that is operated either by Valispace or a service provider on behalf of Valispace. The Personal Data collected are stored by Valispace for as long as they are required for the handling of the services via the Website. They are then destroyed in compliance with the statutory retention regulations.
13. Your Rights
13.1 Under the GDPR, you are entitled to the following rights:
13.1.1 Right to withdraw consent pursuant to Art. 7 GDPR: In the limited circumstances where you have provided your consent to the processing of your personal data for a specific purpose you have the right to withdraw your consent for that specific processing at any time by using one of the addresses provided for in Section 2 above. The revocation of such consent does not affect the legality of the data processing performed until Valispace has received the revocation. This will not, however, affect the lawfulness of processing based on your consent before its withdrawal. Once we have received notification that you have withdrawn your consent, we will no longer process your personal information for the purpose you originally agreed to, unless we have another legal basis for processing.
13.1.2 Right of access pursuant to Art. 15 GDPR: You have the right to obtain information on your data that is being processed by us and receive access to such data.
13.1.3 Right to rectification pursuant to Art. 16 GDPR: You have the right to request us to rectify any inaccurate or incomplete personal data we hold about you.
13.1.4 Right to erasure pursuant to Art. 17 GDPR: You have the right to obtain – under the statutory required preconditions of Art. 17 GDPR – the erasure of your data where there is no compelling reason for their continued processing, e.g. it is no longer necessary in relation to the purpose for which it was originally collected.
13.1.5 Right to restrict processing pursuant to Art. 18 GDPR: You have the right to ask us to restrict how we process your data subject to Art. 18 GDPR. In this case we will only be permitted to store the data but not further process it.
13.1.7 Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority, if you think that our processing of your personal data is carried out by us by breaching applicable data protection law.
13.2 If you wish to exercise any of these rights, please contact us using the contact information in Section 2 above. We may need to request specific information from you in order to verify your identity and check your right to access the personal data or to exercise any of your other rights. This is a security measure to ensure that your personal data are not disclosed to any person who has no right to receive them.
Last updated 13. February 2023