This privacy statement provides information to help you understand how we collect, use and share your information when you visit www.vantagetowers.com.
Last updated: 22 August 2023
In the following privacy policy "we/us" means Vantage Towers; "third party" means someone who is not you or us; and " Vantage Towers " means Vantage Towers and any company or other organisation in which Vantage Towers owns more than 15% of the share capital.
Our registered office is Vantage Towers AG, Prinzenallee 11-13, D-40549 Düsseldorf. We are registered in Germany with the commercial register of the Local Court (Amtsgericht) of Düsseldorf under HRB 92244.
For any questions about this data protection information or the processing of your personal data, you can contact our data protection officer. E-Mail: [email protected]
Privacy policy
1 - Responsibility for data processing (controller)
- We inform you in the following about the processing of personal data when visiting our website. Personal data is all information that can be related to you personally, e.g. name, address, e-mail address, your applicant data, user behaviour or IP address.
- Responsible according to Art. 4 para. 7 GDPR is Vantage Towers AG, Prinzenallee 11-13 40549 Düsseldorf, Germany, Email: [email protected].
2 - Data protection officer
You can reach our data protection officer at our postal address with the addition: "To the data protection officer", as well as by e-mail at [email protected].
3 - Informational use of our website and contacting us
-
Browser data
When you visit our website for information purposes, we automatically collect the following data and information that your browser transfers to us:
- IP address,
- User Geo Location (fetched from IP address)
- Date and time of the request,
- Content of the request specific page,
- Access status/http/status code,
- HTTP Method (GET/POST/HEAD)
- Website from which the request originated (Referrer)
- Browser, (fetched from User Agent string)
- Operating system, (fetched from User Agent string)
- Language and version of the browser software (fetched from User Agent string).
This data processing by our system is intended to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. Your IP address will be deleted after 90 days. We save it for 90 days so that we can react in the event of data security deficiencies or problems with user intervention. The IP addresses are deleted immediately after the end of the 90 days retention period. In addition, the data in our system is deleted when the respective session is finished. The collection of data for the purpose of providing the website is mandatory for the operation of the website. The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR.
-
Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC ("Google"). Google Analytics uses cookies which, among other things, enable an analysis of your use of the website. Google processes your IP address and other personal data such as the browser you use, your surfing behaviour, your location and the referrer-URL.
The information is generally transferred to and stored by Google on servers in the USA, based upon Standard Contractual Clauses. However, due to the activation of the IP anonymisation "_anonymizeIp()", your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before. Nevertheless, the following should be noted: It cannot be guaranteed that the data processing is carried out at the same level of protection as within the EU. In this respect, to our knowledge there is a risk that you will find it more difficult to enforce your rights as a data subject. Furthermore, there is no data protection supervision. There is also the risk of disproportionate access to your data by state security authorities, against which there is no adequate legal protection if you are not a US citizen. We expressly point this out.
Google uses the information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. We can use the information obtained to improve our offer and make it more interesting for you as a user. Google also uses your personal data for its own purposes and links these, for example, to existing Google accounts, your search history or usage data from other devices. The transmitted data is stored for 14 months. After that the data will be deleted automatically. The legal basis for the use of Google Analytics is your informed and voluntary consent pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR. You can withdraw your consent at any time by [email protected]. Irrespective of this withdrawal, you can use browser settings to prevent Google from processing personal data. Here you will find information regarding a browser add-on to deactivate Google Analytics.
4 - Email alerts
If you have subscribed to our email alerts, we process your email address in order to send you our newsletter by email. When registering for the corporate alert (newsletter), the email address of the subscriber is stored, along with a record of their consent (date and time). The subscriber is then sent an email where they need to validate their subscription. We use Googles´ reCaptcha – “completely automated public turing test to tell computers and humans apart” – to make sure there is no bot involved.
The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR. You can withdraw your consent to receive our newsletter at any time with effect for the future by clicking on the website linked here.
5 - Contact via contact form
In case of requests via email, we process the personal data voluntarily provided by you exclusively for the purpose of processing your request, answering it or contacting you. The data collected in this context will be deleted after final answering, if there are no legal or other storage obligations. The legal basis for this processing of your personal data is Art. 6 Para. 1 S. 1 lit. b GDPR.
In case you contact us for more information on how to engage with us as a landlord, we provide a separate contact form. To verify your email address, we send you a code to that email address. This code needs to be filled in that form. Afterwards you can fill in your personal data – name, phone number, postal address/location details – and send your inquiry. We will transfer your personal data to that Vantage Towers Group Company/ a local processor who will process your data on behalf of that company which is likely to be locally responsible for you and your inquiry. The legal basis for this processing of your personal data is Art. 6 Para. 1 S. 1 lit. b GDPR.
If you contact us via our contact form or via our contact e-mail address initiatively with an application, we process your personal data in accordance with § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 GDPR. Please consider https://careers.vantagetowers.com/ for that purpose.
6 - Recipients of the personal data
Personal data is treated confidentially by us. We do not make your personal data available to third parties, unless you have given your consent or we are legally obliged to disclose the data.
Some of the services or information you can request on this site may come from other members of our corporate family. Therefore, we may share your information with other companies within Vantage Towers (for example, your local carrier). The laws of the countries where these companies are based may not be the same as those in the EU, but your information will be treated with the same high standard of care wherever it’s processed within the corporate family.
In order to provide and evolve the website, we use service providers like Investis Digital and Amazon Webservices who process personal data on our behalf and who are bound in accordance with Art. 28 para 3 GDPR. We remain data controller. Sub-processors – like Leadfeeder, whose cookie collects the IP-address and behavioural data of website visitors including pages viewed, visitor source and time spent on the site in order to detect the company and the geographic location – follow the same data protection obligations.
7 - Data security
The security of your personal data is of great importance to us. We have concluded extensive data protection agreements with the service providers used for the website. For security reasons and to protect the transmission of confidential content, such as our contact form, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you disclose to us cannot be read by third parties.
We have specialised security teams who constantly review and improve our measures to protect your personal data from unauthorised access, accidental loss, disclosure or destruction. Communications over the internet (such as emails) aren’t secure unless they’ve been encrypted. Your communications may go through a number of countries before being delivered, as this is the nature of the internet. We cannot accept responsibility for any unauthorised access or loss of personal data that is beyond our control. We’ll never ask for your secure personal or account information by an unsolicited means of communication. You’re responsible for keeping your personal data and account information secure and not sharing it with others.
8 - No liability for websites of third parties
Certain services of third parties are accessible through links on our site. We refer you to the privacy statements and policies posted on these websites. We do not assume any liability or responsibility for these statements and policies that are not related to our website.
9 - Exercise of the rights of data subjects
According to the GDPR, you have the following rights with regard to your personal data:
- Right to information, Art. 15 GDPR
- Right to rectification, Art. 16 GDPR
- Right to erasure of personal data, Art. 17 GDPR
- Right to restrict the processing, Art. 18 GDPR
- Right to object to the processing, Art. 21 GDPR
- Right to data portability, Art. 20 GDPR
- Right to withdraw consent Art. 7 para. 3 S. 1 GDPR. The withdrawal of consent shall not affect the lawfulness based on consent before its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.
Cookie policy
Our cookie policy
Cookies are tiny text files that are stored on your computer, tablet or mobile phone when you visit a website. The cookies mean that the website will remember you and how you've used the site every time you come back.
Cookies themselves don't hold personal information such as your name or bank details. And in many cases, we won’t be able to link the information we collect by using a cookie back to you. They can, however, help us to find information once you're logged in or help us link your browsing information to you and your personal information, for example, when you choose to register for a service, white paper or newsletter.
How we use cookies
Strictly necessary cookies
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.
These cookies cannot be deactivated/disabled by using any of the functions on this website. Our legal basis for the usage of these cookies is Art. 6.1(f) of the GDPR, our legitimate interest to deliver the website to you.
Performance Cookies
Performance Cookies are non-essential cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.
All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.
Our legal basis for the usage of these cookies is that you have given your consent, Art. 6 Para1 S. 1 lit. a GDPR. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Targeting Cookies
Targeting Cookies are non-essential cookies which may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Our legal basis when we use these Cookies is that you have given your consent, Art. 6 Para1 S. 1 lit. a GDPR. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
| Name | Description | Category | Expiry |
|---|---|---|---|
| __CookieConsentV111 | __CookieConsentV111 cookie is a plugin used to comply with EU guideline. | Strictly necessary | 90 days |
| AWSELB | AWS Classic Load Balancer Cookie: Load Balancing Cookie: Used to map the session to the instance. | Strictly necessary | 1 day |
| AWSALB | AWS Application Load Balancer Cookie: Load Balancing Cookie: Used to map the session to the instance. | Strictly necessary | 1 day |
| AWSELBCORS | AWS Classic Load Balancer Cookie: Load Balancing Cookie: Used to map the session to the instance. Same value as AWSELB. | Strictly necessary | 1 day |
| AWSALBCORS | AWS Application Load Balancer Cookie: Load Balancing Cookie: Used to map the session to the instance. Same value as AWSALB. | Strictly necessary | 1 day |
| AWSALBTG | AWS Application Load Balancer Cookie: Load Balancing Cookie: Used to encode information about the selected target group. | Strictly necessary | 1 day |
| AWSALBTGCORS | AWS Application Load Balancer Cookie: Load Balancing Cookie: h includes the same information as the original stickiness cookie plus this SameSite attribute. | Strictly necessary | 1 day |
| __CookieConsentV300 | __CookieConsentV300 cookie is a plugin used to comply with EU guideline. | Strictly necessary | 180 Days |
| color_variation | color_variation cookie is added to change site color. | Functional | End of session |
| _cfuvid | The _cfuvid cookie is set on a user’s browser to assign them a unique ID in addition to identifying them through their IP address. Without this cookie, visitors to a site will be recognized as the same user if they share the same IP, and any data collected will be shared for all users with that IP. | Strictly necessary | End of session |
| __cf_bm | To read and filter requests from bots. | Strictly necessary | A few seconds |
| cf_clearance | The Clearance Cookie stores proof that a challenge was passed. If present, it prevents issuing the challenge again and is needed to access the origin server. | Strictly necessary | 1 Year |