1. Data controller
The controller responsible for processing data on this website is
VIA X Mobility and Commerce UG (haftungsbeschränkt)
Manderscheidtstraße 76–78
45141 Essen
Germany
Phone: +49 (0)201 85784560
Email: info@viaxmobility.com
2. General information on data processing
Protecting your personal data is important to us.
We process personal data only in accordance with applicable law, in particular the General Data Protection Regulation (GDPR) and national data protection legislation.
Personal data means any information relating to an identified or identifiable natural person.
This privacy policy explains the nature, scope, purposes and legal bases of the processing of personal data in connection with the use of our websites.
3. Legal bases for processing
Personal data is processed on the following legal bases:
- Article 6(1)(a) GDPR (consent)
- Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract)
- Article 6(1)(c) GDPR (legal obligation)
- Article 6(1)(f) GDPR (legitimate interests)
Our legitimate interests include providing our websites securely, reliably and efficiently, preventing misuse and handling enquiries.
4. Website hosting and delivery
Our websites are hosted by Wix.com Ltd., 5 Yunitsman St., Tel Aviv, Israel.
Wix provides the technical infrastructure, hosting services, content delivery networks, databases and security functions.
Use of this service may involve processing the following data:
- IP address
- Technical usage data
- Browser and device information
- Dates and times of access
- Log files
This data is processed to ensure that the websites operate securely and reliably.
Legal basis: Article 6(1)(f) GDPR.
Israel is covered by an adequacy decision of the European Commission under Article 45 GDPR.
5. Log data (server log files)
When you visit our websites, the hosting provider automatically collects information.
This includes:
- IP address
- Date and time of the request
- Browser type and version
- Operating system
- Referrer URL
- Pages visited
Log data supports technical delivery, security and error analysis. Information about Wix’s service providers and data processing is available in the Wix privacy policy.
Legal basis: Article 6(1)(f) GDPR.
6. Cookies, storage and external content
VIA X uses Wix for hosting and retrieving CMS content. Cookies and local storage support operation and security and remember your settings. We distinguish necessary storage from external content that you choose to enable.
Necessary storage
- viax-consent-v2 (VIA X, browser local storage): stores your choice, timestamp, language and notice version. Your choice is respected for up to 180 days.
- viax-language (VIA X, session storage): remembers the selected language for newsletter confirmation pages during this tab’s session.
- sec-fetch-unsupported (Wix, session cookie): records browser limitations relevant to security features.
- __cf_bm (Cloudflare, used by the hosting infrastructure): protects against automated abuse and expires after 30 minutes of inactivity.
- wix-session-… (Wix CMS, browser local storage): contains technical visitor access tokens for retrieving articles and legal content. Tokens are renewed when needed; the storage entry remains until deleted by the browser.
These functions are not used for optional visitor analytics or advertising. Where storage or access is strictly necessary to provide the website functions you explicitly request, it is based on section 25(2)(2) TDDDG. Related personal data processing is based on Article 6(1)(f) GDPR; our legitimate interest is in secure operation, delivering content and respecting your settings.
Your choice about external content
Brevo newsletter forms including Google reCAPTCHA and Calendly appointment booking are loaded only after you enable the respective service. Until then, no connection to these embeds is established. Both optional services are initially disabled and can be enabled separately. Loading shares technical data, including your IP address and browser and device information, with the providers; cookies and processing in the United States are possible. Further information about these services is provided in sections 8, 10 and 11.
Our own consent banner lets you accept all optional services, reject all or save individual choices. You can change or withdraw your choice at any time using “Cookie settings” in the footer. Saved choices remain effective on return visits in the same browser for up to 180 days, unless browser storage has been deleted. The decision is stored locally only; no external consent management system is integrated. Withdrawal does not automatically delete data or cookies already held by the provider.
The legal basis for optional activation is Article 6(1)(a) GDPR and, where consent is required for device access, section 25(1) TDDDG. Withdrawal does not affect the lawfulness of processing before withdrawal.
Changes to your choice are synchronised between open tabs of the same website address in this browser. Withdrawal removes the relevant embeds; a loaded calendar may require one page reload. This cannot undo data already transmitted. We cannot delete cookies or storage on other domains; use your browser settings or contact the provider for that purpose. Separate browser profiles and other devices are not synchronised automatically.
7. Use of the website
We have not configured additional marketing pixels or visitor analytics scripts for this website. Technical data needed for hosting, operation and security is processed as described above.
8. Newsletters (Brevo)
You can subscribe to the following newsletters on our websites:
- YOUR TURN
- TOGETHER
We use Brevo to provide the forms and send newsletters. Provider information: Brevo privacy policy.
Data processed:
Required information:
- Email address
Optional information:
- First name
- Company name (TOGETHER only)
We use your email address to send your selected newsletter with news, offers and information about VIA X or VIA X CONNECT. The legal basis is your consent under Article 6(1)(a) GDPR. Optional information is used to personalise communications. You can withdraw your consent at any time using the unsubscribe link in the newsletter. Enabling the embedded form in the cookie settings is separate from subscribing to the newsletter; it does not subscribe you.
9. Double opt-in process
Subscriptions use a double opt-in process. The following information is stored as evidence:
- Time of subscription
- Time of confirmation
- IP address
Legal basis: Article 6(1)(a) GDPR.
10. Form protection
The embedded Brevo forms use Google reCAPTCHA to prevent automated abuse. These embeds are loaded only after you enable Brevo. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, may process your IP address, device information and interaction data. Optional loading is based on the consent described in section 6. Further information: Google privacy policy.
11. Appointment booking and recipients
We use Calendly LLC for appointments with VIA X CONNECT. The calendar loads only after you enable it. When booking, Calendly processes the contact details you enter, your selected appointment, time zone and any other information you choose to provide. We use this information to arrange your appointment and handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries or otherwise Article 6(1)(f) GDPR, based on our interest in handling your enquiry.
Calendly may also process data in the United States. Its own cookie settings remain available within the calendar. Information about processing and transfer safeguards is provided in Calendly’s privacy notice. You can alternatively contact us by email or telephone.
Recipients include Wix and its infrastructure and security providers for hosting and CMS, Brevo for forms and newsletters, Google for reCAPTCHA, and Calendly for appointment booking. A connection transmits at least your IP address to the service even without cookies. Enabling a service in our cookie settings neither subscribes you to a newsletter nor books an appointment.
Our social media profiles are linked only. No embedded feed or social media pixel is loaded when you visit this website. You visit the respective provider’s service only when following a link.
12. Transfers to third countries
Using international service providers can involve processing outside the EU and EEA. An EU office or data centre does not in itself exclude access from other countries.
- Wix: Its data location information lists the USA, Ireland, South Korea, Taiwan and Israel among possible locations. The adequacy decision mentioned in section 4 concerns Israel; it does not cover every other processing location.
- Brevo: According to its published information, databases are hosted in France, Germany and Belgium. This statement about storage locations does not guarantee that every processing operation takes place exclusively in the EU.
- Calendly: Calendly describes processing in the USA in its privacy notice.
- Google: Google describes international processing and its transfer mechanisms in its data transfer information.
These links provide the respective providers’ information. You can request information on the transfer grounds applicable to your data and, where applicable, a copy of the relevant safeguards at info@viaxmobility.com.
13. Retention periods
We retain personal data only for as long as necessary to fulfil the relevant purposes or as required by statutory retention periods.
Your data is used to send the newsletter until you unsubscribe. We then stop sending it to you. Where necessary, a suppression record and evidence of consent are retained to respect your unsubscribe request and demonstrate that previous mailings were lawful. The legal basis is Article 6(1)(f) GDPR, reflecting our interest in preventing unwanted mailings and documenting lawful sending.
Cookie decision: The locally stored decision is honoured for no more than 180 days after your last selection. Optional services then remain disabled until new consent is given. If you do not visit again, the entry itself may remain in your browser longer; you can delete it in your browser settings. Section 6 lists the durations of the other described browser storage. These durations are separate from providers’ server-side retention periods.
14. Data security
We use technical and organisational security measures to protect personal data against manipulation, loss or unauthorised access.
Data is transmitted in encrypted form (HTTPS).
15. Your rights as a data subject
You have the following rights:
- Access under Article 15 GDPR
- Rectification under Article 16 GDPR
- Erasure under Article 17 GDPR
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Objection under Article 21 GDPR
You have the right to lodge a complaint with the competent supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Your right to object (Article 21 GDPR)
Processing based on legitimate interests: You may object at any time on grounds relating to your particular situation where we process your data under Article 6(1)(f) GDPR, including the legitimate interests described in this policy. The same right applies to processing under Article 6(1)(e) GDPR; we do not rely on that ground for the website processing described here.
Following your objection, we stop the processing concerned unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims.
Direct marketing: You may object at any time, without giving a reason, to processing your data for direct marketing, including related profiling. We will then stop processing your data for those marketing purposes.
How to contact us: An informal message to info@viaxmobility.com is sufficient; you can also use the contact details in section 1. Objecting to processing is distinct from withdrawing consent. Section 16 also applies to consent withdrawals.
16. Withdrawal of consent
You may withdraw your consent at any time with effect for the future, for example via the cookie settings or the unsubscribe link in the newsletter.
17. Changes to this privacy policy
We reserve the right to amend this privacy policy to ensure that it continues to meet current legal requirements.