1. Controller (Art. 4 (7) GDPR)
VEM – Sole Proprietorship
Vitali Esterlein
Sudetenstraße 41, 68642 Bürstadt
Phone: 0176-666-93649
Email: vitali.esterlein@vem-safety.com
2. Collection of personal data
We only collect personal data if you actively provide it. In detail:
a) Contact form
When submitting the contact form, we collect:
- Company name and position
- Name and email address
- Phone number (optional)
- Requested product and platform
- Purpose / message
Purpose: Processing your inquiry and contacting you.
Legal basis: Art. 6 (1) lit. b GDPR (contract initiation), Art. 6 (1) lit. f GDPR (legitimate interest).
b) Registration / user account
When registering for the customer portal, we collect:
- Email address and password (stored encrypted)
- Company name, address, VAT ID (for new companies)
- Or: existing company ID (when joining)
Purpose: Providing the customer portal and license management.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
c) Order process / checkout
When placing an order in the sticker shop, we collect:
- First and last name, email address
- Billing address (street, postal code, city, country)
- Delivery address (if different)
- Company name and VAT ID (optional)
- Phone number (optional)
- Order notes (optional)
Purpose: Order processing, invoicing and shipping.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
d) Customer portal / profile management
In the logged-in area, you can view and edit the following data:
- Email address and company name
- Business address, postal code, city, country, VAT ID
Purpose: Maintaining your account and billing information.
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
3. Server log files
When accessing our website, the hosting provider (IONOS SE) automatically collects the following data in server log files:
- IP address (automatically anonymized by the hosting provider)
- Date and time of access
- Accessed page and referrer URL
- Browser type and operating system
- Transferred data volume and HTTP status code
This data is used exclusively for technical operation, abuse detection, and system security. It is not merged with other data sources. Server log files are deleted automatically after a maximum of 7 days.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in security and stability of the web presence).
4. Proprietary website analytics (first-party)
To improve our offering, we use a proprietary, privacy-friendly analytics system . This system:
- is operated exclusively on our own servers (no third-party provider)
- uses no cookies for tracking purposes
- does not collect personal data such as names, email addresses or IP addresses
- does not share data with third parties (no Google Analytics, no Facebook Pixel, no comparable services)
As part of this analysis, we collect the following anonymized usage data:
- Accessed pages and page titles
- Origin of visit (referrer)
- Browser language setting
- Timestamp of page view
- Interactions such as form submissions, downloads and clicks on pricing buttons
A randomly generated anonymous token in local browser storage (localStorage) is used solely to prevent counting duplicate page views within a session. This token contains no personal data and is not evaluated across servers.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in user-oriented design of the service). Since no personal data is processed and no tracking cookies are set, consent under Section 25 TDDDG is not required.
5. Cookies
This website uses exclusively technically necessary cookies:
- Session cookies for authentication in the customer portal
- Preference cookies for language settings and color theme
Cart data in the sticker shop is stored in browser session storage (sessionStorage) and does not constitute cookies.
No tracking cookies, marketing cookies, or third-party cookies are set.
Legal basis: Section 25 (2) TDDDG (technically necessary cookies do not require consent).
6. Payment processing
For orders in the sticker shop, we use Stripe as payment service provider. The following payment methods are available:
- Credit card (Visa, Mastercard, American Express)
- SEPA Direct Debit
- Apple Pay
- Google Pay
During payment, your payment details (e.g. card number, IBAN) are transmitted directly to Stripe and never stored on our servers. We only receive payment status confirmation and a transaction ID from Stripe.
Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
Privacy information: stripe.com/privacy
Legal basis: Art. 6 (1) lit. b GDPR (contract performance).
7. Data processors
Your data is not passed on to unauthorized third parties. The following data processors are involved in data processing:
- Web hosting & email: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany – Privacy policy
- Payment processing: Stripe Payments Europe, Ltd., Dublin, Ireland – Privacy policy
Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.
8. Storage duration and erasure
Contact form data: Deleted after 90 days if no business relationship is established.
User accounts: Deleted upon request. You can have your account deleted at any time via the portal or by email.
Order data: Retained for at least 6 years (commercial law) or 10 years (tax law) pursuant to Section 257 HGB and Section 147 AO.
Server logs: Deleted after a maximum of 7 days.
9. Security measures
We protect your data through:
- TLS/SSL encryption (HTTPS) for all data transfers
- Encrypted password storage (bcrypt)
- Regular security audits
- Firewall and access controls at server level
10. Data subject rights (Art. 12 et seq. GDPR)
You have the right to:
- Access (Art. 15 GDPR): Which of your data we store
- Rectification (Art. 16 GDPR): Have inaccurate data corrected
- Erasure (Art. 17 GDPR): Have your data erased
- Restriction (Art. 18 GDPR): Restrict processing
- Data portability (Art. 20 GDPR): Receive your data in a machine-readable format
- Right to object (Art. 21 GDPR): Object to processing
Send requests to: vitali.esterlein@vem-safety.com
We respond within 30 days.
11. Data Protection Officer
As a sole proprietorship, we are not legally required to appoint a data protection officer (Section 38 BDSG). For data protection inquiries, please contact: vitali.esterlein@vem-safety.com
12. Complaint to supervisory authority
If you believe that the processing of your data violates the GDPR, you can file a complaint with the competent supervisory authority:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Phone: 0611 1408-0
Website: datenschutz.hessen.de
13. International data transfers
Stripe processes data partly in the USA. Transfers are based on the EU-US Data Privacy Framework and supplementary Standard Contractual Clauses pursuant to Art. 46 (2) lit. c GDPR.
14. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy as needed. Changes will be published on this page.
As of: April 2026
Warum VEM Safety
Our solutions are based on recognized standards and developed for real-world requirements in industry and maintenance.
Normorientiert
Aligned with ISO 45001, OSHA 1910.147 and DGUV Regulation 3 – for traceable LOTO processes.
Lokal & DSGVO-konform
TAG!T works with a local database, 1MRA also works without internet. Your data stays with you.
Everything from a single source
Software, mobile app and printing service work hand in hand – from the data record to the finished sticker on the machine.
Try 30 days for free
Try TAG!T risk-free in your own operation. Then license monthly or yearly.