Information on the circumstances under which we collect data from you and the purpose limitation governing its processing.
Last updated: 01.10.2025
We would like to inform you of the circumstances under which we collect data from you and the purpose limitation governing its collection, processing or use. We take the protection of your data very seriously and treat your personal data confidentially and in accordance with the statutory provisions.
The controller responsible for data processing pursuant to Art. 4 No. 7 GDPR, subject to any deviating information provided in this privacy policy, is:
EBCsoft GmbH Brühl 24 04109 Leipzig Phone: +49 (0) 341 256683-0 E-mail: info@vitricon.com
Each time a file is retrieved, our web server collects log information about these processes (e.g. browser type, operating system, IP address). It is not possible for us to attribute the recorded data to a specific natural person. The data collected is used solely for statistical analysis and for improving the website. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
We store personal data that you have provided to us voluntarily (e.g. in the case of enquiries or online applications) only for as long as it is needed to fulfil the purposes for which this data was transmitted, or for as long as required by law. We will not disclose the personal data we collect from you to third parties without your express consent.
We are part of the Kreutzpointner group of companies. This group consists of legally independent companies with a uniform range of services and different regional and supra-regional orientations. Within this group of companies in particular, the protection of personal data is an important corporate principle. This is achieved through training, communication and the written commitment of all employees and external service providers to data confidentiality and compliance with data protection requirements.
For applications we use the applicant portal of the Kreutzpointner group of companies. By submitting your application to the Kreutzpointner group of companies, you agree that the personal data you provide may be stored, processed and forwarded to the responsible HR department for internal use in connection with our application process and the related activities involved in processing applications, in compliance with all data protection provisions. This also applies if no employment relationship is established. Further information can be found in the data protection notices for applicants (kreutzpointner.de).
However, we have no influence over the data transmission route and security on the internet. Please take this into account when deciding whether to transmit information to us via the internet.
When you contact us (e.g. via contact form, e-mail, telephone or social media) as well as within the framework of existing user and business relationships, the details provided by the enquiring persons are processed to the extent necessary to respond to the contact enquiries and any requested measures. In doing so, your first and last name, your enquiry and your e-mail address are recorded and used. Further details are optional and are used within the scope of our legitimate interest (Art. 6 (1) sentence 1 lit. f GDPR). Your consent to the processing of the data is obtained as part of the submission process, with reference made to this privacy policy. Disclosure to third parties is excluded.
This website is hosted by an external service provider. The personal data collected on this website is stored on the servers of the hosting provider. This may involve, in particular, IP addresses, contact enquiries, meta and communication data, contract data, contact data, names, website access data and other data generated via a website. The hosting provider is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of the secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). Our hosting provider will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.
We use the following hosting provider:
Neue Medien Münnich Hauptstrasse 68 02742 Friedersdorf
Cookies are small text files stored on your device when you visit a website. We distinguish two cases:
Technically necessary cookies enable the basic functions of the website and the submission of forms. They are required for operation; the legal basis is Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.
All other cookies and comparable technologies – in particular for audience measurement – are used solely with your consent (Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG). On your first visit you receive a notice with a choice. As long as you do not consent, the services concerned are not loaded. Your decision is stored locally in your browser; you can change or withdraw it at any time via the Cookie settings link at the bottom of the page. The lawfulness of processing carried out until withdrawal remains unaffected.
Where data is processed in a third country (i.e. outside the European Union or the European Economic Area), or where processing takes place within the framework of using third-party services (e.g. Microsoft, Google, etc.), or where data is transferred to other persons or companies, this only occurs in accordance with the statutory requirements. In the case of your express consent or a contractual or legal obligation to transfer the data, the data is only processed in third countries that demonstrate a recognised level of data protection. This is ensured either through the standard contractual clauses of the EU Commission, through the presentation of certifications, or within the framework of the EU-US Data Privacy Framework (DPF). Through the DPF, the level of data protection for certified companies from the USA has been recognised by the EU Commission. Below you can see which of the services we use fall under the DPF and are classified as secure.
When using our web application and our mobile applications, the following personal data is processed:
The data processing is carried out for:
The data is not used for advertising purposes, not disclosed to third parties, and no tracking or analysis tools are used by EBCsoft GmbH.
The data processed within the scope of our application is stored for the duration of the respective construction, plant or property management project. After completion of the project, the data is retained for an additional period of five years in order to be able to fulfil any subsequent claims, maintenance or legal obligations. Thereafter, the data is deleted or anonymised in accordance with the statutory requirements. Should a longer retention period be prescribed by law, the storage period is governed by those provisions.
The collection of certain data is technically necessary for the operation of the app. An objection is therefore only possible with regard to voluntarily transmitted data.
We use social networks for marketing purposes. LinkedIn is used for this purpose. Please note our separate privacy policies in this regard: Privacy policy for the use of LinkedIn
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for the data processing ceases to apply. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place after these grounds no longer apply.
We use Google Tag Manager to manage the analytics services used on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself does not collect personal data and does not set cookies; it serves solely to deliver other services. It is only loaded after you have given the corresponding consent.
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse the use of this website on a pseudonymised basis. This covers in particular the pages viewed, time spent, the source of the visit, submitted forms and technical details of browser and device. Your IP address is processed in truncated form and is not stored permanently; it is not combined with other data held by Google. The “Google Signals” feature is disabled and the retention period for usage data is limited to 14 months.
The purpose of the processing is the statistical evaluation of website usage in order to improve our content and our offering. The sole legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. Without your consent, Google Analytics is not loaded and no connection to Google is established. You may withdraw your consent at any time via the cookie settings at the bottom of the page; the lawfulness of processing carried out until withdrawal remains unaffected. A transfer of data to the USA cannot be ruled out; the basis for this is the EU-US Data Privacy Framework, under which Google LLC is certified. Further information: https://policies.google.com/privacy.
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement. Should data be transferred to the third country USA in this context, the basis for this is the EU-US Data Privacy Framework.
Videos from the YouTube platform operated by Google are embedded on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The videos are not loaded automatically. When you open a page you initially see only a preview image served from our own server – no connection to YouTube is established at that point. Only when you start a video by clicking on it is the player loaded in privacy-enhanced mode (youtube-nocookie.com) and a connection to Google’s servers established. Google then receives your IP address and further technical data. If you are logged into your YouTube account at that time, Google may associate the playback with your account; you can prevent this by logging out beforehand.
The purpose is to present product and information videos about our services. The legal basis is Art. 6 (1) (f) GDPR; clicking the preview image is your deliberate decision to load the video. Further information: https://policies.google.com/privacy.
We use Zoho CRM on this website. The provider is Zoho Corporation Pvt. Ltd., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter “Zoho CRM”). Zoho CRM enables us, among other things, to manage existing and potential customers as well as customer contacts and to organise sales and communication processes. The use of the CRM system also enables us to analyse and optimise our customer-related processes. The customer data is stored on Zoho CRM’s servers. Details on the functions of Zoho CRM can be found here: https://www.zoho.com/de/crm/help/getting-started/key-features.html.
The use of Zoho CRM is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the most efficient possible customer management and customer communication. Insofar as corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
The data transfer to third countries outside the European Union is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.zoho.com/privacy/dpa/DPA_zoho_com.pdf. Should data be transferred to the USA, the EU-US Data Privacy Framework is the basis for this. For details, please refer to the Zoho CRM privacy policy: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.
This website uses Zoho Campaigns for sending newsletters. The provider is Zoho Corporation Pvt. Ltd., Estancia IT Park, Plot No. 140 151, GST Road, Vallancherry Village, Chengalpattu Taluk, Kanchipuram District 603 202, India (hereinafter “Zoho Campaigns”). Zoho Campaigns is a service that can be used, among other things, to organise and analyse the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Zoho Campaigns’ servers.
With the help of Zoho Campaigns, we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way, we can, among other things, determine which links were clicked particularly often. In addition, we can recognise whether certain previously defined actions were carried out after the message was opened/clicked (conversion rate). For example, we can recognise whether you made a purchase after clicking on the newsletter. If you do not want any analysis by Zoho Campaigns, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.
Zoho Campaigns also enables us to divide (“cluster”) newsletter recipients according to various categories. Newsletter recipients can be divided, for example, by age, gender or place of residence. In this way, the newsletters can be better tailored to the respective target groups. If you do not want any analysis by Zoho Campaigns, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.
Detailed information on the functions of Zoho Campaigns can be found at the following link: https://www.zoho.com/campaigns/features.html. The privacy policy of Zoho Campaigns can be found at: https://www.zoho.com/privacy.html and https://www.zoho.com/gdpr.html.
The data processing is carried out on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke this consent at any time with effect for the future. The EU-US Data Privacy Framework is the basis for the data transfer to the USA.
This website uses Brevo for sending newsletters. The provider is Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo is a service that can be used, among other things, to organise and analyse the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany. If you do not want any analysis by Brevo, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.
Data analysis by Brevo
With the help of Brevo, we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message was opened and whether links, if any, were clicked. If you do not want any analysis by Brevo, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message. Detailed information on the functions of Brevo can be found at the following link: https://www.brevo.com/de/.
Where necessary, we have concluded data processing agreements (DPAs) with the providers mentioned above. This is a contract prescribed by data protection law which ensures that the contracting partner may only process the personal data of our website visitors and the like in accordance with our instructions and in compliance with the GDPR.
This statement is dated 01.09.2023. In view of the ongoing technical developments in the field of IT technology and IT law, we reserve the right to make additions or changes to this privacy policy.
Under the EU General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR). Should incorrect personal data be processed, you have a right to rectification (Art. 16 GDPR). If the statutory requirements are met, you can request the deletion or restriction of the processing as well as lodge an objection to the processing (Art. 17, 18 and 21 GDPR). If you have consented to the data processing or a contract for data processing exists and the data processing is carried out by means of automated procedures, you may, where applicable, have a right to data portability (Art. 20 GDPR).
Should you wish to exercise your aforementioned rights, we will check whether the statutory requirements for this are met. To exercise your rights, please contact the company data protection officer (datenschutz[at]kreutzpointner.de).
As a data subject, you have the right, under the conditions of Article 57 (1) lit. f of the General Data Protection Regulation, to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for us is:
Sächsische Datenschutz- und Transparenzbeauftragte Maternistraße 17 01067 Dresden Phone: +49 351 85471-101 E-mail: post[at]@sdtb.sachsen.de
You can contact the data protection officer at any time regarding all matters of data protection relating to the Kreutzpointner group of companies at datenschutz[at]kreutzpointner.de.
Test free of charge
Basic website functions and form submission. Cannot be disabled.
Google Analytics 4 for pseudonymised analysis of website usage, delivered via Google Tag Manager. Nothing is loaded without your consent.