Privacy notice for the chemical compatibility tool
Last updated: Oktober 2026. This notice applies to the online tool "chemical compatibility tool" at this address. Our website's general privacy policy applies in addition.
1. Controller
VIPTech GmbH
Lessingstraße 12
72663 Großbettlingen, Deutschland
Geschäftsführer: Sabine Zimmermann, Ralf Zimmermann
Telefon: +49 7022 948735 · Fax: +49 7022 948636
E-Mail: info@viptech.net
For any data protection questions and to exercise your rights, you can reach us at info@viptech.net.
2. Overview
The chemical compatibility tool is a free tool for professional users to check the chemical resistance of the materials used in Versamatic diaphragm pumps. A user account is required. Each sign-in provides 20 queries; after that, a new sign-in is needed. We process only the data required for the account, the queries and abuse protection, and – only with your consent – your contact details for technical follow-up.
We use no analytics, tracking or advertising services, embed no third-party content (the fonts are also hosted on our own server) and make no automated decisions within the meaning of Art. 22 GDPR.
3. Registration and user account
Data: name, company, email address, password (stored only as an irreversible hash), optionally phone number; the time of registration, email confirmation and activation.
Purpose: providing access to the tool, assigning the queries, communication about the account (confirmation and password emails). We need company and name because the offering is aimed at commercial users.
Activation: every registration is reviewed and manually activated by our team. For this we send your details, after you confirm your email address, by email to our sales team (anfrage@pumpenagent.de). We inform you by email of activation or rejection. In the event of rejection we delete your data immediately.
Legal basis: Art. 6(1)(b) GDPR (usage agreement for the free tool). Without this information (except the phone number) use is not possible.
Storage period: until the account is deleted. You can delete your account yourself at any time under "My account". Accounts into which no one has signed in for 24 months are deleted automatically.Unconfirmed registrations are deleted automatically after 7 days.
4. Email confirmation and password reset
After registration we send a confirmation link (valid 48 hours), and on request a link to reset your password (valid 1 hour). This ensures the address belongs to you (Art. 6(1)(b) and (f) GDPR; legitimate interest: protection against misuse of other people's addresses). The links are stored only as a hash and become invalid after use or expiry.
5. Use of the compatibility tool
Data: the medium you selected per query, the time, and the number of queries per sign-in and in total.
Purpose: running the query on our server, enforcing the quota of 20 queries per sign-in, protecting the compatibility database against automated extraction, improving the tool, and technical support when you contact us with questions about your queries.
Legal basis: Art. 6(1)(b) GDPR (performing the query) and Art. 6(1)(f) GDPR (legitimate interest in abuse protection and further development of the tool).
Storage period: the log of queried media is deleted automatically after 12 months, at the latest when the account is deleted. We do not store the query results themselves.
6. Contact by us (only with consent)
If you agree during registration or later under "My account", we may contact you by email or phone about your queries and about matching products and spare parts from VIPTech. For this we use your account data and your query log.
Legal basis: your consent, Art. 6(1)(a) GDPR. The consent is voluntary; you can use the tool fully without it. You can withdraw it at any time with effect for the future – under "My account" or by email to info@viptech.net. We store when you consented in order to be able to demonstrate it.
7. Sign-in, security and abuse protection
Data: the time of each sign-in, the IP address at sign-in, the number of queries in the sign-in; for failed sign-in, registration or password requests, the entered email address or the IP address.
Purpose: protecting your account against password guessing, limiting mass registrations, detecting abuse.
Bot security check: during registration and password reset, your browser automatically solves a small computational task. This happens entirely on our server and in your browser – without third parties, without cookies and without additional personal data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security of the service).
Storage period: IP addresses of sign-ins are deleted after 30 days, entries on failed attempts after 24 hours. A sign-in ends after 20 queries, on sign-out, or at the latest after 12 hours.
8. Cookies and browser storage
We use solely a technically necessary session cookie (sdxsess). It contains a random identifier, keeps you signed in and protects forms against cross-site access (CSRF). It is deleted when you close the browser. The legal basis for storing it is Section 25(2) no. 2 TDDDG (strictly necessary for the service you requested), and for the processing Art. 6(1)(b) GDPR.
So that your inputs are retained after a new sign-in, the page stores the last entered form values in your browser's local storage (localStorage). These values stay on your device and are not transmitted from there to us – only the inputs you submit by clicking "Calculate" reach us. You can remove them at any time via the browser settings ("Clear site data"). The legal basis is Section 25(2) no. 2 TDDDG.
A cookie banner is therefore not required.
9. Server logs
When each page is called, our web server processes, for technical reasons, the IP address, date and time, the address called, the browser type and the amount of data transferred. This is necessary for delivering the page and defending against attacks (Art. 6(1)(f) GDPR). These logs are deleted or anonymised by the hosting provider according to their periods, usually after a few days to weeks.
10. Recipients
The data is stored on servers of our hosting provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. Emails (confirmation, password) are sent via our hosting provider's mail server. These providers process the data exclusively on our behalf and according to our instructions; data processing agreements under Art. 28 GDPR are in place with them. The processing takes place exclusively in the European Union or the European Economic Area; no transfer to third countries occurs.
Within VIPTech, only the employees who handle your requests or maintain the tool have access. No disclosure to the manufacturer or other third parties takes place, unless you expressly wish it (e.g. for a technical enquiry to the manufacturer) or we are legally obliged to do so.
11. Overview of storage periods
| Data | Deletion |
|---|---|
| Account data (name, company, email, phone, password hash) | on deletion of the account; automatically after 24 months without sign-in |
| Unconfirmed registrations | after 7 days |
| Rejected registrations | immediately |
| Query log (inputs) | after 12 months, at the latest with the account |
| IP address at sign-in | after 30 days |
| Failed sign-in attempts | after 24 hours |
| Consent to contact (timestamp) | on withdrawal or with the account |
| Session cookie | when the browser is closed; sign-in ends at the latest after 12 hours |
| Form values in the browser (localStorage) | by you via the browser settings |
Statutory retention obligations (e.g. for later orders) remain unaffected; they do not concern the data of this tool.
12. Your rights
You have the right to
- access to your stored data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdrawal of a consent with effect for the future (Art. 7(3) GDPR).
Under "My account" you can view your data, download it as a file, change your consent and delete your account with all data. For anything further, an email to info@viptech.net is sufficient.
Right to lodge a complaint: you can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35, 70191 Stuttgart
Telefon: 0711 615541-0 · E-Mail: poststelle@lfdi.bwl.de
www.baden-wuerttemberg.datenschutz.de
13. Security
The connection is encrypted via TLS (HTTPS). We store passwords only as a hash, and confirmation and reset links only as a hash with short validity. The compatibility database is located exclusively on the server.