Privacy policy

Learn how we use your personal information on this website.

The following text is only a translation for your convenience, the binding one is the German version.

1. General explanations in an understandable form

Welcome to Vanillaplan.

This privacy statement informs you about how your personal data is used on this website.

In brief, the following data is collected during a visit to our website:

a) Data about the course of your visit to our website (tracking) for analysis and marketing purposes.

b) Data which you transmit to us when filling out the contact form and the demo form

c) The language setting (as soon as available - only within your browser)

d) When using the demo application, the data entered or data changes as well as some settings preferences (e.g. display options, sorting orders, etc.) are saved. However, these settings and data are only saved during the existing browser session and only within the browser and are lost when the browser is exited or refreshed.

All further information, including instructions on how to avoid the collection of data relating to individual services used, can be found in detail in the sections below. At the very bottom you will also find a button with which you can revoke any permission you may have granted for the collection of data.

2. Automatic data storage

Nowadays, when you visit websites, certain information is automatically created and stored, including on this website.

When you visit our website, as you are doing now, our web server (the computer on which this website is stored) automatically records information such as

a) the address (URL) of the website you are visiting

b) browser and browser version

c) the operating system used

d) the address (URL) of the previously visited page (referrer URL)

e) the host name and IP address of the device from which access is made

f) the date and time

in files (web server log files).

As a rule, web server log files are stored for a fortnight and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed in the event of unlawful conduct.

The legal basis, according to Article 6(1) f DSGVO (lawfulness of processing), is that there is a legitimate interest in enabling the error-free operation of this website by collecting web server log files.

If we detect misuse of the website, such as copyright infringements, unauthorised intrusion into computer systems or other criminal offences, etc., we reserve the right to file charges and to pass this data on to the investigating authorities.

3. Storage of personal data

Personal data that you transmit to us electronically on this website, such as your name, e-mail address, address or other personal details when submitting a form, will only be used by us, together with the time and IP address, for the purpose stated in each case, stored securely and not passed on to third parties.

We therefore only use your personal data for communication with those visitors who expressly wish to be contacted and for processing the services and products offered on this website. We do not disclose your personal data without your consent, but we cannot rule out the possibility that this data may be accessed in the event of unlawful conduct.

If you send us personal data by e-mail - thus away from this website - we cannot guarantee secure transmission and protection of your data. We recommend that you never send confidential data by e-mail without encryption.

According to Article 6(1)(a) GDPR (lawfulness of processing), the legal basis is that you give us consent to process the data you have entered. You can revoke this consent at any time - an informal e-mail is sufficient, you will find our contact details in the imprint.

4. Rights according to the General Data Protection Regulation

According to the provisions of the GDPR and the Swiss Data Protection Act (DPA), you are generally entitled to the following rights:

a) Right to rectification (Article 16 GDPR).

b) Right to erasure ("right to be forgotten") (Article 17 GDPR)

c) Right to restriction of processing (Article 18 GDPR)

d) Right to notification - obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)

e) Right to data portability (Article 20 GDPR)

f) Right to object (Article 21 GDPR)

g) Right not to be subject to a decision based solely on automated processing, including profiling (Article 22 GDPR).

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority at your place of residence, place of work or at the place of the suspected data protection violation.

5. Evaluation of visitor behaviour

In the following data protection declaration, we inform you whether and how we evaluate data from your visit to this website. The evaluation of the collected data is generally anonymous and we cannot draw any conclusions about your person from your behaviour on this website.

You can find out more about ways to object to this analysis of your visit data in the following data protection declaration.

In addition, this page contains an option below to switch off tracking.

6. Data encryption with HTTPS/TSL

This website can only be accessed via HTTPS/TSL, i.e. via data connections that are encrypted as securely as possible according to current knowledge. This ensures that all data is transmitted in an appropriately secured and protected manner. You can recognise this by a small lock symbol at the top left of the browser's address field.

7. Cookies

Our website uses HTTP cookies to store user-specific data. A cookie is a short data packet that is exchanged between the web browser and the web server, but is completely meaningless to the latter and only acquires meaning for the web application, e.g. an online shop, such as the contents of a virtual shopping basket.

There are two types of cookies: first-party cookies are created by our website, third-party cookies are created by other websites (e.g. Google Analytics).

Example cookie data (without guarantee):

Name: _ga

Expiry time: 2 years

Usage: Differentiation of website visitors

Example value: GA1.2.1326744211.152211087416

There are three categories of cookies: strictly necessary cookies to ensure basic website functionality, functional cookies to ensure website performance and goal-oriented cookies to improve the user experience.

We use cookies to make our website more user-friendly. Some cookies remain stored on your terminal device until you delete them. They allow us to recognise your browser the next time you visit.

8. See cookie settings and delete cookies

If you want to see which cookies have been stored in your browser, change cookie settings or delete cookies, you can find this in your browser settings:

Safari: Safari: Manage cookies and website data with Safari.

Firefox: Delete cookies to remove data that websites have stored on your computer.

Chrome: Delete, enable and manage cookies in Chrome

Internet Explorer: Delete and manage cookies

For other browsers, please consult the relevant documentation or built-in help, or use a search engine to find relevant instructions.

If you do not wish data to be stored in cookies, you can set up your browser so that it informs you when cookies are set and you only allow this in individual cases. You can delete cookies that are already on your computer or deactivate cookies at any time. The procedure for doing this varies depending on the browser; it is best to search for the instructions in Google using the search term "Delete Cookies Chrome" or "Deactivate Cookies Chrome" in the case of a Chrome browser or replace the word "Chrome" with the name of your browser, e.g. Edge, Firefox, Safari.

If you generally do not allow us to use cookies, i.e. deactivate them by browser setting, some functions and pages may not work as expected.

9. Privacy policy Google Maps

We use Google Maps from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website.

By using the functions of this map, data is transmitted to Google. The operator of this site has no influence on the processing of the data by Google Inc.

You can find out what data is collected by Google and what it is used for at

10. Privacy policy Google Analytics

We use Google Analytics from Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on this website to statistically analyse visitor data. Google Analytics uses target-oriented cookies for this purpose.

Cookies from Google Analytics

Google Analytics uses the following cookies (no guarantee):

a) _ga (expiry time: 2 years, use: differentiation of website visitors, example value: GA1.2.1326744211.152211087416).

b) _gid (expiry time: 24 hours, usage: differentiation of website visitors, example value: GA1.2.1687193234.152211087416)

(c) gatgtagUA<property-id> (expiry time: 1 minute, use: Used to throttle the request rate - if Google Analytics is deployed via Google Tag Manager, this cookie will be named dcgtm_<property-id>, Example value: 1).

For more information on terms of use and data protection, please visit or

Pseudonymisation of data for Google Analytics

Our concern in terms of the DSGVO is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the user data is pseudonymised. The data processing is carried out on the basis of the legal provisions of § 96 para 3 TKG as well as Art 6 EU-DSGVO para 1 lit a (consent) and/or f (legitimate interest) of the DSGVO.

Deactivation of data collection by Google Analytics

With the help of the browser add-on for deactivating Google Analytics JavaScript (ga.js, analytics.js, dc.js), website visitors can prevent Google Analytics from using their data.

You can prevent the collection of the data generated by the cookie and related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link:

11. Google Analytics Data Processing Addendum

We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting the "Data Processing Addendum" in Google Analytics.

You can find out more about the data processing addendum for Google Analytics here:

12. Google Analytics IP anonymisation

We have implemented Google Analytics IP address anonymisation on this website. This function was developed by Google to enable this website to comply with the applicable data protection regulations and recommendations of the local data protection authorities if they prohibit the storage of the full IP address. The anonymisation or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place.

More information on IP anonymisation can be found at

13. Privacy policy Facebook

We do not currently use any analytics on this website from Facebook, a social media network owned by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

So when you visit our website, no data is transmitted to Facebook unless you click on the Facebook link at the bottom of the website.

The privacy policy, what information Facebook collects and how they use it can be found at

14. Privacy Policy HubSpot

Our login service allows visitors to to learn more about our company Vanillaplan AG, download content and provide their contact information and other demographic information. This information is also stored on servers of our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company's services are of interest to our visitors. All information we collect is subject to this privacy policy. We use all information collected solely to optimise our marketing and outreach efforts.

We use HubSpot for our online marketing activities. This is an integrated software solution that we use to cover various aspects of our online marketing.

These include:

  • Email marketing (newsletters as well as automated mailings, e.g. providing downloads and links).

  • Social media publishing & reporting (Instagram, Facebook etc.)

  • Reporting (traffic sources, hits, etc.)

  • Contact management (user segmentation & CRM etc.)

HubSpot is a software company from the USA with a branch in Ireland.


2nd Floor, 30 North Wall Quay
Dublin 1, Ireland
Telephone: +353 1 5187500

As a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

More information about HubSpot's privacy policy

More information from HubSpot regarding the EU data protection regulations

More information about the cookies used by HubSpot can be found here & here

15. Privacy Policy Product Fruits

For the onboarding of customers and interested parties in our product, we use the cloud-based platform of the company

Product Fruits s.r.o.
Rozdelovska 1999/7
169 00 Prague 6
Czech Republic

User guidance provides you with additional information and assistance in some places while using our service, for example by clicking on certain buttons, so that you can find your way around more easily and understand how our service is operated.

The processing of this data generally takes place in the European Union. In its terms of use, Product Fruits assures compliance with the contractual clauses pursuant to Art. 46 para. 2 GDPR. Further information can be found here:

16. Changes to the data protection declaration

We expressly reserve the right to change, supplement or delete this data protection declaration or parts thereof without special notice.

17. Sources

We have prepared this privacy statement after consulting a number of source texts (not quoted verbatim here) on data protection topics as well as existing data protection statements (also not quoted verbatim) using the data protection generator of in cooperation with and incorporating our own adjustments and additions in good faith and to the best of our knowledge and belief.

18. Revocation option

By clicking on the button below, you can grant or revoke permission to use Google Analytics.

Grant permission