Skip to content
Vista-Robotics

Privacy policy

This is a translation provided for your convenience. Only the German version is legally binding.

Last updated: October 2026

1) Controller

Thank you for visiting our website. Below we inform you about which personal data we process when you use our website.

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

VISTA Sport GmbH – Division VISTA-Robotics
Neubohlingen 1-1
78315 Radolfzell
Germany
Managing director: Martin Meyer
Email: [email protected]
Phone: +49 7732 823280

2) Overview

  • On your first visit, a cookie banner (Cookiebot) asks whether you consent to statistics and marketing services (section 4). We do not load these services without your consent.
  • With your consent, we use Google Analytics to measure reach (section 5) and the Meta Pixel to measure and deliver our advertising (section 6).
  • You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page. An overview of all cookies can be found in our cookie policy.
  • We serve fonts, images and videos from our own web server; no data is transmitted to font or video providers when you visit the website.
  • Embedded YouTube videos are only loaded when you actively click “Play video” (section 9).

3) Hosting and provision of the website

Our website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare operates a worldwide network of data centres (content delivery network) through which our website is delivered and protected against attacks.

When you visit our website, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page accessed, the amount of data transferred, the previously visited page (referrer) and information about your browser and operating system. This data is required to deliver the website and to ensure its stability and security (e.g. defence against attacks).

The legal basis is our legitimate interest in providing our website securely and efficiently (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR). Data may be transferred to the USA in the process. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists (Art. 45 GDPR); EU standard contractual clauses also apply.

Further information: https://www.cloudflare.com/privacypolicy/

The connection to our website is encrypted using SSL/TLS (recognisable by “https://” and the padlock symbol in your browser).

We use the Cookiebot service to request and manage your consent. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (“Cookiebot”).

When you visit our website, Cookiebot loads the cookie banner. When you make a choice, Cookiebot processes your IP address (truncated), date and time, the page visited, browser information, your choice and a randomly generated consent ID. Your choice is stored in the “CookieConsent” cookie on your device so that we do not have to ask you again on every page; the cookie is deleted after 12 months. Cookiebot stores the consent records on servers in the EU.

The legal basis is our legal obligation to obtain consent and to be able to demonstrate it (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). Storing the “CookieConsent” cookie is strictly necessary for this purpose (Section 25(2) no. 2 TDDDG). We have concluded a data processing agreement with Usercentrics (Art. 28 GDPR).

Further information: https://www.cookiebot.com/en/privacy-policy/

5) Web analytics with Google Analytics

If you have consented to the “Statistics” category, we use Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics helps us understand how our website is used, for example which pages are visited, how visitors find us and how often enquiries are sent. For this purpose, cookies (e.g. “_ga”, “ga*”, stored for up to 2 years) are stored on your device and usage data is processed, in particular pages visited, date and time, origin (referrer), information about device, browser and screen, approximate region and events such as submitting a form or clicking our phone number or email address. We do not transmit the content of your form entries. Google Analytics 4 does not log or store IP addresses. We retain the data for 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future via “Cookie settings”. We have concluded a data processing agreement with Google (Art. 28 GDPR). Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework, and EU standard contractual clauses also apply.

Further information: https://policies.google.com/privacy

6) Marketing: Meta Pixel

If you have consented to the “Marketing” category, we use the Meta Pixel to measure the success of our advertisements, to show them to people who have already shown an interest in our website (remarketing) and to build audiences for our advertising.

Meta Pixel: The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). The Meta Pixel stores cookies (e.g. “_fbp”, stored for up to 3 months) and transmits information such as the page visited, date and time, IP address, browser and device information and events (e.g. “enquiry sent”) to Meta. If you are logged in to Facebook or Instagram, Meta may link this information to your account. We are jointly responsible with Meta for collecting and transmitting the data (Art. 26 GDPR); the agreement can be found at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for any subsequent processing. Further information: https://www.facebook.com/privacy/policy/

Data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework, and EU standard contractual clauses also apply.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future via “Cookie settings”.

7) Contact and spare part enquiries

If you contact us via one of our forms (contact or demo request, spare part enquiry), we process the data you enter, in particular your company, name, email address, telephone number if provided, requested items and your message. Required fields are marked in the form.

Your entries are received by a function on Cloudflare’s servers (see section 3) and forwarded to us as an email. To send this email, we use the Brevo service of Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France (“Brevo”). Brevo processes the form data solely to deliver it to us by email and to send you an automatic confirmation of receipt to the email address you provided. We have concluded a data processing agreement with Brevo (Art. 28 GDPR). Brevo generally processes the data within the EU; where sub-processors in third countries are used, this is done on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses.

Further information: https://www.brevo.com/legal/privacypolicy/

To protect against automated spam submissions, the form contains a field that is invisible to humans and a timestamp. No additional personal data is collected for this purpose and no third-party providers are involved.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at the conclusion or performance of a contract (e.g. a request for a quote, demo or spare part); otherwise, it is our legitimate interest in responding to your enquiry (Art. 6 (1) (f) GDPR).

We delete your enquiry once it has been fully processed, provided that no statutory retention obligations (e.g. for business correspondence under commercial and tax law) prevent this.

8) Contact by email or phone

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your enquiry) to deal with your request. The legal basis and storage period correspond to section 7.

9) YouTube videos (two-click solution)

On some pages, we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

When you visit the page, only a preview image stored on our server is displayed at first; there is no connection to YouTube. Only when you click “Play video” is the video loaded in privacy-enhanced mode (youtube-nocookie.com). In the process, data such as your IP address, the page accessed and technical information about your browser are transmitted to Google; Google may also store information on your device when the video is played. A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework.

The legal basis is your consent, which you give by clicking “Play video” (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future by not playing the video again and deleting the information stored by YouTube in your browser.

Further information: https://policies.google.com/privacy

10) Self-hosted videos and fonts

Videos that do not come from YouTube, as well as the fonts used on the website, are delivered directly from our web server (Cloudflare, see section 3). No connection to external providers takes place.

Our website contains links to websites of other providers. Data is only transmitted to the respective provider once you click on such a link; that provider is solely responsible for its own data processing.

12) Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, simply send a message to [email protected].

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

13) Storage period

We only store personal data for as long as is necessary for the respective purpose or as long as statutory retention periods apply (e.g. generally six to ten years under commercial and tax law). After that, the data is deleted.

14) No automated decision-making

There is no automated decision-making within the meaning of Art. 22 GDPR.

15) Changes to this privacy policy

We adapt this privacy policy whenever our website or the services we use change. The version published here applies in each case.