The English version of our privacy policy is for transparency purposes only. If the English version differs from the German version, the contents of the German version apply.

I. General information on data protection & rights of those affected

§1 General information

Data protection is an important topic. In the following, we provide information on the collection and processing of personal data. Personal data is all data that can be related to you personally.

Data controller according to Article 4 Paragraph 7 GDPR

Vivamo GmbH

Herner Straße 299 | B29

44809 Bochum

Phone: +49 (0) 234 911799 0

Fax: +49 (0) 234 911799 10

E-Mail: office@viviamo.de

Data Protection Officer

You can reach our company's personally appointed data protection officer at the following address:

Mr. Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

If you have any questions about processing, security or a request for information, you can contact them directly.

§2 General Overview of data and processing operations

We want to offer you the required clarity in accordance with Art. 12 GDPR. Therefore, the following overview of the processing:

Types of data processed:

-    Usage Data or communication data (when accessing a website, IP address, device information, access time and access time, etc.)

-    contact details when registering or entering data

-    Inventory data (name, company, address)

-    Communication data (if applicable meta data about calls, emails)

-    Content data (especially when sending emails)

In addition (internal) the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the areas of offers and contracts, service and marketing, direct advertising and customer care:

-    Contract data

-    Inventory data of the Customers (CRM)

-    Supplier data

-    Payment details

-    Order data and invoice data

Data subjects (categories)

-    Users of this website (also called visitors)

-    Customers

-    suppliers

Purposes

-    Operating the website and providing the information

-    Ensuring the operation of the website and our systems (e.g. firewall)

-    Communication with our customers

-    Responding to inquiries

-    Optimization and analysis of the website

-    Providing information to our (potential) customers

§3 Your rights

You have the following rights towards us regarding personal data relating to you:

Short:

-    right to right of access to personal data,

-    Right to rectification or deletion,

-    Right to restriction of processing,

-    Right to object to processing,

-    Right to data portability,

-    Right to complain to the data protection supervisory authority about our processing of your personal data.

Detailed rights:

-    in accordance with Art. 15 GDPR right to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about its details;

-    in accordance with Art. 16 GDPR immediately to request correction of your personal data stored by us be incorrect;

-    in accordance with Art. 17 GDPR to request deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

-    in accordance with Art. 18 GDPR to request limitation of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

-    in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transmission to another person responsible;

-    In accordance with Art. 7 Para. 3 GDPR, you can widthdraw us your consent at any time. This means that we are no longer allowed to continue the data processing based on this consent in the future

in accordance with Art. 77 GDPR to complain to the supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our office.

Exceptions:

There is no right to deletion if processing is necessary

-    to exercise the right to freedom of expression and information;

-    to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;

-    for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR;

-    for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Para. 1 GDPR, insofar as the law referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or

-    to assert, exercise or defend legal claims

§4 General legal bases

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

II. Website

§5 General information

General data when accessing the page

If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server in order to show you our website and to ensure stability and security. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

Log files

The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that it is no longer possible to assign the calling client.

Cookies

In addition to the data mentioned above, cookies may be stored on your computer when you use our website.

We use technically necessary cookies for the purposes of security and the technical implementation of the website. The processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR (legitimate interest).

These cookies are usually deleted after logging out or when closing the browser.

We also use cookies to analyze user behavior or for marketing purposes.

These cookies are deleted after a specified period of time.

Unless otherwise stated in this data protection declaration, processing takes place on the basis of Article 6 Paragraph 1 Letter f of the GDPR (legitimate interest). Otherwise on the basis of consent in accordance with Article 6 Paragraph 1 Letter a GDPR

You can delete the cookies stored on your computer at any time in the browser settings.

You can also configure your browser so that it either deletes cookies when you close the browser or generally rejects cookies.

We would like to point out that you may not be able to use some functions of our website properly without cookies.

§6 Contact form and email contact

There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent, the following data is also stored:

-    The user's IP address

-    Date and time of registration

Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, response) on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest) or on the basis of Art. 6 Para. 1 lit. b GDPR ( Fulfillment of a contract or pre-contractual measures).

The data will be deleted if it is no longer needed to fulfill the processing purpose.

§7 Newsletter

We offer a newsletter that you can subscribe to on our site.

We process your email address for the purpose of sending the newsletter. Optionally, you can also provide voluntary information about your name and title. We process this data for the purpose of personal contact.
We only send the newsletter with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can revoke your consent to receive the newsletter at any time. You can revoke your consent by clicking on the link provided in every newsletter email.

We would like to point out that we evaluate your user behavior when we send the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests.

Mailgun

We use the service provider Mailgun to send newsletters. The provider is Mailgun Technologies Inc., 112 E Pecan St. #1135, San Antonio, TX 78205 (USA).

Mailgun is a service that, among other things, can be used to organize and analyze the sending of newsletters. Your data is stored on servers in the EU. However, it is possible that data will be transferred to the USA. The transfer takes place on the basis of Art. 46 Para. 2 lit. c GDPR (standard data protection clauses).

III. Social Media

We are also present on social media. However, we do not integrate any platform directly. If you click on the icons of the corresponding portals, the usage and data protection regulations of the respective portals apply.

At no time is there an obligation to register with one of these portals for information purposes or to contact us (the provider). There are various options for contacting you (telephone, email, contact form). If you interact with us on these platforms, we process the resulting data on the basis of Article 6 Paragraph 1 Letter b GDPR (performance of a contract or pre-contractual measures) or Article 6 Paragraph 1 Letter f GDPR (Legitimate Interest).

§8 Meta (Facebook & Instagram)

Below we provide information about the collection and processing of personal data on the social media platforms Facebook and Instagram.

This information applies to all content on our fan page on the social media platform Facebook and Instagram.

Responsible person according to Article 4 Paragraph 7 GDPR

We, the body named as responsible in this data protection declaration, are partly responsible for the collection and processing of personal data

and partly the platform operator Meta Platforms Ireland Ltd. ("Meta").

Information about the processing operations

a) Processing by Meta

Meta collects and processes some of your personal data as an independent controller. We have no influence on these processing operations.

Further information and contact details can be found in Facebook's data policy (https://www.facebook.com/privacy/explanation) and Instagram (https://help.instagram.com/519522125107875)

b) Joint responsibility, Art. 26 GDPR

We have worked with Meta Platforms Ireland Ltd. concluded a contract for joint responsibility in accordance with Art. 26 GDPR.

Meta creates so-called “page insights” for fan page operators. Page insights are information about how users use or interact with our fan page. There is joint responsibility for this processing.

The processing is carried out for the purpose of optimizing the fan page on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest).

Information about the recipients or the categories of recipients, the storage period or the criteria for determining the storage period, as well as the possibility of exercising your rights can be found in the data policy of the respective platform.

c) Processing carried out by us

Processing purposes:

We process your personal data for the following purposes:

-       Operating the fan page

-       Providing information (e.g. about products, services, etc.)

-       Communication with our customers

-       Responding to inquiries

-       Optimization and analysis of the fan page

Legal basis:

The processing for the above-mentioned purposes is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR (legitimate interest) or Article 6 Paragraph 1 Letter b of the GDPR (fulfillment of a contract or pre-contractual measures).

Recipients / categories of recipients:

Your data will be processed and made available at the necessary points within the responsible body.

Furthermore, depending on how you interact with our pages, some data may be published (e.g. comments, “likes”, images, videos, etc.). This data may be visible to other users of our fan page.

Storage period:

Data that you have published (e.g. comments, likes, images, videos, etc.) will remain indefinitely unless you or we delete this data. We reserve the right to delete public content if this is necessary (e.g. in the case of illegal content).

All further data will be deleted unless it is no longer required to fulfill the processing purposes for which it was collected.

We have no influence on the deletion of data by Meta. Please refer to each platform’s data policy for more information.

IV. Applications

§9 Applications

Purposes and legal basis of processing

We process your applicant data for the purpose and as part of the application process and to find a suitable position in the company in accordance with the legal requirements. Your data is processed to fulfill our (pre-)contractual obligations as part of the application process within the meaning of Article 6 Paragraph 1 Letter b. GDPR Art. 6 Para. 1 lit. f. GDPR if the data processing is necessary for us, for example in the context of legal proceedings.

We only process the data you provide. The necessary applicant data can be found in the respective advertisements. These include, for example: B. the information on personal master data, contact details, career, qualifications and the documents associated with the application, such as cover letter, CV and certificates. In addition, you may sometimes and voluntarily provide us with additional information. By submitting the application to us, applicants agree to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this data protection declaration. If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily communicated as part of the application process, their processing will also take place in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). . If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are requested from applicants as part of the application process, their processing will also take place in accordance with Art. 9 Para. 2 lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession are).

Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR (consent), provided you have given us your consent. Your consent is voluntary and can be revoked at any time by email. Failure to grant consent has no impact on the ongoing application process.

Transfer of data (recipient)

Your data will be processed and made available at the necessary points within the responsible bodies. In the course of defending legal claims, your data may be passed on to third parties.

Storage period

If the application is successful, the data provided by the applicants can be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted.

Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The deletion will take place, subject to a legitimate revocation by the applicant, after a period of six months has elapsed so that we can answer any follow-up questions about the application and meet our obligations to provide proof under the Equal Treatment Act (AGG). Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

If you have given us your consent to the processing, we will delete your data if you revoke your consent or the data is no longer required to fulfill the purpose of processing or to defend against possible legal claims.

V. Status of the data protection declaration

The privacy policy is occasionally adjusted to reflect changes in business processes and legal aspects. You can always find the most current status on the website.

Stand: February 2024