Skip to main content

Privacy policy

With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as ‘data’).

I. Data Controller

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

MIVO mitarbeitervorteile GmbH
Rather Straße 25
40476 Düsseldorf
service@mitarbeitervorteile.de

II. Joint processing

We process personal data jointly within the Vipdistrict group of companies for the purpose of effective internal management of personal data and group systems. For this purpose, we transfer your data to companies affiliated with us in accordance with Section 18 AktG et seq. analogously, or process the data in systems that are operated jointly with the companies affiliated with us.

You can view the parties involved in our group of companies here: https://vipdistrict.com/contact/.

The legal basis for joint data processing is our overriding legitimate interest in effective administration and IT infrastructure in accordance with Art. 6 para. 1 f) GDPR .

We are jointly responsible with our affiliated companies for the processes that are subject to joint data processing in accordance with Art. 26 GDPR. Accordingly, we have bindingly defined the internal competences and responsibilities in a contract.
The respective company with which you are in contact first will fulfill the information obligations of the GDPR.

We have established a joint office for the fulfillment of data subject rights:

Vipdistrict, S.L., Av. de Burgos, 16D, Building. Euromor, 11., 28036 (Madrid), E-Mail: legal@vipdistrict.de.

However, you can also contact us at any time with enquiries or to assert your rights as a data subject using the contact details provided in Section I. We will then forward your inquiry internally for processing.

The specific processes that fall under joint processing are labelled accordingly below.

III. General information on data processing

We process data as part of our business and website operations. The data concerned in detail, processing purposes, legal bases, recipients and, if applicable, transfers to third countries outside the European Union (‘EU’) and the European Economic Area (‘EEA’) Data processing:

1. Log file when visiting the website

We log your website visit. In doing so, we process:

  • Name(s) of our website(s) accessed,
  • the date and time of access,
  • the amount of data transferred,
  • the browser type and version,
  • the operating system you are using,
  • the referrer URL (the previously visited website),
  • your IP address,

The legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR .

The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.

2. Hosting

To provide our online presence, we use the services of the hosting provider DigitalOcean LLC, 101 Avenue OF The Americas FL 10, New York, NY 10013, USA, in a data centre in Frankfurt, which processes the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.

In the context of hosting, it cannot be ruled out that data may be transferred to the USA. However, DigitalOcean is certified under the EU-US Data Privacy Framework and is therefore subject to the EU Commission’s adequacy decision for data transfers to the USA.

The legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR .

3. Contacting us

If you contact us, we will process the following data from you for the purpose of processing and handling your enquiry: Name, contact details – if provided by you – and your message.

The legal basis for data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Art. 6 para. 1 f) GDPR.

4. Contract processing/user or provider account

We offer entities and companies (= providers) the opportunity to offer and utilize our services to their users (= customers, employees, members). As part of the provision of our platform, you conclude a user contract with us with the content of setting up and maintaining a customer account either as a user or as a provider. As a provider, you present your goods and services on our platform, which can be viewed by users.

We process various data to process the existing user relationship between you and us, to provide appropriate advice and support and to correspond with you: Name, e-mail address, address, company name if applicable, connection to the entity or company as customer/employee/member if applicable. If you are a provider, we also process your data for invoicing purposes and to fulfil our accounting and tax obligations.

The data is processed accordingly on the basis of Art. 6 para. 1 b) GDPR and to fulfill our legal obligations in accordance with Art. 6 para. 1 c) GDPR..

In connection with the opening and use of a user or provider account, we process your inventory data (name, address, e-mail address, bank details if applicable) and your usage data (user name, password). This enables you to manage your orders and commissions and we can identify you as a user or provider. The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 a) GDPR..

We only pass on your data to third parties to the extent that this is necessary to process the user relationship. This includes, in particular, disclosure to the associated providers or supervisory authorities for the purpose of correspondence and for the assertion and defense of your rights. We take all appropriate measures to transfer personal data only to the extent necessary for the underlying purpose.

5. Use of cookies

We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser. You can find information about the specific cookies we use, their providers and purposes in our cookie policy. There you can give your consent to the respective services, revoke this consent or subsequently adjust your settings. The legal basis for data processing is your consent in accordance Art 6 para. 1 a) GDPR..

We use a consent banner to document your selection of certain data processing procedures and to fulfill our obligations under data protection law. When you visit our website, your cookie preferences are requested via a banner. We then set a cookie in which data on granted or revoked consent is stored. The data processing is carried out to fulfill our legal obligations in accordance with Art 6 para. 1 c) GDPR..

6. Google Analytics

We use the Google Analytics tracking tool from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’) on our website.

When using Google services, data is also transferred to the USA. Google is certified under the EU-US Data Privacy Framework and is therefore subject to the EU Commission’s adequacy decision for data transfers to the USA.

We use Google Analytics to analyze your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website in order to improve user-friendliness.

When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically analyzed with the help of cookies.

We use Google Analytics with the extension ‘anonymiseIp. This truncated IP addresses within the member states of the EU or EEA. If a transmission to Google’s servers in the USA takes place, the full IP address is only transmitted in exceptional cases and truncated there. A direct personal reference is therefore generally excluded. In particular, it is no longer possible to identify the computer or end device of the website visitor.

The following data is processed through the use of Google Analytics:
3 bytes of the IP address of the website visitor’s accessed system (anonymised IP address),

  • the website accessed,
  • the website from which the user came to the page accessed on our website (referrer),
  • the subpages that are accessed from the website,
  • the time spent on the website,
  • the frequency with which the website is accessed.

Google has stated that it will not associate your IP address with any other data held by Google.

The legal basis for data processing in the context of the aforementioned Google services is your prior consent in accordance with Art. 6 para. 1 a) GDPR..

7. Google reCaptcha

We use the captcha service ‘Google reCaptcha’ from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’) on our website to protect our website from interactions with bots. When you visit the website, data, including your IP address, the referrer URL, information about the operating system, information about cookies, mouse movements and keyboard strokes as well as the length of stay and the settings of your terminal device are transmitted to Google. The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in the security of our website.

When using Google services, data is also transferred to the USA. Google is certified under the EU-US Data Privacy Framework and is therefore subject to the EU Commission’s adequacy decision for data transfers to the USA.

IV. Duration of data storage

We only store personal data for as long as is necessary for the purposes for which it is processed or for as long as you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 3 years, regardless of the processing purposes.

V. Your rights as a data subject

1. Right of access

On request, you can obtain information about all personal data that we have stored about you free of charge at any time.

2. Correction, deletion, restriction of processing (blocking), objection

If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are only to process data to a limited extent in future. You have the right to object in particular in cases where your data is required for the performance of a task carried out in the public interest or where the data processing is based on our legitimate interest, as well as profiling based on this. You also have the right to object in the case of data processing for the purpose of direct advertising.

3. Right to withdraw consent with effect for the future

You can withdraw your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the time of revocation.

4. Data portability

If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or with the aid of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can transmit the data to another controller if you wish.

5. Restriction of processing

Data for which we are unable to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.

6. Exercising your rights as a data subject and right to submit a complaint

If you have any questions regarding the processing of your personal data, information, correction, blocking, objection or deletion of data or the wish to transfer the data to another company, please contact the office named in Section II.
You also have the option of complaining to a supervisory authority about your rights as a data subject.