As part of our business activities, we carry out user-centered Online Marketing measures for our clients. On behalf of its clients, VIVALU uses technology that optimizes advertising by using data. These data usually have no personal reference. They are anonymous and pseudonymized. Under no circumstances VIVALU GmbH will attempt to assign the current data to a particular person.
2. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions of a data protection character is:
Tel.: +49 211 78 17 52 0
3. Name and address of the data protection officer
The data protection officer of the controller is:
Tel.: +49 211 78 17 52 12
Any affected person can contact our data protection officer at any time with any questions or suggestions regarding data protection.
4. Information about usage-based online advertising
We voluntarily subjected ourselves to the self-regulation of the German Data Protection Council Online Advertising (DDOW). This involves the responsible use of advertising control data in terms of transparency, use and the ability to object.
You can find the self-regulation code for third parties valid for us at the following link: http://meine-cookies.org/DDOW
We optimize for you by the anonymous collection and processing of your user behavior the control of the advertisement for the products and services of our clients. Therefore, a cookie is stored on your computer.
Here you can contradict the cookie setting by VIVALU GmbH for this browser: VIVALU Opt-Out
Furthermore, one can prevent the setting of cookies by VIVALU GmbH by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable
Further information on the subject of cookies is provided by the “Bundesverband digitaler Wirtschaft”. There you can set individual preferences for cookies in addition to general information about cookies and the topic of data protection: http://meine-cookies.org/
6. Nature and purpose of the collected data
The used technologies exclusively collect anonymous and pseudonymous data. Thereby the following data i.e. can be retrieved: which web pages were accessed, the time of the call, information about the user's device, which advertising media were already seen or clicked, length of stay on websites and web shops, etc.
The purpose of the data collection is the implementation of online marketing measures such. Display Advertising. The collection and processing of data is therefore carried out on behalf of the respective customer. With the help of the collected data a user-relevant advertisement can be made possible.
VIVALU does not collect or use at any time data that could be used to deliver advertising to children under the age of 13 years.
7. Additional data from third-party providers
To meet our claim to reduce wastage in advertising delivery, we can use audience data. These data are provided to us in the form of pseudonymous profiles of third parties. VIVALU only uses data from certified providers.
MediaMath is a global provider of digital advertising media and data management technology. MediaMath's proprietary TerminalOne™ platform (the "Platform") enables data, automates processes, and optimizes ad interactions across all of the addressable media channels - providing marketers with improved performance, visibility and control, and a better consumer experience. As an active member of industry associations, MediaMath continues to work on consumer privacy policies related to interest-based advertising, including: the Digital Advertising Alliance (DAA) in the US, the EU and Canada; Data & Marketing Association in the US and UK; Interactive Advertising Bureau (IAB) in Australia, Brazil, Canada, Europe, Germany, Mexico, Singapore, the United States and the United Kingdom and the Network Advertising Initiative (NAI) (www.networkadvertising.org). MediaMath follows the self-regulatory principles of the DAA Self-Regulatory Principles for Online Behavioral Advertising and its application to mobile devices, as well as NAI's 2015 Code of Conduct.
AppNexus has created a technical platform (platform or AppNexus platform) that allows our clients to buy, sell and sell online advertising, including interest-based advertising, mostly through real-time bidding. The AppNexus platform does not buy, sell, or advertise itself, but only has the technology that other companies use for that purpose.
The Adform platform gives advertisers the ability to buy ad space for digital assets such as web sites and mobile applications, and publishers of websites and mobile apps to sell and sell their ad space. In addition, Adform provides tools for managing, buying and selling data that can help ensure that ads are shown to people who are likely to be interested in a particular ad, and we provide technology that enables the delivery of advertising content Website or mobile application. The service also includes other tools such as features that measure the effectiveness of ads, prevent fraudulent activity and malware, and predict the reach of ads. The service is provided by Adform A / S, Wildersgade 10B, 1st sal. 1408 Copenhagen, Denmark.
Adform does not collect, use or allow its clients to transfer or use data on the platform that identifies a person on their own such as: Name, address, phone number, e-mail address or government identifier. Adform also prohibits the collection, use or transfer of certain categories of sensitive information on the Platform, using technical solutions to identify and take action on directly identifiable information in the Service. To enforce this principle, Adform actively searches data for possible violations.
Adform focuses on online privacy and continues to support self-regulatory initiatives and laws for the markets in which it operates, including: These include the World Wide Web (W3) Group, Privacy Preferences Projects (P3P), the Internet Advertising Bureau (IAB) Good Practice Principles for Online Behavioral Advertising (OBA) or the European Union's Privacy Directive. You have the option of opting out of cookies on your PC when showing ads from the Adform Ad serving system.
TabMo SAS ("TabMo") is a marketing services company focused on the mobile application and the MobileWeb market. TabMo buys advertising space for mobile applications and similar digital goods on behalf of clients. According to these services, information about the mobile apps and websites you visit is collected to help create segments of interest and make ads more relevant. No data is collected which allows personal identification.
Google AdWords is an internet advertising service that allows advertisers to run ads on Google's search engine results as well as on the Google Network. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords.
Google DoubleClick primarily markets special online marketing solutions to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression, click, or other activity. Each of these data transfers triggers a cookie request to the affected person's browser. If the browser accepts this request, DoubleClick sets a cookie on the information technology system of the person concerned. The purpose of the cookie is to optimize and display advertising. The cookie is used, among other things, to serve and display user-relevant advertisements, as well as to generate reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple impressions of the same advertising.
Social Media Ads: Facebook & Instagram
Sociomantic is an online advertising technology company that helps advertisers deliver more relevant online display (banner) advertising with anonymous, non-personally identifiable information. Sociomantic Technology is provided by dunnhumby Deutschland GmbH, Paul-Lincke-Ufer 39/40, 10999 Berlin ("Sociomantic").
Sociomantic tags are used to enable targeted advertising through so-called targeting campaigns. Based on cookies, users of a website that are interested in certain content and / or products are redirected to other websites. The display of relevant interest-based ads is made possible by collecting and evaluating the use of this website. The information collected on the use of this website (such as timestamps, pages visited or technical information about the browser) are stored exclusively pseudonym.
For more information about privacy at Sociomantic, please visit:
On this page, you also have the opportunity to object to the further survey by Sociomantic, if you no longer want to receive usage-based advertising.
9. Labeling of online advertising
VIVALU identifies its advertising circuits with a corresponding information icon "i". This is located in one of the corners of the advertising material. By clicking on the icon, users have the opportunity to inquire about the purpose of the anonymous data collection or to claim the right to object to the currently used control technology.
VIVALU is currently undergoing the certification process in accordance with the OBA Third-Party Guidelines to provide all the advertisers subject to the Code with an icon licensed by the EDAA.
10. Rights of the person concerned
Each person concerned by the processing of personal data has the rights granted hereafter by the European directive and regulatory authority.
If an affected person wishes to make use of the following listed and named rights, they can contact our data protection officer at any time.
- The right to confirm involves requiring us to confirm whether your personal information is being processed.
- The right to receive information from us at any time free information about the personal data stored on his person and to obtain a copy of this information. Furthermore, the European legislator and regulator has provided the data subject with the following information:
- processing purposes
- category of personal data
- Categories of recipients to whom your data has been or will be disclosed
- planned storage duration
- existence of a right to rectification, cancellation, limitation of processing or opposition,
- existence of a right of appeal
- The origin of their data, unless they were collected from us
- existence of automated decision-making including profiling
- The right of rectification includes the immediate correction of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, considering the purposes of the processing.
- The right to be deleted (right to be forgotten) means that the personal data concerning him / her are deleted immediately, provided that one of the following reasons is satisfied and the processing is not required:
- The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary.
- The person concerned revokes the consent on which the processing was based on Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
- The data subject submits an objection to the processing pursuant to Art. 21 (1) GDPR, and there are no legitimate reasons for the processing, or the data subject appeals pursuant to Art. 21 (2) GDPR the processing.
- The personal data were processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If the personal data have been made public by VIVALU GmbH and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 para. 1 GDPR, VIVALU GmbH will take appropriate measures, taking into account the available technology and the implementation costs of a technical nature, to inform other data controllers processing the published personal data that the data subject has deleted from all other data controllers any links to such personal data or copies or replications of such personal data as far as the processing is not required.
- The right to limit processing shall be required if one of the following conditions is met:
- The accuracy of the personal data is contested by the data subject for a period of time that enables the person responsible to verify the accuracy of the personal data.
- The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
- The data controller no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend their rights.
- The person concerned has objection to the processing acc. Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the person concerned.
- If one of the above-mentioned conditions is met and an affected person wishes to request the restriction of personal data stored by VIVALU GmbH, he / she can contact an employee of the controller at any time. The employee of VIVALU GmbH will cause the restriction of processing.
- The right to data portability includes obtaining in a structured, common and machine-readable format personal data relating to the personal data provided by the data subject to a controller. The person also has the right to transmit this data to another person responsible without hindrance by the person responsible for providing the personal data, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) of the GDPR or Art. 9 2 (a) of the GDPR or on a contract pursuant to Article 6 (1) (b)
GDPR and processing by automated means, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority delegated to the controller.
Furthermore, the data subject has exercised his right of data transferability under Article 20 1. GDPR the right to obtain that the personal data are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible and if this does not affect the rights and freedoms of other persons.
- The right of objection, for reasons arising from its particular situation, involves objecting at any time to the processing of personal data relating to it under Article 6 (1) (e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, VIVALU GmbH will no longer process the personal data unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.
If VIVALU GmbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the data subject objects to VIVALU GmbH for processing purposes for direct marketing purposes, VIVALU GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his / her particular situation, against the processing of personal data relating to him or her, which VIVALU GmbH uses for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DS. GMOs are invited to submit an objection unless such processing is necessary to fulfill a task of public interest.
To exercise the right to object, the person concerned may directly contact any employee of VIVALU GmbH or another employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.
- The right to automated decisions on a case-by-case basis, including profiling; not be subjected to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it
is not required for the conclusion or performance of a contract between the data subject and the controller, or
is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
with the express consent of the data subject. If the decision (1) is required for the conclusion or performance of a contract between the person concerned and the person responsible or (2) it takes place with the express consent of the data subject, VIVALU GmbH shall take appropriate measures to protect the rights and freedoms and the authorized persons Interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision.
- The right to revoke a data protection consent to the revocation of a granted consent to the processing of personal data at any time.
11. Legal basis of processing
Our company serves as the legal basis for processing operations Art. 6 | lit. a / b / c / d / f GDPR. Therefore, one of the following conditions must be met for processing:
- The data subject has given his consent to the processing of the personal data concerning him for one or more specific purposes
- the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual actions which are carried out at the request of the data subject;
- the processing is necessary to fulfill a legal obligation to which the controller is subject;
- the processing is necessary to protect the vital interests of the data subject or any other natural person;
- the processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data prevail, in particular if the data subject is a child is.
12. Authorized interests in the processing that are being pursued by the controller or a third party Is the processing of personal data based on Article 6 I lit. f GDPR, our legitimate interest is in conducting our business for the benefit of all of our employees and our shareholders.
13. Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.
14. Legal or contractual provisions for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the data subject to provide the personal data; potential consequences of non-provision
We clarify that the provision of personal information is in part required by law (such as tax regulations) or may result from contractual arrangements (such as details of the contractor).
Occasionally it may be necessary for a contract to be concluded that an affected person provides us with personal data that must subsequently be processed by us. For example, the data subject is required to provide us with personal information when our company enters into a contract with her. Failure to provide the personal data would mean that the contract with the person concerned could not be closed.
Prior to any personal data being provided by the person concerned, the person concerned must contact one of our employees. Our employee will inform the individual on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of the non-provision of the personal data.
15. Relevance and change of this data protection explanation