Privacy policy

Company contact details

vivamind – Society for Preventive Medicine and Psychology mbH
Lindemannstr. 6a, 44137 Dortmund, Germany
Phone number: ++49 231 477 684 3
E-mail address: info@vivamind.de

Represented by:
Dr. Rüdiger Beck, managing partner
Prof. Dr. Stefan Diestel, managing partner
Marion Beck, managing partner

Contact details of the data protection officer

Attorney at law Ulf Haumann LL.M.
Specialist attorney for IT law/ specialist for data protection
Kaiserstr. 21-23, 44135 Dortmund, Germany
Phone number: +49 231 22 81 90 10
E-mail address: datenschutz@ruhr-dsc.eu

We take the protection of your personal data very seriously and strictly adhere to the rules of data protection laws. We take conscientious precautions to protect your data from loss, manipulation and unauthorized access. The precautions correspond to the state of technological development. The following statement gives you an overview of how we ensure this protection and what kind of data is collected for what purpose.

Basic principles in the processing of personal data

We process your personal data in compliance with the legal provisions on data protection (General Data Protection Regulation (DSGVO), Federal Data Protection Act (BDSG-Neu)).
Your data will be handled exclusively for the fulfillment of the contractually justified purposes and on the basis of your voluntary consent and applicable legal provisions.
Personal data will not be passed on to third parties without your express consent, unless this is absolutely necessary for the processing of business transactions for the provision of the service or for the performance of the contract. In this case, the data is limited to the minimum necessary.
Personal data is any information related to an identified or identifiable natural person. It includes all types of information that can be traced directly or indirectly (i.e., in conjunction with other data) back to a person.  This includes, for example, information such as name, address, email address. Personal data is only processed by vivamind if this is permitted by law or if you have consented to the collection of the data.
By order of the competent authority, we may provide information about this data in individual cases, insofar as this is necessary for the purposes of law enforcement to avert danger, to fulfill the legal tasks of the constitution protection authorities or the military counterintelligence service or to enforce intellectual property rights.

User registration and provision of chargeable services

In principle, you can use the my.vivamind website without having to register with us. However, the use of services within the application “my.vivamind”, requires prior registration (creation of an account) and associated with this, further processing of personal data.
After registration you will receive an e-mail in which you must confirm that you really want to create the account. If you do not confirm this within 24 hours, the account will be deleted again. Thus, if you want to use the benefits and services offered on our website, we will regularly process the following data from you:

1. user (e-mail address)
2. optional mobile number, if 2-factor authentication is requested.

Purposes of processing the data 1-2 are:
1. authentication; legal basis: Art. 6 para. 1 lit. b) DSGVO.
2. contacting; legal basis: Art. 6 para. 1 lit. b) DSGVO

SMS transmission via gatewayapi

During registration, or later in the profile, a two-factor authentication via SMS can be activated. When registering and logging in, a random, once-valid, numerical code is then generated and sent to your cell phone via SMS through this provider. During this process, this code and the user’s mobile phone number are sent to the provider.
By activating the two-factor authentication, you agree to the transmission of personal data. The operating company of gatewayapi is OnlineCity ApS, Buchwaldsgade 50, 5000 Odense C, Denmark.

The data entered in the course of registration will be processed exclusively for the above purposes. Your data will only be stored for the period of time required for the contractual relationship or in accordance with legal requirements (e.g. retention periods in accordance with § 147 of the German Tax Code).
With your registration on our site, we will also store your anonymized IP address (shortening of the last three digits) and the date and time of your registration.
This information is no longer personal data.
Purpose of this processing:
This serves as a safeguard on our part in the event that a third party misuses your data and registers on our site with this data without your knowledge; legal basis Art. 6 para. 1 lit. f DSGVO.
Your data will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site also does not take place.
In addition, we would like to point out that personal data is transmitted to the server in encrypted form via the website using “Secure Sockets Layer (SSL)”. You can recognize the activation of SSL encryption in the address bar of the browser. Only when the regular display changes from “http://” to “https://” is the data transfer encrypted. Only transfer your data when SSL encryption is activated.

Personal data within the account

If you make use of one or more of the services offered within the scope of your protected my.vivamind account, further processing of data related to your person will be necessary for the purpose of providing the respective service (creation of concrete health profiles with preventive objectives as the basis for individual patient counseling) as well as for its payment processing. Which personal data is processed in the context of payment processing depends on the payment method you have chosen, whereby you automatically agree to the corresponding data transfer to the respective payment provider when using this method (see also “Use of Klarna as payment method” or “Use of SecurionPay as payment method” below).
Which personal data is processed in addition in detail for the purpose of providing the respective service, results in turn from the specific service selected by you and the associated respective input mask.
The legal basis for this data processing is Art. 6 para. 1 lit. b DSGVO and, in the case of payment processing and the processing of health data, your express consent pursuant to Art. 6 para. 1 lit. a DSGVO.
In this case, data is also stored exclusively for the period of the contractual relationship or in accordance with legal requirements (e.g. retention periods in accordance with Section 147 of the German Fiscal Code).

We only evaluate personal data in anonymized form for statistical purposes in order to obtain findings for health epidemiological issues and health science. This enables us, for example, to further develop algorithms that form the basis for measuring and evaluating health data. These evaluations cannot be linked to our dataset and thus individually classified. According to Art. 1 DSGVO, the anonymized evaluation is not subject to the Basic Data Protection Regulation because the data can no longer be assigned to a natural person in the course of the evaluation.

System operator and logging

For technical reasons, your end device automatically transmits the following information to our web server each time you access our Internet site and each time you retrieve a file. This information is stored in a log file for a limited period of time:
– IP address of the end device
– browser type/version
– operating system used
– Date and time of the server request,
– designation (URL) of the requested page

This data is processed exclusively for the purpose of legal protection (e.g. against hacker attacks) and the optimization of our web presence by means of statistical evaluation of this information (e.g. access errors, average dwell time, Internet browsers and operating systems used). The processing is thus carried out for vivamind on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO.
Deletion of this data takes place automatically after 7 days.
Notwithstanding this, we reserve the right to subsequently check the data and pass it on to authorized third parties in the event of suspicion of unlawful use of our website,

Cookies

We use so-called cookies on our site to recognize multiple use of our offer, by the same user / Internet connection owner. Cookies are small text files that your Internet browser stores on your computer. They serve to optimize our Internet presence and our offers.

Session Cookies

Name: vivamind_session
Domain: my.vivamind.de
Valid: Duration of the user’s session
Description: Login data of the user

Functional Cookies

Name: XSRF-TOKEN
Domain: my.vivamind.com
Valid: 30 minutes
Description: Prevention of XSRF attacks (https://de.wikipedia.org/wiki/Cross-Site-Request-Forgery)

Name: pll_language
Domain: vivamind.eu
Valid: 1 year
Description: The pll_language cookie records which language the user used on the last page.

However, in some cases, these cookies provide information to automatically recognize you. This recognition is based on the IP address stored in the cookies. The information obtained in this way is used to optimize our offers and provide you with easier access to our site.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Web analysis tool Matomo

We use the web analysis service Matomo. Matomo is an open source software that serves to optimize websites and also uses cookies to anonymously evaluate the access of website visitors. The information generated by the cookies about your use of this website is not used for personal evaluation or profiling and is also not passed on to third parties. The analysis serves exclusively to optimize our offer.
If you use a browser extension that blocks advertising content and tracking services, i.e. a so-called ad blocker or tracking blocker such as AdBlock Plus, uBlock Origin or similar, we will of course respect this and make no attempt to disguise the use of Matomo on our site or otherwise hinder its functioning. Cookies will not be dropped in this case and the use of this website will not be tracked. You will also not be shown any other notice fields regarding the use of cookies.
If you do not use an advertising or tracking blocker, but still do not agree with the storage and anonymous evaluation of the data from your visit, you can object to the storage and use at any time. If you subsequently object to the processing of the data by mouse click, a so-called opt-out cookie will be stored in your browser, with the result that Matomo will not collect any session data. If you delete your cookies in your internet browser, this will result in the opt-out cookie also being deleted, of course. When you visit our website again, it must therefore be activated again.