Data protection information

In the following, we would like to explain to you what data we collect about you and what we do with this data. We also inform you about your data protection rights and explain who you can contact with questions about the protection of your data.

Who we are

AMEVIDA SE
Kurt-Schumacher-Str. 100
D-45881 Gelsenkirchen
Tel.: 0209 / 7070-0

E-mail: dialog@amevida.de

Management Board: Dr. Matthias Eickhoff

If you have any questions about this data protection information, the processing of your data, your rights or other concerns in the area of data protection, our data protection officer will be happy to help you.

Contact details of the data protection officer:

AMEVIDA SE
The Data Protection Officer
Kurt-Schumacher-Str. 100
D-45881 Gelsenkirchen

E-mail: datenschutz@amevida.de

Scope of application

This data protection information applies to the amevida.de website. It is intended for visitors to this website.

Our website contains links to the websites of other operators to which this data protection information does not apply.

The responsibility for the insertion of advertising banners, text advertising or advertising films before or during embedded videos lies with the respective operator.

Do I have to enter my data?

When you visit our website, user data is automatically stored. Some of the data collected is necessary for the use of a website. In addition, we also process your data to protect our legitimate interests after weighing up your interests. This enables us to continuously improve the services we offer you. On the following pages, you can find out the background to our interests and whether and how you can object to the use of your data or deactivate its use yourself.

In order to take advantage of one of our offers or to send an inquiry, you will be asked to provide your personal data. You can decide for yourself whether you wish to take advantage of these offers and provide your data for them. We also offer you services for which we only process your data if you have given us your consent to do so. The granting of consent is always voluntary. Once consent has been given, it can be revoked at any time.

Please note that if you provide information about other persons, you must have obtained their prior consent and informed them of the purposes of the disclosure as set out in this data protection information.

We also ask you to pass this information on to the people you involve in the use of our services, such as family members or authorized representatives.

Processing purposes, legal bases and processed data

We distinguish between different types of processing, which we describe below. We describe the data processed for this purpose and the cookies used in tables.

Service provision

In order to visit and use our website, your data must be collected. We process this data to protect our legitimate interest in providing a functioning website (Art. 6 (1) (f) GDPR).

Data security

Every access to our website is stored and analyzed in a log file. We process this data for data security purposes. The processing is carried out to protect our legitimate interest in being able to guarantee data security (Art. 6 para. 1 lit. f) GDPR).

Processing of inquiries

We process the data that you give us when you have a question or request. This also includes, for example, the data that you send us by e-mail or enter in the chat. The processing of your data is necessary so that we can process your request. The chat entries are stored in order to save you from having to explain the chat history in conversations with us and to be able to answer inquiries with a time delay if you use the chat outside our normal business hours. The processing is based on our legitimate interest in answering your questions and concerns (Art. 6 para. 1 lit. f) GDPR).

Display of videos

In order to be able to use the videos embedded on our website, the data provided must be processed. Your data will only be processed to display videos and passed on to the respective service provider (Google Ireland Ltd, hereinafter "Google", for the YouTube player or Vimeo.com, Inc., hereinafter "Vimeo", for the Vimeo player) as soon as you give your consent by activating the video service (Art. 6 para. 1 lit. a) GDPR). As a result, Google or Vimeo becomes aware that our website has been accessed via your IP address. The data may also be used by Google or Vimeo to analyze usage behavior and for market research and marketing purposes.

Display of the map

In order to be able to use the map integrated on our website, the data provided must be processed. Your data will only be processed for this purpose and passed on to the service provider Google Ireland Ltd (hereinafter "Google") as soon as you give your consent by activating the map (Art. 6 para. 1 lit. a) GDPR). As a result, Google becomes aware that our website has been accessed via your IP address. The data may also be used by Google to analyze usage behavior and for market research and marketing purposes.

Newsletter

You can subscribe to our newsletter, for which we require the data provided. The newsletter will then be sent on the basis of your consent (Art. 6 para. 1 lit. a) GDPR).

Statistical visitor measurement (Google Analytics)

We use Google Analytics, a service provided by Google Ireland Ltd (hereinafter "Google"), to measure and evaluate user behavior on our website. If you give your consent (Art. 6 para. 1 lit. a) GDPR), cookies are set for this purpose and the data provided about your use of our website is collected. You will be assigned a unique user ID that will be used to identify your subsequent visits. We use your data to evaluate the usability, functionality and attractiveness of our website as well as user behavior. For this purpose, your data is summarized into statistics without personal reference. This enables us to correct errors, optimize user guidance and further develop our website and our marketing activities. Your visit data will not be linked to your name or other personal details (if you provide them to us).

Access to your data from or storage in countries with a different level of data protection compared to the EU is not excluded. Google may combine this information with other data that you have provided to Google or that Google has collected as part of your use of its services. The data may also be used by Google for its own purposes, in particular to analyze user behavior and for market research and marketing purposes.

Conversion tracking and retargeting

We use Google Analytics, Google Ads, Google Optimize and Google Tag Manager, services of Google Ireland Ltd (hereinafter "Google"), and services of LinkedIn Ireland Unlimited Company (hereinafter "LinkedIn") for conversion tracking and retargeting as well as for billing and optimization of advertising measures. Retargeting refers to technologies that display suitable advertising to users even after they have left a website. Conversion tracking refers to the measurement of the success of our advertising campaigns. The services are activated and corresponding Google cookies are set if you give us your consent (Art. 6 para. 1 lit. a) GDPR). You will be assigned a unique user ID that will be used to identify your subsequent visits. We will not link your visit data with your name or other personal details (if you provide them to us). The data collected will be passed on to Google for the above-mentioned purpose. The collected data is summarized for us in statistics without personal reference.

Access to your data from or storage in countries with a different level of data protection compared to the EU is not excluded. Google may combine this information with other data that you have provided to Google or that Google has collected as part of your use of its services. The data may also be used by Google for its own purposes, in particular to analyze user behavior and for market research and marketing purposes.

Performance marketing and conversion tracking

We use performance marketing and conversion tracking services from Meta Platforms Ireland Limited (hereinafter "Facebook"), Twitter International Company (hereinafter "Twitter") and LinkedIn Ireland Unlimited Company. Performance marketing focuses on addressing target groups and the resulting measurability of the success of direct marketing campaigns. Conversion tracking refers to the measurement of the success of our advertising campaigns. Personal data is also processed in order to bill advertising measures. The services are activated and corresponding cookies from the respective providers are set if you give us your consent (Art. 6 para. 1 lit. a) GDPR). You will be assigned a unique user ID that will be used to identify your subsequent visits. We will not link your visit data with your name or other personal details (if you provide them to us). The data collected will be passed on to the above-mentioned providers for the above-mentioned purpose. The providers take into account previous usage behavior and assign the transmitted information to your respective personal user account (if you have one). If you visit the Facebook, Twitter or LinkedIn network, you will be shown personalized, interest-based ads on their pages.

Access to your data from or storage in countries with a different level of data protection compared to the EU cannot be ruled out. The providers may combine this information with other data that you have provided to them or that the providers have collected as part of your use of their services. The data may also be used by the providers for their own purposes, in particular to analyze user behavior and for market research and marketing purposes.

Information about cookies

If we use cookies required for the operation of the website, the processing is based on our legitimate interest (Art. 6 para. 1 lit. f) GDPR) in a functioning provision of the website. Other cookies are only set if you have given us your consent (Art. 6 para. 1 lit. a) GDPR).

You can find more information about the cookies used and an option to change your selection in our cookie settings:

Cookie-Einstellungen ändern

Processed data

Data	Service provision	Data security	Processing of inquiries	Display of videos, display of the map	Statistical visitor measurement	Conversion tracking and retargeting	Performance marketing and conversion tracking
IP number	x	x		x	x	x	x
Name of the retrieved file		x		x	x
Amount of data transferred		x		x	x
Called website	x				x	x	x
Referrer URL (the previously visited website)		x		x	x	x	x
Terminal device					x	x	x
User agent sent by your browser	x	x		x	x	x	x
Session cookie		x			x
Cookie to save the selection	x			x	x	x	x
Cookies of the provider				x	x	x	x
Date and time of retrieval		x		x	x	x	x
Click ID (set by the respective provider)					x	x	x
Operating system					x	x	x
Information about the browser used (type, version, resolution (inner window size), language)	x				x
Screen size					x	x	x
Session duration					x	x	x
Cookie on/off	x
Java-Script on/off	x
Metadata: Title tag and description					x	x	x
UTM parameters (source, medium, campaign, content, duration)					x	x	x
Requested resources		x			x	x	x
Status code		x			x	x	x
Side path					x	x	x
Interaction with the website (mouse pointer position, navigation, mouse and touch events, dwell time)
Salutation, name			x
Contact details (e-mail address, address, telephone, fax)			x
Subject, topic, request			x
Content of the message			x
Date of receipt of the message/registration			x
Broadcast campaign

Other processing purposes

In addition, the above-mentioned data is used for the following purposes in the context of balancing interests (Art. 6 para. 1 lit. f) GDPR). The interests are listed below:

• Should a security incident occur in our company in which your data is affected, we are obliged to report the case to the data protection supervisory authority responsible for us (Art. 33 GDPR). As it is in our legitimate interest to comply with this statutory reporting obligation as quickly as possible, it is possible that your personal data may be processed as part of the investigation of the relevant security incident. The reports of these security incidents to data protection supervisory authorities do not contain any of your personal data.
• As it is in our interest to ensure the security of our systems, we regularly carry out security and effectiveness tests in the course of which your above-mentioned data may be processed.
• As it is in our interest to resolve legal disputes, we process your data for a specific purpose in such a case. It is also in our interest to retain evidence in the event of legal disputes until all relevant statutory limitation periods pursuant to Sections 195 et seq. BGB have expired. For this purpose, we retain the relevant data about you in accordance with these limitation periods. The deletion periods cannot be predicted as a general rule, as they depend on the respective subject matter of the dispute and the corresponding statutory limitation period, which can be up to 30 years. The regular limitation period is 3 years.
• In addition, it is in our interest to investigate suspicious cases and to pass on relevant information to law enforcement authorities in the event of concrete criminal suspicion.
• We carry out audits, internal audits and other control measures (e.g. monitoring by the data protection officer), as it is in our legitimate interest to comply with legal regulations, to create transparency about our business processes, to constantly optimize these processes and to prevent and identify actions that are detrimental to our business. This may involve processing documents or files that contain your personal data.
• We process your data to test IT systems and software products and to carry out migrations. The processing is carried out to fulfill our legitimate interest in checking the correctness of new products or the correctness and completeness of migrations.

Deletion periods

• Data security: 14 days after collection
• Processing of inquiries: after processing has been completed. Communication via the chat will be deleted one month after collection.
• Newsletter: after unsubscribing from the newsletter
• Statistical visitor measurement: 14 months after survey
• Conversion tracking and retargeting: 540 days after collection
• Performance marketing and conversion tracking: 180 days after collection

In order to preserve evidence, we retain data within the framework of the statutory statute of limitations pursuant to Sections 195 et seq. BGB (German Civil Code). The storage period for your data may extend beyond the period specified above. The statutory limitation periods can be up to 30 years. The regular limitation period is 3 years.

Origin of the data

No data is collected from third parties.

Information about automated individual decisions

No automated individual decisions are made.

Which bodies receive your data?

The following list shows which entities receive your data ("data recipients"). You can read about the specific data in the relevant sections of this data protection information. Your data is sometimes passed on due to legal or contractual obligations. In other cases, we use selected vicarious agents and service providers who work for us as processors (in accordance with Art. 28 GDPR) and may be granted access to your data to the extent necessary. Processors are subject to numerous contractual obligations and, in particular, may only process your personal data on our instructions and exclusively for the fulfillment of the orders received from us.

• Auditors
• Data Protection Officer
• Service provider for chat tool
• Service provider for conversion tracking
• Service provider for displaying videos and maps
• Service provider for the destruction of data carriers
• Service provider for newsletter distribution
• Service provider for performance marketing
• Service provider for retargeting
• Service provider for statistical visitor measurement
• E-mail provider of the recipient (for communication by e-mail)
• IT service provider
• Lawyers, law enforcement authorities, public prosecutor's office, courts, opposing lawyers, state or federal criminal investigation office (in the event of legal disputes and concrete criminal suspicion)
• Telecommunications service provider (for telephone communication)
• Shipping service provider (for written communication)

Data recipients in non-EU countries

The following categories of service providers have affiliated companies or subcontractors outside the EU (so-called third countries) that can access your data: Service provider for the chat tool, IT service provider, service provider for conversion tracking, service provider for displaying videos and maps, service provider for retargeting, service provider for statistical visitor measurement, service provider for performance marketing. Personal data is sent to the following third countries: USA, Bulgaria, United Kingdom*, Japan*, India, Canada*, Argentina*, Australia, Brazil, Chile, Hong Kong, Indonesia, Israel*, South Korea*, Malaysia, New Zealand*, Singapore, Switzerland*, Taiwan. For third countries marked with an *, there is an adequacy decision by the EU Commission, which determines which third countries have an adequate level of data protection. For the transfer to the other third countries without an adequacy decision, the affiliated companies or subcontractors of our service providers have either submitted to the so-called Data Privacy Framework (Decision No. C(2923) 4745 final of 19.07.2023) if they are based in the USA; otherwise our service providers are responsible for the use of EU standard contractual clauses in accordance with Commission Decision No. (EU) 2021/914. A sample of these EU standard contractual clauses can be found on the website of the EU Commissioner for Justice and in the Official Journal of the EU.

Your rights

You have the legal right to:

• Information about the personal data stored about you (Art. 15 GDPR)
• Correction and completion of your data available to us (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Revocation of consents granted (Art. 7 GDPR) with effect for the future. The lawfulness of the data processing carried out up to the time of withdrawal remains unaffected.
• You also have the right to express your point of view and to challenge a decision based on automated processing (Art. 22 GDPR).
• You have the right to object to the processing of your data to protect our legitimate interests or the legitimate interests of third parties (Art. 21 GDPR) - You have the right to object to such processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions within the meaning of Art. 4 para. 4 GDPR.
• Objection to direct marketing - you have the right to object to the processing of your data for the purpose of direct marketing at any time and without giving reasons

To exercise these rights, you can contact us using the contact details above.

You also have the statutory right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).