1. Data protection at a glance
The management and employees of ViveLaCar Vienna GmbH take the protection of your personal data very seriously. The purpose of this document is to give you a quick overview of what happens to your personal data when you visit this website.
Data collection on this website
Who is responsible for the data collection on this website?
The data collected on this website is processed by the website operator. For the operator's contact details, please refer to the company and legal information page of this website.
How do we collect your data?
We primarily collect data when you communicate your data to us. This could be, for example, the data you enter into a contact form.
Our IT systems collect other data automatically when you visit our website. These are mainly technical data (e.g. information about your browser, operating system or the time you accessed our website). This data is collected automatically whenever you use this website.
What do we use your data for?
We collect some of the data to ensure the proper functioning of the website. Some data can be used to analyse your user behaviour.
What rights do you have in relation to your data?
You have the right to obtain information about the personal data we store on you, its source and recipients as well as the purpose of storing the data at any time and free of charge. You also have a right to obtain rectification or erasure of this data.
To do this, or if you have any other questions about data protection, you can contact us at any time using the address specified in the company and legal information. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and third-party tools
This website is hosted by an external service provider (hosting provider). Personal data collected on this website is stored on the servers of the hosting provider. This information may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated through the website.
The use of the services of a hosting provider is necessary for the performance of a contract with our potential and existing customers (Article 6 (1) (b) GDPR) and to pursue our legitimate interest to use a professional provider to offer our users a secure, fast and efficient presentation of our website content (Article 6 (1) (f) GDPR). Our hosting provider will process your data only to the extent necessary to fulfil their performance obligations and to comply with our instructions in relation to this data.
Conclusion of a data processing agreement
We have concluded a data processing agreement with our hosting provider to ensure that the data is processed in compliance with data protection laws and regulations.
3. General and mandatory information
Information about the controller
The controller responsible for processing of data on this website is:
ViveLaCar Wien GmbH
Gumpendorfstrasse 19-21/ 2 / 2nd mezzanine
Telephone: +43 1 3618139 - 10
The controller is a natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Data protection officer required by law
We have appointed a data protection officer for our company.
Datenschutzberatung Janthur GmbH
Hedelfinger Straße 12
Telephone: +49 711 71530104
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You have the right to withdraw your consent at any time. To do this, an informal notice of withdrawal by email will suffice. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to object to data collection on grounds relating to the data subject's particular situation or to data processing for direct marketing purposes (Article 21 GDPR)
Right to lodge a complaint with the competent supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular, in the member state of their habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to them infringes the GDPR.
Right to data portability
You have the right to receive the data we process based on your consent or on a contract by automated means in a commonly used and machine-readable format and have the right to transmit those data to another controller. In exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or inquiries, you send us as the website operator. You can recognise an encrypted connection in your browser's address bar when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
Encrypted payments on this website
If you enter into a contract which requires you to send us your payment information (e.g. account number for direct debits), we will require this data to process your payment.
Any payment transactions that use common payment methods (Visa/MasterCard, direct debits) will be encrypted using SSL or TLS technology. You can recognise an encrypted connection in your browser's address bar when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If the communication is encrypted, any payment details, you submit to us cannot be read by third parties.
Right of access, erasure and rectification
Right to restriction of processing
You have the right to obtain restriction of processing of your personal data. To do this, you can contact us at any time using the address specified under company and legal information. You have the right to obtain restriction of processing in the following cases:
If you contest the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to obtain restriction of processing of your personal data.
If the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their processing instead.
If we no longer need the personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims, you have the right to request a restriction of processing instead of erasure.
If you have objected to processing pursuant to Article 21(1) pending the verification whether our legitimate grounds override yours. As long as it is not clear whose legitimate interest is overriding, you have the right to obtain restriction of processing of personal data.
Where you have restricted the processing of your personal data, such personal data can, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
Objection to promotional emails
We hereby expressly object to third parties using our contact information published as part of the company and legal information to send unsolicited advertising and information materials. The website operator expressly reserves the right to take legal action against senders of unsolicited promotional information by email i.e. spam.
4. Data collection on this website / cookies
We use so-called cookies in certain areas of our website. Cookies do not damage your computer and do not contain viruses. They are used to make our website more user-friendly, effective and secure. Cookies are small text files stored on your computer by your browser. Most of the cookies we use are so-called "session cookies." They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you erase them. These cookies allow us to recognise your browser the next time you visit.
Server log files
The website provider automatically collects and stores data in so-called server log files, which your browser automatically transmits to us. These data include:
Browser type and browser version
Operating system used
Hostname of the accessing computer
Time of the server request
The data obtained in this way will not be linked to other data sources.
The legal basis for collection of this data is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically correct display and optimisation of its website; for this purpose, the server log files must be stored.
If you use the contact form to send us a query, we will store the information you enter into the form, including your contact details to process your query and to deal with any follow-up questions you may have. We will not share this information without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of queries directed at us (Article 6 (1) (f) GDPR) or on your consent (Article 6 (1) (a) GDPR), provided that the relevant consent has been obtained. We will keep the data submitted through the contact form until you ask us to erase the data, withdraw your consent to storage of your data or the data is no longer needed for the purpose for which it has been collected (e.g. after we have completed the processing of your query). This is without prejudice to mandatory provisions and in particular, statutory retention requirements.
Inquiries by email, telephone or fax
If you contact us by email, telephone or fax, we will process and store your data (name, query details) to deal with your query. We will not share this information without your consent.
This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases the processing is based on your consent (Article 6 (1) (a) GDPR) and / or on our legitimate interests ( Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of queries directed at us. We will keep the data submitted through the contact form until you ask us to erase the data, withdraw your consent to storage of your data or the data is no longer needed for the purpose for which it has been collected (e.g. after we have completed the processing of your query). This is without prejudice to mandatory provisions and in particular, statutory retention requirements.
Registration on this website
You can register on this website to use its additional functions and features. The data input will only be used for the purpose of using the respective product or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. We will use the email address specified during registration to inform you about important changes such as changes to the scope of our products or services or technically necessary changes.
The data entered during registration is processed for the purpose of performance of a contract arising from the registration and, where appropriate, for initiating further contracts (Article 6 (1) (b) GDPR).
We will continue to store the data collected during registration for as long as you remain registered on our website; the data will be subsequently erased. This is without prejudice to the statutory retention requirements.
Processing of data (customer and contract data)
We collect, process, and use personal data only insofar as it is necessary to conclude, structure or modify a contract (user data). The legal basis for processing, which is necessary for the performance of a contract or implementation of pre-contractual measures is Article 6 (1) (b) GDPR. We collect, process and use your personal data about the use of this website (usage data) only to the extent required to enable the user to use the service or to bill the user for its use.
The collected customer data will be deleted after completion of the order or termination of the business relationship. This is without prejudice to the statutory retention requirements.
Data transmission when entering into a contract for services
We only transmit personal data to third parties to the extent required for the performance of the contract with us, for example, to banks responsible for processing your payments.
Your data will not be transmitted for any other purpose unless you have given us your explicit consent to do so. Your data will not be passed on to third parties without your explicit consent, for example, for advertising purposes.
The legal basis for processing, which is necessary for the performance of a contract or implementation of pre-contractual measures is Article 6 (1) (b) GDPR.
5. Analysis tools and advertising
Unsere Webseite verwendet Funktionen des Online Marketing-Dienstes Adform der Adform Germany GmbH, Deutschland. Adform ist ein weltweit tätiges Technologieunternehmen für digitale Medienwerbung.
Adform setzt Cookies ein, um die Online-Werbeerfahrung und Werbeeffizienz zu verbessern und es uns dadurch zu ermöglichen, Ihnen zielgerichtete und maßgeschneiderte Werbung anzuzeigen und den Erfolg unserer Marketingmaßnahmen zu messen und zu optimieren. Rechtsgrundlage für die Nutzung ist Art 6 Abs 1 lit f) DSGVO (überwiegendes Interesse an der Datenverarbeitung). Über den Dienst werden Daten in lediglich anonymisierter Form erhoben, also keine Daten, die Ihre Person direkt identifizieren können, wie etwa Name, Adresse, Telefonnummer oder E-Mail-Adresse. Die Daten werden mit gemäß § 189a Ziff. 8. Unternehmensgesetzbuch mit uns konzernmäßig verbundenen Unternehmen der Denzel-Firmengruppe zur Gewährleistung der Netz- und Informationssicherheit und Systemsicherheit und -stabilität sowie zu administrativen Zwecken geteilt, nicht jedoch mit anderen Daten zusammengeführt oder an Dritte weitergegeben.
Bitte entnehmen Sie weitere Informationen zum Dienst Adform auf der Seite des Herstellers unter folgendem Link:
Die Einstellungen zu Adform sind unter 1.5 mit dem Button „Datenschutzseinstellungen öffnen“ zu verwalten.
Wir setzen auf unserer Webseite den Analysedienst PIWIK Pro des Herstellers Piwik PRO GmbH, Deutschland, und deren Cookies ein, um die Nutzung unserer Webseite zu analysieren und regelmäßig verbessern zu können. Über die gewonnenen Statistiken können wir unser Angebot zielorientierter ausrichten und für die Nutzer unserer Webseite interessanter gestalten. Rechtsgrundlage für die Nutzung ist Art 6 Abs 1 lit f) DSGVO (überwiegendes Interesse an der Datenverarbeitung).
Daten werden durch den Dienst PIWIK Pro in anonymisierter Form erhoben und verarbeitet, womit eine direkte Identifizierung Ihrer Person ausgeschlossen wird. Die Daten werden mit gemäß § 189a Ziff. 8. Unternehmensgesetzbuch mit uns konzernmäßig verbundenen Unternehmen der Denzel-Firmengruppe zur Gewährleistung der Netz- und Informationssicherheit und Systemsicherheit und -stabilität sowie zu administrativen Zwecken geteilt, nicht jedoch mit anderen Daten zusammengeführt oder an Dritte weitergegeben.
Nähere Informationen zum Dienst PIWIK Pro erhalten Sie auf der Webseite des Herstellers unter https://piwikpro.de/datenschutz/.
Wenn Sie der Datenerhebung durch den Dienst PIWIK Pro nicht oder nicht mehr zustimmen wollen, können Sie die Datenerhebung und -verarbeitung unter dem folgenden Link deaktivieren.
We have activated the IP anonymisation feature on this website. This means that Google will truncate your IP address within Member States of the European Union or other Contracting States to the Agreement on the European Economic Area before it is transmitted to the US. Only in exceptional cases will the full IP address be transmitted to Google servers in the United States and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet use. Google will not associate your IP address transmitted by your browser with any other data held by Google.
You can prevent the storage of cookies by changing the relevant settings of your browser. However, please note that if you do this you may not be able to use all the features of this website. Furthermore, you can prevent the collection of data about your use of the website (including your IP address) generated by the cookie and its processing by Google by downloading and installing the browser plugin provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Right to object to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. This sets an opt-out cookie which will prevent future collection of your data when visiting this website: <a id="ga-opt-out" href="#">Click here to opt out from Google Analytics</a>.
Data processing agreement
We have concluded a data processing agreement with Google and we fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Data stored at Google on the user and event level which are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised after 14 months or erased. For details, please refer to the following link: https://support.google.com/analytics/answer/7667196?hl=de
Google AdWords and Google conversion tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
You can set your browser to notify you every time before storing cookies and decide on a case-by-case basis, whether to accept them. You can also limit the acceptance of cookies to certain cases, block the acceptance of cookies altogether or enable automatic deletion of cookies when you close the browser. If you disable cookies you may not be able to use all the functions and features of our website.
This website uses the conversion tracking tool, Facebook pixel to track our website visitors' actions. It is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
You can also deactivate the custom audiences remarketing feature in the settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook. If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance at: http://www.youronlinechoices.com/de/praferenzmanagement/.
Microsoft Bing Advertising
This website uses conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Bing Ads). Bing Ads use so-called "cookies", which are stored on your computer, provided you have reached our website via a Microsoft Bing Ad. Microsoft Bing and we can see in this way that someone has clicked on an ad, has been redirected to our web pages and has reached a predetermined target page. We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal data is passed on to us.
For more information about data protection and the cookies used, please click here: https://privacy.microsoft.com/de-de/privacystatement
Purpose of data processing:
The analysis tool or analysis cookies are used to improve the quality of our website and its content. This helps us to find out how the website is used and through which ads users reach us, allowing us to continue optimising our website. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Microsoft on servers in the USA.
Legal basis for data processing
The legal basis for the processing of personal data is Article 6 (1) (f) GDPR, i.e. our legitimate interest. Our legitimate interest lies in the purposes specified above. To transfer data to the USA, the Microsoft Corporation has submitted to the "EU-US Privacy Shield".
Duration of storage
If you do not want Microsoft to use information about your behaviour as described above, you can reject cookies by changing your browser setting, or by selecting the appropriate settings in your browser, which will prevent cookies from being set automatically. You can also prevent the data generated by the cookie and related to your use of the website from being collected and processed by Microsoft by requesting to opt out under the following link: https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/optout-optimization.
The legal basis for this is Article 6 (1) (f) GDPR, i.e. our legitimate interest in improving our website.
If you would like to receive the newsletter offered on the website, we require a valid email address and information that allows us to verify that you are the owner of the email address and you consent to receiving the newsletter. We do not collect further data other than those you provide us with on a voluntary basis. This data will only be used to send the newsletter and will not be disclosed to third parties.
We process the data you enter into the newsletter subscription form exclusively based on your consent to the processing of personal data (Article 6 (1) (a) GDPR). You have the right to withdraw your consent that allows us to store your data and your email address and to use it to send the newsletter at any time, e.g. by clicking on the "unsubscribe" link in the newsletter. The withdrawal of consent does not affect the lawfulness of data processing based on consent before its withdrawal. We or the newsletter provider will store the data you provide us with to subscribe to the newsletter until you unsubscribe from the newsletter; the data will be subsequently erased. Data that has been stored by us for other purposes remains unaffected. After you have unsubscribed from the newsletter distribution list, we or the newsletter provider may store your e-mail address on a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be combined with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest within the meaning of Article 6 (1) (f) GDPR). The storage on the blacklist is not limited in time. You can object to the storage if your interests override our legitimate interests.
7. Plugins and tools
This website uses the Google Maps API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions and features of Google Maps it is necessary to store your IP address. This information is typically transmitted to and stored by Google on servers in the USA.
We use Google reCAPTCHA (hereinafter referred to as reCAPTCHA) on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to check whether the data entered on this website (e.g. on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the visitor enters the website. To analyse the data, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
All reCAPTCHA analyses take place in the background. Visitors to the website are not informed that an analysis is taking place.
The legal basis for this data processing is Article 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and SPAM.
We use the CRM system Zendesk to process user queries. The provider is Zendesk, Inc, 1019 Market Street in San Francisco, CA 94103 USA.
We use Zendesk to process your queries quickly and efficiently. The legal basis for the processing of your data is the legitimate interest in accordance with Article 6 (1) (f) GDPR.
Zendesk is certified as a US provider under the Privacy Shield and is thus obliged to comply with EU data protection laws and regulations. We have also concluded a data processing agreement (DPA) with Zendesk. This ensures that Zendesk only uses the user data within the framework of the EU data protection standards for processing queries and does not pass them on to third parties. This allows you to send queries by only specifying your email address and not your name.
You can also send us queries using our chat window. In this case, we also save your IP address in addition to your chat messages. It is not necessary to enter your name to use chat.
We will keep the data submitted through the contact form or chat until you ask us to erase the data or the data is no longer needed for the purpose for which it has been collected (e.g. after we have completed the processing of your query). This is without prejudice to mandatory provisions and in particular, statutory retention requirements.
If you activate push notifications for this website using the "Signalize" service, a function of your browser is used to provide the notifications to you. Only anonymous or pseudonymous data is used to send notifications. Depending on the configuration of the website, these may be:
- Identification value: a randomly generated, anonymous or pseudonymous value (example: 108bf9a85547edb1108bf9a85547edb1), which is stored in a tracking cookie ID and makes it possible to identify and retrieve the accessing browser and the notification settings.
- Pseudonymised identifiers for the identification of the device or the user
This data is only processed to deliver the notifications you have subscribed to and to configure notification-related settings. We ask for your consent to store this data. The legal basis for data processing in this case is Article 6 (1) (a) GDPR. You can object to receiving notifications at any time by changing the settings of your browser. Please click here for information about unsubscribing from push notifications in the various browsers: Google Chrome, Mozilla Firefox, Opera & Microsoft Edge.
To make the content of the push notifications meaningful to you, we use the preferences collected through the pseudonymous user profile by means of tracking pixels and combine your notification ID with the user profile of the website solely for the purpose of sending you personalised notifications. The tracking technology is also used to statistically evaluate the notifications on our behalf. In this way, it can be determined whether a notification has been delivered and whether the user clicked on it. The data generated in this way are processed and stored on our behalf by etracker GmbH exclusively in Germany and the data are thus subject to the strict German and European data protection laws and standards. In this regard, etracker has been independently checked, certified and is entitled to use the data protection seal of approval ePrivacyseal.
The data processing for the statistical analysis of notifications and to ensure that future notifications are better tailored to the interests of the recipients is based on our legitimate interest in personalised direct marketing in accordance with Article 6 (1) (f) GDPR. As the privacy of our visitors is very important to us, any personally identifiable information, such as the IP address, login or device IDs, is anonymised or pseudonymised as early as possible. This means that it cannot be traced back to any particular individual. The data will not be used for any other purpose or passed on to third parties.
You can object to the aforementioned data processing at any time.
Disable push notifications.
8. Your rights
Handling of applicant data
We offer you the opportunity to submit a job application (e.g. by email, post or using an online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We collect, process and use your data strictly in accordance with applicable data protection laws and regulations and further statutory provisions and we will treat all your data with strictest confidence.
Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) where this is necessary to decide whether to enter into an employment relationship with you.
The legal basis for this is Article 26 of the new German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6 (1) (b) GDPR (contract initiation) and - where you have given your consent - Article 6 (1) (a) GDPR. You can withdraw your consent at any time. Within our company, your personal data will only be disclosed to persons involved in the processing of your application. If the application is successful, the data you submit will be stored in our data processing systems on the basis of Article 26 (BDSG) and Article 6 (1) (b) GDPR for the purpose of implementing the employment agreement.
Data retention period
If we cannot make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data provided to us based on our legitimate interests (Article 6 (1) (f) GDPR) for a period of up to 6 months from the end of the application process (rejection or withdrawal of the application).
The data is then erased and the physical application documents are destroyed. We retain the data, in particular, as evidence in the event of a legal dispute. If it is evident that it will be necessary to retain your data after the end of the six-month period (e.g. due to an impending or pending legal dispute), the data will only be erased once it is no longer needed. Your data may be retained for longer if you have given appropriate consent (Article 6 (1) (a) GDPR) or if statutory retention requirements prevent erasure.
Voraussetzung für den Abschluss eines Abonnements ist eine positive Kreditprüfung durch ViveLaCar, eine Abfrage bei der Schufa Holding AG, Kormoranweg 5 in 65201 Wiesbaden, Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss und CRIF Bürgel GmbH, Leopoldstraße 244, 80807 München.
ViveLaCar bietet die Zahlungmittel SEPA und Kreditkarte an. Das SEPA Lastschriftmandat kann jederzeit ohne Angaben von Gründen ganz oder teilweise widerrufen werden. Es gelten dabei die mit dem Kreditinstitut des Abonnenten vereinbarten Bedingungen.
Weiterhin stimme ich zu, dass meine Daten zum Abschluss der Versicherungsvertrages für die KfZ-Versicherung, an die Allianz Allianz Versicherungs-Aktiengesellschaft, Königinstr. 28, 80802 München, weitergeleitet werden. Die Versicherungsunterlagen werden mir bei der Übernahme werden mir bei Buchungsbestätigung zur Verfügung gestellt.
Last revised: 12.07.2019