Vivid Protect

Privacy policy

This is a convenience translation. Only the German version is legally binding.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Vivid Protect GmbH
Friedenheimer Str. 70, 80686 München, Germany
Phone: +49 89 74370029
Email: info@vividprotect.de

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Beyond what is technically necessary, we use analytics services only with your prior consent (see section 3, "Usage statistics with our own counter").

Personal data is passed on to third parties only where this is permitted by law, necessary for the performance of a contract or where you have consented. The data processed generally comes from you. You are not obliged by law or contract to provide personal data; without the required information, however, we may not be able to handle your enquiry or provide our services.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

When you access this website, the hosting provider automatically collects information in server log files (IP address, date and time of access, page accessed, browser type, operating system, referrer URL). This data is used to ensure smooth operation and to improve security and is deleted after a short period. It is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure provision of the website).

Usage statistics with our own counter (only with your consent)

To understand which content is used and how enquiries come about, we count page views with our own data-minimising counter – but only if you have agreed to this in the consent banner. The counter runs on our web space at IONOS (processor, see above); no data is passed on to third parties or transferred to third countries.

Data processed. Date and hour of access, the page accessed, the previous page and the entry page within the same visit, the domain of the referring website (e.g. "google.com"), the device class (desktop, smartphone, tablet) and the browser language. For clicks on contact options (form submitted, appointment booking opened, phone or e-mail link) the type of action is also counted – without any content of the enquiry. The counter does not store IP addresses and does not set cookies; device class and language are derived from information transmitted anyway, the browser identifier itself is discarded. The entry page of your visit is only kept in the working memory of the open page. Visitors are not recognised across visits.

Legal basis. The counting script causes your browser to send the information listed above to our server. We ask for your consent for this and for the subsequent processing (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). Your choice in the banner is stored in your browser's local storage so that we do not have to ask you again on every visit (Section 25 (2) no. 2 TDDDG). If "Global Privacy Control" or "Do Not Track" is enabled in your browser, we do not count.

Retention. Individual page views are stored for 14 months and then combined into daily totals without reference to individual visits.

Withdrawal. You can withdraw your consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before the withdrawal (Art. 7 (3) GDPR).

4. Contact, call-back and claim forms

If you contact us via one of the forms on this website, we process the data you provide (name, email address, company and phone number where given, selected topics and your message) in order to handle your enquiry. The pages of our website through which you reached the form are also transmitted so that we can assign your request correctly; this information is held only in your browser's working memory for the duration of your visit and is not stored on your device. The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding or performing a contract (e.g. a broker agreement); for general enquiries the legal basis is Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry). Where you give consent via the consent checkbox, Art. 6 (1) (a) GDPR is an additional legal basis.

For the technical transmission of the forms we use the service Web3Forms. Web3Forms receives the form data and forwards it to us by email; submissions are stored by the provider in encrypted form for a maximum of 30 days and then deleted automatically. Processing takes place on Amazon Web Services (AWS) infrastructure; a transfer to third countries (in particular the USA) cannot be ruled out. Such transfers are based on standard contractual clauses of the European Commission (Art. 46 (2) (c) GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider where required. Further information: https://web3forms.com/privacy

5. Online appointment booking (Calendly)

On our contact page you can book consultation appointments via the service Calendly (Calendly LLC, 271 17th St NW, Atlanta, Georgia 30363, USA). The booking widget is only loaded after you actively click on it; only then is data (IP address and the booking details you enter) transmitted to Calendly. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. Calendly is certified under the EU-U.S. Data Privacy Framework. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Calendly. Further information: https://calendly.com/privacy

6. Data processing in the context of insurance mediation

If you instruct us to arrange or manage insurance contracts, we process the data required for this purpose (contact details, contract and risk data, and health data where applicable with separate consent) for the following purposes: advice and mediation, contract management, claims handling, communication with insurers and compliance with the statutory advice and documentation obligations under Sections 61 et seq. of the German Insurance Contract Act (VVG).

Recipients of the data are the insurers in question and — where necessary for processing — VEMA Versicherungsmakler Genossenschaft eG as broker pool and technical service provider. The legal bases are Art. 6 (1) (b) GDPR and — for special categories of data — Art. 9 (2) (a) GDPR.

After the statutory retention periods have expired (in particular under the German Commercial Code, the Fiscal Code and insurance documentation obligations), the data is deleted unless it is still required for the establishment, exercise or defence of legal claims.

7. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You may, however, contact any other data protection supervisory authority.

8. Data security

For security reasons, this website uses TLS encryption (recognisable by "https://" and the padlock symbol in the browser bar).

9. Status of this privacy policy

This privacy policy is current as of October 2026. Changes to our website or to legal requirements may make it necessary to update it.