Vivecti Group Privacy Policy

Our company places the highest priority on protecting your personal data. We process this data in strict compliance with data protection regulations, including the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable laws.

The GDPR requires us to provide you with the following information regarding the processing of your data.

Data Controller

Vivecti Group GmbH
Magirus-Deutz-Straße 13
D-89077 Ulm/Danube

Tel. +49 (0) 731-96 684-0
Fax +49 (0) 731-96 684-19
info@vivecti-group.com

Data Protection Officer

Barbara Stöferle
Magirus-Deutz-Straße 13
D-89077 Ulm/Danube

+49 (0)731.96 684-0
dsb@vivecti-group.com

If You Have Any Questions or Concerns

You can contact us at any time with any questions or concerns. You can do so by phone, mail, email, fax, or in person. You can also use the contact form on our website.

If you provide us with any data, the following applies:

personal data

  • Email address

  • Additional information you voluntarily provide to us


Purposes of processing

  • Processing your request

Legal Basis

  • Article 6(1)(a) of the GDPR

Recipients of the data

  • Internal departments and, where applicable, relevant departments within the Prospitalia Group

  • Entities to which we forward the data at your request

Retention Period
Once processing is complete, the data is archived. The data in the archive is deleted after 10 years.

Visitors to Our Website

When you visit our website, the following data is automatically processed:

personal data

  • IP address (anonymized)

  • Information automatically transmitted by your browser (your device's operating system, browser name, browser version, last page visited)

  • Time

Cookies
To ensure the website is user-friendly, a small number of cookies are technically necessary (e.g., language settings, browser information).
We conduct statistical analyses of user behavior to optimize our website. This analysis is based on Art. 6(1)(f) of the GDPR. The data collected using Matomo technology is processed exclusively on our servers. Processing is strictly anonymous; we do not perform any personal identification.
Cookies from the German provider Videolyser are technically necessary for playing videos.

Trackers
We use the Matomo system. This system compiles anonymized statistics based on website usage. Matomo is operated by us.

Purposes of processing

  • Operation of the website, including the embedding of videos,

  • Troubleshooting

  • Compilation of anonymous statistics on website usage

  • Fulfillment of the business relationship


Legal Basis

  • Article 6(1)(f) of the GDPR


Data recipients

  • none


Retention period

  • 3 months or as soon as they are no longer necessary to achieve the purpose


The website is necessary for the company's public image. The website cannot function without the processing of the aforementioned data. Therefore, there is a legitimate interest in this processing.

Contact persons at business partners

We process the contact information of our business partners as follows:

personal data

  • Name

  • Company, Company Address

  • Position, Job Title

  • Phone Number, Fax Number

  • Email Address

  • Photo (if provided, e.g., in your email signature)

  • Social media signatures and profiles (if provided, e.g., in your email signature)

  • Participation in events and webinars (if you register with us for them)


Purposes of processing

  • Establishing business relationships

  • Providing contractually agreed services

  • Facilitating contact between business partners

  • Surveys on customer satisfaction and Vivecti's services


Legal Basis

  • Article 6(1)(f) of the GDPR


Data source

  • Notification by the contact person themselves

  • Notification by another department of the business partner

Recipients of the data

  • Companies to which the contact person is provided as a reference (if the contact person has given their consent)

Retention period

  • until the end of the business relationship

Without this information, it is not possible to establish business relationships or provide the contractually agreed-upon services. Therefore, there is a legitimate interest in this processing.

Customer Contacts

We process our customers' contact information as follows:

personal data

  • Name

  • Company, Company Address

  • Position, Job Title

  • Phone Number, Fax Number

  • Email Address

  • Photo (if provided, e.g., in your email signature)

  • Social media signatures and profiles (if provided, e.g., in your email signature)

  • Participation in events and webinars (if you register with us for them)

Purposes of processing

  • Establishing business relationships

  • Providing contractually agreed services

  • Facilitating contact between business partners

  • Surveys on customer satisfaction and Vivecti's services

Legal Basis

  • Article 6(1)(f) of the GDPR

Source of the data

  • Notification by the contact person themselves

  • Notification by another department of the client

Recipients of the data

  • Companies to which the contact person is provided as a reference (if the contact person has given their consent)

Retention period

  • until the end of the business relationship

Without this information, it is not possible to establish business relationships or provide the contractually agreed-upon services. Therefore, there is a legitimate interest in this processing.

Contact Persons for Prospective Clients

When a prospective client contacts us—for example, a potential supplier—we process the supplier’s contact information as follows:

personal data

  • Name

  • Company, Company Address

  • Position, Job Title

  • Phone Number, Fax Number

  • Email Address

  • Photo (if provided, e.g., in your email signature)

  • Social media signatures and profiles (if provided, e.g., in your email signature)

Purposes of processing

  • Processing your request

  • Establishing a future business relationship

  • Providing the contractually agreed-upon services

Legal Basis

  • Article 6(1)(f) of the GDPR

Source of the data

  • Notification by the contact person themselves

  • Notification by another department of the interested party

Recipients of the data

  • none

Retention period

  • until the end of the business relationship

Without this information, it is not possible to establish business relationships or provide the contractually agreed-upon services. Therefore, there is a legitimate interest in this processing.

Applicant

Please submit your applications electronically via our career portal.

Joint data processingApplications are processed within the Vivecti Group under joint responsibility (Art. 26 GDPR). The following

companiesare involved in this process:

  • Vivecti Group GmbH

  • Prospitalia GmbH

  • PS Healthcare Services GmbH

  • h-trak GmbH

We also engage external recruitment agencies to assist with the application process; these agencies then work with us to post job listings, receive applications, select candidates, and, where appropriate, draw applicants’ attention to suitable job openings. This information, along with the name of the respective recruitment agency that shares responsibility for data processing with us in these cases, is clearly indicated in the relevant job listing.

The joint responsibility agreements stipulate that the parties jointly process the personal data of individuals who apply to the respective companies in order to enable optimal workforce planning, that is, for the purpose of establishing an employment relationship and to fulfill any legal obligations in the context of employment relationships. Furthermore, it has been agreed that each party is responsible for the data processing it carries out, meaning it independently assumes all rights and obligations arising therefrom, including the handling of data subjects’ rights. Nevertheless, data subjects may contact any of the parties at any time with their concerns and claims.

personal data

  • Data we receive from you as part of the application process

  • Information you have voluntarily provided to us as part of the application process

  • Master data (name and address, employee ID)

  • Resumes, certificates

  • Employment details (job description, probationary period, start and end dates),

  • School education, diplomas, and vocational training

  • Contact information (phone, fax, email)

  • In some cases, additional data such as date and place of birth, gender, age, religion, and nationality

  • If verification of the legality of employment is required: Submission of a work permit or authorization

  • If applicable, health data for assessing work capacity

  • Voluntary: Indication of whether a severe disability exists

Purposes of processing

  • Processing of any contractual relationships

  • Where applicable, providing tailored contract offers

  • Protection of legitimate interests (e.g., ensuring security and operations, other legitimate interests of our company

Legal Basis

  • Article 6(1)(b) of the GDPR: Justification, for the conduct and conclusion of a recruitment process

  • Compliance with a legal obligation existing in this context pursuant to Art. 6(1)(c) GDPR (where applicable, Art. 9(2)(b) GDPR in conjunction with Art. 6(1)(c) GDPR)

  • Protection of legitimate interests (Art. 6(1)(f) GDPR)

  • Compliance with legal obligations (statutory retention and documentation requirements): Art. 6(1)(c) GDPR

Source of the data

  • Notification by the applicant themselves

  • Notification by another representative of the applicant

Recipients of the data

  • Where applicable, the relevant departments of the Vivecti Group and the HR consulting firm, acting under joint responsibility

  • Data processor for applicant management: softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin. A data processing agreement pursuant to Article 28 of the GDPR has been concluded with the provider

Retention period

  • Legitimate retention periods after the application process has been completed

  • In the event of a rejection: 6 months

Other data processing activities as part of the application process
Data processing on the career portal website

We use the JSESSIONID cookie on the career page as a technically necessary session cookie. This cookie stores a so-called session ID, which allows us to associate various requests from your browser with the same session. This allows your computer to be recognized when you return to our website. This session cookie is deleted when you log out or close your browser.

Data processing for additional features of our career portal:

Functionality

Description

Legal Basis

Status updates during the application process

If you apply to us through a job board (e.g., Hellowork, Stepstone), the data you submit will be automatically transferred to our recruiting system. On some of these job portals, you have the option to track the status of your application in your account on the respective job portal. To do this, our service provider, softgarden e-recruiting GmbH, transmits the status of your application (receipt, processing of the application, rejection) to the job portal on our behalf. The status update in your account on the job board will appear with a delay (up to four weeks) so that we can inform you personally about the status of your application beforehand. For more information about data processing, please refer to the privacy policy of the respective job board through which you applied.

Art. 6(1)(b) GDPR: Initiation of an employment relationship

“Job-Abo” Subscription

To stay informed about new job openings, you can subscribe to the job newsletter or view relevant positions on our career board (RSS feed). You can refine your subscription by specifying your desired job type and location. You will also need to provide your email address to subscribe.

Art. 6(1)(a) GDPR: Consent to receive the newsletter. You may withdraw your consent to receive the newsletter at any time by clicking the unsubscribe link in the newsletter.

"Salary Statistics" Module

Our data processor, softgarden, will give you the opportunity at various stages of the application process to provide feedback on your salary expectations and the salaries offered to you. The information provided in this context will be anonymized and processed without any link to your name or contact information. softgarden processes this data in anonymized form for its own purposes (statistics, analysis, studies) and is the controller of this processing within the meaning of Article 4(7) of the GDPR.

Art. 6(1)(a) of the GDPR:

This is done only with your consent through your participation and on a strictly voluntary basis.

Online-Surveys „Easyfeedback“

At the end of the application process, softgarden may display a link inviting you to complete a survey. The survey is conducted via a service provided by easyfeedback GmbH to gather feedback on the application experience. Softgarden conducts this survey as the controller within the meaning of Article 4(7) of the GDPR and processes the collected data in an anonymized form for its own purposes (statistics, analysis, studies) as well as for the further development of softgarden products. The collection of survey data is secured by default using SSL encryption, and softgarden does not establish any personal references during the evaluation. You may discontinue the survey at any time. The data processed up to the point of discontinuation may be used for the purposes mentioned above. For more information on easyfeedback’s data protection practices, please refer to the following link: https://easy-feedback.de/privacy/datenschutzerklaerung..

Art. 6(1)(a) GDPR:

Your participation in the survey is entirely voluntary, and by participating, you consent to the processing of your data. softgarden processes the data for evaluation purposes in an anonymized form.

Talentpool

IAs part of your application or by clicking the “Get in Touch” button, you have the opportunity to apply to join our talent pool. This data processing is necessary to automatically consider you for future job postings, including similar or otherwise suitable positions. If you register for the talent pool via the “Get in Touch” button, the following information will be requested:

  • Title, academic title (optional)

  • First name, last name, email address

  • Job fields of interest

  • Current career level

  • Preferred location(s)

  • XING profile or resume

Art. 6(1)(a) GDPR:

Inclusion in the talent pool is entirely voluntary and requires your consent, as well as the use of an opt-in link. The legal basis is



The processing of this data is necessary for the recruitment process. An employment contract cannot be established without the provision of this data.

Your Rights

You have the following rights regarding the processing of your personal data:

  • Access to your personal data (Art. 15 GDPR)

  • Rectification of inaccurate data (Art. 16 GDPR)

  • Erasure, where legally permitted (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Receipt of your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR)

  • Objection to processing (Art. 21 GDPR)

  • Lodging a complaint with a supervisory authority (Art. 77 GDPR)



Some processing activities are based on your consent (e.g., handling a request, retaining job applications for longer than 3 months).

In these cases, you have the right to withdraw your consent at any time with future effect.

Ulm, August 7, 2024