Privacy Policy

Information on data processing for this website pursuant to Art. 13 of the EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject

Version: GDPR 3.0, February 2026

VIAVENDO | evolving sales is the controller for this website and, as a provider of a telemedia service, is required to inform you at the beginning of your visit about the nature, scope and purposes of the collection and use of personal data in a precise, transparent, intelligible and easily accessible form, using clear and plain language. This information must be available to you at all times.

We attach the greatest importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of currently applicable European and national legislation.

With the following privacy notices, we would like to explain how we handle your personal data and how you can contact us:

VIAVENDO | evolving sales
Henkelstr. 34
87437 Kempten (Allgäu)
Germany
Owner: Marcus Dobberstein
Phone: +49 8304 30 999 20
Email: info@viavendo.com

Our Data Protection Officer

Sven Lenz
Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50
87435 Kempten
Germany

If you have any questions about data protection or other data privacy concerns, please send an email to the following address: datenschutz@viavendo.com

A. General

For better readability, we refrain from gender-specific differentiation. In the spirit of equal treatment, the relevant terms apply to all genders. The meaning of the terminology used, such as "personal data" or "processing", can be found in Art. 4 GDPR.

The personal data processed in connection with this website includes:

• Master data (e.g. names and addresses of customers)
• Contract data (e.g. services used)
• Usage data (e.g. pages visited on our website)
• Content data (e.g. entries in online forms)

B. Specific

Privacy Notices

We ensure that we only process your data in connection with handling your enquiries, for internal purposes and to provide the services or content you have requested.

Legal Basis for Data Processing

We only process your personal data in compliance with the relevant data protection regulations. The legal bases are:

• Provision of our contractual services
• Processing is a legal requirement
• Your electronic consent (e.g. newsletter registration)
• Enforcement of our legitimate interests

We would like to show you where the above legal bases are regulated:

• Processing for the fulfilment of our services and implementation of contractual measures
  Art. 6 (1) lit. b) GDPR
• Processing for compliance with our legal obligations
  Art. 6 (1) lit. c) GDPR
• Consent
  Art. 6 (1) lit. a) and Art. 7 GDPR
• Processing to safeguard our legitimate interests
  Art. 6 (1) lit. f) GDPR

Data Transfer to Third Parties

Data is only transferred to third parties insofar as this is necessary for the fulfilment of our contractual obligations, we are legally obliged to do so, or you have given your consent. If you have consented to the use of analytics or marketing cookies in the cookie banner, data will be transferred to the following third parties:

• Google Ireland Limited (Google Analytics, Google Ads, Google Tag Manager) – web analytics and advertising

Without your consent, no data will be transferred to these service providers.

Data Transfer to a Third Country or International Organisation

A third country is any country in which the GDPR is not directly applicable law. This generally includes all countries outside the EU or the European Economic Area.

Data is only transferred to a third country if you have consented to the use of analytics or marketing cookies. In this case, data may be transferred to Google LLC (USA). Google LLC is certified under the EU-U.S. Data Privacy Framework. In addition, the EU Standard Contractual Clauses apply as a further safeguard.

Retention Period for Your Personal Data

We adhere to the principles of data minimisation and data avoidance. This means we only store your data for as long as is necessary to fulfil the aforementioned purposes or as required by the various statutory retention periods. Once the respective purpose ceases to apply or after the relevant periods have expired, your data will be routinely blocked or deleted in accordance with statutory provisions.

We have established an internal policy to ensure this procedure is followed.

Contact

If you contact us via the website, you agree to electronic communication. When you contact us electronically, personal data is processed. The information you provide will be stored exclusively for the purpose of processing your enquiry and for possible follow-up questions.

Legal basis: Processing for the fulfilment of our services and implementation of contractual measures – Art. 6 (1) lit. b) GDPR

Please note that emails may be read or altered by unauthorised persons during transmission without being noticed. Furthermore, we would like to inform you that we use software to filter unsolicited emails (spam filter). The spam filter may reject emails if they are falsely identified as spam due to certain characteristics.

What Are Your Rights?

• a) Right of access
  You have the right to obtain free information about your stored data. Upon request, we will inform you in writing which personal data we have stored about you. This also includes the origin and recipients of your data as well as the purpose of the data processing.
• b) Right to rectification
  You have the right to have inaccurate data stored by us corrected. You may also request a restriction of processing, e.g. if you contest the accuracy of your personal data.
• c) Right to restriction of processing
  Furthermore, you may have your data restricted. To ensure that a restriction of your data can be observed at all times, these data must be kept in a blocking file for control purposes.
• d) Right to erasure
  You may request the deletion of your personal data, provided there are no statutory retention obligations. Where such an obligation exists, we will restrict your data upon request. If the relevant legal conditions are met, we will also delete your personal data without your request.
• e) Right to data portability
  You are entitled to request that we provide you with the personal data you have transmitted to us in a format that allows transfer to another party.
• f) Right to lodge a complaint with a supervisory authority
  You have the right to lodge a complaint with a data protection supervisory authority.

The competent data protection authority for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Fax: +49 981 53-981300

You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html

Note: A complaint may also be directed to any data protection supervisory authority within the EU.

g) Right to object
You have the right at any time, on grounds relating to your particular situation, to object to the processing of your data pursuant to Art. 6 (1) lit. e) and f) GDPR; this also applies to profiling based on these provisions.

VIAVENDO | evolving sales will then no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct marketing. It is sufficient to send us a corresponding email.

h) Right to withdraw consent
You have the right at any time to withdraw your consent to the processing of your data with effect for the future without giving reasons. No disadvantages will arise for you as a result of the withdrawal. It is sufficient to send us a corresponding email.

Such a withdrawal does not, however, affect the lawfulness of the processing carried out on the basis of Art. 6 (1) lit. a) GDPR up to the time of the withdrawal.

To exercise your data subject rights, please send an email to the following address: datenschutz@viavendo.com

Protection of Your Personal Data

We implement contractual, technical and organisational security measures in accordance with the state of the art to ensure compliance with data protection legislation and thus to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

Security measures include, in particular, the encrypted transmission of data between your browser and our server. For this purpose, 128-bit SSL (AES 128) encryption technology is used.

Your personal data is protected within the framework of the following measures (extract):

• a) Maintaining the confidentiality of your personal data
  To maintain the confidentiality of the data stored by us, we have implemented various measures for access control, entry control and access restriction.
• b) Maintaining the integrity of your personal data
  To maintain the integrity of the data stored by us, we have implemented various measures for transfer control and input control.
• c) Maintaining the availability of your personal data
  To maintain the availability of the data stored by us, we have implemented various measures for order control and availability control.

The security measures in place are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our website due to the inherently insecure nature of the internet. Any data transmission by you is therefore at your own risk.

Protection of Minors

Persons under the age of 16 may only provide personal information to us if they have the express consent of a parent or legal guardian. Such data will be processed in accordance with this privacy policy.

Server Log Files

The provider of this website automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The legal basis for data processing is Art. 6 (1) lit. f) GDPR (our legitimate interest).

Cookies

Cookies are small text files that are stored locally in the cache of your internet browser. Cookies enable, for example, the recognition of your internet browser. The files are used to help the browser navigate the website and to use all functions to their full extent.

Cookie Consent Manager

Our website uses its own cookie consent manager (without an external service provider). When you first visit the website, you will be informed about the use of cookies and can grant or refuse your consent for individual cookie categories. Your settings are stored in your browser (localStorage) and taken into account on each subsequent visit.

You can change your cookie settings at any time via the "Cookie Settings" link in the footer of our website.

Legal basis: Art. 6 (1) lit. a) GDPR (consent) for analytics and marketing cookies; Art. 6 (1) lit. f) GDPR (legitimate interest) for technically necessary cookies; § 25 TDDDG (TTDSG).

Cookie Categories

We distinguish the following cookie categories:

• Technically necessary cookies: These cookies are required for the operation of the website (e.g. session management). They are set without consent. Legal basis: Art. 6 (1) lit. f) GDPR.
• Analytics cookies: These cookies help us understand how our website is used (e.g. Google Analytics). They are only set with your explicit consent. Legal basis: Art. 6 (1) lit. a) GDPR.
• Marketing cookies: These cookies are used for advertising purposes (e.g. Google Ads Conversion Tracking, Remarketing). They are only set with your explicit consent. Legal basis: Art. 6 (1) lit. a) GDPR.

Google Consent Mode v2

Our website uses Google Consent Mode v2. Google services (Analytics, Ads) are configured so that they only set cookies and process personal data after your explicit consent. Without your consent, no tracking cookies are set and no personal data is transmitted to Google.

Google Tag Manager

Our website uses Google Tag Manager (GTM), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GTM is a technical tool that does not itself collect personal data. GTM triggers other tags, which in turn may collect data. GTM does not access this data. The service is only loaded if you have consented to analytics or marketing cookies.

Legal basis: Art. 6 (1) lit. a) GDPR (consent).

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only activated if you have consented to the "Analytics cookies" category in the cookie banner.

Google Analytics uses cookies that enable analysis of your use of the website. The information generated is usually transferred to a Google server and stored there. We use IP anonymisation, so that your IP address is truncated by Google within the EU/EEA.

Purpose: Analysis of website usage, creation of reports on website activity.

Retention period: Up to 14 months (anonymised/aggregated).

Legal basis: Art. 6 (1) lit. a) GDPR (consent).

Withdrawal: You can withdraw your consent at any time via "Cookie Settings" in the footer.

Further information: Google Privacy Policy

Google Ads & Conversion Tracking

Our website uses Google Ads Conversion Tracking, a service provided by Google Ireland Limited. When you reach our website via a Google advertisement and have consented to the "Marketing cookies" category, a conversion tracking cookie is set.

This cookie is used to measure the success of our advertisements. No personal data that directly identifies you is transmitted. Google uses the information to compile conversion statistics for us.

Purpose: Measurement of advertisement success, optimisation of advertising campaigns.

Retention period: 90 days (conversion cookie).

Legal basis: Art. 6 (1) lit. a) GDPR (consent).

Withdrawal: Via "Cookie Settings" in the footer or at Google Ads Settings.

Google Remarketing

We may use the remarketing function of Google Ads. This allows us to display targeted advertisements to visitors of our website within the Google advertising network. The function is only activated if you have consented to the "Marketing cookies" category.

Legal basis: Art. 6 (1) lit. a) GDPR (consent).

Data Transfer to Third Countries (Google Services)

When using Google services, personal data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection (adequacy decision of the European Commission pursuant to Art. 45 GDPR). In addition, the EU Standard Contractual Clauses apply.

Vivi Chat Widget (viavendo.ai)

Our website integrates a chat widget from the VIAVENDO platform (app.viavendo.ai). This widget enables communication with our AI agent "Vivi". When using the chat widget, the messages you enter are processed in order to provide you with answers. Data processing takes place on servers in Germany.

Purpose: Provision of an interactive advisory and information function.

Legal basis: Art. 6 (1) lit. f) GDPR (legitimate interest in providing an advisory service).

Note: Please do not share sensitive personal data in the chat.

Registration/Login Viavendo Sales Cloud

As our customer, you will receive access credentials for our Sales Cloud and can log in on our website by providing personal data, or register directly here. The personal data processed for registration is determined by the registration form used. You can only register here if you have received an ILIAS registration code from us. You may voluntarily provide all further information through use of our portal.

When you use our portal, we store your data required for the fulfilment of the contract, including any payment details, until you permanently delete your account. The legal basis for this is Art. 6 (1) lit. b GDPR.

We also store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis for this is Art. 6 (1) lit. f GDPR.

Social Networks

In addition to this online offering, we also maintain presences on various social media platforms, which you can access via the corresponding buttons on our website. When you visit such a presence, personal data may be transmitted to the social network provider. It is possible that, in addition to the data you specifically enter on that social medium, further information may also be processed by the social network provider.

Changes to Our Privacy Policy

We reserve the right to amend our privacy policy at short notice to ensure it always complies with current legal requirements or to implement changes to our services. This may concern, for example, the introduction of new services. The new privacy policy will then apply to your next visit.