Privacy Policy Oviavo GmbH

In the following, we, Oviavo GmbH Wattstraße 11, 13355 Berlin (hereinafter „Oviavo“ or „we“) inform visitors to our website https://oviavo.com/ (hereinafter “Website”) and persons (hereinafter “Members”) who are enabled by their employer to make use of our benefits within the scope of their employment relationship in  accordance with our General Terms and Conditions for Members at https://oviavo.com/terms-members (hereinafter “Oviavo Benefits”) and their partners (hereinafter collectively “Users”) about the processing of their personal data by us and by third parties commissioned by us or other third parties, as well as about the claims and rights to which data subjects are entitled under data protection regulations, in particular the European General Data Protection Regulation (GDPR). 

Personal data in the sense of the GDPR are all data relating to a specific or identifiable person, e.g. name, address, e-mail addresses, user behavior.

We provide separate information about recipients of data, including service providers commissioned by us, under Section 6. 

In the event that links to third-party providers are clicked on within the framework of the website, the data protection provisions of these third parties will apply exclusively. Oviavo does not check the data protection provisions of third parties and is not responsible for further data processing. 

1. Controller

The controller responsible for processing of personal data is:

Oviavo GmbH
Wattstraße 11
13355 Berlin

+49 178 3375743
datenschutz@oviavo.com

Data processing within the scope of Oviavo Benefits is carried out as joint controller with the respective employer (see Section 6.1) and in part by the respective service providers as independent controller (see Section 6.2).

2. Data processing when visiting the Website

Each time the Website is visited, we collect personal data that the browser used to access the Website transmits to our server. In doing so, we collect the following access data, which is technically necessary for us to display our website and to be able to offer the content offered through it, including the Oviavo Benefits, as well as to ensure stability and security. The access data includes the IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, language and version as well as type of browser software, notification of successful retrieval.  

We process the aforementioned data in accordance with Art. 6 para. 1 s. 1 lit. f GDPR to protect the legitimate interests of us or of third parties. In particular, we pursue the following legitimate interests:

  • Ensuring IT security, in particular the security of the Website,
  • Assertion of legal claims and defense in legal disputes.

In addition, we statistically evaluate the use of the website by its visitors using the services of Heap Analytics (see section 7.3 (2)) and Google Analytics (see section 7.3 (3)). 

3. Data processing when contacting us; newsletter

3.1. Contact 

When contacting us (e.g. via e-mail), we process the information provided to us (e-mail address, name, telephone number, if applicable, and the content of the inquiry) in order to respond to the inquiry. The legal basis of the processing is Art. 6 para. 1 s. 1 lit. b GDPR if the subject of the inquiry is (pre-)contractual information, in accordance with Art. 6 para. 1 s. 1 lit. f GDPR if there is a legitimate interest on the part of Oviavo or in accordance with Art. 6 para. 1 p. 1 lit. a or Art. 9 para. 2 lit. a GDPR if we have been provided with information that serves neither (pre-)contractual purposes nor our legitimate interests and/or contains special categories of personal data (see Section 4).

3.2. Newsletter

We will inform people who register for the Oviavo newsletter with their e-mail address about us and our services. Only a valid e-mail address is required to register for the newsletter. We use the so-called double-opt-in procedure to register for our newsletter. This means that after registration we send an e-mail to the specified e-mail address in which we ask the recipient to confirm that he or she wishes to receive the newsletter. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of this procedure is to document the respective consent and, if necessary, to be able to clarify a possible misuse of personal data. 

After confirmation, we process the respective e-mail address for the purpose of sending the newsletter. The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file via which technical information on the browser and operating system used by the recipient, as well as the respective IP address and the time of the respective retrieval of the newsletter, are processed. We also use this information to better understand the interests of newsletter recipients and to improve our newsletters and their content.

At the end of each newsletter there is a link that can be used to unsubscribe from the newsletter at any time. The newsletter can also be unsubscribed at any time by sending a message to support@oviavo.com. Upon unsubscribing from the newsletter, the personal data stored for the purpose of providing the newsletter will be deleted, unless there is a legal obligation to retain such data. 

The legal basis for sending and evaluating the usage behavior of newsletter recipients is the respective consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. This consent can only be withdrawn together for the receipt of the newsletter and the evaluation of the usage behavior.

To send our newsletter, we use the MailChimp service of the company The Rocket Science Group, LLC (see section 7.3 (5)), to which the above data is also transmitted. 

4. Data processing „Oviavo Benefits“

In the following, we provide information on the type, scope and purpose of the processing of personal data in connection with the use of Oviavo Benefits, including the Members Portal in accordance with our General T&Cs for Members at https://oviavo.com/terms-members/ (hereinafter “User Agreement”). 

The use of the Oviavo Benefits is voluntary. Oviavo points out that for effective use, it is necessary for us to process personal data of Users that is as specific as possible and in some cases also very intimate. So-called “special categories of personal data” (Art. 9 GDPR) therefore also become relevant, in particular health data, data on sexual life or sexual orientation, which we may only process on the basis of the express consent of the Users concerned.

4.1. Onboarding

Oviavo provides its services to Members, i.e. those employees whose eligibility has been previously determined by Oviavo’s cooperation partner (hereinafter referred to as the “Employer”). 

For this purpose, the Employer provides us with the following personal data of Members as part of the “onboarding” process

  • First and last names,  
  • personnel numbers,
  • work e-mail addresses, 
  • start date of eligibility,
  • if applicable: end date of eligibility.

We require this information in order to identify the respective Member upon registration (Section 2.2) and to be able to create an account for the use of the Members Portal (hereinafter “Member Account”). The work email address will also be used by Oviavo to contact the Member for the first time. The above purposes also give rise to our legitimate interest pursuant to Art. 6 para 1 s. 1 lit. f GDPR.

The cooperation between Oviavo and the Employer for the purpose of the Oviavo Benefits takes place by way of a joint controller agreement in accordance with Art. 26 GDPR (for the main contents of this agreement, see section 7.1).

4.2. Registration in the Members Portal

When using the Members Portal for the first time, Member must register with their respective work e-mail address and by choosing a password. In addition, the private address must be provided. We process this information in accordance with Art. 6 para 1 s. 1 lit. b GDPR in order to be able to offer the respective Member a secure and personal Member Account as well as individual consulting services with consideration for the local accessibility of service providers. 

In addition, Member can voluntarily decide whether they would prefer to be contacted via their private email address instead of the work email address in the future. If a private e-mail address is stored, this is done on the basis of the express consent of the respective Member pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. Here we use the so-called double opt-in procedure. This means that after registration, we send the respective Member an e-mail to the private e-mail address provided, in which we ask for confirmation that the e-mail address is actually to be used. If the registration is not confirmed within 24 hours, the respective e-mail address is blocked and automatically deleted after one month. In addition, we store the IP addresses used and the times of registration and confirmation. The purpose of the procedure is to be able to prove the respective registration and, if necessary, to clarify a possible misuse of personal data.  

4.3. Using the Oviavo Benefits

(1) Specification of personal information

After registration (section 4.2), the following additional information of the Member will be requested, which can also be changed at a later time if the option “I just want to browse” is selected:

  • Date of birth,
  • physical sex,
  • information about the desire to have children,
  • information about partner situation,  
  • optional: Gender identity.

We process the above information pursuant to Art. 9 (2) lit. a GDPR on the basis of the express consent of the respective member, which can be withdrawn at any time with effect for the future. However, we would like to point out that we can provide the Oviavo Benefits most efficiently if we are able to process as much of this information as possible. 

(2) Consultations and further communication with Oviavo

Members can use the Members Portal to make an appointment for a telephone consultation with a competent Oviavo employee. For this purpose, we use a service of the service provider Calendly LLC. In this process, the name of the respective Member as well as the date and time of the booked consultation are transmitted to Calendly LLC (for more information on Calendly, see Section 7.3 (4)).

All information that Member provide to an Oviavo employee in the context of a consultation, as well as the phone number used in each case, will be processed by Oviavo in accordance with Art. 6 para. 1 s. 1 lit. b GDPR, insofar as this is necessary for the provision of Oviavo’s services in accordance with the User Agreement and/or in accordance with Art. 6 para. 1 s. 1 lit. a or Art. 9 Para. 2 lit. a GDPR (insofar as it concerns special categories of personal data) based on the express consent of the Members.

Such information may include, in particular (as applicable):

  • Type and name of health insurance, 
  • Partner status (single, registered partnership, married, etc.),
  • cycle dates,
  • contraceptive methods,
  • desire to have children,
  • pre-existing medical conditions

In addition, the e-mail addresses of the Members (if specified, private, otherwise work e-mail) can also be used by Oviavo to provide Members with information on the specific contractual relationship between Oviavo and the respective Member in accordance with Art. 6 para. 1 s. 1 lit. b GDPR, as well as for advertising purposes (see section 4.6).

(3) Partnership Declaration

Within the scope of the User Agreement, services can also be reimbursed by the Employer which – if the relevant requirements are met, in particular the submission of a Oviavo partnership declaration – are provided for the benefit of/to a partner of a Member. Within the scope of the partnership declaration, the contact data of the respective partner (first name/last name, private address, telephone number) as well as the respective signature of the member and his/her partner will be processed by Oviavo in accordance with Art. 6 para. 1 s. 1 lit. b GDPR for the purpose of implementing the User Agreement. 

In the event of a consultation with the partner, the personal data mentioned above under section 4.3 (1) and (2) will be processed by Oviavo – if applicable. The processing is carried out in accordance with Art. 6 para. 1 s. 1 lit. b GDPR, insofar as this is necessary for the provision of services by Oviavo in accordance with the User Agreement with the respective Member, and/or in accordance with Art. 6 para. 1 s. 1 lit. a or Art. 9 para. 2 lit. a GDPR (insofar as it concerns special personal data) based on the express consent of the Partner to this. 

(4) Contacting Service Providers through Oviavo 

Insofar as this is expressly requested by a Member and/or its partner, Oviavo will contact the Service Provider selected in each case and transmit the necessary personal data of the Member and/or its partner to it in accordance with Art. 6 para. 1 s. 1 lit. b GDPR, insofar as this is necessary for the provision of services by Oviavo in accordance with the User Agreement and/or in accordance with Art. 6 para. 1 s. 1 lit. a or Art. 9 para. 2 lit. a GDPR (insofar as special categories of personal data is involved) on the basis of the express consent of the data subject in each case. The consulting Oviavo employee will always inform the Member and/or its partner in advance about the content of the personal data to be transmitted in each case.

4.4. Reimbursement of costs by the employer

In order for Member to be able to claim their budget within the framework of the Oviavo Benefits, Oviavo determines the respective amount on the basis of the invoices submitted by the Member and/or other documents from which the eligible services clearly result, as well as from declarations of the competent health insurance company, if applicable. This processing is carried out in accordance with Art. 6 para. 1 s. 1 lit. b GDPR, insofar as this is necessary for the provision of services by Oviavo in accordance with the User Agreement and/or in accordance with Art. 6 para. 1 s. 1 lit. a or Art. 9 para. 2 lit. a GDPR (insofar as special categories of personal data is involved) on the basis of the express consent of the data subject in each case.

Subsequently, Oviavo informs the employer in accordance with Art. 6 para. 1 s. 1 lit. b GDPR to what extent the Member has used its budget. However, the Employer does not receive any further information (see also Section 7.1).

4.5. Analysis of the Use of the Members Portal

Oviavo will continue to collect statistical data on the use of the Members Portal by Member (and their partners, if applicable), which will be reported to the Employer in aggregated form and no conclusions can be drawn about the individual Member and their partners. This includes, for example, the following information:

  • Number of registered Member,
  • number of active Member (log-ins),
  • number of booked phone consultation,
  • amount of budget used by all Member of the respective Employer.  

For the evaluation, we use the analytics processor Heap Analytics in accordance with Art. 6 para. 1 s. 1 lit. a GDPR (see Section 7.3 (2)).

4.6. Feedback and participation in user surveys

Oviavo also uses the email addresses of Member (where specified, private, otherwise official) to ask Member for feedback on the Oviavo Benefits or to participate in user surveys. Such an approach is based on our legitimate interest within the meaning of Art. 6 para. s. 1 lit. f GDPR in improving the Oviavo Benefits. The recipients of such e-mails can object to this approach at any time by clicking on the link at the end of an e-mail or by contacting Oviavo, e.g. via support@oviavo.com.

For the user surveys, we use the email and analysis processor Mailchimp in accordance with Art. 6 para. 1 s. 1 lit. a DSGVO (see section 7.3 (6)).

5. Internal processing

We process the personal data mentioned above under Sections 2 to 4 within the scope of administrative tasks as well as for the organization of our operations, and to comply with legal obligations, such as archiving. The legal bases for this are Art. 6 para. 1 s. 1 lit. b, c or f GDPR. Accordingly, the purpose and our interest in processing lie in the maintenance of our business activities, the performance of our legal duties and the provision of our contractual services. All data is also stored in our Hubspot customer relationship management tool (see section 7.3 (5)). 

6. Storage duration

We delete the data mentioned in the above Sections 2 to 4 after the storage is no longer required or restrict the processing if there are statutory retention obligations. In particular, the storage duration is determined by the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are usually 3 years, but in certain cases can be up to 30 years. In particular, we are subject to various retention and documentation obligations, which result, among other things, from the German Commercial Code (HGB), the German Fiscal Code (AO), and the German Money Laundering Act (GwG). The retention and documentation periods specified there are 2 to 10 years. 

7. Transmission of personal data to third parties

7.1. Employer as joint controller within the framework of Oviavo Benefits

The data processing operations described in Section 4 above are carried out on the basis of and within the framework of a cooperation agreement between Oviavo and the respective Employer, as well as by way of joint controller within the meaning of Art. 26 GDPR and corresponding data protection legal agreement.

Oviavo points out that the Employer only receives knowledge of personal data to the extent described in this data protection declaration (see Sections 4.1., 4.4.). In particular, the employer will not receive any information about services utilized, special categories of personal data (see Section 4) and/or about any existing partnerships.

The contact point for questions regarding data processing within the scope of Oviavo Benefits and for the purpose of asserting data subject rights (See Section 8) is Oviavo. However, data subjects are free to also contact the respective Employer for this purpose.

7.2. Service Provider

Insofar as Oviavo transmits (special) personal data to Service Providers as described in Section 4.3 (4), the subsequent processing by the service providers shall be carried out under their own and separate responsibility under data protection law.  

7.3. Others/processors 

Within the Oviavo company, those departments receive access to personal data that need it to fulfill our contractual and legal obligations. Processors used by us (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories of IT services, logistics, telecommunications, debt collection, advice and consulting, and sales and marketing. Data is only passed on to third parties within the framework of legal requirements. We only transmit personal data to third parties if this is necessary, for example, on the basis of Art. 6 para. 1 s. 1 lit. b GDPR for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f GDPR in the economic and effective operation of our business operations, or if the data subject has consented to the transmission of data pursuant to Art. 6 para. 1 s. 1 lit. a or Art. 9 para. 2 lit. a GDPR (insofar as special categories of personal data is concerned). 

(1) Amazon Web Services Inc (web hoster)

Oviavo works with the external web hoster Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA (hereinafter “Amazon Web Services”), through which we are able to offer our Website and the Members Portal online and to process the data described in Sections 1 to 4 securely and efficiently. In the process, all information that is generated in the course of using the Website, including the Members Portal, is transmitted to Amazon Web Services and stored there until we delete it. Amazon Web Services is certified according to the ISO 27001, ISO 27017 and ISO 27018 standards, which includes aspects such as data security, data protection and fail-safe operation. The data centers used by Amazon Web Services are located within Germany in the Amazon Web Services Frankfurt region. Any transfer to a country outside the EU or the EEA that may be necessary in individual cases is carried out on the basis of data protection guarantees pursuant to Art. 45 et seq. GDPR, in particular in the form of a data transfer agreement containing the standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. The use of Amazon Web Services is based on our legitimate interest pursuant to Art. 6 para 1 s. 1 lit. f GDPR in using the services of a web hoster for the provision of our services. More information on data privacy at Amazon Web Services: https://aws.amazon.com/de/privacy/.

(2) Heap Inc (web analytics)

We use Heap Analytics, a web analytics service provided by Heap Inc, 116 Natoma St, San Francisco, CA 94105, USA (hereinafter “Heap Analytics”, see also Sections 2 and 4.3 (2)).

Heap Analytics uses cookies to enable an analysis of the user behavior of Website visitors (of the “Login” and “Registration” web pages) and of Members when logging in to and within the Members Portal. Cookies are small text files that are stored on the terminal device used when calling up the Website. The information generated about the use of the Members Portal includes user behavior, browser type and version, operating system used, referrer URL (the previously visited website, host name of the accessing computer (IP address) and time of server request. The information generated by the cookies about user behavior is transferred to a server of Heap Analytics in the USA within the framework of a data protection agreement that contains the standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR and stored there until we request Heap Analytics to delete it. 

The use of Heap Analytics is based on the express consent of the respective Website visitor/Member pursuant to Art. 6 para. 1 s. 1 lit. a DSGVO.

More information on data privacy with Heap Analytics: https://heap.io/privacy

(3) Google Analytics

Oviavo uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter collectively “Google”). 

Google Analytics uses “cookies”, which are text files placed on the User’s computer, to enable an analysis of the use behavior with regards to the Website and/or Members Portal. In particular, the following information is processed: Browser type/version, operating system used, referrer URL (the previously visited page), IP address, time of server request. The information generated by the cookie about the use of the website and the Members Portal will be transmitted to and stored by Google on servers in the United States. We use IP anonymization so that the respective IP address is shortened by Google within member states of the European Union or in other contracting states of the agreement on the European Economic Area (EEA) before it is transferred to a third country such as the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Any transfer to a country outside the EU or the EEA that may be necessary in individual cases takes place on the basis of data protection guarantees pursuant to Art. 45 et seq. GDPR, in particular in the form of a data transfer agreement that contains the standard data protection clauses approved by the EU Commission. On behalf of Oviavo, Google will use this information to evaluate the use of the Website and the Members Portal and to provide further services to Oviavo related to this and the use of the Internet. The (shortened) IP address transmitted by a browser as part of Google Analytics will not be merged with other Google data. The storage of cookies can be prevented by a corresponding setting of the browser software and/or our cookie banner; however, it is possible that in this case not all functions of the Website and/or the Members portal can be used to their full extent. 

The use of Google Analytics is based on the express consent of the respective website visitors in accordance with Art. 6 para. 1 s. 1 lit. a GDPR.

More information on terms of use and data privacy:  http://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=en&gl=de

(4) Calendly LLC (booking of consultations)

For simple, fast and uncomplicated booking of consultations, we use the tool Calendly by the Calendly LLC based in the USA (hereinafter “Calendly”, see also Section 4.3 (2)). When using Calendly, personal data such as name, email address and phone number as well as a request for an consultation are requested. In addition, further voluntary information is possible. The information provided in the request form will be transmitted to Calendly and stored under a data protection agreement until we request deletion. The transfer of data to the USA takes place within the framework of an agreement under data protection law, which contains the standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. 

The use of Calendly is based on our legitimate interest pursuant to Art. 6 para s. 1 lit. f GDPR in using the services of a third party to simplify technical operating procedures when scheduling consultations.

More information on data privacy at Calendy: https://calendly.com/pages/privacy; https://help.calendly.com/hc/de/articles/360007032633-DSGVO-FAQs#1.

(5) HubSpot (Customer Relationship Management)

Oviavo uses the Customer Relationship Management Tool of the processor HubSpot (hubspot.com), 25 First Street, Cambridge, MA 02141 USA (hereinafter “Hubspot”), in order to be able to provide the services in connection with the Oviavo Benefit to the Members more quickly and efficiently. This results in a legitimate interest pursuant to Art. 6 para. 1 s. 1 lit. f. GDPR. For this purpose, the data mentioned under sections 3 and 4 are transmitted to Hubspot and stored within the scope of our instructions until we request deletion. In this context, it is possible that data will also be transferred to servers of companies affiliated with Hubspot that are located outside the EU and the EEA (“third countries”). The transfer to such third countries takes place within the framework of an agreement under data protection law, which contains the standard data protection clauses pursuant to Art. 46 para. it. c GDPR. 

More information on data privacy at Hubspot: 

https://legal.hubspot.com/de/privacy-policy

https://www.hubspot.de/data-privacy/gdpr

(6) Mailchimp (Newsletter)

We use the Mailchimp service of the company The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter “Mailchimp”) to send our newsletter (see also section 3.2). When registering for our newsletter, the e-mail address used in each case is transferred to a Mailchimp server in the USA and stored there in accordance with our instructions until the newsletter is cancelled as described in section 3.2. The transfer of data to the USA takes place within the framework of an agreement under data protection law, which contains the standard data protection clauses in accordance with Art. 46 Para. 2 lit. c DSGVO. 

The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the Mailchimp server when the newsletter is opened. As part of this retrieval, technical information (such as browser type and operating system, IP address and time of retrieval of our sent email) is collected and also transferred to the servers of Mailchimp. 

Mailchimp is used on the basis of the express consent of the respective newsletter recipients pursuant to Art. 6 para. 1 s. 1 lit. a GDPR and pursuant to Art. 6 para. 1 s. 1 lit. f GDPR due to our legitimate interest in using the services of a third party to simplify the technical operations of sending newsletters.

Insofar as Mailchimp processes the above information for its own purposes, this is done under independent, separate responsibility under data protection law.

Further information on data privacy at Mailchimp:
https://mailchimp.com/de/gdpr/; https://mailchimp.com/help/mailchimp-european-data-transfers/ 

8. Data Protection Rights

Every data subject has:

  • The right to information according to Art. 15 GDPR,
  • the right to rectification according to Art. 16 GDPR,
  • the right to erasure according to Art. 17 GDPR,
  • the right to restriction of processing according to Art. 18 GDPR, as well as
  • the right to data portability under Art. 20 GDPR.

Furthermore, consent can be withdrawn at any time with effect for the future in accordance with Art. 7 para. GDPR. However, Oviavo points out that in this case, the services of Oviavo, in particular the Oviavo Benefits, can no longer be fully utilized. 

The aforementioned rights can be asserted against Oviavo by sending a message to the contact details listed in Section 1, in particular by e-mail to datenschutz@oviavo.com.

In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR) in conjunction with § 19 German Federal Data Protection Act (BDSG).  

Information about the right of objection according to Art. 21 GDPR

Data subjects also have the right, pursuant to Art. 21 para. 1 GDPR, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Article 6 para. 1 s. 1 lit. e GDPR (data processing in the public interest) and Article 6 para. 1 s. 1 lit. f GDPR (data processing on the basis of a balance of interests). Recipients may object to direct advertising by Oviavo at any time without stating reasons (Article 21 para. 2 GDPR). 

After the objection has been received and the relevant conditions have been met, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject in question, or the processing serves to assert, exercise or defend legal claims.

The objection can be made form-free and no transmission costs other than those according to the prime rates are incurred. The objection is to be addressed to:

postal: Oviavo GmbH, Wattstraße 11, 13355 Berlin, 

by phone: +49 15129609116, 

via e-mail: datenschutz@oviavo.com.

Version: April 2021