Data protection

 

  

1. Introduction

 We (“we”, “us”, “our”) place great importance on protecting your personal data and are committed to handling all information you provide while using our website and/or mobile applications (“digital services”) in accordance with applicable data protection laws.

This Privacy Policy explains how we collect, use, store, and share your data when you access our digital services. Please read this policy carefully. If you do not agree with the practices described here, you should not use our services.

 

2. What Data We Collect

We collect two types of data:

Non-personal data – technical or aggregated information that does not identify you (e.g. browser type, device, session duration)

Personal data – information that directly or indirectly identifies you, such as your name, email address, IP address, mailing address, or phone number

If personal and non-personal data are combined, the combined data is treated as personal data.

 

3. Web Analytics and Tracking

We use privacy-compliant analytics tools to improve our website and understand user behavior. We minimize personal data wherever possible and rely on pseudonymized or aggregated information.

We use tracking technologies such as cookies, pixels, and scripts strictly within legal boundaries, to:

  • ensure the technical functionality of our digital services

  • optimize your user experience

  • detect and fix technical issues

  • enable security and fraud prevention

 You can object to the use of such technologies at any time via your browser settings or by managing your preferences through our cookie settings.

Details about the cookies and services used, along with your individual options, can be found at any time in our cookie consent tool, which appears on your first visit and is accessible at any time in the website footer.

 

4. Why We Process Your Data

We process your data for the following purposes:

  • to provide, maintain, and improve our services

  • to communicate with you (e.g., customer support)

  • to analyze the use of our website

  • to comply with legal obligations

  • to enhance IT security and prevent fraud

  • to send you relevant updates or newsletters (you can unsubscribe at any time)

  

5. Legal Basis for Processing

 We process your data only if one of the following conditions is met:

  • processing is necessary to fulfill a contract or carry out pre-contractual steps

  • we are legally required to do so

  • we have a legitimate interest that does not override your rights

 

6. Your Data Protection Rights (EU)

 As a data subject in the EU, you have the following rights:

  • Access to your stored personal data

  • Correction of inaccurate or incomplete data

  • Deletion of your data (“right to be forgotten”)

  • Restriction of processing

  • Objection to data processing

  • Data portability

  • The right to lodge a complaint with a data protection authority

 Please note that these rights may be subject to legal limitations. If you have questions or would like to exercise your rights, feel free to contact us.

 

7. Data Transfers Outside the EEA

 In some cases, we may transfer your data outside the European Economic Area (EEA), for example to the USA, Israel, or South Korea. In doing so, we ensure an adequate level of protection and establish appropriate contractual safeguards, such as EU Standard Contractual Clauses.

 

8. Sharing Your Data

We only share your personal data in the following situations: 

  • with service providers that help us operate our services (e.g. hosting, payments)

  • to comply with legal obligations or requests from public authorities

  • to assert or defend legal claims or in the event of a business transfer

  • to improve your user experience – always in compliance with data protection regulations

We do not share your personal data with advertising networks without your explicit consent.

 

9. Cookies and Similar Technologies

We use cookies and similar technologies to: 

  • deliver website content

  • remember your preferences

  • analyze website usage

  • improve performance and usability

 Non-essential cookies are only used with your explicit consent, which you can grant or deny via our cookie consent tool. You can change your preferences at any time.

 

10. Storage Location and Retention Period

Non-personal data may be stored globally.

Personal data may be processed in the USA, Ireland, Taiwan, Israel, or other countries. We only retain personal data as long as it is necessary for the stated purposes or legal obligations.

 

11. Data Security

Our hosting providers store data on secure servers protected by firewalls. Payment data is processed through PCI-DSS-compliant providers.

Despite robust security measures, absolute protection cannot be guaranteed. Please use strong passwords and avoid sending sensitive data via unsecured channels such as email.

 

12. Children and Minors

Our services are not intended for individuals under the legal age of majority. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, please contact us immediately – we will delete the data without delay.

 

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version is always available on our website. In the event of significant changes, we will notify you. Continued use of our services constitutes acceptance of the updated policy.

 

14. Contact

If you have questions about data protection or would like to exercise your rights, please contact us at:

Ventra Health UG (haftungsbeschränkt)
SteinsdorfstraĂźe 2
80538 Munich, Germany
datenschutz@ventra.de

Â