Status: July 2023
This Privacy Policy contains information about how we process your personal data in the context of the website https://mvpfactory.co/ (the “Website”) and the applications accessible from mobile devices and from the websites https://elite.mvpfactory.co/ and https://app.mvpfactory.co (the “App”; Website and App together the “Services”).
1. General
Controller for the purposes of the General Data Protection Regulation (“GDPR”) regarding the processing of personal data in the context of the Services is MVPF Technologies GmbH, Prinzenstraße 34 , 10969 Berlin, Germany („MVP Factory“, “we”, “us” or “our”). By means of this Policy, we would like to explain to you which data we collect in the context of our Services, for which purposes and how we use (“Use”) those data, and which rights you have. Please note that our Services may contain links to other providers’ websites whose content we do not control, and which are not subject to this Privacy Policy.
2. Data we collect, process and use
We process your personal data only if it is necessary for providing a functional website, our contents, and our services.
2.1 Visiting our Website and App
The use of our Services is possible without providing your personal data to us. Regarding the Website: As is the case with most websites, our systems, however, do automatically register every access to or visit of our Website and temporarily store this information in a “log file.” Among the data saved in this context are in particular:
- IP-address of the accessing computer
- Name and URL of the accessed file
- Date and time of the access
- Access status/HTTP status code
- Amount of data transferred for each transmission
- Browser identification data.
Regarding the App: Certain data is transmitted by your mobile device, namely your IP address, the periods of time in which you use the App and the type of device you use (e.g. iPhone, iPad, Samsung Galaxy) in order to give us the possibility to continuously improve the App. These data do not allow us to draw any conclusions about the data subject. We also do not create personal user profiles (however, please note the below information on “analytics tools”). The above-mentioned data are processed for the purpose of enabling visitors to use our Services (to establish a connection) and for internal system-related purposes (technical administration, system security). Log files are stored in order to ensure functionality of our Services. Additionally, these data allow us to optimize the Services and to ensure that our systems are secure. As far as personal data is concerned, data processing related to accessing our Services is based on Article 6(1) sentence 1(f) GDPR (legitimate interests). The legitimate interest is based on the above-mentioned purposes.
2.2 Contact
Our Services offer the possibility to get in touch with us via e-mail, telephone, and via an online live-chat tool. If you contact us via e-mail or send us an enquiry, we store the personal data you transmitted via e-mail. It is not mandatory for you to provide information; we only receive and store personal data that you send us. These data are used for processing your respective request only. The legal basis for the processing of the aforementioned personal data is: Article 6 (1) sentence 1 (f) GDPR (legitimate interests). Our legitimate interest is based on the fact that we can only perform the action the user asked for (e.g. answering an enquiry) if we process his/her personal data. If you contact us with the aim of potentially entering a business relationship with us, processing your personal data is also done under the following legal basis: Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract).
2.3 Register process for Applications
If you apply for MVP Factory careers, you will need to provide some or all of the following data, as the individual case might be:
- Personal data (name, date of birth, address)
- Communication data (telephone number, mobile telephone number, fax number, e-mail address)
- Information provided by third parties (e.g. credit agencies or from public registers)
- Data relating to the evaluation and assessment in the application process
- Data relating to your education (school, vocational training, military/civilian service, degree, doctorate)
- Data relating to your previous employment history, training course certificates, skills and job references
- Data relating to other qualifications (e.g. language skills, computer skills, voluntary work)
- Information on desired salary
- Job application history
We will use the personal data you have transferred only for processing your registration and it will we stored securely and not be shared with third parties. The legal basis for the processing of the data described above is Article 6 (1) sentence 1 lit. a GDPR (consent). If the contact is aimed at the possibility of concluding an employment contract, Article 6 para. 1 lit. b DSGVO (contract fulfillment and pre-contractual measures) is additionally the legal basis for the processing.
2.4 Registration process for projects
Our Services offer the possibility to get in touch with us to start a project. If you contact us via our “Start a Project” or "Become a Founder" contact form, we store the personal data you transmitted, in particular, your name, e-mail address, company name (optional), phone number (optional) and the information how you found us. The information you provide will never be shared with third parties. The legal basis for the processing of the aforementioned personal data is: Article 6 (1) sentence 1 (f) GDPR (legitimate interests). Our legitimate interest is based on the fact that we can only perform the action the user asked for (e.g. getting in touch to start a project) if we process his/her personal data. If you contact us with the aim of potentially entering a business relationship with us, processing your personal data is also done under the following legal basis: Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract).
2.5 Cookies
Our Services use cookies. Cookies are small text files that are stored in your Internet browser for the purpose of technical session control. They make navigating our Website easier for you and allow us to analyze anonymous user behavior which helps optimize our website design. Cookie data cannot be associated with a specific individual. The Services uses cookies to the following extent: Transient / Session cookies, Persistent / Setting cookies, and Analysis cookies. Transient cookies are automatically deleted when you close your browser. This includes, in particular, the session cookies. These store a so-called session ID, which identify user session in the browser. Session cookies are deleted when you log out or close your browser. Persistent cookies help the Services remember your information and settings when you visit them in the future. They are automatically deleted after a specified period, which may differ depending on the cookie. We also use cookies on our Services which enable an analysis of the user's surfing behavior. We use language cookies in order to recognize if a user wants to view the English or German language version of our Website. These language cookies are automatically deleted once you leave our Website. Most browsers automatically accept cookies. You can, however, change your browser settings to not set any cookies or to always show a notice before setting a new cookie. However, if you chose to deactivate the setting of cookies altogether, not all functions of our Website may be (entirely) usable. The legal basis for the processing personal data related to cookies is: Article 6(1) sentence 1 (f) (legitimate interest). Our legitimate interest is based in the above-mentioned purposes, to optimize Services use and to improve your user experience. You can access the Services cookie consent management by clicking this link.
2.6 Analytic Tools
2.6.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help analyse how you use the Services. The information generated by the cookie about your use of the Services will normally be transmitted to and stored by Google on servers in the United States. In case anonymisation is activated on the Services, your IP address will be truncated within the area of member states of the European Union or within other contracting states to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of the Website for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services for the website operator relating to website activity and internet usage. The IP address that your browser transfers within the scope of Google Analytics will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use all functions of the Services. You can also opt-out from the storage by Google of the data that is created by the cookie and is related to the use of the Services (including your IP address) and the processing of such data by Google by downloading and installing the Google Analytics opt-out Browser add-on available under https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within this Website in the future (this opt-out option applies only for the browser in which you set it and with regard to the Website). In this case, an opt-out cookie is put on your device. In case you delete your cookies, you will have to use the aforementioned link again. For further information on Google Analytics please refer to: http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy/. The legal basis for the processing of the data described in this section 2.6 (to the extent such data is to be considered personal data) is Article 6 (1) sentence 1 lit. f GDPR (legitimate interests). The legitimate interests to Use such data is that we use and analyze the respective data to improve our Services, such as by gaining a better understanding of your interests and requirements regarding our Services and to help personalize your user experience. Google is committed (to the best of our knowledge) to the EU-US Privacy Shield Agreement published by the US Department of Commerce on the collection, use, and retention of personal data from EU member states. Google has declared through certification that it will comply with the relevant privacy shield principles. The European Commission expects the US to provide adequate legal protection for personal data transferred from the EU to self-certified organizations in the US under the Privacy Shield. Further information can be found at: https://www.privacyshield.gov/EU-US-Framework.
2.6.2 Outbrain
We have integrated Outbrain into this website. The provider is Outbrain Inc., 39 West 13th Street, 3rd floor, New York, NY 10011, USA (hereinafter referred to as “Outbrain”).
Whenever you access a website into which Outbrain has been integrated, Outbrain will generate as pseudonymous user profile (User ID) in which the content you have viewed or read is archived. As a result, our website, or other websites into which Outbrain has been integrated, can recommend other content appropriate to the shown interests or display advertisements. For this purpose, your device type, your IP address, the type of browser you use, visited websites, read articles, the time of access and the device ID are archived and consolidated under your User ID.
Furthermore, we use the Outbrain Pixel. Whenever you access our website, this Pixel allows us to determine whether you already have an Outbrain User ID. This solution enables advertisers from the Outbrain advertising network to measure the effectiveness of their campaigns.
If your approval (consent) has been obtained the use of the above mentioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR;
The website operator has a legitimate interest in the analysis of user patterns to optimize both, the operator’s web presentation and advertising activities.
For more information, please consult the Data Privacy Policy of Outbrain under: https://www.outbrain.com/legal/privacy#privacy-policy.
Moreover, if you click on the following link, you will receive a list of all utilized cookies: https://www.outbrain.com/privacy/cookies/.
If you would like to view your Outbrain User Profile or make changes to it, please click on the following link: https://my.outbrain.com/recommendations-settings/home.
2.6.3 YouTube
This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.
2.6.4 Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en
2.6.5 Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.
2.6.6 LinkedIn Pixel
The data controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect with existing business contacts and to make new business contacts. Over 400 million registered users use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited Internet sites in the world.
LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection issues outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
For each individual visit to our website, which is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the person concerned to download a corresponding representation of the component from LinkedIn. Further information about LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn obtains knowledge of which specific subpage of our website is visited by the data subject.
If the person concerned is logged in to LinkedIn at the same time, LinkedIn will recognize which specific page of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of his or her stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the LinkedIn account of the person concerned. If the data subject clicks on a LinkedIn button integrated on our website, LinkedIn will assign this information to the personal LinkedIn user account of the data subject and store this personal data.
The LinkedIn component informs LinkedIn that the data subject has visited our website if the data subject is logged in to LinkedIn at the same time when he or she visits our website, regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be sent to LinkedIn, the data subject can prevent this information from being sent by logging out of their LinkedIn account before accessing our website.
LinkedIn at https://www.linkedin.com/psettings/guest-controls offers the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads as well as to manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s current privacy policy is available at https://www.linkedin.com/legal/privacy-policy. The Cookie Policy is available at https://www.linkedin.com/legal/cookie-policy.
2.7 Legal Basis
The legal basis for the processing of the data described in this section 2.6 (to the extent such data is to be considered personal data) is Article 6 (1) sentence 1 lit. f GDPR (legitimate interests). The legitimate interests to Use such data is that we use and analyze the respective data to improve our Services, such as by gaining a better understanding of your interests and requirements regarding our Services and to help personalize your user experience.
3 Third Parties; Technical implementation by subcontractors
Personal data collected in the context of using our Services will not be transmitted to third parties or otherwise without your consent, except in cases explicitly described in this Privacy Policy. Transmission to government institutions and authorities will be made only pursuant to compulsory legal regulations. The legal basis for such processing of personal data is: Article 6(1) sentence 1 (c) GDPR (fulfilling legal obligations). We may use external service providers for website operation and for the services offered there (hosting, registration form) who process your personal data for us. These service providers process your data only according to our instructions. The legal bases for such processing of personal data are: Article 6 (1) sentence 1 (b) GDPR (performance of a contract and steps necessary prior to entering a contract) and Article 28 GDPR (data processing).
4 How long do we store your Personal Data
As far as the other stipulations of this Policy do not prescribe a certain amount of time that we need to retain your personal data, we only store personal data generated in the context of using our Services for as long as is necessary to process your requests or enquiries, and after that only to the extent of and if required by statutory storage obligations. If we no longer need your personal data for the above-mentioned purposes, it will only be stored for the legal retention period and they will not be processed for other purposes.
5 Your rights
You have the right to request information from us at any time about your personal data stored by us. If the legal requirements are met, you also have rights vis-à-vis us to request from us access to and rectification or erasure or restriction of processing concerning your personal data or to object the processing of your personal data. If you have given your consent to the use of personal data, you can revoke such consent at any time (for the future). If you believe that the processing of your personal data by us is in breach of the applicable data protection laws, you can issue a complaint with the competent supervisory authority for data protection.
6 Contact
For all data privacy questions (incl. assertion of your rights as per Section 5 of this Privacy Policy), you can contact us at data.protection@mvpfactory.co. You can also contact our data protection officer directly. The contact details of the data protection officer are:
heyData GmbH
Gormannstr. 14
10119 Berlin
Tel.: +49 (0) 89 41325320
Email: info@heydata.eu
7 Data Security
We maintain current technical measures to ensure data security protection, especially to protect your personal data against risks during transmission and against third-party access. These measures will be updated according to the latest technical developments.
8 Changes
Our Privacy Policy may change from time to time, for example, due to further developments of our services or legal changes. We, therefore, reserve the right to change this Privacy Policy at any time with effect for the future. We, therefore, recommend that you read this data protection declaration again at regular intervals. ***