Privacy Policy

Information pursuant to Art. 13 GDPR and § 25 TDDDG for the website vivamehr.com. As of July 2026. Non-binding translation; the German version prevails.

1. Controller

Rabbit Marketing OÜ
Tornimäe tn 5, 10145 Tallinn, Harju maakond, Estonia
Registry code: 17397243
Authorised representative / board member: Christian Pronin
Email: hello@vivamehr.com

vivamehr™ is a trademark of Rabbit Marketing OÜ. As a company established in Estonia (EU), no representative under Art. 27 GDPR is required.

2. Data Protection Officer

No data protection officer has been appointed; there is currently no obligation to appoint one (the thresholds of Art. 37 GDPR / Sec. 38 BDSG — including at least 20 persons constantly engaged in automated processing — are not met).

3. No tracking cookies, no analytics

This website uses no tracking cookies, no analytics services and creates no user profiles. There is no automated decision-making including profiling within the meaning of Art. 22 GDPR (Art. 13(2)(f) GDPR).

4. Local browser storage (§ 25 TDDDG)

The chat assistant stores a random session identifier (kbw_sid) in your browser's local storage — not a cookie. Its sole purpose is to link the conversation history of the chat function you actively opened. This storage is strictly necessary to provide the service you explicitly requested and is therefore exempt from consent under § 25(2) no. 2 TDDDG (no cookie/consent banner required). You can delete it at any time via your browser.

5. Processing activities

5.1 Website access / server log files

Data: IP address, date/time, page accessed, browser identifier, referrer. Purpose: delivery, stability, security/abuse prevention. Legal basis: Art. 6(1)(f) GDPR. Hosting: ALL-INKL.COM – Neue Medien Münnich, René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany; servers operated exclusively in German data centres. A data processing agreement under Art. 28 GDPR is in place; transport is SSL/TLS-encrypted. Retention: the hosting provider stores full IP addresses at server level for 7 days (abuse prevention), then automatic deletion.

5.2 Contact (email / contact form)

Data you provide via hello@vivamehr.com or the contact form (name, email, message) is processed to handle your request; it is forwarded to us by email and not permanently stored on the web server. The form uses an invisible check field, a submission-time measurement and a short-lived, hashed IP counter (rate limit, stored up to one hour) to prevent abuse. Legal basis: Art. 6(1)(b) or (f) GDPR. Retention: until the matter is settled, subject to statutory retention obligations.

5.3 AI chat assistant

Data: your question text (capped at 1,000 characters), the session identifier (section 4), your IP address for abuse prevention/rate limiting (transient, not stored in the usage log).

AI processing (code-verified): answers are generated by a language model running locally on our own hardware in Germany (self-hosted). Within this website chat your question is not sent to any US AI model or external AI provider (e.g. OpenAI, Anthropic, Google, DeepSeek).

Usage log: for quality assurance a local log is kept (timestamp, mode, hashed session ID, question truncated to 500 characters). Retention of the usage log: 30 days, then deletion. Question and answer are additionally held only locally in your browser's session storage. Legal basis: Art. 6(1)(f) GDPR. Transport of chat messages runs via the content delivery network of Cloudflare, Inc. (USA), which processes connection data (incl. IP); Cloudflare is a pure transport/CDN provider, not an AI processor (see section 7). The assistant is an automated aid; answers may contain errors and are not a binding commitment, offer or contract. Please do not enter third parties' personal data into the chat.

5.4 Free testing

Instant demo on the homepage: if you use the "test it with your website" demo, we process the domain you enter and your demo questions. Our server fetches some publicly accessible pages of that website (respecting robots.txt) and builds a temporary knowledge base held only in memory, deleted automatically after a short time (up to approx. 15 minutes). Only publicly accessible content is processed; no email address is stored for this. Legal basis: Art. 6(1)(b) or (f) GDPR.

Test via email link: if you register for a more extensive test we collect the domain/website you enter, your email address (for the trial link) and your IP address (transient, rate-limiting/abuse protection only). The trial link contains no personal data (only a random ID with an HMAC signature). Trial duration: 12 hours; plus 3 days grace as a purchase window; then physical deletion of the trial record including the crawled content. Legal basis: Art. 6(1)(b) GDPR.

Note (interested-parties list): your email is additionally stored, together with domain and timestamp, in an internal list so that we can contact you about our offering. Legal basis: Art. 6(1)(f) GDPR. Retention: at most 6 months if no business relationship arises; you may object at any time and request deletion (section 8). By starting the test you confirm you are authorised to represent the website you enter.

5.5 Appointment booking / free initial call

If you book an initial call via the calendar, we process the data you provide (name, email and/or phone number, request, chosen time) to arrange and hold the appointment. You receive a confirmation email with a cancellation link; the appointment is stored in our calendar and deleted upon cancellation. Legal basis: Art. 6(1)(b) GDPR.

6. Recipients / categories of recipients

Your data is not passed to third parties for advertising purposes.

Regarding the delivered product „vivamehr wissen": for the local (on-premises) installation at the customer, Rabbit Marketing OÜ has no access to the personal data processed in the customer's system; there is therefore no processing on behalf by Rabbit. As soon as support/remote maintenance grants access to personal data, a data processing agreement under Art. 28 GDPR is concluded. (This concerns the customer installation, not this website.)

7. Transfers to third countries

Cloudflare, Inc. (USA): transfer of connection data (incl. IP) to the USA during encrypted transport. Basis: EU-US Data Privacy Framework or EU Standard Contractual Clauses (Art. 44 et seq. GDPR). The actual AI processing of the website chat takes place exclusively locally in Germany.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Against processing based on Art. 6(1)(f) GDPR you may object at any time on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, a message to hello@vivamehr.com suffices.

9. Right to lodge a complaint

The competent authority for Rabbit Marketing OÜ is, in principle, the Estonian data protection authority Andmekaitse Inspektsioon (AKI), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee. Users in Germany may additionally contact their competent regional data protection authority under Art. 77 GDPR.

10. Obligation to provide data

Provision of your data is neither legally nor contractually required; however, without the required data (e.g. email for the trial link) the respective function cannot be provided.

11. Automated decision-making

No automated decision-making including profiling under Art. 22 GDPR takes place.

12. Changes

We update this privacy policy when processing or the legal situation changes. As of: July 2026.