Privacy Policy

Introduction

miravas GmbH ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you visit our website, use our services, or interact with us in any capacity.

Data Controller Information

The data controller responsible for your personal information is:

Data Collection

We collect various types of information to provide and improve our services. The data we collect includes both information you provide directly to us and information we gather automatically when you use our website and services.

Information You Provide

When you interact with miravas, you may provide us with personal information including:

• Contact information (name, email address, phone number, postal address)
• Business information (company name, job title, industry)
• Account credentials and preferences
• Communication content (messages, support requests, feedback)
• Payment information (billing details, transaction data)
• Marketing preferences and consent records

Automatically Collected Information

When you visit our website or use our services, we automatically collect certain technical information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, click patterns)
• Location data (general geographic location based on IP address)
• Cookies and similar tracking technologies data
• Referral information (how you reached our website)

How We Use Your Information

We process your personal data for various legitimate business purposes. How we use your information depends on how you interact with miravas and the legal basis for processing.

Service Provision

We use of your data to provide, maintain, and improve our digital marketplace services, including:

• Processing and fulfilling service requests
• Managing user accounts and authentication
• Providing customer support and technical assistance
• Processing payments and managing billing
• Delivering personalised user experiences

Communication and Marketing

With your consent, we may use your information for:

• Sending service updates and important notices
• Marketing communications about our services
• Newsletter subscriptions and promotional materials
• Event invitations and industry insights
• Responding to your enquiries and feedback

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary for fulfilling our services
• Legitimate Interest: For business operations, security, and service improvement
• Consent: For marketing communications and optional data processing
• Legal Obligation: For compliance with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• With trusted service providers who assist in our operations
• When required by law or legal process
• To protect our rights, property, or safety
• In connection with business transfers or mergers
• With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are determined by:

• The nature of the data and its sensitivity
• Legal and regulatory requirements
• Business and operational needs
• Your ongoing relationship with miravas

Generally, we retain customer data for the duration of the business relationship plus seven years for legal and tax purposes. Marketing data is retained until you withdraw consent or for three years of inactivity.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent for specific processing activities

To exercise these rights, please contact us at privacy@miravas.world or call +49 2216021281. We will respond to your request within 30 days.

Data Security

We implement comprehensive security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security practices include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures and breach notification protocols

International Data Transfers

As a European company, we primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Cookies and Tracking

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may provide additional notice through email or other communication channels.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).