Privacy Policy
This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
Last updated: 2026-01-19
1.Data Controller
The data controller responsible for processing your personal data is:
Virmondo GmbH
Schwanthalerstrasse 166
80339 Munich
Germany
Email: hello@virmondo.com
2.Data We Collect
We collect and process the following categories of personal data:
| Category | Examples | Purpose |
|---|---|---|
| Contact Information | Name, email address, phone number, company name | To respond to inquiries and provide services |
| Employment Data | CV, work history, salary information, tax details | To provide EOR services and manage employment |
| Usage Data | IP address, browser type, pages visited, timestamps | Website analytics and security |
| Communication Data | Email correspondence, call records, chat logs | Service delivery and quality assurance |
3.Purposes and Legal Basis
We process your personal data for the following purposes and on the following legal bases:
- Contract Performance (Art. 6(1)(b) GDPR): To provide our EOR and recruiting services, process employment contracts, manage payroll, and fulfill our contractual obligations.
- Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, social security, employment, and other legal requirements in the countries where we operate.
- Legitimate Interest (Art. 6(1)(f) GDPR): To improve our services, analyze website usage, prevent fraud, and protect our legal interests. Our legitimate interests are balanced against your rights and freedoms.
- Consent (Art. 6(1)(a) GDPR): Where we rely on your consent for specific processing activities (such as marketing communications), you may withdraw your consent at any time.
4.Data Recipients
Your personal data may be shared with:
- Client companies: When providing EOR services, relevant employment information is shared with the client company you work for.
- Government authorities: Tax offices, social security institutions, and other authorities as required by law.
- Service providers: IT infrastructure, cloud hosting, payment processing, and other service providers who process data on our behalf under strict contractual terms.
- Professional advisors: Lawyers, accountants, and auditors where necessary for legal, tax, or audit purposes.
5.International Transfers
Your personal data may be transferred to countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place:
- Transfers to countries with an EU adequacy decision are permitted without additional safeguards.
- For other transfers, we use EU Standard Contractual Clauses (SCCs) or other approved mechanisms.
- We assess the legal framework of the destination country to ensure adequate protection.
6.Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Contact Information | Duration of business relationship plus 3 years |
| Employment Data | 10 years after end of employment (German tax law) |
| Usage Data | 26 months |
| Communication Data | 3 years after last communication |
7.Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): You can request a copy of your personal data we hold.
- Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate personal data.
- Right to Erasure (Art. 17 GDPR): You can request deletion of your personal data under certain conditions.
- Right to Restriction (Art. 18 GDPR): You can request that we limit how we use your data.
- Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw consent at any time without affecting prior processing.
To exercise any of these rights, please contact us at hello@virmondo.com. We will respond to your request within one month.
You also have the right to lodge a complaint with the supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Website: https://www.lda.bayern.de
8.Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and audits
- Employee training on data protection
- Incident response and breach notification procedures
10.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.
11.Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Contact Information
Virmondo GmbH
Schwanthalerstrasse 166
80339 Munich
Germany
Email: hello@virmondo.com
Phone: +49 157 92338356