VitalTicket · Legal information
Privacy
Data controller and contact
epri network GmbH
Belziger Str. 74, 10823 Berlin
Represented by Managing Director Veronika Teubert
Email: info@vitalticket.de
Telephone: +49 30 555 785 982
Website, budget planner and online order
The budget planner initially processes your choices in your browser. Your information is recorded through this website’s server only when you deliberately submit it. The information needed to process the order is passed to the existing epri system at epri-office.de; full bank and mandate details are excluded. A technically necessary session is used for this purpose. Our contact form uses the same direct connection.
An online order contains your company and contact details, billing address, number of participants, budget, selected services and setup requirements, where applicable your payroll contact, and confirmation of your authority to represent the company and acceptance of the contract terms. We store the order with a receipt reference, timestamp, price summary and contract version so that it can be processed reliably and retained if the connection is interrupted. This processing is necessary for taking steps prior to entering into a contract and performing the contract under Article 6(1)(b) GDPR.
Internal processing notifications are sent through Brevo to info@epripay.org and info@rieva.de. For direct debit, these processing notifications contain only the mandate status, mandate reference and a masked IBAN; full bank details and access credentials are not included in these notifications. Both mailboxes also receive a copy of every customer email sent to you, including email verification codes and contract confirmations with all PDF attachments. Contract and mandate copies may contain full bank details. The website confirms an order only after it has been successfully stored; an acknowledgement does not claim that an email has already been delivered or a customer account activated.
We do not require health data or personal receipts from your employees in this order. If you voluntarily provide a payroll contact, please name only a person who is responsible for this matter and has been informed.
Email verification and acknowledgements of receipt
At your request, we send you a time-limited code via Brevo to verify your email address. We use your email address and the necessary verification data solely to associate the address with your order and safeguard the order process. If you change the address, you must verify it again. Verification alone does not place an order; you must then expressly submit the order.
After successfully storing a contact enquiry or order, we send an acknowledgement to the email address you provided. This message contains no health data, employee lists or contents of personal receipts. It is sent via Brevo. This processing serves to handle your enquiry or take steps prior to entering into a contract under Article 6(1)(b) GDPR and to safeguard our service under Article 6(1)(f) GDPR. This does not subscribe you to a newsletter.
Bank details and SEPA Direct Debit Mandate
If you choose payment by direct debit, we collect the account holder’s exact name and address, IBAN, BIC where applicable, and the name of the person authorised to grant the mandate. We also record the mandate reference, mandate text and version, the time it was granted and your express confirmation. These details are used to process payments and provide evidence of the mandate.
Processing is necessary for performance of the contract under Article 6(1)(b) GDPR. If you act as a company’s contact person or representative, processing is based on our legitimate interest in securely managing and documenting the business relationship under Article 6(1)(f) GDPR. Statutory retention obligations are based on Article 6(1)(c) GDPR.
Full mandate details are stored separately in encrypted form and made available only to authorised persons for payment processing and necessary evidence. The information needed to carry out a collection is passed to the payment service providers involved. Email confirmation confirms access to the email address provided; it does not confirm account ownership or authority to sign.
After a successful order, we send your complete contract documents as PDFs through Brevo to the previously verified contact email address. An identical copy of this email, including all contract PDFs, is sent to info@epripay.org and info@rieva.de. If you select direct debit, the contract documents, including the internal copies, contain the SEPA mandate with the full bank details. You can also save the documents through a protected retrieval process. Full bank details are not included in the order note passed to the existing epri system. Mandate details are retained for as long as required for payment processing, evidence and statutory retention obligations.
Employee list when ordering
You can submit an Excel or CSV file together with your order or enter employee data later in the employer account. The file is transferred only when you deliberately submit the order. It is stored separately and securely and linked to the order. Access is restricted to the authorised internal processing team. The additional notification email contains neither the employee list nor any personal data from it.
The data specification includes, in particular, personnel number, salutation, first name, last name and the email address for ticket delivery; title and branch number are optional. The information is processed to set up and deliver personal tickets. Please remove the sample rows from the template and do not transmit health data. As the employer, you must ensure that the employees concerned have been informed and that transferring the data for setup is permitted.
Storage and security
Order data is retained to set up and carry out the cooperation, provide necessary records and meet statutory retention requirements. Data is not made publicly available. The internal email queue removes notifications accepted by the email service after 30 days; messages whose transmission has not been conclusively completed remain stored until processed. Short-lived technical counters limit abusive submissions. Form contents are not written to application logs.
Technical provision
The website is provided through ChatGPT Sites. Access generates technically necessary connection data, such as IP address, time of access and browser information. This data is processed for platform delivery, security and access control.
Information about processing by the platform can be found in OpenAI’s European privacy policy. Information about technical delivery through Cloudflare can be found in its privacy information.
Protected login area
The login area at /login/ embeds the existing VitalTicket portal at https://vitalticket.de/login/ in an embedded window. For login and ticket and receipt data, your browser connects directly to our existing server. The portal application and database remain there. This content is not relayed through the server of this public website or stored in its order database, email queue or application logs. You can also open the portal directly in a separate browser window. This portal access is separate from the online order and contact form.
Contacting us
When you email or call us, we process the contact details you provide and the content of your enquiry to address your request. For enquiries about a contract or offer, this is based on Article 6(1)(b) GDPR; for other business enquiries, it is based on our legitimate interest in responding under Article 6(1)(f) GDPR.
Please do not send medical findings, Card codes or receipts through a general consultation enquiry.
Document windows and external links
The document windows display documents made available on this website. Opening a document does not activate consent. Following an external link opens the relevant external website.
Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability, subject to its provisions. You may withdraw consent you have given with effect for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation. You also have the right to lodge a complaint with a data protection supervisory authority.
For matters concerning processing by epri, you can contact us at info@vitalticket.de.
Data controller and contact
epri network GmbH
Belziger Str. 74, 10823 Berlin
Represented by Managing Director Veronika Teubert
Email: info@vitalticket.de
Telephone: +49 30 555 785 982
Website, budget planner and online order
The budget planner initially processes your choices in your browser. Your information is recorded through this website’s server only when you deliberately submit it. The information needed to process the order is passed to the existing epri system at epri-office.de; full bank and mandate details are excluded. A technically necessary session is used for this purpose. Our contact form uses the same direct connection.
An online order contains your company and contact details, billing address, number of participants, budget, selected services and setup requirements, where applicable your payroll contact, and confirmation of your authority to represent the company and acceptance of the contract terms. We store the order with a receipt reference, timestamp, price summary and contract version so that it can be processed reliably and retained if the connection is interrupted. This processing is necessary for taking steps prior to entering into a contract and performing the contract under Article 6(1)(b) GDPR.
Internal processing notifications are sent through Brevo to info@epripay.org and info@rieva.de. For direct debit, these processing notifications contain only the mandate status, mandate reference and a masked IBAN; full bank details and access credentials are not included in these notifications. Both mailboxes also receive a copy of every customer email sent to you, including email verification codes and contract confirmations with all PDF attachments. Contract and mandate copies may contain full bank details. The website confirms an order only after it has been successfully stored; an acknowledgement does not claim that an email has already been delivered or a customer account activated.
We do not require health data or personal receipts from your employees in this order. If you voluntarily provide a payroll contact, please name only a person who is responsible for this matter and has been informed.
Email verification and acknowledgements of receipt
At your request, we send you a time-limited code via Brevo to verify your email address. We use your email address and the necessary verification data solely to associate the address with your order and safeguard the order process. If you change the address, you must verify it again. Verification alone does not place an order; you must then expressly submit the order.
After successfully storing a contact enquiry or order, we send an acknowledgement to the email address you provided. This message contains no health data, employee lists or contents of personal receipts. It is sent via Brevo. This processing serves to handle your enquiry or take steps prior to entering into a contract under Article 6(1)(b) GDPR and to safeguard our service under Article 6(1)(f) GDPR. This does not subscribe you to a newsletter.
Bank details and SEPA Direct Debit Mandate
If you choose payment by direct debit, we collect the account holder’s exact name and address, IBAN, BIC where applicable, and the name of the person authorised to grant the mandate. We also record the mandate reference, mandate text and version, the time it was granted and your express confirmation. These details are used to process payments and provide evidence of the mandate.
Processing is necessary for performance of the contract under Article 6(1)(b) GDPR. If you act as a company’s contact person or representative, processing is based on our legitimate interest in securely managing and documenting the business relationship under Article 6(1)(f) GDPR. Statutory retention obligations are based on Article 6(1)(c) GDPR.
Full mandate details are stored separately in encrypted form and made available only to authorised persons for payment processing and necessary evidence. The information needed to carry out a collection is passed to the payment service providers involved. Email confirmation confirms access to the email address provided; it does not confirm account ownership or authority to sign.
After a successful order, we send your complete contract documents as PDFs through Brevo to the previously verified contact email address. An identical copy of this email, including all contract PDFs, is sent to info@epripay.org and info@rieva.de. If you select direct debit, the contract documents, including the internal copies, contain the SEPA mandate with the full bank details. You can also save the documents through a protected retrieval process. Full bank details are not included in the order note passed to the existing epri system. Mandate details are retained for as long as required for payment processing, evidence and statutory retention obligations.
Employee list when ordering
You can submit an Excel or CSV file together with your order or enter employee data later in the employer account. The file is transferred only when you deliberately submit the order. It is stored separately and securely and linked to the order. Access is restricted to the authorised internal processing team. The additional notification email contains neither the employee list nor any personal data from it.
The data specification includes, in particular, personnel number, salutation, first name, last name and the email address for ticket delivery; title and branch number are optional. The information is processed to set up and deliver personal tickets. Please remove the sample rows from the template and do not transmit health data. As the employer, you must ensure that the employees concerned have been informed and that transferring the data for setup is permitted.
Storage and security
Order data is retained to set up and carry out the cooperation, provide necessary records and meet statutory retention requirements. Data is not made publicly available. The internal email queue removes notifications accepted by the email service after 30 days; messages whose transmission has not been conclusively completed remain stored until processed. Short-lived technical counters limit abusive submissions. Form contents are not written to application logs.
Technical provision
The website is provided through ChatGPT Sites. Access generates technically necessary connection data, such as IP address, time of access and browser information. This data is processed for platform delivery, security and access control.
Information about processing by the platform can be found in OpenAI’s European privacy policy. Information about technical delivery through Cloudflare can be found in its privacy information.
Protected login area
The login area at /login/ embeds the existing VitalTicket portal at https://vitalticket.de/login/ in an embedded window. For login and ticket and receipt data, your browser connects directly to our existing server. The portal application and database remain there. This content is not relayed through the server of this public website or stored in its order database, email queue or application logs. You can also open the portal directly in a separate browser window. This portal access is separate from the online order and contact form.
Contacting us
When you email or call us, we process the contact details you provide and the content of your enquiry to address your request. For enquiries about a contract or offer, this is based on Article 6(1)(b) GDPR; for other business enquiries, it is based on our legitimate interest in responding under Article 6(1)(f) GDPR.
Please do not send medical findings, Card codes or receipts through a general consultation enquiry.
Document windows and external links
The document windows display documents made available on this website. Opening a document does not activate consent. Following an external link opens the relevant external website.
Your rights
Under the GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability, subject to its provisions. You may withdraw consent you have given with effect for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation. You also have the right to lodge a complaint with a data protection supervisory authority.
For matters concerning processing by epri, you can contact us at info@vitalticket.de.
Information pursuant to section 5 of the German Digital Services Act (Digitale-Dienste-Gesetz, DDG).
Provider
epri network GmbH
Belziger Str. 74
10823 Berlin
Germany
Represented by Managing Director Veronika Teubert.
Contact
Telephone: +49 30 555 785 982
Fax: +49 30 555 785 983
Email: info@vitalticket.de
Company registration and VAT
Registered office: Berlin
Register court: Amtsgericht Berlin-Charlottenburg
Commercial register number: HRB 218059 B
VAT identification number: DE334439544
Brand and imagery
VitalTicket is a service offered by epri network GmbH. The existing VitalTicket logo is used with the provider’s permission. Designed lifestyle scenes and illustrative images show the personal, private use of possible services.
Order and contract terms for employers · Version VT-2026-10-27-SEPA
1. Contracting parties and online order
VitalTicket is a service offered by epri network GmbH, Belziger Str. 74, 10823 Berlin. This offer is intended for employers acting on behalf of their company. The person placing the order confirms that they are authorised to represent the company.
You select the budget, eligible services and number of participants, enter your company details and review your summary. You can change your details until you submit the order. By selecting “Place order with obligation to pay”, you place a binding order at the terms displayed, with an obligation to pay. The acknowledgement records receipt. The contract is concluded when epri accepts it in text form or sets up your employer account. No consultation appointment is required.
2. VitalTicket services
epri provides the software for personal employee accounts and digital receipt submission, reviews submitted expenses against your company’s rules and prepares a payment list for your payroll. The service includes setup, ticket delivery according to your selection and technical support. You can securely upload the employee list as an Excel or CSV file with this order or enter it later in the employer account. An uploaded list is checked for setup purposes; uploading it alone does not create employee accounts. If applicable, you provide your logo after placing the order using the agreed secure transfer method.
3. Your budget and eligible services
You determine the monthly net reimbursement budget per person and the expenses eligible for reimbursement. The product does not impose a limit of 50 euros per month or 600 euros per year. Recurring expenses, such as fitness membership fees, can also be part of your programme. The selected services may be used privately, alone or with family, where your selection allows this. Providers do not have to belong to a VitalTicket network.
Unless you choose otherwise, the annual allowance displayed corresponds to twelve monthly budgets. If you have chosen your own annual cap, the cap specified in the order applies instead. If the programme starts during the year, the available allowance depends on the agreed months of use. This does not promise any carry-over of unused amounts or any payment without a suitable receipt. Additional requests, particularly postal receipt submission, are reviewed during setup and confirmed separately.
4. Service fees and invoicing
The one-off setup fee is 3.00 euros per participant. The recurring service fee is 3.00 euros per active account per month for up to and including 500 active employee accounts; from 501 active accounts, the rate is 2.80 euros per active account per month. Fees are subject to statutory VAT. The order summary shows the setup fee and monthly service fee separately for the stated number of participants.
An active account is an employee account that has been set up and has not been deactivated. The recurring fee applies to active accounts even when no receipt is submitted in a given month. Invoices are issued monthly in advance. You choose payment by bank transfer or SEPA Core Direct Debit.
SEPA Core Direct Debit for service fees
If you select direct debit, you grant epri network GmbH a separate mandate for recurring payments. It covers the one-off setup fees and monthly service fees, including VAT, when they fall due. It does not cover the health budget or reimbursements to your employees. Granting the mandate alone does not trigger a debit.
The payee is epri network GmbH, Belziger Str. 74, 10823 Berlin, Germany. Its creditor identifier is DE09ZZZ00002122070. You receive the unique mandate reference with your mandate copy. The person granting the mandate confirms that they are the account holder or are authorised to grant a mandate for this account.
We will notify you of the exact amount and due date at least 14 calendar days before the debit, for example on the invoice. One mandate can cover multiple collections for different amounts.
You may request a refund of a SEPA Core Direct Debit within eight weeks of the debit date. The terms agreed with your bank apply. You can revoke the mandate for future collections. Revocation does not end existing payment obligations or the service contract; outstanding amounts must then be paid by bank transfer.
5. Reimbursement by the employer
Employees initially pay for the approved service themselves and submit the receipt directly to VitalTicket. The month of submission is the application month. The employer reimburses the amount approved after review, within the agreed budget, as a net payment with the following month’s payroll.
epri receives the service fee, not the health budget. The employer pays only the reimbursements actually approved to its employees. Its payroll department handles the necessary gross-up, taxes and social security contributions. These additional employer costs are included neither in the net budget nor in the epri service fee. VitalTicket is not offered here as a tax-free benefit in kind.
6. Confidentiality and cooperation
Keeping health data confidential from the employer is a condition of this programme. epri reviews the receipts. The employer receives the payroll data necessary to allocate and pay reimbursements, but no receipts, diagnoses or details of the specific treatment. Involvement of the payroll department does not change this.
The employer keeps participant data and eligible services up to date and deregisters people who no longer participate. No health data or employee receipts are required in the order. Employee accounts are set up and made available in compliance with data protection requirements before use begins.
7. Start date and term
The start date you enter is your requested start date. epri sets up the programme once the required data has been received and confirms the actual start. The service contract runs for an indefinite period. Either party may terminate it in writing with one month’s notice effective on 31 December of a year. Statutory rights to extraordinary termination remain unaffected.
8. Documents and contact
The contract language is German. We retain your order and the applicable version of these terms to implement and document our cooperation. You can save the order summary and these terms; we will provide your documents again on request. Existing contracts remain subject to the terms agreed for them.
For enquiries, you can contact us at info@vitalticket.de or 030 555 785 982. Statutory rights and obligations apply. No blanket exemption from liability is agreed here.
Save these terms as a text file
