With the following data protection declaration, we would like to inform you about the types of your personal data (hereinafter also referred to as "data") that we process, for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both as part of the provision of our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer").
The terms used are not gender-specific.
Status: April 16, 2021
Introduction
Responsible
Processing Overview
Relevant Legal Bases
Security measures
Transmission of personal data
Use of Cookies
Provision of the Online Offer and Web Hosting
Registration, Login and User Account
Contact
Promotional Communication via E-mail, Mail, Fax or Telephone
Web analysis, Monitoring and Optimization
Affiliate-Programmes und Affiliate-Links
Presence in social networks (social media)
Plugins and Embedded Functions and Content
Special Notes on Applications (Apps)
Data Deletion
Modification and Update of the Privacy Policy
Rights of the Data Subjects
Definitions
Binder Andreas, Mayr Roman, Schimmer Manuel GbR
Caspar-David-Friedrich-Straße 11
85092 Kösching
Authorized representatives: Binder Andreas, Mayr Roman, Schimmer Manuel.
E-mail address: mail@bms-digital.com.
Impressum: https://bms-digital.com/#impressum-wrapper .
The following overview summarizes the types of data processed and the purposes of their processing and refers to the subjects concerned.
Inventory data (e.g., names).
Content data (e.g., input in online forms).
Contact details (e.g., e-mail addresses).
Meta/communication data (e.g,. device information, IP-addresses).
Usage data (e.g., access times).
Communication partners.
Users (e.g., website visitors, users of online services).
Provision of our online offer and user-friendliness.
Provision of our mobile application.
Feedback (e.g. collecting feedback via online form).
Marketing.
Contact requests and communication.
Profiles with user-related information (creation of user profiles).
Coverage measurement (e.g. access statistics, recognition of returning visitors).
Security measures.
Delivering contractual services and customer service
Managing and responding to inquiries.
Affiliate tracking.
Direct marketing (e.g. by e-mail).
The following is an overview of the legal basis of the German Data Protection Regulation (DSGVO), on the basis of which we process personal data. Please note that in addition to the provisions of the DSGVO, national data protection regulations may apply in your or our country of residence or domicile. If, in addition, more specific legal bases are relevant in individual cases, we will inform you of these in the data protection declaration.
Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO) - The data subject has given his/her consent to the processing of personal data concerning him/her for a specific purpose or purposes.
Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO) - The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject.
Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) - Processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
National data protection regulations in Germany: Please refer to the German version of this privacy policy.
We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, transfer, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to data compromise. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings..
SSL encryption (https): To protect your data transmitted via our online offer, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.
In the course of our processing of personal data, it may happen that the data is transferred to or disclosed to other bodies, companies, legally independent organizational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.
Used services and service providers:
Firebase: Google Firebase is a platform for developers of applications ("apps" for short) for mobile devices and websites. Google Firebase offers a variety of functions for testing apps, monitoring their functionality and optimizing them (which are presented on the following overview page: https://firebase.google.com/products ). The functions include, among other things, the storage of apps including personal data of app users, such as content created by them or information regarding their interaction with the apps (so-called "cloud computing"). Google Firebase also provides interfaces that allow interaction between app users and other services, e.g. authentication by means of an email password combination. ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://firebase.google.com ; privacy policy: https://policies.google.com/privacy .
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie is primarily used to store information about a user during or after his visit within an online offer. Stored information may include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").
The following cookie types and functions are distinguished:
The following Temporary Cookies (also: Session Cookies):-types and functions are distinguished: Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
Permanente Cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
First-Party-Cookies: First-Party-Cookies werden von uns selbst gesetzt.
Third-Party-Cookies: Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential) Cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user input or for security reasons).
Statistical, marketing and personalization cookies: Furthermore, cookies are usually also used in the context of range measurement and when a user's interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.
Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.
Storage period: Unless we provide you with explicit information about the storage period of permanent cookies (e.g. in the context of a so-called cookie opt-in), please assume that the storage period can be up to two years.
General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (whereby this may also restrict the functionality of our online offer). An objection to the use of cookies for online marketing purposes can also be declared by means of a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/ . In addition, you can obtain further instructions on how to object in the context of the information on the service providers and cookies used.
Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, users of online services).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
In order to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.
The data processed as part of the provision of the hosting offer may include all information relating to the users of our online offer, which is generated as part of the use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers, and all entries made within our online offer or from websites.
E-mail sending and hosting: The web hosting services we use also include the sending, receiving and storing of e-mails. For these purposes, the addresses of the recipients and senders as well as further information regarding the e-mail dispatch (e.g. the providers involved) and the contents of the respective e-mails are processed. The aforementioned data may also be processed for SPAM detection purposes. Please note that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore not assume any responsibility for the transmission path of the e-mails between the sender and the reception on our server.
Collection of access data and log files: We ourselves (or our web hosting provider) collect data on each access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files may be used, on the one hand, for security purposes, e.g., to prevent server overload (especially in the case of abusive attacks, so-called DDoS attacks) and, on the other hand, to ensure the utilization of the servers and their stability.
Types of data processed: Content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, users of online services).
Purposes of processing: Provision of our online offer and user-friendliness.
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
ALL-INKL: Services in the field of providing information technology infrastructure and related services (e.g. storage space and/or computing capacities); Service provider: ALL-INKL.COM - Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany; Website: https://all-inkl.com/; Privacy policy: https://all-inkl.com/datenschutzinformationen/ .
Users can create a user account. In the course of registration, users are provided with the required mandatory data and processed for the purpose of providing the user account on the basis of contractual obligation fulfillment. The processed data includes in particular the login information (username, password and an e-mail address).
In the context of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. As a matter of principle, this data is not passed on to third parties unless it is necessary for the prosecution of our claims or there is a legal obligation to do so.
Users can be informed by e-mail about processes relevant to their user account, such as technical changes.
Registration with pseudonyms: Users may use pseudonyms as user names instead of plain names.
It is the responsibility of users to back up their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
Types of data processed: Inventory data (e.g. names), contact data (e.g. e-mail), content data (e.g. entries in online forms), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, online service users, app users).
Processing purposes: Providing contractual services and customer service, security measures, administration and responding to requests.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
When contacting us (e.g. by contact form, e-mail, telephone or via social media), the information of the inquiring persons is processed to the extent necessary to respond to the contact requests and any requested measures.
The response to contact requests in the context of contractual or pre-contractual relationships is made in order to fulfill our contractual obligations or to respond to (pre)contractual inquiries and otherwise on the basis of legitimate interests in responding to the inquiries.
Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms).
Persons concerned: Communication partners.
Processing purposes: Contact requests and communication.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Push Notifications
With the consent of users, we may send users so-called "push notifications". These are messages that are displayed on users' screens, devices or browsers, even if our online service is not being actively used at the time.
To sign up for the push notifications, users must confirm the query of their browser or end device to receive the push notifications. This consent process is documented and stored. The storage is necessary to recognize whether users have agreed to receive the push messages and to be able to prove the consent. For these purposes, a pseudonymous identifier of the browser (so-called "push token") or the device ID of a terminal device is stored.
On the one hand, the push messages may be necessary for the fulfillment of contractual obligations (e.g., technical and organizational information relevant for the use of our online offer) and are otherwise sent on the basis of user consent, unless specifically mentioned below. Users can change the receipt of push messages at any time using the notification settings of their respective browsers or end devices.
Push notifications with promotional content: The push notifications we send may contain promotional information. The promotional push messages are processed on the basis of user consent. If, in the context of consent to receive the promotional push messages, their contents are specifically described, the descriptions are authoritative for the consent of the users. Otherwise, our newsletters contain information about our services and us.
Location-based sending of push messages: The push notifications we send may be displayed depending on the location of the users based on the location data transmitted by the terminal device used.
Contents:
Information on the respective locations Course cancellations, maintenance work, etc; promotions and advertising
Used services and service providers:
Firebase Cloud Messaging: We use the Firebase cloud messaging service from Google for push notifications. Firebase generates a calculated key, which is composed of the identifier of the app and its device identifier. This key is stored on our push platform of with your chosen settings to provide you with the content according to your wishes. The Firebase servers cannot draw any conclusions about the requests of users or determine any other data related to a person. Firebase serves solely as an intermediary. Further information on data protection in connection with Google Firebase can be found at: https://www.firebase.com/terms/privacy-policy.html .
Our hiring and unsubscribing options:
You can customize or unsubscribe from our push messages in the “settings” section of our app.
Types of data processed: Location data (data indicating the location of an end user's terminal device).
Purposes of processing: Contractual services and service, direct marketing (e.g. by e-mail or postal mail).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO).
We process personal data for the purposes of promotional communication, which may take place via various channels, such as e-mail, telephone, mail or fax, in accordance with legal requirements.
Recipients have the right to revoke consent given at any time or to object to promotional communications at any time.
After revocation or objection, we may store the data required to prove consent for up to three years based on our legitimate interests before deleting it. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers).
Persons concerned: Communication partners.
Processing purposes: Direct marketing (e.g. by e-mail or postal mail).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Web analytics (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offering and may include behavior, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can recognize, for example, at what time our online offer or its functions or content are most frequently used or invite re-use. Likewise, we can understand which areas require optimization.
In addition to web analytics, we may also use testing procedures, for example, to test and optimize different versions of our online offering or its components.
For these purposes, so-called user profiles may be created and stored in a file (so-called "cookie") or similar procedures may be used with the same purpose. This information may include, for example, content viewed, websites visited and elements used there, and technical information such as the browser used, the computer system used, and information on usage times. If users have consented to the collection of their location data, this may also be processed, depending on the provider.
The IP addresses of the users are also stored. However, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address) to protect users. Generally, in the context of web analysis, A/B testing and optimization, no clear data of the users (such as e-mail addresses or names) are stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.
Notes on legal bases: If we ask users for their consent to use the third-party providers, the legal basis for processing data is consent. Otherwise, the users' data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, users of online services).
Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors), profiles with user-related information (creation of user profiles).
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
Google Analytics: Reach measurement and web analytics; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com/intl/de/about/analytics/ ; privacy policy: https://policies.google.com/privacy .
We include so-called affiliate links or other references (which may include, for example, search masks, widgets or discount codes) to the offers and services of third-party providers in our online offer (collectively referred to as "affiliate links"). If users follow the Affiliate Links or subsequently take advantage of the offers, we may receive a commission or other benefits from those third parties (collectively, "Commission").
In order to be able to track whether users have taken advantage of the offers of an affiliate link used by us, it is necessary for the respective third-party providers to learn that users have followed an affiliate link used within our online offer. The assignment of the affiliate links to the respective business transactions or to other actions (e.g. purchases) serves the sole purpose of commission accounting and will be cancelled as soon as it is no longer necessary for the purpose.
For the purposes of the aforementioned assignment of the affiliate links, the affiliate links can be supplemented by certain values that are a component of the link or can be stored otherwise, e.g. in a cookie. The values may include, in particular, the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Furthermore, their use may be a component of our (pre)contractual services, provided that the use of the third-party providers has been agreed within this framework. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Types of data processed: Contractual data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Persons concerned: Users (e.g., website visitors, users of online services).
Processing purposes: Affiliate tracking.
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
Amazon Affiliate Program: Amazon - Affiliate Program - Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its affiliates. Service Providers: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l, Amazon Services Europe S.à.r.l., and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich, Germany (collectively "Amazon Europe"), parent company: Amazon.com, Inc, 2021 Seventh Ave, Seattle, Washington 98121, USA.; website: https://www.amazon.de; privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010 .
We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users' rights could be made more difficult.
Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).
For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the privacy statements and information provided by the operators of the respective networks.
Also in the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Types of data processed: Contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, users of online services).
Processing purposes: Contact requests and communication, feedback (e.g. collecting feedback via online form), marketing.
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
Instagram: Social network; service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy .
We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example, graphics, videos or city maps (hereinafter uniformly referred to as "content").
The integration always requires that the third-party providers of this content process the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content or function. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer as well as be linked to such information from other sources..
Notes on legal bases: If we ask users for their consent to use the third-party providers, the legal basis for processing data is consent. Otherwise, the users' data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Types of data processed: Usage data (e.g. web pages visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Affected persons: Users (e.g., website visitors, users of online services).
Purposes of processing: Provision of our online offer and user-friendliness, provision of contractual services and customer service.
Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
Google Fonts: We integrate the fonts ("Google Fonts") of the provider Google, whereby the user data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://fonts.google.com/; privacy policy: https://policies.google.com/privacy .
We process the data of the users of our application insofar as this is necessary to provide the users with the application and its functionalities, to monitor its security and to develop it further. We may also contact users in compliance with legal requirements, provided that the communication is necessary for purposes of administration or use of the application. In all other respects, we refer to the data protection information in this privacy policy with regard to the processing of users' data.
Legal basis: The processing of data required for the provision of the functionalities of the application serves the fulfillment of contractual obligations. This also applies if the provision of the functionalities requires an authorization of the users (e.g. releases of device functions). If the processing of data is not necessary for the provision of the functionalities of the application, but serves the security of the application or our business interests (e.g. collection of data for purposes of optimizing the application or security purposes), it is based on our legitimate interests. If users are explicitly asked for their consent to the processing of their data, the processing of the data covered by the consent is based on the consent.
Commercial use: We process the data of the users of our application, registered users and any test users in order to be able to provide our contractual services to them and on the basis of legitimate interests in order to ensure the security of our application and to be able to develop it further. The required information is identified as such in the context of the conclusion of the use, order, purchase order or comparable contract and may include the information required for the provision of services and for any billing, as well as contact information in order to be able to hold any consultations.
Device permissions for access to functions and data: The use of our application or its functionalities may require users' permissions to access certain functions of the devices used or the data stored on the devices or accessible with the help of the devices. By default, these permissions must be granted by users and can be revoked at any time in the settings of the respective devices. The exact procedure for controlling app permissions may depend on the users' device and software. If clarification is needed, users can contact us. We would like to point out that denial or revocation of the respective permissions may affect the functionality of our app.
Types of data processed: Inventory data (e.g., names, addresses), meta/communication data (e.g., device information, IP addresses), payment data (e.g., bank details, invoices, payment history), contract data (e.g., subject matter of contract, term, customer category).).
Persons concerned: Users (e.g., website visitors, users of online services).
Processing purposes: Contractual benefits and service.
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a DSGVO), Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Our app is obtained via special online platforms operated by other service providers (so-called "app stores"). In this context, the data protection notices of the respective app stores apply in addition to our data protection notices. This applies in particular with regard to the reach measurement and interest-based marketing methods used on the platforms, as well as any obligation to pay costs.
Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Betroffene Personen: Persons concerned.
Processing purposes: Contractual benefits and service.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Used services and service providers:
Apple App Store: App and software sales platform; Service provider: Apple Inc, Infinite Loop, Cupertino, CA 95014, USA; website: https://www.apple.com/de/ios/app-store/ ; privacy policy: https://www.apple.com/legal/privacy/de-ww/ .
Google Play: App and software sales platform; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://play.google.com/store/apps?hl=de ; privacy policy: https://policies.google.com/privacy .
The data processed by us will be deleted in accordance with the legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose).
If the data is not deleted because it is required for other and legally permissible purposes, its processing is limited to these purposes. I.e., the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
Our privacy notices may also contain further information on the retention and deletion of data, which will take precedence for the respective processing operations.
We ask you to regularly inform yourself about the content of our privacy policy. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
If we provide addresses and contact information of companies and organizations in this privacy statement, please note that the addresses may change over time and please check the information before contacting us.
As a data subject, you are entitled to various rights under the DSGVO, which arise in particular from para. 15 to 21 DSGVO:
Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Right of withdrawal for consents: You have the right to revoke any consent you have given at any time.
Right to information: You have the right to request confirmation as to whether data in question is being processed and to obtain information about this data and further information and a copy of the data in accordance with the legal requirements.
Right to rectification: In accordance with the legal requirements, you have the right to request that the data concerning you be completed or that incorrect data concerning you be corrected.
Right to erasure and restriction of processing: In accordance with the statutory provisions, you have the right to demand that data relating to you be deleted immediately or, alternatively, to demand restriction of the processing of the data in accordance with the statutory provisions.
Right to data portability: You have the right to receive data concerning you, which you have provided to us, in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another responsible party.
Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the requirements of the DSGVO.
This section provides you with an overview of the terms used in this privacy policy. Many of the terms are taken from the law and defined primarily in para. 4 of the DSGVO. The legal definitions are binding. The following explanations, on the other hand, are primarily intended to aid understanding. The terms are sorted alphabetically.
Affiliate tracking: As part of affiliate tracking, links are logged with the help of which the linking websites refer users to websites with product or other offers. The operators of the respective linking websites may receive a commission if users follow these so-called affiliate links and subsequently take advantage of the offers (e.g. buy goods or use services). For this purpose, it is necessary for the providers to be able to track whether users who are interested in certain offers subsequently take advantage of them at the instigation of the affiliate links. It is therefore necessary for the functionality of affiliate links that they are supplemented with certain values that become part of the link or are stored elsewhere, e.g. in a cookie. The values include in particular the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, an online identifier of the user as well as tracking-specific values, such as, e.g., ad media ID, affiliate ID and categorizations.
IP masking: IP masking" refers to a method in which the last octet, i.e., the last two numbers of an IP address, is deleted so that the IP address can no longer be used to uniquely identify a person. Therefore, IP masking is a means of pseudonymizing processing procedures, especially in online marketing
Personal data:"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiles with user-related information: The processing of "profiles with user-related information", or "profiles" for short, includes any type of automated processing of personal data that consists of using this personal data to analyze, evaluate or predict certain personal aspects relating to a natural person (depending on the type of profiling, this may include different information concerning demographics, behavior and interests, such as interaction with websites and their content, etc.) (e.g. interests in certain content or products, click behavior on a website or location). Cookies and web beacons are often used for profiling purposes.
Reach measurement: Reach measurement (also known as web analytics) is used to evaluate the flow of visitors to an online offering and can include visitors' behavior or interests in certain information, such as website content. With the help of reach analysis, website owners can see, for example, at what time visitors visit their website and what content they are interested in. This enables them, for example, to better adapt the content of the website to the needs of their visitors. For the purposes of reach analysis, pseudonymous cookies and web beacons are often used to recognize returning visitors and thus obtain more precise analyses of the use of an online offer.
Responsible: "Responsible" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Processing: "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data, be it collection, analysis, storage, transmission or deletion.
Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke ; adapted and translated by the app/website owner.