Status: September 02, 2024
Table of Contents
Famville UG
Glockenstr. 33B
40476
Düsseldorf
Germany
Email Address: contact@famville.net
Imprint:
https://famville.net/impressum
The following overview summarizes the types of data processed and the purposes of their processing, and references the affected individuals.
Types of Processed Data:
Special Categories of Data:
Categories of Affected Individuals:
Purposes of Processing:
The following provides an overview of the legal bases of the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or business. If specific legal bases are relevant in individual cases, we will inform you of them in this privacy policy.
Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR) - The data subject has given their consent to the processing of personal data concerning them for one or more specific purposes.
Contractual Performance and Pre-Contractual Inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR) - The processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.
Legal Obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR) - The processing is necessary for compliance with a legal obligation to which the controller is subject.
Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f) GDPR) - The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Processing of Special Categories of Personal Data in Relation to Healthcare, Profession, and Social Security (Art. 9 Para. 2 lit. h) GDPR) - The processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, for medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to a contract with a health professional.
National Data Protection Regulations in Germany: In addition to the GDPR, national data protection regulations apply in Germany. This includes, in particular, the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The BDSG contains special regulations, particularly regarding the right to information, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes, and transmission, as well as automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may apply.
National Data Protection Regulations in France: In addition to the GDPR, national data protection regulations apply in France. This includes, in particular, the French Data Protection Act (Loi Informatique et Libertés).
National Data Protection Regulations in Liechtenstein: In addition to the GDPR, national data protection regulations apply in Liechtenstein. This includes, in particular, the Data Protection Act (Datenschutzgesetz - DSG) and the Data Protection Regulation (Datenschutzverordnung - DSV).
National Data Protection Regulations in the Netherlands: In addition to the GDPR, national data protection regulations apply in the Netherlands. This includes, in particular, the Implementation Act for the General Data Protection Regulation (Uitvoeringswet Algemene verordening gegevensbescherming - UAVG).
National Data Protection Regulations in Austria: In addition to the GDPR, national data protection regulations apply in Austria. This includes, in particular, the Federal Act on the Protection of Natural Persons in the Processing of Personal Data (Datenschutzgesetz - DSG). The Datenschutzgesetz contains special regulations, particularly regarding the right to information, the right to rectification or deletion, the processing of special categories of personal data, processing for other purposes, and transmission, as well as automated decision-making in individual cases.
National Data Protection Regulations in Poland: In addition to the GDPR, national data protection regulations apply in Poland. This includes, in particular, the Data Protection Act (Ustawa z dnia 10 maja 2018 r. ochronie danych osobowych).
Relevant Legal Bases under Swiss Data Protection Law: If you are located in Switzerland, we process your data based on the Federal Data Protection Act (Schweizer DSG). Unlike the GDPR, the Swiss DSG generally does not require the specification of a legal basis for the processing of personal data, and the processing of personal data must be carried out in good faith, lawfully, and proportionately (Art. 6 Para. 1 and 2 of the Swiss DSG). Moreover, personal data will only be collected and processed for a specific, identifiable purpose and only in a manner compatible with that purpose (Art. 6 Para. 3 of the Swiss DSG).
Notice on the Applicability of the GDPR and Swiss DSG: These data protection notices serve both to provide information under the Swiss DSG and the General Data Protection Regulation (GDPR). Therefore, please note that the terms of the GDPR are used for broader geographical applicability and comprehensibility. Specifically, instead of the terms used in the Swiss DSG ("processing" of "personal data," "overriding interest," and "sensitive personal data"), the terms used in the GDPR ("processing" of "personal data," "legitimate interest," and "special categories of data") are used. However, the legal meaning of the terms will still be determined according to the Swiss DSG within its scope of applicability.
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs, the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.
These measures include, in particular, securing the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, input, transfer, securing of availability, and separation of the data. We have also established procedures that ensure the exercise of data subject rights, deletion of data, and response to data threats. Furthermore, we take the protection of personal data into account in the development or selection of hardware, software, and procedures, following the principle of data protection through technology design and through privacy-friendly default settings.
IP Address Truncation: If IP addresses are processed by us or by the service providers and technologies used by us, and the processing of a full IP address is not necessary, the IP address is truncated (also known as "IP masking"). In this process, the last two digits or the last part of the IP address after a point is removed or replaced by placeholders. Truncating the IP address is intended to prevent or significantly hinder the identification of a person based on their IP address.
Securing Online Connections through TLS/SSL Encryption Technology (HTTPS): To protect the data of users transmitted via our online services from unauthorized access, we use TLS/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are the cornerstones of secure data transmission on the Internet. These technologies encrypt the information transmitted between the website or app and the user's browser (or between two servers), thereby protecting the data from unauthorized access. TLS, as the more advanced and secure version of SSL, ensures that all data transmissions meet the highest security standards. If a website is secured by an SSL/TLS certificate, this is indicated by the display of HTTPS in the URL. This serves as an indicator to users that their data is transmitted securely and encrypted.
In the course of our processing of personal data, it may happen that this data is transferred to other entities, companies, legally independent organizational units, or persons, or disclosed to them. The recipients of this data may include, for example, service providers tasked with IT tasks or providers of services and content that are embedded in a website. In such cases, we comply with the legal requirements and, in particular, conclude corresponding contracts or agreements that serve to protect your data with the recipients of your data.
Transfer of Data within the Corporate Group: We may transfer personal data to other companies within our corporate group or grant them access to this data. If this transfer is for administrative purposes, it is based on our legitimate business and economic interests, or it occurs if it is necessary for the fulfillment of our contractual obligations or if consent has been given by the data subjects or if there is a legal permission.
We delete personal data that we process in accordance with the legal requirements as soon as the consents on which the processing is based are revoked or there are no other legal bases for the processing. This applies in cases where the original purpose of the processing ceases to exist or the data is no longer required. Exceptions to this rule exist if legal obligations or special interests require longer storage or archiving of the data.
In particular, data that must be retained for commercial or tax law reasons, or that is necessary for legal prosecution or the protection of the rights of other natural or legal persons, must be archived accordingly.
Our privacy notices contain additional information on the retention and deletion of data that specifically applies to certain processing operations.
If there are multiple indications of the retention period or deletion deadlines for a piece of data, the longest period is always applicable.
If a period does not explicitly begin on a specific date and is at least one year, it automatically starts at the end of the calendar year in which the event triggering the period occurred. In the case of ongoing contractual relationships in which data is stored, the triggering event for the period is the time of the termination or other end of the legal relationship.
Data that is no longer required for the originally intended purpose but must be retained due to legal requirements or other reasons will be processed exclusively for the reasons that justify their retention.
Rights of Data Subjects under the GDPR: As a data subject, you have various rights under the GDPR, particularly arising from Articles 15 to 21 of the GDPR:
Rights of Data Subjects under Swiss Data Protection Law:
As a data subject under the Swiss Data Protection Act (DSG), you are entitled to the following rights:
At Famville, we are dedicated to enriching the social experiences of families. Our app connects like-minded families, facilitates the planning of playdates, and helps you discover nearby family events to bridge the digital divide in modern parenting. We understand the importance of your personal data and are committed to protecting your privacy and ensuring the security of your information. This privacy policy explains how we process your data to provide these services in compliance with applicable data protection laws. Should you have any questions or concerns regarding your privacy, please do not hesitate to contact us at [insert contact information].
We process the data of our contractual and business partners, such as customers and interested parties (collectively referred to as "contractual partners"), within the framework of contractual and similar legal relationships, as well as associated measures and communication with the contractual partners (or pre-contractual) to respond to inquiries.
We use this data to fulfill our contractual obligations. This includes, in particular, obligations to provide the agreed-upon services, any obligations to update and remedy warranty and other service issues. Additionally, we use the data to safeguard our rights and for the purpose of administrative tasks associated with these obligations, as well as for corporate organization. We also process the data based on our legitimate interest in proper and economic business management, as well as security measures to protect our contractual partners and our business operations from misuse and threats to their data, secrets, information, and rights (e.g., involvement of telecommunications, transport, and other auxiliary services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). In accordance with applicable law, we only share the data of contractual partners with third parties to the extent necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners are informed of other forms of processing, such as for marketing purposes, within the scope of this privacy policy.
The data required for the aforementioned purposes is communicated to the contractual partners before or during data collection, e.g., in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks or similar), or in person.
We delete the data after the expiration of legal warranty and comparable obligations, i.e., generally after four years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal reasons (e.g., for tax purposes, typically ten years). Data disclosed to us by the contractual partner as part of an order is deleted in accordance with the specifications and generally after the end of the order.
Types of Processed Data: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses or phone numbers); contract data (e.g., contract subject, duration, customer category).
Affected Individuals: Recipients of services and clients; interested parties; business and contractual partners.
Purposes of Processing: Fulfillment of contractual services and obligations; communication; office and organizational procedures; organizational and administrative procedures; business processes and economic procedures.
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases: Contractual performance and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR); legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Rights of Data Subjects under the GDPR: As a data subject, you have various rights under the GDPR, particularly arising from Articles 15 to 21 of the GDPR:
Rights of Data Subjects under Swiss Data Protection Law:
As a data subject under the Swiss Data Protection Act (DSG), you are entitled to the following rights:
At Famville, we are dedicated to enriching the social experiences of families. Our app connects like-minded families, facilitates the planning of playdates, and helps you discover nearby family events to bridge the digital divide in modern parenting. We understand the importance of your personal data and are committed to protecting your privacy and ensuring the security of your information. This privacy policy explains how we process your data to provide these services in compliance with applicable data protection laws. Should you have any questions or concerns regarding your privacy, please do not hesitate to contact us at [insert contact information].
We process the data of our contractual and business partners, such as customers and interested parties (collectively referred to as "contractual partners"), within the framework of contractual and similar legal relationships, as well as associated measures and communication with the contractual partners (or pre-contractual) to respond to inquiries.
We use this data to fulfill our contractual obligations. This includes, in particular, obligations to provide the agreed-upon services, any obligations to update and remedy warranty and other service issues. Additionally, we use the data to safeguard our rights and for the purpose of administrative tasks associated with these obligations, as well as for corporate organization. We also process the data based on our legitimate interest in proper and economic business management, as well as security measures to protect our contractual partners and our business operations from misuse and threats to their data, secrets, information, and rights (e.g., involvement of telecommunications, transport, and other auxiliary services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). In accordance with applicable law, we only share the data of contractual partners with third parties to the extent necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners are informed of other forms of processing, such as for marketing purposes, within the scope of this privacy policy.
The data required for the aforementioned purposes is communicated to the contractual partners before or during data collection, e.g., in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks or similar), or in person.
We delete the data after the expiration of legal warranty and comparable obligations, i.e., generally after four years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal reasons (e.g., for tax purposes, typically ten years). Data disclosed to us by the contractual partner as part of an order is deleted in accordance with the specifications and generally after the end of the order.
Types of Processed Data: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses or phone numbers); contract data (e.g., contract subject, duration, customer category).
Affected Individuals: Recipients of services and clients; interested parties; business and contractual partners.
Purposes of Processing: Fulfillment of contractual services and obligations; communication; office and organizational procedures; organizational and administrative procedures; business processes and economic procedures.
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases: Contractual performance and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR); legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
Personal data of service recipients and clients – including customers, clients, or, in special cases, mandatories, patients, or business partners, as well as other third parties – are processed in the context of contractual and similar legal relationships and pre-contractual measures, such as the initiation of business relationships. This data processing supports and facilitates business processes in areas such as customer management, sales, payment transactions, accounting, and project management.
The data collected serves to fulfill contractual obligations and efficiently manage business processes. This includes the handling of business transactions, management of customer relationships, optimization of sales strategies, and ensuring internal billing and financial processes. Additionally, the data helps protect the rights of the data controller and supports administrative tasks and organizational management within the company.
Personal data may be shared with third parties if necessary for the fulfillment of the aforementioned purposes or legal obligations. After the expiration of statutory retention periods or when the purpose of processing no longer applies, the data will be deleted. This also applies to data that must be retained longer due to tax and legal documentation obligations.
Types of Processed Data: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and posts, and the information pertaining to them, such as authorship or creation time); contract data (e.g., contract subject, duration, customer category); usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types, and operating systems used, interactions with content and functions); meta-communication and procedural data (e.g., IP addresses, timestamps, identification numbers, persons involved); log data (e.g., log files related to logins or data retrieval, access times); creditworthiness data (e.g., received credit score, estimated default probability, associated risk classification, historical payment behavior).
Affected Individuals: Recipients of services and clients; interested parties; communication partners; business and contractual partners; customers; third parties; users (e.g., website visitors, users of online services); employees (e.g., employees, applicants, temporary workers, and other staff members).
Purposes of Processing: Fulfillment of contractual services and obligations; office and organizational procedures; business processes and economic procedures; security measures; provision of our online offer and user-friendliness; communication; marketing; sales promotion; public relations; credit and creditworthiness assessment; financial and payment management; information technology infrastructure (operation and provision of information systems and technical devices such as computers, servers, etc.).
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases: Contractual performance and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR).
In the course of our business activities, we use additional services, platforms, interfaces, or plugins from third-party providers ("services") while complying with legal requirements. The use of these services is based on our interest in the proper, lawful, and economic operation of our business and internal organization.
Types of Processed Data: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contact data (e.g., postal and email addresses or phone numbers); content data (e.g., textual or visual messages and posts, and the information pertaining to them, such as authorship or creation time); contract data (e.g., contract subject, duration, customer category).
Affected Individuals: Recipients of services and clients; interested parties; business and contractual partners.
Purposes of Processing: Fulfillment of contractual services and obligations; office and organizational procedures; business processes and economic procedures.
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
As part of contractual and other legal relationships, due to legal obligations, or based on our legitimate interests, we offer affected individuals efficient and secure payment options and use additional service providers for this purpose, in addition to banks and credit institutions (collectively referred to as "payment service providers").
The data processed by the payment service providers includes inventory data, such as the name and address, bank details, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information. The information is necessary to carry out the transactions. However, the data entered will only be processed by the payment service providers and stored with them. That is, we do not receive any account or credit card-related information but only information with confirmation or negative information about the payment. Under certain circumstances, the data will be transmitted by the payment service providers to credit agencies. This transmission is intended for identity and creditworthiness checks. For further information, we refer to the terms and conditions and the privacy policies of the respective payment service providers.
For payment transactions, the terms and conditions and the privacy policies of the respective payment service providers apply, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and the assertion of withdrawal, information, and other data subject rights.
Types of Processed Data: Inventory data (e.g., full name, residential address, contact information, customer number, etc.); payment data (e.g., bank details, invoices, payment history); contract data (e.g., contract subject, duration, customer category); usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types, and operating systems used, interactions with content and functions); meta-communication and procedural data (e.g., IP addresses, timestamps, identification numbers, persons involved); contact data (e.g., postal and email addresses or phone numbers).
Affected Individuals: Recipients of services and clients; business and contractual partners; interested parties.
Purposes of Processing: Fulfillment of contractual services and obligations; business processes and economic procedures; conversion measurement (measuring the effectiveness of marketing measures); marketing; provision of our online offer and user-friendliness.
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases: Contractual performance and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b) GDPR); legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR).
We process the data of users to provide them with our online services. For this purpose, we process the IP address of the user, which is necessary to deliver the content and functions of our online services to the user's browser or device.
Types of Processed Data:
Affected Individuals:
Purposes of Processing:
Retention and Deletion: Deletion in accordance with the details in the "General Information on Data Storage and Deletion" section.
Legal Bases:
Further Information on Processing, Procedures, and Services:
Cookies are small text files or other storage notes that store information on end devices and retrieve them. For example, to save the login status in a user account, the content of a shopping cart in an e-shop, the accessed content, or the functions used in an online offer. Cookies can also be used for different purposes, such as ensuring the functionality, security, and convenience of online offers, as well as creating analyses of visitor flows.
Consent Notes: We use cookies in accordance with legal regulations. Therefore, we obtain prior consent from users unless it is not required by law. Permission is not necessary, particularly if storing and retrieving the information, including cookies, is essential to providing a telemedia service explicitly requested by the users (i.e., our online offer). The revocable consent is clearly communicated to users and includes information on the respective cookie usage.
Legal Basis Notes on Data Protection: The legal basis on which we process personal data using cookies depends on whether we ask users for consent. If users consent, the legal basis for processing their data is the declared consent. Otherwise, the data processed using cookies is based on our legitimate interests (e.g., in the economic operation of our online offer and the improvement of its usability) or if it is necessary to fulfill our contractual obligations. We inform users about the purposes for which the cookies are used during this privacy policy or within our consent and processing procedures.
Retention Period: Regarding the retention period, the following types of cookies are distinguished:
General Information on Revocation and Objection (Opt-out): Users can revoke the consent they have given at any time and also declare an objection to the processing of their data in accordance with legal requirements, also through the privacy settings of their browser.
Types of Processed Data: Meta-communication and procedural data (e.g., IP addresses, timestamps, identification numbers, persons involved).
Affected Individuals: Users (e.g., website visitors, users of online services).
Legal Bases: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR); Consent (Art. 6 Para. 1 S. 1 lit. a) GDPR).
Further Information on Processing, Procedures, and Services:
We process the data of users of our applications as far as this is necessary to provide the users with the application and its functionalities, to monitor its security, and to further develop it. We may also contact users, observing legal requirements, if communication is necessary for the administration or use of the application. Furthermore, we refer to the data processing notices in this privacy policy concerning the processing of user data.
Legal Bases: The processing of data is based on the following legal grounds:
Types of Processed Data:
Affected Individuals: Users of the application (apps), including test users.
Retention and Deletion: Data will be deleted in accordance with legal requirements, as soon as the purposes for which they were collected have been fulfilled or as long as storage is not required by legal obligations.
Purposes of Processing:
Additional Information: Users are informed about any additional processing activities in the application itself or as part of the registration process.
Before users install our application, they should be aware that data is collected by the app store provider, particularly information on user identification, device ID, email address, and payment methods. We have no influence on this data collection and processing and are not responsible for it. For more information, please refer to the privacy policies of the respective app store provider.
Types of Processed Data:
Affected Individuals: Users of the application (apps).
Purposes of Processing:
Legal Bases: The processing is based on the contractual relationship between the user and the app store provider, as well as legitimate interests, legal obligations, or the user's consent.
Additional Information: The collection and use of data by the app store provider are subject to the respective provider's privacy policies and terms of service. Users should review these documents before downloading and using the application.
Users can create an account within our online offer. As part of the registration and subsequent logins and uses of the account, we process the users' data to perform the user account functions.
Types of Processed Data:
Affected Individuals: Users who register for an account.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be deleted as soon as the purpose of storage ceases, the user account is deleted, or if there are no legal retention requirements. Users are responsible for securing their data before account deletion.
Additional Information:
Our online offer may include community features, such as forums, comment sections, or similar interactive elements. When users participate in these features, their data, such as their contributions or comments, may be processed.
Types of Processed Data:
Affected Individuals: Users who participate in community features.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be deleted as soon as it is no longer required for the intended purpose, or if the user account is deleted. However, publicly visible contributions may remain accessible, unless they violate user rights or legal regulations.
Users can log in to our online offer using Single Sign-On (SSO) procedures, such as with Facebook, Google, or another provider. This method simplifies the registration and login process by linking to an account that the user already has with the SSO provider.
When users choose to log in using an SSO, they will be redirected to the website of the SSO provider, where they can log in with their existing credentials. As part of the SSO process, we may receive user data from the SSO provider, including the user’s basic profile information and other data necessary for the account setup. The exact details of what data is transferred depend on the provider and the user's privacy settings with that provider.
Types of Processed Data:
Affected Individuals: Users who choose to use Single Sign-On services for registration or login.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as the user account exists or until the user revokes their consent to link their account to the SSO provider. Users can manage their SSO settings and revoke access via the settings of their SSO provider.
Additional Information: The data processing and privacy policies of the SSO provider apply in addition to our own. Users should review the privacy policies of the SSO provider for more information.
When users contact us (e.g., via contact form, email, telephone, or social media), their data is processed to handle the inquiry and its processing.
Types of Processed Data:
Affected Individuals: Users who contact us for inquiries or requests.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data related to inquiries will be deleted once it is no longer necessary for the intended purpose and legal retention periods do not require further storage.
Additional Information: Users’ data may be stored in a customer relationship management system (CRM) or similar systems to manage inquiries and customer interactions.
We are committed to protecting the privacy of your mobile phone number and other contact information. When you provide us with your mobile phone number, it will be used solely for the purposes for which you have given your explicit consent, such as for messaging, notifications, and other services directly related to our offerings.
No Sharing of Mobile Information with Third Parties:
We do not
share, sell, rent, or otherwise disclose your mobile phone number to third parties or affiliates
for marketing, promotional, or any other purposes unrelated to the service for which you
provided your information. Your mobile information is kept strictly confidential and is used
exclusively by us to deliver the services you have opted into.
Use of Mobile Information for Messaging:
Your mobile phone
number may be used to send you notifications, updates, or other messages that are essential to
the services we provide. You will only receive marketing or promotional messages if you have
explicitly opted in to such communications, and you will have the opportunity to opt-out at any
time.
Security Measures:
We implement appropriate technical and
organizational measures to protect your mobile information from unauthorized access, use, or
disclosure. These measures include encryption, secure storage, and restricted access protocols
to ensure the confidentiality and security of your data.
We may send push notifications to users who have installed our app or use our online services, provided they have given their consent. Push notifications can be used to inform users about important updates, news, or personalized offers.
Types of Processed Data:
Affected Individuals: Users who opt-in to receive push notifications.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be deleted when the user disables push notifications or withdraws their consent.
Additional Information: Users can manage their push notification preferences through their device settings or the app settings.
We use cloud services to store and manage data in a secure and efficient manner. Cloud services may include data storage, processing power, or other online services.
Types of Processed Data:
Affected Individuals: Users who store data or interact with our cloud-based services.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data stored in the cloud will be retained as long as it is necessary for the intended purposes, or until the user deletes the data or the associated account.
Additional Information: The specific terms of service and privacy policies of the cloud service provider apply. Users should review these documents to understand how their data is processed within the cloud service.
We send newsletters, emails, and other electronic notifications (hereinafter referred to as "newsletters") only with the consent of the recipients or legal permission. Our newsletters contain information about our services and us.
To subscribe to our newsletters, users must provide their email address and any other information specified during the registration process. This data is used solely for sending the newsletters and is not shared with third parties, except as required for the technical distribution of the newsletters or as specified in the privacy policy.
Double Opt-In: Our newsletter subscriptions involve a so-called double opt-in procedure, which means that after signing up, users receive an email asking them to confirm their subscription. This confirmation is necessary to prevent anyone from using an email address they do not own. Subscriptions to the newsletter are logged to meet our legal obligations to prove the subscription process.
Types of Processed Data:
Affected Individuals: Recipients of newsletters.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data is stored for as long as the newsletter subscription is active. Upon cancellation or withdrawal of consent, data will be deleted unless it is legally required to be retained.
Additional Information: Users can unsubscribe from the newsletter at any time by using the unsubscribe link provided in each newsletter.
We process personal data for the purposes of advertising communication, which can take place via various channels such as email, telephone, mail, or fax. Advertising communication is carried out in accordance with legal requirements and only with the consent of the recipient or legal permission.
Types of Processed Data:
Affected Individuals: Recipients of advertising communication.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be deleted when the user withdraws their consent or objects to further processing, unless legal retention obligations require continued storage.
Additional Information: Recipients can object to the receipt of advertising communications at any time by contacting us or using the opt-out mechanisms provided in the communication.
We process personal data of participants in contests and competitions only in compliance with relevant data protection regulations and, where necessary, with the consent of the participants.
Types of Processed Data:
Affected Individuals: Participants in contests and competitions.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data is stored for the duration of the contest and until the contest obligations are fulfilled. After the contest ends, data is deleted unless there are legal retention obligations or if participants have consented to further use of their data.
Additional Information: Participants are informed about the specific data processing activities and their rights before entering the contest or competition.
We may conduct surveys and questionnaires for research purposes, customer satisfaction assessments, and product or service development.
Types of Processed Data:
Affected Individuals: Participants in surveys and questionnaires.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be stored until the survey or questionnaire is completed and its purposes have been fulfilled. Afterward, data will be anonymized or deleted unless the participant has consented to further use of their data.
Additional Information: Participation in surveys and questionnaires is voluntary, and participants can withdraw their consent at any time.
We use web analytics services to evaluate the traffic and behavior of users on our website. This data helps us understand how visitors interact with our content, optimize our online offer, and improve the user experience. Web analytics tools typically use cookies and similar technologies to collect data, which is then processed to generate reports on website activity.
Types of Processed Data:
Affected Individuals: Users of our online offer (e.g., website visitors).
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data collected through web analytics tools is typically anonymized or deleted after a certain period, often 14 to 26 months, depending on the specific tool and its settings.
Additional Information: Users can manage their preferences and opt out of web analytics through the settings provided on our website or by adjusting their browser settings.
We process personal data for the purposes of online marketing, including the promotion of our services and the measurement of the effectiveness of our marketing activities. For this, we may use online advertising services, social media platforms, and other digital marketing tools.
Types of Processed Data:
Affected Individuals: Users of our online offer and recipients of our marketing communications.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as necessary to fulfill the purposes of online marketing or until the user withdraws their consent or objects to further processing.
Additional Information: Users can opt out of online marketing activities through the settings provided on our website or by adjusting their privacy settings on social media platforms.
We participate in affiliate programs, which involve partnerships with other companies to promote their products or services on our website. If users click on an affiliate link and make a purchase, we may receive a commission. To track these referrals, cookies or similar technologies may be used.
Types of Processed Data:
Affected Individuals: Users who interact with affiliate links on our website.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as necessary to fulfill the purposes of affiliate marketing or until the user objects to further processing.
Additional Information: Users can manage their preferences regarding cookies and tracking through the settings provided on our website.
We operate our own affiliate program, allowing other companies or individuals ("affiliates") to promote our products or services. Affiliates earn a commission for referrals that result in a purchase or other specified actions. For this purpose, we use cookies or similar technologies to track referrals.
Types of Processed Data:
Affected Individuals: Affiliates participating in our program and users referred by affiliates.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as necessary to fulfill the purposes of the affiliate program or until the affiliate agreement is terminated.
Additional Information: Affiliates are required to comply with data protection regulations when promoting our services and using tracking technologies.
We provide users with the opportunity to leave reviews or ratings of our products and services. The submitted reviews and ratings may be published on our website or other platforms, along with the user’s name or username.
Types of Processed Data:
Affected Individuals: Users who submit reviews or ratings.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Reviews and ratings will be retained as long as they are relevant and in accordance with legal requirements. Users can request the deletion of their reviews by contacting us.
Additional Information: Reviews and ratings must comply with our guidelines, and we reserve the right to remove content that violates these guidelines or legal requirements.
We maintain online presences on social media platforms to communicate with customers, interested parties, and users, and to inform them about our services. When users interact with our social media profiles, their data may be processed by us as well as the operators of the respective platforms.
Types of Processed Data:
Affected Individuals: Users who interact with our social media profiles.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as necessary to fulfill the purposes of social media interaction or until the user withdraws their consent or objects to further processing.
Additional Information: Users should be aware that social media platforms also collect and process data for their own purposes. For more information, please refer to the privacy policies of the respective social media platforms.
We integrate functional and content elements from third-party providers into our online offer. These elements may include videos, maps, social media buttons, and feeds (collectively referred to as "plug-ins"). When users interact with these plug-ins, data may be collected and processed by the third-party providers.
Types of Processed Data:
Affected Individuals: Users who interact with plug-ins and embedded content on our online offer.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data collected through plug-ins and embedded content will be retained as long as necessary to fulfill the purposes of integration or until the user withdraws their consent or objects to further processing.
Additional Information: Users should review the privacy policies of the third-party providers to understand how their data is processed when interacting with plug-ins and embedded content.
We use services, platforms, and software tools to manage and organize our operations, administration, and business processes. This may include project management, accounting, customer relationship management (CRM), and communication tools.
Types of Processed Data:
Affected Individuals: Employees, contractors, business partners, customers, and users.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Data will be retained as long as necessary for the intended business processes and legal obligations. Afterward, data will be deleted or anonymized.
Additional Information: The specific terms of service and privacy policies of the service providers apply. Users and partners should review these documents to understand how their data is processed within these tools.
We process personal data of our employees and applicants in accordance with applicable data protection laws for the purpose of establishing, maintaining, and terminating employment relationships.
Types of Processed Data:
Affected Individuals: Employees, applicants, and former employees.
Purposes of Processing:
Legal Bases:
Retention and Deletion: Employment-related data will be retained for the duration of the employment relationship and for as long as required by legal retention obligations. Afterward, data will be deleted or anonymized.
Additional Information: Employees and applicants have the right to access, rectify, or delete their data and to object to its processing, as specified in applicable data protection laws.
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or other relevant factors. Users will be notified of significant changes via our website or other communication channels.
Retention and Deletion: Historical versions of this privacy policy may be archived for legal compliance purposes.
Legal Bases: Updates and changes are made in accordance with our legitimate interests in ensuring transparency and compliance with data protection laws.
This section provides definitions for key terms used in this privacy policy:
