1) Information about the collection of personal data and contact details by the responsible party.
1.1 We are pleased that you are using our application (hereinafter referred to as "app"). In the following, we inform you about the handling of your personal data when using our app. Personal data in this context is all data with which you can be personally identified.
1.2 The responsible party for data processing regarding this app, within the meaning of the General Data Protection Regulation (GDPR), is The Mother Nature App GmbH, Sanderstr. 22, 12047 Berlin, Germany, Tel.: 0176 / 420 187 84, e-mail: [email protected]. The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This app uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your web browser line.
2) Use of single sign-on procedures
Google Sign-In
In our app, you can log in to create a customer account or register using the "Google Sign-In" service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as part of the so-called single sign-on technology, if you have a Google account. You can recognize the Google sign-in function in the app by the button "Sign in via Google" "Sign in with Google account" or "Sign in with Google".
Through this, the app establishes a direct connection to Google's servers. This provides Google with the information that you have accessed the corresponding page in the app, even if you do not have a Google account or are not currently logged in to Google. This information (including your IP address) is transmitted directly to a server from Google and stored there; this may also involve transmission to the servers of Google LLC. in the USA. These data processing operations are carried out in accordance with Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO) on the basis of Google's legitimate interest in displaying personalized advertising based on surfing behavior.
By using the Google login button, you also have the option of logging in or registering in the app using your Google user data. Only if you give your express consent in accordance with Art. 6 para. 1 letter a of the German Data Protection Act (DSGVO) prior to the registration process on the basis of a corresponding notice about the exchange of data with Google, will we receive the general and publicly accessible information stored in your account from Google when you use the Google button. This data depends on the privacy settings you have personally set in Google. This information includes the user ID, name, profile picture, age and gender.
We would like to point out that, following changes to Google's privacy policy and terms of use, the transfer of your profile pictures, the user IDs of your friends and the friends list may also occur if these have been marked as "public" in your privacy settings at Google. The data transmitted by Google will be stored and processed by us to create a user account with the necessary data (title, first name, last name, address data, country, e-mail address, date of birth), if these have been shared by you with Google for this purpose. Conversely, based on your consent, data (e.g. information about your browsing or purchasing behavior) may be transferred from us to your Google account.
The consent given can be revoked at any time by sending a message to the responsible party named at the beginning of this privacy policy.
The purpose and scope of the data collection and the further processing and use of data by Google, as well as your rights in this regard and configuration options for protecting your privacy, can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en&gl=de.
You can view the terms of use for the use of "Google Sign-In" here: https://policies.google.com/terms
If you do not want Google to assign the data collected via our website directly to your Google account, you must log out of Google before using the app.
3) Log files when using our mobile app.
If you download our mobile app via an app store, the requisite information is transferred to the app store, in particular: username, email address and customer number of your account, time of download, payment information and the individual device identification number. We have no influence on this data collection and are not responsible for it. We process the data only insofar as it is necessary for downloading the mobile app to your mobile device.
When using our mobile app, we collect the personal data described below to enable convenient use of the functionality. If you wish to use our mobile app, we collect the following data, which is technically necessary for us to offer you the functionality of our mobile app and to ensure stability and security:
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT).
- Content of the request
- Access status/ http status code.
- Amount of data sent in bytes.
- Source/reference from where you arrived at the page.
- Browser used
- Language and version of browser software
- Operating system used and its user interface
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO) on the basis of our legitimate interest in improving the stability and functionality of our app. The data is not passed on or used in any other way. However, we reserve the right to subsequently review the aforementioned log files should concrete indications point to illegal use.
Furthermore, we need your unique device number (IMEI = International Mobile Equipment Identity), unique network subscriber number (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), possibly MAC address for WLAN use and the name of your mobile device.
4) Hosting & Content Delivery Network
- Cloudflare
For the operation of this app, we use a so-called Content Delivery Network ("CDN") of the technology service provider Cloudflare Inc, 101 Townsend St. San Francisco, CA 94107, USA ("Cloudflare"). A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Cloudflare's content delivery network helps us to optimize the loading speeds of our app.
The processing is carried out pursuant to Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO) on the basis of our legitimate interest in a secure and efficient delivery, as well as improvement of the stability and functionality of our app. For more information, please see Cloudflare's privacy policy at: https://www.cloudflare.com/privacypolicy/
5) Cookies
We use so-called cookies to make our app more appealing and to enable the use of certain functions. These are small text files that are stored on your personal device. Some of the cookies we use are deleted again after closing the app (so-called session cookies). Other cookies remain on your personal device and allow us to recognize you again (so-called persistent cookies). If cookies are placed, they collect and process certain user information, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In part, the cookies serve to simplify the operation of the app by storing settings. If personal data is also processed by individual cookies that we use, the processing is carried out in accordance with Art. 6 para. 1 letter b of the German Data Protection Regulation (DSGVO) for the performance of the contract, in accordance with Art. 6 para. 1 letter a of the DSGVO in the case of consent given, or in accordance with Art. 6 para. 1 letter f of the DSGVO to protect our legitimate interests in the best possible functionality of the app as well as a customer-friendly and effective design of the app use.
You can configure the settings of your mobile operating system and the app according to your wishes and, for example, refuse to accept third party cookies or all cookies. However, we would like to point out that in this case you may no longer be able to use all the functionalities of our mobile app.
6) Location data collection
- With approval
Our offer includes so-called location-based services, with which we provide you with special offers tailored to your particular location. You can only use this function after you have agreed via a pop-up that we can collect your location data via GPS and your IP address in anonymized form for the purpose of providing this service. You can allow or revoke this feature at any time in the settings of the app or your mobile operating system. Your location will only be transmitted to us if, when using the app, you make use of features that we can only offer you if we know your location.
7) Contacting us
Personal data is collected in the course of contacting us (i.e. via contact form or email). Which data is collected in the event of using a contact form can be seen from the respective contact form in the app. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO). If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 letter b of the DSGVO. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
8) Data processing when opening a customer account
Pursuant to Art. 6 para. 1 letter b of the German Data Protection Regulation (DGSVO), personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible party. We store and use the data provided by you for the purpose of fulfilling the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by our side, of which we inform you accordingly below.
9) Data processing for contract execution
9.1 In order to execute contracts concluded via the app, we cooperate with the service provider(s) listed below, which support us in whole or in part in the execution of entered contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract execution, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 letter b of the German Data Protection Act (DSGVO).
9.2 - Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS or macOS by charging a payment card stored in " Apple Pay". Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a code previously defined by you as well as the verification by means of the "Face ID" or "Touch ID" function of your device is required.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay, in order to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment.
If any personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para.1 letter b of the German Data Protection Regulation (DSGVO).
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely prevents any reference to a person. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay," and uncheck "Allow payments on Mac."
For more information about the Apple Pay privacy policy, please visit the following web site: https://support.apple.com/en-us/HT203027
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your mobile device running at minimum Android 4.4 ("KitKat") and having an NFC function, by charging a payment card stored on Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than €25, the prior unlocking of your mobile device through the respective verification measure set up (such as facial recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the source website, which is used to verify that payment has been made. This transaction number does not contain any information about the real payment data of your payment method stored in Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment transaction. The transaction is carried out exclusively between the user and the source website by charging the means of payment stored in Google Pay.
Insofar as personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 letter b of the German Data Protection Regulation (DSGVO).
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description for the reason for the transaction and, if applicable, the offering associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para.1 letter f of the German Data Protection Act (DSGVO) on the basis of the legitimate interest in proper billing, verification of transaction data and optimization and maintenance of the functionality of the Google Pay service.
Google also reserves the right to merge the processed transaction data with further information collected and stored by Google through the use of other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=privacynotice&ldl=en - Stripe
If you choose the payment method of the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on your information provided during the ordering process together with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 letter b of the German Data Protection Act (DSGVO). Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.
10) Registration in the app
You can register in our app by providing personal data. Which personal data is processed for the registration can be seen from the input form used for the registration. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory. You can provide all other information voluntarily through the use of our portal.
If you use our app, we store your data required for the fulfillment of the contract, including any information on the method of payment, until you finally delete your user account. Furthermore, we store the data you voluntarily provide for the time of your use of the portal, unless you delete it. You can manage and change all information in the protected customer area. The legal basis is Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO).
In addition, we store all content published by you (such as public posts, pinboard entries, guestbook entries, etc.) in order to operate the app. We have a legitimate interest in providing the app with the full user-generated content. The legal basis for this is Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO). If you delete your account, your statements published in the forum in particular will remain visible to all readers, but your account will no longer be accessible. All other data will be deleted in this case.
11) Use of your data for direct marketing
11.1 Registration for our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para.1 letter a of the German Data Protection Act (DSGVO). When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of the registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter itself or by sending a corresponding message to the responsible party named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.
11.2 Distribution of the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you e-mail offers for similar goods or services to those already purchased. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6 Para. 1 letter f of the German Data Protection Act (DSGVO). If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible party named at the beginning. For this, you will only incur any costs arising from the communication channel chosen by you in accordance with its basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
12) Sending push notifications
You can sign up to receive our push notifications. Via our push notifications, you will receive regular information about the services we offer.
To sign up, you must confirm or allow the receipt of notifications in the settings of your operating system. This process is documented and stored. This includes the storage of the login time as well as your device identification. The collection of this data is necessary so that we can, on the one hand, display the push notifications and, on the other hand, track the processes in the event of misuse and therefore serve our legal protection. The processing of this data is based on Art. 6 para. 1 letter. a of the German Data Protection Act (DSGVO).
You can revoke your consent to the storage and use of your personal data to receive our push notifications and the statistical collection described above at any time with immediate effect for the future. For the purpose of revoking consent, you can unsubscribe from the setting provided for this purpose for receiving push notifications in your app settings of your operating system.
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your data will be stored as long as the subscription to our push notifications is active.
13) Online-Marketing
13.1 Google AdSense
This App uses Google AdSense, a web advertising service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the app. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the App, can be recorded, collected and analyzed. The information generated by the cookie and/ or web beacon (including your IP address) about your use of this app is usually transmitted to a Google server and stored there. This may also result in a data transfer to the servers of Google LLC. in the USA.
Google uses the information thus obtained to perform an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted as part of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on the instructions of Google.
The described processing of data is carried out in accordance with Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO) for the purpose of targeting the user with advertisements by third-party advertisers, whose ads are displayed in this app on the basis of the evaluated user behavior. This processing also serves our financial interest in realizing the economic potential of our app by displaying personalized third-party advertising content in return for payment.
You can obtain more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/
You can configure the settings of your mobile operating system and the app according to your preferences and, for example, refuse to accept cookies.
Please note that certain functions of this app may not be available or may be limited if you have disabled the use of cookies.
As far as legally required, we have obtained your consent pursuant to Art. 6 para. 1 letter a of the German Data Protection Regulation (DSGVO) for the processing of your data as described above. You can revoke your consent at any time with respect to the future. To exercise your revocation, please follow the aforementioned option for making an objection.
13.2 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and within the scope of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are based on the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs involved.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers will find out the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processes triggered by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading out information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 letter a of the German Data Protection Act (DSGVO). You can revoke your consent at any time with immediate effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Furthermore, you can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
14) Web analytics services
14.1 Google (Universal) Analytics
This App uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and enable an analysis of your use of the app. The information generated by the cookie about your use of this app (including the shortened IP address) is usually transmitted to a Google server and stored there, which may also involve a transmission to the servers of Google LLC. in the USA.
This app uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening and prevents any direct personal identification. Through this extension, your IP address is shortened by Google within member states of the European Union or in other member states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC. server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the app, compiling reports on app activity and providing other services relating to app usage and internet usage to us. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
With the involvement of third-party information, Google Analytics also enables the creation of statistics with statements about the age, gender and interests of users on the basis of an evaluation of interest-based advertising via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the app for the purpose of targeted marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.
All processing described above, in particular the setting of Google Analytics cookies for reading out information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para.1 letter a of the German Data Protection Act (DSGVO). Without this consent, Google Analytics will not be used during your use of the app.
You can revoke your consent at any time with immediate effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided in the app. We have concluded an agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our users and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=de
14.2 Google Analytics 4
This App uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the usage of Apps.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of an app. The information collected by cookies about your use of the app (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, which are based in the USA, where the information may be further processed.
When using Google Analytics 4, the IP address transmitted by your device when you use the app is collected and processed automatically and by default only in an anonymized manner, so that a direct personal identification of the collected information is not possible. This automatic anonymization is carried out by Google shortening the IP address by the last digits transmitted by your device within member states of the European Union (EU) or other member states of the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the app, to compile reports (reports) on your app activities or usage behavior, and to provide us with other services related to your app usage and internet usage. In this context, the IP address of your device transmitted and shortened within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of app users based on an evaluation of interest-based advertising and using third-party information via a special function, the so-called "demographic characteristics". This enables the determination and differentiation of user groups of the app for the purpose of target group-optimized marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus also not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device used by you to use the app, will only take place if you have given us your express consent to do so in accordance with Art. 6 para.1 letter a of the German Data Protection Regulation (DSGVO). Without your consent, Google Analytics 4 will not be used during your use of the app. Once you have given your consent, you can revoke it at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" that is provided on the app.
In connection with this app, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google generate cross-device reports (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and linked your Internet-capable devices to your Google account, Google can analyze usage behavior across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 para.1 letter a of the German Data Protection Regulation (DSGVO). The logins and device types of all app users who were logged into a Google account and executed a conversion are taken into account. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place. We do not receive any personal data from Google in this regard, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalized ads" option in the settings of your Google account and thus disabling the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page:
https://support.google.com/ads/answer/2662922?hl=de.
You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=en
We have entered into a so-called order processing agreement with Google for our use of Google Analytics 4, through which Google is obligated to protect the data of our app users and not to pass it on to third parties.
To ensure compliance with the European level of data protection, even in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=en&gl=de
Details on the processes triggered by Google Analytics 4 and on Google's handling of data from apps can be found here: https://policies.google.com/technologies/partner-sites
15) Retargeting/ Remarketing/ Referral Marketing
Google Ads Remarketing
Our app uses the functions of Google Ads Remarketing, with which we advertise this app in Google search results, as well as on third-party websites. The service provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit in the app. The processing is based on our legitimate interest in the optimal marketing of our app in accordance with Art. 6 para.1 letter f of the German Data Protection Act (DSGVO).
Additional data processing only takes place if you have consented to Google linking your app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if they are logged into Google while using our app, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. In the course of using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can configure the settings of your mobile operating system and the app according to your wishes and, for example, refuse to accept cookies. You will then not be included in the web analysis statistics.
Please note that certain functions of this app may not be available or may only be available to a limited extent if you have deactivated the use of cookies.
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
As far as legally required, we will have obtained your consent in accordance with Art. 6 para.1 letter a of the German Data Protection Regulation (DSGVO) for the processing of your data as outlined above. You can revoke your consent at any time with immediate effect for the future. To exercise your revocation, please follow the option described above to opt-out.
16) Tools and Others
16.1 Firebase Crashlytics
For the creation of anonymized crash reports, we use "Firebase Crashlytics", a service of Google Ireland Ltd, Google Building Gordon House, Barrow Street, Dublin 4, Ireland, to improve the stability and reliability of our app.
Exclusively on the basis of your explicit consent pursuant to Art. 6 para.1 letter a of the German Data Protection Act (DSGVO), anonymous information is transmitted to Google's servers in the event of a crash of the app (state of the app at the time of the crash, installation UUID, crash trace, manufacturer and operating system of the cell phone, last log messages). Transmissions to Google LLC. USA are possible. This information does not contain any personal data.
When using an iOS-based device, you can give consent in the app settings or after a crash. When using an Android-based device, there is an option during setup to give general consent for crash notifications to be sent to Google and app developers.
You can revoke your consent at any time by:
- in iOS, disabling the "crash reports" feature in the app settings.
- in Android, by adjusting the system settings. To do this, open the apps' settings, select the "Google" option, and there, in the three-point menu at the top right, select the "Usage & Diagnostics" menu option. Here you can deactivate the sending of the corresponding data.
For more information on data privacy, please refer to the privacy policy of Firebase Crashlytics at https://firebase.google.com/support/privacy.
16.2 Google Web Fonts
Our app uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When our app is called up, it loads the required web fonts into its cache in order to display texts and fonts correctly.
For this purpose, the app must establish a connection to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our app was called up via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 letter f of the German Data Protection Act (DSGVO). If your browser does not support web fonts, a standard font from your computer will be used.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
17) Rights of the Person Concerned
17.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the responsible party with regard to the processing of your personal data, of which we inform you below:
- Right of access pursuant to Art. 15 of the German Data Protection Regulation (DSGVO): in particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, to object to processing, to lodge a complaint with a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the implications for you and the intended effects of such processing, as well as your right to be informed about the safeguards pursuant to Art. 46 of the German Data Protection Regulation (DSGVO) in case of onward transfer of your data to third countries;
- Right to rectification pursuant to Art. 16 of the German Data Protection Regulation (DSGVO): you have the right to have any inaccurate data relating to you rectified without delay and/or to supplement any incomplete data stored by us.
- Right to erasure pursuant to Art. 17 of the German Data Protection Regulation (DSGVO): you have the right to demand the erasure of your personal data if the requirements of Art. 17 para. 1 of the DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- Right to restriction of processing pursuant to Art. 18 of the German Data Protection Regulation (DSGVO): you have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified; if you decline the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data to enforce, exercise or defend legal claims after we no longer need this data once the purpose has been fulfilled; or if you have lodged an objection on the grounds of your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;
- Right to information in accordance with Art. 19 of the German Data Protection Regulation (DSGVO): if you have asserted the right to rectification, deletion or restriction of processing against the responsible party, the responsible party is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability in accordance with Art. 20 of the German Data Protection Regulation (DSGVO): you have the right to receive your personal data that you have provided to us in a structured, standardized and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;
- Right to revoke consent given in accordance with Art. 7 para. 3 of the German Data Protection Regulation (DSGVO): you have the right to revoke consent to the processing of data once given at any time with immediate effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing may be based on a legal basis for consent-free processing. The revocation of consent does not affect the lawfulness of the processing carried out in the period after consent was given and before the consent was revoked;
- Right to lodge a complaint pursuant to Art. 77 of the German Data Protection Regulation (DSGVO): if you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial appeal - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
17.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE SCOPE OF BALANCED INTERESTS AND ON THE BASIS OF OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH IMMEDIATE EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ENFORCING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
18) Duration of Storage of Personal Data
The duration of the storage of personal data is measured on the basis of the respective legal basis, the purpose of processing and - where relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para 1. letter a of the German Data Protection Regulation (DSGVO), this data will be stored until the data subject revokes his or her consent.
If there are statutory retention periods for data that is processed within the scope of legal or comparable obligations on the basis of Art. 6 para 1. letter b of the German Data Protection Regulation (DSGVO), this data will be routinely deleted after the retention periods have elapsed, insofar as it is no longer required for the fulfillment of a contract or the initiation of a contract and/or we do not have a justified reason to continue storing it.
When processing personal data on the basis of Art. 6 para. 1 letter f of the German Data Protection Regulation (DSGVO), this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 1 of the DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.
When processing personal data for the purpose of direct marketing on the basis of Article 6 para. 1 letter f of the German Data Protection Regulation (DSGVO), this data will be stored until the data subject exercises his or her right to object pursuant to Article 21 para. 2 of the DSGVO.
Unless otherwise stated in this statement about specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or processed.