The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection legislation of the Member States and other data protection provisions is:
You can contact the controller’s data protection officer at the following address: snoopo GmbH, Data Protection Officer, Berliner Allee 34-36, 40212 Düsseldorf E-mail: email@example.com
For security reasons and to protect the transfer of content of a confidential nature such as enquiries that you send to us as the app operator or communication between app users, such data are encrypted. This encryption prevents unauthorized third parties from being able to read data that you send to us.
In order to be able to provide our services via the app, we need the following access permissions which allow us to access certain functions on your device:
Access to these of your device’s functions is necessary in order to ensure that you can use the app’s features. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6(1)(f) of the GDPR, your consent within the meaning of Art. 6(1)(a) of the GDPR or – where we have entered into a contract with you – the performance of our contractual obligations (Art. 6(1)(b) of the GDPR).
We record the following personal data about you when you use our app:
The processing of such personal data is necessary to ensure that you can use the app’s features. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6(1)(f) of the GDPR, your consent within the meaning of Art. 6(1)(a) of the GDPR or – where we have entered into a contract with you – the performance of our contractual obligations (Art. 6(1)(b) of the GDPR).
We will retain the personal data recorded until you request us to erase them or withdraw your consent to their storage or the reason for the storage has ceased to exist.
In addition, other personal data may be collected and processed in connection with other services and features offered by the app.
If you use PayPal to pay for your order, we will pass on your payment information for these purposes to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter referred to as "PayPal"). Please refer to PayPal’s Privacy Statement for further information on data privacy, including information regarding the credit agencies used: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE#3.
If you contact us (using the contact form or via e-mail, phone or fax), the data that you voluntarily provide will be stored and processed by us so that we can deal with your enquiry. The legal bases for processing are Art. 6(1)(a) and (b) of the GDPR, which permit data to be processed where consent has been voluntarily granted or to respond to an enquiry. We will retain the personal data recorded until you request us to erase them or withdraw your consent to their storage or the reason for the storage has ceased to exist (e.g. after we have finished processing your matter). The aforegoing is without prejudice to any mandatory provisions, in particular to those regarding retention periods. We will not pass on your data without your consent.
Where PayPal is used for the disbursement of any money found, we will pass on your payment information for these purposes to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter referred to as “PayPal”). Please refer to PayPal’s Privacy Statement for further information on data privacy, including information regarding the credit agencies used: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE#3.
Kinds of personal data processed: Master data (e.g. names and addresses), payment information (e.g. bank details, invoices and payment history), contact details (e.g. e-mail and phone numbers), contract information (e.g. subject-matter of contract, duration and customer category), usage data (e.g. websites visited, interest in their content and access times), metadata and communications data (e.g. device information and IP addresses).
Purposes of processing: Contractual obligations and service
Legal bases: Performance of a contract or to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).
We embed, in our online offerings, function and content elements obtained from the servers of the respective providers (hereinafter referred to as “Third-Party Providers”). These can be, for example, graphics, videos or social media buttons and contributions (hereinafter referred to collectively as “Content”).
Where Content is embedded, the Third-Party Provider of the Content needs to process the user’s IP address since, without it, the Content cannot be sent to the user’s browser. Thus your device’s IP address is needed to display such Content and to use such features. We strive to only use Content whose provider limits its use of IP addresses to the delivery of such Content. Furthermore, Third-Party Providers may use pixel tags (these are invisible graphics that are also referred to as web beacons) for statistical or marketing purposes. Pixel tags can collect information for analyzing the number of visitors to the pages of this website. The pseudonymized information may be stored in cookies on the user’s device and include, among other things, technical information regarding the user’s browser and operating system, links to other websites, the date and time of visits to our website, and other information regarding the use of our online offering. Furthermore, the pseudonymized information may be combined with information from other sources.
Information about Legal Bases: Where we ask users for their consent to the deployment of Third-Party Providers, their consent is the legal basis for the processing of their personal data. Otherwise, our processing of a user’s data is based on our legitimate interests (i.e. our interest in providing efficient, commercially viable and user-friendly services).
Legal bases: Legitimate interests (Art. 6(1)(f) of the GDPR) and consent (Art. 6(1)(a) of the GDPR).
When you use our app, your behavior can be statistically evaluated with the help of certain analytic tools and then analyzed for advertising and marketing purposes or to improve our offerings. We ensure that we comply with the provisions of data protection law when deploying such tools. Where external service providers (data processors) are used, we ensure that processing is carried out in accordance with German and European data protection standards by concluding the appropriate contracts with such providers.
We use Google Analytics Firebase (hereinafter referred to as “Google Firebase”) to analyze user behavior. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In addition, we use Firebase’s features to enhance the user experience or to allow us to evaluate the causes of the app crashing. For this purpose, anonymous data (e.g. number and length of sessions, operating systems, device models and region) are transferred to Firebase. You will find a detailed overview of Google Firebase’s data collection here: https://support.google.com/firebase/answer/6318039?hl=en Firebase is an integral technical component of our offering and cannot be deactivated. Google Firebase is used to enhance this app and to improve our offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR. Further information is available at https://www.firebase.com/terms/privacy-policy.html.
Für Werbeeinblendungen nutzen wir den Werbepartner AdMob Google Inc. Admob sammelt persönliche Daten wie Device IDs, GPS-Daten, demographische Daten u.a. um für Sie relevante Werbung anzeigen zu können. Der Einsatz von Google AdMob und die damit zusammenhängende Datenverarbeitung wird auf Grundlage unserer berechtigten Interessen gemäß Art. 6 Abs. 1 S. 1 lit. f DSGVO durchgeführt. Über die Nutzung von Google AdMob wollen wir sicherstellen, dass Ihnen nur an Ihren tatsächlichen oder vermeintlichen Interessen orientierte Werbung auf Ihren Endgeräten eingeblendet wird. Weitere Details zu AdMob finden Sie unter http://www.admob.de und zu den von Google Admob erhobenen Daten in der Datenschutzerklärung von Google: https://policies.google.com/privacy
Where we process your personal data, you may exercise the following rights against us in relation to such data:
You have the right to request information from the controller on whether it is processing your personal data. If that should be the case, you can request information on the following from the controller:
You have the right to require that the controller rectify and/or complete your personal data if the data that are processed are inaccurate or incomplete. The controller must make such changes without undue delay.
You have the right to require that the controller erase personal data concerning you without undue delay. The controller must then erase such personal data without undue delay if one of the following grounds applies:
If the controller has made public personal data concerning you and is obliged to erase such data pursuant to Art. 17(1) of the GDPR, the controller, taking account of available technology and the cost of implementation, must take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply if processing is necessary
You have the right to require that the controller restrict processing of your personal data under the following conditions:
If the processing of your personal data has been restricted, such personal data may, except as regards storage, be processed only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have succeeded in restricting processing as described above, you will be notified by the controller before such restriction is lifted.
If you have the right to require that a controller rectify, erase or restrict processing, the controller must notify all recipients to whom personal data concerning you were disclosed of such rectification, erasure or restriction of processing unless notification proves impossible or would entail an unreasonable effort.
You have the right to be notified of such recipients by the controller.
You have right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you that you have made available to a controller. You also have the right to transmit such data to another controller without hindrance from the controller to which the personal data were provided
In exercising this right, you also have the right to have personal data concerning you transmitted directly from one controller to another if technically feasible. This may not be allowed to adversely affect the freedoms and rights of others.
The right to erasure remains unaffected.
The right to data portability does not apply to the processing of personal data required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You may withdraw your consent to our processing of your personal data at any time. Please remember that your withdrawal is only effective with regard to future processing. Withdrawal of consent will not affect the lawfulness of processing based on your consent prior to its withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, where such decision legally affects you or entails effects that are of similar importance. This will not apply in the case of any decision that is
In the cases referred to in (1) and (3) above, the controller must implement suitable measures to safeguard your rights and freedoms as well as your legitimate interests; such measures must at least include the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
However, a decision based solely on automated processing may not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR unless Art. 9(2)(a) or (g) of the GDPR applies and suitable measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.
Additionally, you have the right to lodge a complaint about the processing of your data with a data protection authority. You may address your complaints to the supervisory authority in the Member State of your residence, place of work or the place of the alleged infringement. The supervisory authority with which the complaint is lodged will inform you as the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.
You have the right to object, on grounds related to your particular situation, at any time to the processing of personal data concerning you on the basis of Art. 6(1)(e) of the GDPR (processing carried out in the public interest) and Art. 6(1)(f) of the GDPR (processing for the purposes of the legitimate interests of the controller or a third party); this applies accordingly as regards profiling based on these provisions. Where you exercise your right to object, we will then cease to process your personal data unless we can demonstrate compelling legitimate reasons for such processing that outweigh your interests, rights and freedoms, or where such processing serves to establish, exercise or defend legal claims.
In certain cases, we process your personal data for direct advertising. You may, at any time, object to the processing of your personal data for such advertising purposes; this will apply accordingly to any profiling related to such direct marketing activities. Where you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
There are no formal requirements for lodging an objection in the above-mentioned cases. To do so, simply e-mail us at the address below and insert “Objection” in the subject line:
snoopo GmbH, Data Protection Officer, Berliner Allee 34-36, 40212 Düsseldorf; E-mail: firstname.lastname@example.org