Privacy Policy

Deutsch - Datenschutzerklärung

1. General 

1.1 What is personal data

Personal data is information that discloses or can disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data

Personal data is used exclusively for the purpose of establishing the contract, defining its content, implementing or processing the contractual relationship (Art. 6 (1 b) GDPR).

Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f)  GDPR).

We may use order processors to process your personal data, but will not pass on the personal data to third parties beyond this as a matter of principle.

The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.

1.3 Data access

Through your consent after downloading the app, we gain access to the following types of data:

  • End device

  • Type of the end device

  • Time zone

  • Country of origin

  • Location

This data is required for the assignment of the user and the functions of our app. In particular, however, it is also intended to prevent misuse by the user. 

1.4 Usage data

When visiting the app, general technical information is collected. This is the IP address used, time, duration of the visit and device type. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this app. A linkage of this usage data with your other personal data does not take place.

1.5 Registration data

Registration is required for the extensive use of the functions of our app. The registration data is collected through your corresponding entries and used for the expressly stated purpose in accordance with your consent (Art. 6 (1 a) GDPR). 

1.6 Push Services

Our app also uses push services of the operating system manufacturers.

After downloading the app, the mobile device registers with the corresponding push service of the platform (iOS - Apple Push Notification Service; Android - Google Cloud Messaging). The service then sends the registration ID (Android) or token (iOS) to the registered device; the ID or token is sent by the app to the server and stored there in a database. If a push notification is to be sent, the server sends the desired message with registration ID/token to the platform's push service, which forwards the push message to the respective devices.

We use push messages to inform you about events within the app that may require your special attention or a reaction on your part.

Consent is requested during the initial setup of the app and/or later on occasion. 

You can suspend receiving push notifications when not using the app by explicitly logging out of the app or making the appropriate settings within the app. Through the operating system, you can revoke consent to receive push notifications as follows:

  • iOS/Settings/<name of app>/Messages.

  • Android/Settings/Applications/Application Manager/<name of app>/Notifications.

1.7 Duration of storage

We store your personal data after the termination of the purpose for which the data was collected only as long as required by law (especially tax law). 

2. Your rights

2.1 Information

You can request information from us as to whether we are processing personal data about you and, if this is the case, you have a right to information about this personal data and to the further information mentioned in Art. 15 GDPR.

2.2 Right to rectification

You have the right to have inaccurate personal data concerning you corrected and, in accordance with Art. 16 GDPR, you may request that incomplete personal data be completed.

2.3 Right to deletion

You have the right to demand that we delete the personal data concerning you without delay. We are obliged to delete them without delay, in particular if one of the following reasons applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

  • You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.

  • Your data has been processed unlawfully.

The right to erasure does not exist insofar as your personal data is required for the assertion, exercise or defense of our legal claims.

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

  • you dispute the accuracy of the data and we therefore verify the accuracy,

  • the processing is unlawful and you refuse the deletion and demand the restriction of use instead

  • we no longer need the data, but you need it to assert, exercise or defend legal claims,

  • you have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.

2.6 Right of withdrawal

Insofar as the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal

The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the State Data Protection Officer, directly.

3. Data security

All data in our app is secured by technical and organizational measures against loss, destruction, access, modification and distribution. However, we assume no liability for the destruction and damage of data.

4. Newsletter

If you register for our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent under Art. 6 (1 a) GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options provided in the imprint or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

5. Presence on social media platforms 

We use the following social media platforms for company presentation and communication (an explicit reference to the privacy statements and opt-out options linked below).

Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland). Privacy policy: https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization

Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland)
Privacy policy and opt-out: http://instagram.com/about/legal/privacy/

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)
Privacy policy: http://www.youtube.com/t/privacy/

These social media platforms may process personal data outside the EU; in this respect, we refer to the above data protection declarations of the social media platforms.

The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. Your user profile can be used, for example, to place advertisements that presumably correspond to your interests. 

We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our app and ensure that no interests of yours are affected here that outweigh this legitimate interest on our part (Art. 6 (1 f)  GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data is also based on this consent (Art. 6 (1 a) GDPR).

6 Third-party services

6.1 Social media links

We have our own social media pages with the third-party providers that can be reached via links from this app. Using the links will take you to the respective websites of the third-party providers (e.g. Facebook, Twitter, Instagram). To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that user profiles cannot be created by the third-party provider simply by using the link. 

6.2 Use of Google Maps

This app uses Google Maps, a map service from Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When using Google Maps, data on the use of the Maps functions by visitors to our app is also collected, processed and used. Here, no interests of the users are affected which outweighs this technical necessity of the integration of the interactive map material (Art. 6 (1 f) GDPR). You can view Google's data protection notice at http://www.google.de/intl/de/policies/privacy/. You can view the additional usage information for Google Maps at http://www.google.com/intl/de_de/help/terms_maps.html.

6.3 Use of YouTube

This app and the integrated offers contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is an offer of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Here, no interests of the users are affected, which outweigh this technical necessity of the integration of the videos (Art. 6 (1 f) GDPR). The purpose and scope of data collection and use by Google, as well as your rights and settings options for protection as a customer of YouTube, please refer to the privacy policy of YouTube. These can be found at: http://www.youtube.com/t/privacy/.

6.4 GetResponse

We use the GetResponse service (operated by GetResponse Sp. z o.o., Arkonska 6/A3, 80-387 Gdansk, Poland) to send our newsletter and for marketing purposes. In this process, your e-mail address and also your other provided data are stored on the servers of GetResponse. GetResponse uses this information to send and evaluate the e-mails on our behalf. Furthermore, GetResponse may use this data to optimize or improve its own services, e.g. to technically optimize the newsletter. GetResponse does not use the data of our mail recipients to address them itself or to pass them on to third parties. Our newsletter is only sent with your consent (Art. 6 (1 a) GDPR). We have concluded an order processing contract with GetResponse. You can view the privacy policy of GetResponse here: https://www.getresponse.com/de/legal/datenschutz

6.5 Registration with your Facebook account

You can also log in using your existing Facebook account. To do this, click on the "Login with Facebook" button. This will redirect you to www.facebook.com (operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). There you enter your Facebook account data and click on "Login". Facebook's privacy policy and terms of use apply to the use of Facebook services. Here, too, you enter into a free usage agreement with us by registering.

6.6 Registration with your Google account

To register with your Google account, click on the "Register with Google" button. This will redirect you to www.accounts.google.com (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). There you enter your Google account data and click on "Sign in". Google's privacy policy and terms of use apply to the use of Google services.

6.7 Registration with your Apple ID

To register with your Apple ID, click the "Sign in with Apple" button. This will redirect you to https://appleid.apple.com (operated by Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA). There you enter your Apple ID and confirm the entry. Apple's privacy policy and terms of use apply to the use of Apple services. 

6.8 Use of Twilio

Our app uses the confirmation SMS service of Twilio (Twilio Ireland Limited, 25-28 North Wall Quay, Dublin 1, Ireland). For this purpose, your cell phone numbers are passed on to the company Twilio. For more information, please visit https://www.twilio.com/legal/privacy.

6.9 Amazon Web Services

As part of our app, we use the Amazon Web Services hosting service provided by Amazon Web Services Inc, 410 Terry Avenue North, Seattle, WA 98109-5210, USA ("AWS").

In connection with the use of this service, Amazon Web Service processes personal data on our behalf as follows: 

- AWS S3 (storage service of AWS): storage of users' profile pictures as encrypted files.

- AWS RDS (database service from AWS): storage of user data in an encrypted database that can only be accessed by the application itself.

We have entered into a "Data Processing Agreement" with Amazon Web Services. This is a contract in which Amazon Web Services undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. Amazon Web Services is only used with your consent (Art. 6 (1 a) GDPR).

You can view more information about AWS at https://aws.amazon.com/de/ses/.

You can view the data protection notice of AWS here: https://aws.amazon.com/de/privacy/ 

6.10 MongoDB

We use the service MongoDB (Mongo DB Inc 229 W 43rd Street, New York City, NY 10036, United States of America to store data for our app.

We have entered into a "data processing agreement" with Mongodb. This is a contract in which Mongodb undertakes to protect our users' data, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. Mongodb is only used with your consent (Art. 6 (1 a) GDPR). You can view the privacy policy of Mongodb here https://www.mongodb.com/de-de/legal/privacy-policy 

6.11 Stripe

We have commissioned the payment service provider Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to handle our payment process. For this purpose, Stripe will pass on the information provided to us during the ordering process, along with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1 b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.

7. Contacting 

To contact us regarding data protection, you are welcome to use the following contact options. Responsible party in the sense of the GDPR:

Jellycorn UG (limited liability)
c/o Schlecht und Partner
Mailänder Platz 25 (Europe Plaza)
70173 Stuttgart
Germany

E-Mail: jessica@jellycorn.io
Phone: +49 152 2759 5966