Privacy Policy

隐私政策


1. 收集个人数据和负责人联系信息

1.1 我们很高兴您使用我们的应用程序（以下简称“应用”）。以下是我们关于您在使用我们的应用时个人数据处理的说明。个人数据是指可以识别您身份的所有数据。

1.2 根据《通用数据保护条例》（GDPR），负责处理本应用数据的负责人为：Sebastian Röhl，地址：Scherpenbergerstraße 112, 47443 Moers, Germany，电话：015752566276，电子邮件：sebastian@sebaroehl.app。负责处理个人数据的自然人或法人单独或与他人共同决定个人数据处理的目的和方式。

2. 联系

当您通过联系表单或电子邮件与我们联系时，我们会收集个人数据。使用联系表单时收集的数据可在应用中的相应联系表单中查看。这些数据仅用于回答您的请求、与您联系及相关技术管理，存储和使用的法律依据为GDPR第6条第1款第f项。如果您的联系目的是为了签订合同，处理的额外法律依据为GDPR第6条第1款第b项。您的请求处理完成后，数据将被删除，除非存在法定存储义务。

3. 合同处理的个人数据

3.1 为了处理通过应用签订的合同，我们与以下服务提供商合作，部分或全部支持我们执行合同。根据以下信息，某些个人数据将传输给这些服务提供商。

我们收集的个人数据将在合同处理过程中传递给负责交付的运输公司，只要这对货物交付是必要的。我们会在支付过程中将您的支付数据传递给受委托的信用机构，只要这对支付过程是必要的。如果使用支付服务提供商，我们将在下文明确告知您。数据传输的法律依据为GDPR第6条第1款第b项。

3.2 RevenueCat

对于应用内支付，支付通过RevenueCat Inc.（地址：300 Euclid Avenue San Francisco, CA 94118, USA）进行。我们将您在订购过程中提供的信息及订单信息传递给RevenueCat。根据GDPR第6条第1款第b项，数据仅为支付处理目的传递，且仅限于必要范围。我们与RevenueCat Inc.签订了数据处理合同，要求其保护应用用户数据，不得将其传递给第三方。

有关RevenueCat数据保护的更多信息，请访问：https://www.revenuecat.com/privacy

4. Firebase Crashlytics

为了创建匿名崩溃报告，我们使用Google Ireland Ltd.（地址：Google Building Gordon House, Barrow Street, Dublin 4, Ireland）提供的“Firebase Crashlytics”服务，以提高应用的稳定性和可靠性。如果应用崩溃，仅在您根据GDPR第6条第1款第a项明确同意的情况下，匿名信息（崩溃时的应用状态、安装UUID、崩溃跟踪、手机制造商和操作系统、最后日志消息）才会传输到Google服务器，也可能传输到Google LLC（美国）。这些信息不包含任何个人数据。您可在应用设置中给予或撤销同意，随时通过禁用“崩溃报告”功能撤销同意。有关数据保护的更多信息，请查看Firebase Crashlytics隐私政策：https://firebase.google.com/support/privacy

5. 数据主体的权利

5.1 适用数据保护法赋予您对个人数据处理负责人的全面数据主体权利（信息和干预权），如下所述：

  • 根据GDPR第15条的信息权：您有权了解我们处理的您的个人数据、处理目的、处理的个人数据类别、数据披露的接收者或接收者类别、计划存储期限或确定存储期限的标准、纠正、删除、限制处理、反对处理、向监管机构投诉的权利、数据的来源（如果不是由我们直接收集）、是否存在自动化决策（包括分析）以及相关逻辑、范围和对您影响的信息，以及根据GDPR第46条将数据传输到第三国时的保障措施。
  • 根据GDPR第16条的纠正权：您有权要求立即纠正有关您的错误数据和/或补全我们存储的不完整数据。
  • 根据GDPR第17条的删除权：您有权要求删除您的个人数据，如果符合GDPR第17条第1款的要求。但如果处理是为了行使言论和信息自由、履行法律义务、公共利益或主张、行使或辩护法律索赔，则此权利不适用。
  • 根据GDPR第18条的限制处理权：只要您质疑数据的准确性、拒绝因不合法处理而删除数据并要求限制处理、或在不再需要数据后您需要数据来主张、行使或辩护法律索赔、或因您的特殊情况提出反对且我们的合法理由尚未明确，您有权要求限制处理您的个人数据。
  • 根据GDPR第19条的信息权：如果您对负责人主张纠正、删除或限制处理，负责人有义务通知所有接收您个人数据的接收者，除非这不可能或需要不成比例的努力。您有权了解这些接收者。
  • 根据GDPR第20条的数据可携权：您有权以结构化、通用和机器可读格式接收您提供给我们的个人数据，或要求将其传输给另一负责人，只要这在技术上可行。
  • 根据GDPR第7条第3款的撤销同意权：您有权随时撤销对数据处理的同意，撤销后我们将立即删除相关数据，除非进一步处理可基于无需同意的法律依据。撤销不影响撤销前基于同意的处理的合法性。
  • 根据GDPR第77条的投诉权：如果您认为处理您的个人数据违反GDPR，您有权向监管机构投诉，特别是在您居住、工作或涉嫌侵权发生的成员国。

5.2 反对权

如果我们基于利益平衡处理您的个人数据，您有权随时因您的特殊情况反对此处理，未来生效。

如果您行使反对权，我们将停止处理相关数据，除非我们能证明有压倒您利益、基本权利和自由的处理理由，或处理是为了主张、行使或辩护法律索赔。

如果我们为直接营销目的处理您的个人数据，您有权随时反对为此目的处理您的个人数据。您可按上述方式提出反对。

如果您行使反对权，我们将停止为直接营销目的处理相关数据。

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are using our application (hereinafter "app"). In the following we inform you about the handling of your

personal data when using our app. Personal data is all data with which you can be personally identified.

1.2 Responsible for data processing regarding this app within the meaning of the General Data Protection Regulation (GDPR) is Sebastian

Röhl, Scherpenbergerstraße 112, 47443 Moers, Germany, Tel.:015752566276, email: sebastian@sebaroehl.app. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

2) Contact

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form in the app. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

3) Data processing for contract processing

3.1 For the processing of contracts concluded via the app, we work

together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institute as part of the payment process, provided this is necessary for the payment process. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Article 6 (1) (b) GDPR.

3.2 - RevenueCat

In the case of in-app payments, payment is made via RevenueCat Inc., 300 Euclid Avenue San Francisco, CA 94118, USA. to whom we pass on the information you provided during the ordering process together with the information about your order. Your data will be passed on in accordance with Article 6 Paragraph 1 Letter b GDPR exclusively for the purpose of payment processing and only to the extent that it is necessary for this. We have concluded an order processing contract with RevenueCat Inc., with which we oblige the provider to protect the data of the app users and not to pass it on to third parties.

Further information on data protection by RevenueCat can be found here: https://www.revenuecat.com/privacy

4) Firebase Crashlytics

To create anonymous crash reports, we use "Firebase Crashlytics", a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow Street, Dublin 4, Ireland, to improve the stability and reliability of our app. If the app crashes, anonymous information will only be transmitted to the Google servers on the basis of your express consent in accordance with Article 6(1)(a) GDPR (app status at the time of the crash, installation UUID, crash trace, manufacturer and operating system of the mobile phone, last log messages). Also transfers to Google LLC. In the US are possible. This information does not contain any personal data. You can give or revoke consent in the app settings. You can withdraw your consent at any time by disabling the "Crash Reporting" feature in the app's settings. For more information on data protection, see the Firebase Crashlytics privacy policy at https://firebase.google.com/support/privacy

5) Rights of the data subject

5.1 The applicable data protection law grants you comprehensive data

subject rights (rights to information and intervention) vis-à-vis the person responsible for the processing of your personal data, about which we will inform you below:

  • Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or will be disclosed, planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed which guarantees pursuant to Art. 46 GDPR when your data is forwarded to third countries exist;
  • Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;
  • Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being checked, if you refuse to delete your data because of inadmissible data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
  • Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
  • Right to revoke granted consent in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation;
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have
    • without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged infringement took place.

5.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.