DATA PRIVACY STATEMENT
A. RESPONSIBLE AUTHORITY FOR DATA PROCESSING, DATA PROTECTION OFFICER
Christian Kappertz
Rabenkopfstraße 3
55263 Ingelheim am Rhein
Germany
Tel.: +49 6132 715343
E-Mail: contact@caroliescube.com
is responsible for the processing of personal data using the Carolie‘s Cube App according to the provisions of the General Data Protection Regulation (GDPR).
In this data privacy statement we wish to inform you accordingly of the nature, scope and purposes of the processing of your personal data (hereinafter “Data”).
B. USE OF DATA, PURPOSES OF PROCESSING AND LEGAL BASES
We process data on initial contact, and when you visit our website. We only use and process personal data for the purpose for which you provided this data to us, either by consent or for the fulfillment of our contractual obligation. We hereby process data to safeguard our justified interests. The specific purposes of processing, the data affected and the legal basis for data processing are explained below:
a) Purpose of Website Visit
We log your visit to our website. In doing this, we process the following data: Name of the website requested, date and time of the request, quantity of data transferred, browser type and version, the User’s operating system you are using, the referrer URL (the previous site visited), your IP address, and the requesting provider. We collect this data on the basis of our legitimate interests within the meaning of Art. 6 (1) f) GDPR.
b) Initial Contact
When you contact us using our contact form or by email, your information – surname, first name, email address, and your message – are processed exclusively for the purpose of processing and handling your request. We process this data on the basis of your consent according to Article 6 (1) a) GDPR.
c) Processing of App Purchases
We process your name, address, order data and payment information for the purpose of contractual fulfillment. We obtain your payment data from Apple Inc. 1 Infinite Loop, Cupertino, California, USA, 95014 (“Apple”). The payment is also processed via Apple. You can find information on Apple’s data privacy in the Apple App Store data privacy statement. We process this data on the basis of Article 6 (1) b) GDPR for the performance of a contract.
d) Use of the App
No personal data is collected when you use the App. In particular, no data connection is set up from the App to our servers, such that all data processing within the App takes place exclusively on the user’s device. We cannot access such data.
C. YOUR RIGHTS AS A DATA SUBJECT
1. Information
You can obtain information free of charge at any time on all personal data relating to you which we have stored.
2. Correction, Deletion, Restriction of Processing (Blocking), Objection
If you no longer consent to the storage of your personal data, or if it is no longer accurate, we will at your request have your data deleted or blocked or carry out the necessary corrections (insofar as this is possible according to applicable law). The same applies if you only want us to process your data on a restricted basis in the future.
3. Data Portability
We store your data in a transferable form, such that the data can be transferred to another company at your request.
4. Exercise of Your Rights as a Data Subject
If you have questions regarding the processing of your personal data or regarding the information, correction, blocking, objection or deletion of data, or transfer of data to another company, please contact:
Christian Kappertz
Rabenkopfstraße 3
55263 Ingelheim am Rhein
Germany
Tel.: +49 6132 715343
E-Mail: contact@caroliescube.com
5. Right to Complain
There is also a right to complain to the responsible regulatory authority.
6. Please Note
The above rights do not apply to data whereby the data subject cannot be identified or which are anonymized for the purposes of analysis. Information, deletion, blocking, correction or transfer to another company is only possible for this data if you provide us with additional information which allows us to identify the data.
D. WITHDRAWAL OF CONSENT WITH EFFECT FOR THE FUTURE
You may withdraw consent with effect for the future at any time. Data for invoicing and accounting purposes is not affected by termination/withdrawal or deletion. Your withdrawal does not affect the legality of processing up to that point.
E. STORAGE PERIOD
Personal data shared with us via our website is only stored until the purpose for which it was entrusted to us is fulfilled. If retention periods under commercial and tax law must be observed, the storage period for particular data may be up to ten years.
F. SECURITY
We protect the transfer of your data with a secure (AES 256 bit) TLS connection. TLS (Transport Layer Security) is a security technology which ensures that your personal data is securely transferred over the Internet and that third parties cannot view it.
Encrypted Data
The following data is encrypted: Personal data (name, address etc.).