# Data protection declaration for the Shape Quiz App I have written this data protection declaration (version 19.01.2020-111240294) in order to provide you with information in accordance with the requirements of the [General Data Protection Regulation (EU) 2016/679](https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679&tid=111240294) to explain what information we collect, how we use data and what choices you have as a visitor to this website. Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible. ## Contact details of the person responsible and the data protection officer F. Jerominek \- Data protection officer - Hahnenseestr. 2 30455 Hanover Germany Email: ## Google Play Services - [Data protection declaration for the services of Google Play Services](https://policies.google.com/privacy) ## Google Firebase - [Data protection declaration for the services of Google Firebase](https://firebase.google.com/support/privacy?hl=en) ## Unity 3d - [Data protection declaration for the services of Unity](https://unity3d.com/legal/privacy-policy) - [Unity Cookie Policy](https://unity3d.com/legal/cookie-policy#cookies) ## Admob - [Data protection declaration for the services of Admob](https://support.google.com/admob/answer/6128543?hl=en) ## Valve Steam - [Data protection declaration for the services of Steam](https://store.steampowered.com/privacy_agreement/english/) ## Automatic data storage When you visit websites these days, certain information is automatically created and stored, including on this website. If you visit our website as it is now, our web server (computer on which this website is stored) automatically saves data such as - the address (URL) of the accessed website - Information about the browser type and the version used - Mobile Device ID - the operating system used - the address (URL) of the previously visited page (referrer URL) - the host name and the IP address of the device from which access is made - Date and time of access - Web analysis data / pseudonymous usage profiles (Cookie ID, Ad ID etc., see below for more on this) in files (web server log files). In addition, we process the following personal data if there is a contractual relationship between you and us or if you have otherwise transmitted the data to us: - Personal master data (name, address, date of birth) - Communication data (telephone number, email address) - Contract master data (contractual relationship, product or contract interest, order history) - Login data with password - Billing and payment data - Comments, contributions, etc. As a rule, web server log files are stored for two weeks and then automatically deleted. We do not pass this data on, but we cannot rule out that this data will be viewed in the event of illegal behavior. ## Storage of personal data Personal data that you transmit to us electronically on this website, such as name, e-mail address, address or other personal information in the context of submitting a form or comments in the blog, are saved by us together with the time and the IP Address is only used for the specified purpose, stored securely and not passed on to third parties. We therefore only use your personal data for communication with those visitors who expressly request contact and for processing the services and products offered on this website. We do not pass on your personal data without your consent, but we cannot rule out that this data will be viewed in the event of illegal behavior. If you send us personal data by e-mail - outside of this website - we cannot guarantee secure transmission and protection of your data. We recommend that you never send confidential data unencrypted by e-mail. ## Reason, content and purposes of processing We always process your data on the basis of one or more statutory permissions or your consent. - Emails and newsletters We can use your email address that was collected in the course of registration or the performance of the contract. In this case, the processing of the email address takes place on the basis of our legitimate interest in advertising our goods and services (Art. 6 Para. 1 lit.f GDPR). In addition, we use your e-mail address to send you our newsletter if you have ordered it and given us your consent to receive the newsletter, with any advertising content. In this case, we process your email address in order to be able to send you the newsletter as requested (Art. 6 Para. 1 lit. b GDPR). You can object to the use of your email address for such purposes at any time in writing or in text form to with effect for the future without incurring any costs other than the transmission costs according to the basic tariffs. - IP addresses On the Internet, every device needs a unique address to transfer data, the so-called IP address. The at least temporary storage of the IP address is technically necessary to enable the website and app content to be delivered to the user's device. - log files The Strato AG servers store the IP address in so-called log files for 7 days for their own security purposes, for example to be able to understand if there is an attack (DoS) or whether our databases are illegally evaluated. The basis for this is Article 6 (1) (f) GDPR. Contents of these log files (according to Strato AG): a) Anonymized client IP: In order to recognize from where our servers may be attacked, we collect IP addresses. As is customary in the industry, we store these for a maximum of seven days. Then they are anonymized. b) Timestamp: This is the information on which day and at what time the visitor accessed the website. c) Request line: This is the path of the destination address without the domain. When the visitor clicks on a picture on the website, the URL "franz-jero.com/bild.jpg" is behind it. The request line is then "/bild.jpg". d) Status code: This is always displayed if a page or file that has been called up cannot be found. 404 is the status code that says that the visitor wanted to visit a non-existent page. The Internet Assigned Numbers Authority has defined a large number of other status codes that are helpful for error analysis: 200 means OK, for example - here the user could access the page without errors. e) Size of the response body: When the visitor goes to the website, he temporarily downloads data. These are, for example, the images and texts that he sees in his browser. The log file indicates how large this data is. f) Referer sent by the client: This field shows which page the website visitor came from. g) User agent sent by the client: This includes information on the type and version of the browser and the operating system used by the visitor. h) Remote User: Normally this field remains empty. We only save data on this if there is a registration process on the website that is based on http-Basicauth. This is a now outdated procedure with which the visitor can authenticate himself to the website, for example by logging into a customer area. In the meantime, however, the vast majority of websites use a different method that works with Javascript. In this case, no remote user is saved. ## Place of processing We ourselves do not transfer your personal data to countries outside the European Economic Area ("EEA"), except in cases in which it is permitted under the GDPR. Whether third parties with whom you have your own contractual relationship (e.g. with Facebook, if you have a Facebook account) transfer data to countries outside the EEA is beyond our knowledge and influence. For the USA, the European Commission decided on July 12, 2016 that under the regulations of the EU-U.S. Privacy Shields there is an adequate level of data protection (adequacy decision, Art. 45 GDPR). Further information - including the certification of the service providers we use - is available from . We only use US service providers who comply with the EU-U.S. Privacy Shield certified. ## Cooperation with processors and third parties If we disclose data to other persons and companies (contract processors or third parties) in the course of our processing, transfer them to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transferred to third parties, as is required for payment service providers in accordance with Art. 6 Para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.## Transfers to third countries If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this happens in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only take place if it happens to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means that processing takes place e.g. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses"). ## Cookies and other technologies - General In order to guarantee the full functionality of the franz-jero.com pages, franz-jero.com and the third parties named below store data on your device, which are used, among other things, to collect information about the use of a website or app, as well as other data such as the IP address of the accessing computer and information about the accessing software (see above). So-called cookies are usually used here. Cookies are small files that your browser stores on your device in a directory provided for this purpose. Through them, inter alia determine whether you have already visited a website or webpage. If you have decided to remain logged into your customer account despite leaving the franz-jero.com pages, your login data, for example for the customer account, can also be saved in cookies so that you do not need to use these login data every time you access the Page. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the websites visited to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. This data is not combined with other data sources. Cookies can also be used together with so-called web beacons (also known as ClearGIFs or tracking pixels). These are small graphics (e.g. in e-mails and on websites) that are used to give a better understanding of how visitors interact with the website. You can prevent the setting of cookies by us at any time by means of a corresponding setting in the Internet browser used and thus permanently object. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the internet browser used, not all functions of our website may be fully usable. When using apps, a technology that is comparable in its function is used instead of the cookie. Cookies cannot identify you as a person. In any case, the use of cookies is justified on the basis of our legitimate interest in a needs-based design and the statistical analysis of franz-jero.com (Art. 6 Para. 1 lit. f GDPR). - Web / app analysis services, marketing In order to continuously improve our content and adapt it to the interests of our users as well as to display usage-based online advertising, we use some services that collect data on our website or in the app and evaluate it for us. If these service providers are not responsible in terms of data protection law, they always process the pseudonymized user data in accordance with instructions on the basis of an order processing agreement. The legal basis for data processing is always Art. 6 Paragraph 1 lit. f) GDPR. - Google Firebase We use Firebase for our apps. This is a real-time database with which real-time information can be embedded in one's own website in order to better understand and optimize user behavior in the apps. In addition, other functions of Firebase are also used, which enable better user guidance or an analysis of the causes of crashes in the apps. Firebase is a Google subsidiary and is based in San Francisco (CA), USA. Further information can be found in Firebase's data protection declaration at . ## Rights according to the General Data Protection Regulation According to the provisions of the GDPR and the Austrian Data Protection Act (DSG), you have the following rights: - Right to rectification (Article 16 GDPR) - Right to erasure ("right to be forgotten") (Article 17 GDPR) - Right to restriction of processing (Article 18 GDPR) - Right to notification - Notification obligation in connection with the correction or deletion of personal data or the restriction of processing (Article 19 GDPR) - Right to data portability (Article 20 GDPR) - Right of objection (Article 21 GDPR) - Right not to be subject to a decision based solely on automated processing - including profiling (Article 22 GDPR) If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the supervisory authority, which is the data protection authority in Austria whose website you can find at https: // . Find dsb.gv.at/. ## How can I delete my data or prevent data storage? According to the data protection law of the European Union, you have the right to receive information about your data, to update it, to delete it or to restrict it. If you generally want to deactivate, delete or manage cookies, there are separate instructions for each browser: [Chrome: delete, activate and manage cookies in Chrome](https://support.google.com/chrome/answer/95647?tid=111240294) [Safari: Managing cookies and website data with Safari](https://support.apple.com/en-at/guide/safari/sfri11471/mac?tid=111240294) [Firefox: delete cookies to remove data that websites have stored on your computer](https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?tid=111240294) [Internet Explorer: deleting and managing cookies](https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies?tid=111240294) [Microsoft Edge: Deleting and managing cookies](https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies?tid=111240294) ## Evaluation of visitor behavior In the following data protection declaration, we inform you whether and how we evaluate data from your visit to this website. The data collected is usually evaluated anonymously and we cannot infer your person from your behavior on this website. You can find out more about how to object to this analysis of the visit data in the following data protection declaration. ## Storage period We only store personal data as long as we are entitled to do so and the processing purpose has not been omitted. They will then be deleted within a short period of time. In addition to the information on the storage duration of certain data elsewhere in this data protection declaration, we will inform you as follows: - The processing of data on the basis of your consent will continue and the data will be stored until you revoke your consent to us. - The exact storage duration of a cookie can be found in the respective cookie by displaying the cookie in your browser. - In addition, the applicable laws stipulate certain minimum retention periods. The German Commercial Code and the AO require business letters to be kept for (at least) 6 years; "Business letters" are all e-mails that we specifically exchange with you. The AO (tax code) also requires a number of other data to be stored for at least 10 years. - However, it is not possible for us to specify the exact storage duration for all data or data categories. We strictly align the storage period with legal considerations. If, for example, claims are still possible from a contract, we will keep the corresponding data stored, and when applying Art. 6 Para. 1 lit. determine this significantly. ## Contact details and your rights as a data subject Please contact our data protection officer at any time if you have any questions or suggestions about data protection or to exercise your rights as a data subject (regarding these immediately): F. Jerominek \- Data protection officer - Hahnenseestr. 2 30455 Hanover Germany Email: - Revocation of consent / objection to data processing You can revoke your given consents at any time with future effect under the. o. g. Revoke contact address. In particular, you can use your email address for the purpose of sending the newsletter at any time in writing or in text form to or to F. Jerominek Hahnenseestr. 2, 30455 Hanover with effect for the future without incurring any costs other than the transmission costs according to the basic tariffs. Furthermore, for reasons that arise from your particular situation, you have the right to object at any time to the processing of personal data relating to you that is based on a legitimate or public interest. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data, unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims . If we process personal data in order to operate direct mail, you have the right to object at any time to the processing of personal data for the purpose of such advertising under the. o. g. Insert contact address. This also applies to profiling insofar as it is related to such direct mail. You also have the right, for reasons that arise from your particular situation, to object to the processing of personal data relating to you that we use for scientific or historical research purposes or for statistical purposes, unless such processing is necessary necessary to fulfill a task in the public interest. - Art. 15 DS-GVO - right of information of the data subject You have the right to request confirmation from us as to whether personal data relating to you is being processed and, if so, what it is and the details of the data processing. - Art. 16 GDPR - Right to correction: You have the right to demand that we correct any incorrect personal data concerning you without delay. In doing so, taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - including by means of a supplementary declaration. - Art. 17 GDPR - right to deletion: You have the right to request that we delete personal data concerning you immediately if and to the extent that the legal requirements are met. - Art. 18 GDPR - Right to restriction of processing: You have the right to demand that we restrict processing if the legal requirements are met. - Art. 20 GDPR - Right to data portability: In the event of processing based on consent or to fulfill a contract, you have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format, and to transfer this data to another person responsible without hindrance to transmit to us or to have the data transmitted directly to the other person responsible, as far as this is technically feasible. - Art. 77 GDPR i. V. m. § 19 BDSG (new) - Right to complain to a supervisory authority: You have the right to lodge a complaint with a supervisory authority at any time, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data violates applicable law. - Existence of automated decision-making There is no automatic decision-making including profiling in accordance with Art. 22 GDPR. ## TLS encryption with https We use https to transfer data securely on the Internet (data protection through technology design [Article 25 Paragraph 1 GDPR](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679&from=DE&tid=111240294)). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transfer protection by the small lock symbol in the top left of the browser and the use of the https (instead of http) scheme as part of our Internet address. ## Newsletter data protection declaration If you subscribe to my newsletter, you provide the above personal data and give us the right to contact you by email. We only use the data stored when registering for the newsletter for our newsletter and do not pass it on. If you unsubscribe from the newsletter - you will find the link for this at the bottom of every newsletter - then we will delete all data that was saved when you registered for the newsletter. ## Embedded social media elements data protection declaration We integrate elements of social media services on our website in order to display images, videos and texts. When you visit pages that display these elements, data is transferred from your browser to the respective social media service and stored there. We have no access to this data. The following links take you to the pages of the respective social media services where it is explained how they handle your data: - Instagram privacy policy: - The Google data protection declaration applies to YouTube: - Facebook data guideline: - Twitter privacy policy: --- Quelle: Erstellt mit dem Datenschutz Generator von Content Marketing AdSimple in Kooperation mit bauguide.at