Privacy Policy
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and the associated websites, features, and content, as well as external online presences such as our social media profiles (hereinafter collectively referred to as "online offering"). Regarding the terminology used, such as "processing" or "controller," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Controller
Appnö GmbH
Erkrather Str. 401
40231 Düsseldorf, Germany
Managing Director: Klaus Rodewig
Contact: info@appnoe.de
Commercial Register: Amtsgericht Düsseldorf, HRB 74943
Tax Information: Tax Office Neuss, Tax No. 122/5703/5885, VAT ID: DE308226646
Types of Data Processed
- Inventory data (e.g., names, addresses)
- Contact data (e.g., email, phone numbers)
- Content data (e.g., text entries, photographs, videos)
- Usage data (e.g., websites visited, interest in content, access times)
- Meta/communication data (e.g., device information, IP addresses)
Categories of Data Subjects
Visitors and users of the online offering (hereinafter we also refer to the data subjects collectively as "users").
Purpose of Processing
- Provision of the online offering, its functions, and content
- Responding to contact requests and communicating with users
- Security measures
- Reach measurement / marketing
Definitions
"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers virtually any handling of data.
"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure non-attribution.
"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Applicable Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR, for processing to fulfil our services is Art. 6(1)(b) GDPR, for processing to fulfil our legal obligations is Art. 6(1)(c) GDPR, and for processing to protect our legitimate interests is Art. 6(1)(f) GDPR.
Security Measures
In accordance with Art. 32 GDPR, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
Cooperation with Processors and Third Parties
If we disclose data to other persons or companies (processors or third parties), this is only done on the basis of a legal permission.
Transfers to Third Countries
If we process data in a third country (i.e. outside the EU or EEA), this only takes place if it is to fulfil our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests.
Rights of Data Subjects
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right of Withdrawal
You have the right to withdraw consent granted pursuant to Art. 7(3) GDPR with effect for the future.
Right to Object
You may object at any time to the future processing of data concerning you in accordance with Art. 21 GDPR.
Cookies
This website does not use cookies.
Deletion of Data
The data processed by us will be deleted or restricted in accordance with Art. 17 and 18 GDPR as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and by the lock icon.
Server Log Files
The hosting provider automatically collects and stores information in server log files that your browser transmits to us. These include: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The data is stored on the basis of Art. 6(1)(f) GDPR. Server log files are stored for a maximum of 30 days and then automatically deleted.
Hosting
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, IONOS processes your IP address and other data transmitted by your browser (see "Server Log Files"). The use of IONOS is based on Art. 6(1)(f) GDPR. We have concluded a data processing agreement (DPA) with IONOS in accordance with Art. 28 GDPR.
Generated with Datenschutz-Generator.de by attorney Dr. Thomas Schwenke