Simple and clear

Privacy policy for our apps

Privacy policy

This is a translation provided for convenience. The German version is the legally binding text; where the two differ, the German original prevails.

General information

Your trust and the protection of your privacy matter greatly to us. We therefore want to explain to you, as a user of our apps, exactly how your personal data (referred to below simply as "data") is processed. We understand what data protection means and take the security of your data very seriously.

In this privacy notice we set out in detail how and why we process your data, and what rights you have in that connection. Every term used, such as "personal data" or "processing", follows the legal definitions in Article 4 of the General Data Protection Regulation (GDPR).

Please note that this privacy policy may be amended, to keep pace with the continuing development of our apps, the use of new technologies, or changes in the law or in case law. We recommend that you review it from time to time. You are welcome to print or save a copy for your records.

Our aim is to give you clear, transparent and readily understandable information about how your data is processed. We are glad that you use our services and are committed to keeping your data safe with us.

1. Controller

The controller responsible for processing personal data within the scope of this privacy policy is:

Data JT UG (haftungsbeschränkt)
Hauptstraße 67/1
79211 Denzlingen
Germany

Contact: datenschutz@data-jt.de

You can reach our data protection officer at that email address or at the postal address above, marked "z.Hd. des Datenschutzbeauftragten" (for the attention of the data protection officer). Please note expressly that messages sent to the email address are not seen exclusively by our data protection officer. If you wish to exchange confidential information, please use the address first to ask for direct or personal contact.

2. Security

We have put comprehensive technical and organisational measures in place to protect your personal data against unauthorised access, misuse, loss and other external interference. We review those measures regularly and keep them in line with the current state of the art.

3. Your rights

As a user of our app you may exercise the following rights over your personal data at any time:

access to the data stored,
information about how the data stored is processed,
rectification of the data stored,
erasure of the data stored (see Delete your account and data),
objection to the processing of the data,
restriction of the processing of your data, where we are not yet permitted to erase it because of legal obligations, and
transfer of the data we hold to you (data portability).

If you have already given us consent to collect or process your personal data, you may withdraw that consent at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal is unaffected.

You may lodge a complaint with the supervisory authority responsible for you at any time. Which authority that is depends on the federal state of your residence, of your place of work, or of the alleged data protection breach. A list of the supervisory authorities (for the non-public sector) is available at: https://bfdi.bund.de

4. Use of the app

Installation

Our app is available for download from third-party platforms (such as Android and iOS). Please note that we have no influence over how those platforms process data. During the download and installation of our app, those platforms may collect data that we have no access to. We recommend reading their privacy policies to understand how your data is processed there.

Location

Our app offers location-based services, so that it can show you specific information such as restricted zones in your vicinity. Your location data is collected only with your express consent and only while you are actively using the app. We do not track movement profiles and do not store your location data permanently. To use this function you must first grant our app access to your location in the settings of your mobile operating system.

System permissions

For the full app experience, our app needs access to certain functions and interfaces of your mobile device. These are:

Location services: enabling location-based functions requires your consent to access your device's location services. This permission can be changed at any time in your device's system settings.
Mobile data / network access: an internet connection is essential to using our apps, so your device's mobile data or network access must be enabled. This setting, too, can be changed at any time in your device's system settings.

We respect your privacy and would point out that you can adjust or withdraw these permissions at any time. Your settings directly affect which functions of our apps are available.

5. Use of third-party tools

To provide our services effectively and keep improving them, we use services from a number of third-party providers. That may make processing personal data necessary. We take care to work only with providers who maintain high data protection standards.

Cloudflare

For information security purposes, our apps use various services from Cloudflare (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, United States). The following data may be processed:

status codes
the date and time of the request
the operating system used
the IP address
the host name of the accessing device
the volume of data transferred

We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR, under which the data is processed only on servers located in the EU. The legal basis for the processing is Art. 6 (1) sentence 1 (f) GDPR. Our legitimate interests lie in keeping the apps functional, secure and intact. Further information on data protection and retention periods at "Cloudflare" is available at: https://www.cloudflare.com/privacypolicy/ (section 7, "additional safeguards").

You may object to the processing. Your right to object applies where grounds arise from your particular situation. You can send us your objection using the contact details given in section "1. Controller".

Google Analytics 4.0

So that we can tailor our apps to users' interests as well as possible, we use "Google Analytics 4.0", an analytics service provided by "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). "Google Analytics 4" uses cookies, tracking pixels and device fingerprinting to analyse user behaviour in apps and on websites. It collects and processes data from users' devices in order to carry out comprehensive statistical analyses — which app functions are used, for example.

We use the Firebase SDK provided by Google, a programming interface, to obtain access to device information such as advertising IDs and so carry out a statistical analysis of how the app is used. Google assigns this data to a randomly generated user ID.

Google uses machine learning to record user behaviour and interactions on our website and app and carries out a cross-platform analysis by means of Google Analytics 4. This makes it possible to record and compare usage data across different environments, including automated scroll events. User IDs from cookies and device resources are used to supply us with anonymised statistics on how the platform is used.

"Google Analytics 4" automatically creates audiences based on cookies or mobile advertising IDs for personalised advertising campaigns. The criteria for those audiences include user behaviour such as viewing products without adding them to the basket, or abandoning a purchase. An audience consists of at least 100 users. Interest-based advertisements are then served through "Google Ads" across the Google advertising network, including Google Search and YouTube, on the basis of those criteria.

For these purposes it may also be determined whether different devices belong to you (or to your household).

Access data in "Google Analytics 4" includes the IP address, browser information, previously visited websites, and the date and time of the server request. IP addresses are automatically shortened within the EU to reduce identifiability. Users' browsers establish a direct connection to Google's servers, which allows Google, for registered users, to associate the visit with the account and to build and analyse user profiles across applications.

The retention period is 14 months.

Transfer to third countries: using Google Analytics involves the possible transfer of data to the USA, a country the European Court of Justice regards as not offering an adequate level of data protection. There is a risk that your data may be processed by US authorities for surveillance purposes, without effective legal remedy or any guarantee of data subject rights.

The legal basis for the processing is your consent under Art. 6 (1) sentence 1 (a) GDPR. Further information on data protection at "Google" is available at: https://policies.google.com/privacy

Google Firebase

Our apps use the following Firebase services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to analyse errors in the app and fix problems:

Firebase Crashlytics

If our app crashes, we send an anonymised crash report to Google in real time. That report contains the information needed to understand and fix the problem: details of the state and type of the device, the operating system used, the app version, the exact time of the crash, an ID assigned by Firebase, and location data at the time of the crash.

The legal basis is Art. 6 (1) sentence 1 (a) GDPR. Our legitimate interest lies in providing our app and our services as free of errors as possible, in analysing and eliminating any sources of error, and in improving the app accordingly.

Firebase Analytics

We use Google's external analysis and validation functions Firebase Analytics and Firebase Remote Config so that the app can be tailored to users' interests as well as possible. For this we use a programming interface, the Firebase Software Development Kit (SDK) provided by Google, in order to access device information such as the advertising ID of the device used (Apple's IDFA and Google's GAID) and to enable a statistical analysis of app usage and a segmentation of user interests. The Firebase SDK lets us define various events (average app usage, average sessions per user, or taps on buttons, for example), so that we can follow and understand the behaviour of app users across devices and improve the app's functionality accordingly.