Privacy Policy for the “ForUs” App by Bytenco This Privacy Policy describes how we process your Personal Information and how you can exercise your privacy rights. It provides an overview of the processing of your personal data within the scope of the installation and usage of the “ForUs” mobile application, developed by Bytenco (hereinafter referred to as the app), and your rights from data protection laws. The Basics Which data is processed and how this is used is based on if you use the app without explicit consent to this data protection statement or you have given consent to the processing of your personal data within the app. What sources and data do we use? In connection with the installation and usage of the app, we collect, process and use the data described below to find out which companies, products or other topics you are interested in, to be able to use the functions of our app on this basis as needed and to provide you with the most relevant information and offers from our partner companies in the app. If you use the app, we collect, process and use the following data for the previously listed purposes to fulfill our contractual obligations in terms of art. 6 para. 1 b GDPR or based on entitled interest in terms of art. 6 para. 1 f GDPR (this means interest in the analysis, optimization and efficient operation of our app): To use this application, you may need only your email id. This is used for the sole purpose of providing service to you. You are not required to provide any other information. Please be aware that any information you enter may render you personally identifiable, and may possibly be displayed on this application intentionally (depending on the way in which the application is configured) or unintentionally (subsequent to a successful act of intrusion by a third party). Advertising partners like Google & Facebook may also collect personally identifiable information such as your phone's advertising id. What do we process your data for (purpose of processing) and on which legal basis? We process personal data in agreement with the regulations of the General Data Protection Regulation (GDPR): a) To fulfill contractual obligations (art. 6 para. 1 b. GDPR) The processing of data occurs primarily to be able to provide the services and functions from our app. b) Within the scope of the consideration of interests (art. 6 para. 1 f. GDPR) If necessary, we will process your data beyond the actual fulfillment of the contract to preserve entitled interests from us or third parties, for example: · to design the app as needed, · to examine and optimize the procedure for the analysis of requirements for the purpose of direct customer contact, · for advertising or market and opinion research, provided that you have not objected to the usage of your data, · to preserve IT security, · to control and develop our app. c) Based on your consent (art. 6 para. 1 a GDPR) If you have given us express consent (opt-in) to process personal data for the respective purposes within the corresponding functions of the app (for example, application for a customer card from a partner, login to your user account from a card provider, delivery of personalized offers (so-called card-linked coupons), the legality of this processing (for example, forwarding the data to third parties) is given on the basis of your consent. Granted consent can be revoked at any time. This also applies to the revocation of declarations of consent that have been granted to us before the applicability of the GDPR, therefore before May 25, 2018. The revocation of consent does not affect the legality of the data processed until revocation. How are third-party services integrated? On the basis of our entitled interests in terms of art. 6 para. 1 lit. f. GDPR (this means interest in the analysis, optimization and efficient operation of our app), we use the following third-party services: · Firebase Analytics: We use the "Firebase Analytics" analysis service from Google Inc. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Firebase Analytics is designed to record how users interact with an app. Events are recorded such as the initial opening of the app, uninstallation, update, crash or frequency of use of the app. The events can be used to record other user interests as well, for example, for certain functions of the applications or certain topic areas. User profiles can also be recorded, which can be used as a basis for the illustration of advertising customized for users. Google is certified under the Privacy Shield agreement and offers a guarantee to comply with the European data protection regulations. You can view the privacy policy from Google here: https://www.google.com/policies/privacy If you would like to opt out of this data processing, you can use the settings and opt out options provided by Google at https://www.google.com/ads/preferences Who gets my data? Other than the processing listed above, your personal data will only be shared with your consent. Within Bytenco, the developer of the “ForUs” app, only those who need access to your data to fulfill our contractual and legal obligations will also receive access to it. Will data be transmitted to a third party country or an international organization? Data transmission to sites in states outside of the European Union (so-called third-party states) occurs provided that: · it is required to execute your orders, · it is legally prescribed, · within the scope of order data processing or · you have given us your consent. If there are service providers in a third party state, they are additionally obligated to the written instructions through the agreement of the EU standard contract clauses or certification under the Privacy Shield to comply with the data protection level in Europe. How long will my data be saved? We process and save your personal data as long as it is required to fulfill our contractual and legal obligations. It must be considered that our business relationship is a continuing obligation that exists for years. If the data is no longer required to fulfill contractual or legal obligations, it will be deleted regularly unless the limited further processing is required to preserve evidence within the scope of statutory limitation periods. According to §§ 195ff. of the Civil Code (BGB), these limitation periods can amount to up to 30 years, whereby the regular limitation period is 3 years. What data protection rights do I have? Every affected person has the right to information according to article 15 GDPR, the right to correction according to article 16 GDPR, the right to deletion according to article 17 GDPR, the right to limit processing according to article 18 GDPR, the right to opposition from article 21 GDPR as well as the right to data transmission from article 20 GDPR. With the right to information and deletion, the restrictions according to §§ 34 and 35 GDPR apply. Furthermore, there is a right to lodge a complaint to a responsible data protection supervisory authority (article 77 GDPR in connection with § 19 GDPR). You can opt out of the granted consent for the processing of your personal data. This also applies to opting out of declarations of consent, which have been granted to us before the applicability of the General Data Protection Regulation, therefore before May 25, 2018. Please remember that the opt-out will only work in the future. Processing that has occurred before the opt-out will not be affected by this. Is there an obligation to me providing data? Within the scope of our business relationship, you have to provide personal data that is required for the beginning and execution of a business relationship and the fulfillment of the affiliated contractual obligations or for the collection of which we are legally obligated to. Without this data, we are normally not able to complete the contract with you or execute it. Is there profiling? Some of your data from section 2 are processed in an automated manner (so-called profiling) with the objective of designing the app to meet demands or to be able to inform you in the app about products and offers from our partners. This permits us communication and advertising as needed in the app including market and opinion research on the basis of anonymous data.