Thank you for your interest in our app and we appreciate your using it. In the following statement, we would like to inform you about the nature, scope and purpose of the collection, use and processing of personal data in connection with the use of our app and at the same time inform you about your rights.
It is not possible to use our app without providing personal data, as a customer account must be created or an existing account on Facebook or Google+ must be used. Personal data is all data that is personally obtainable from you, e.g. name, address, email address, user behavior. The collection and processing of personal data takes place exclusively within the framework of the applicable Data Protection Basic Regulation (GDPR).
To protect your data, our app always uses a current encryption method (SSL or TLS).
1. Responsible party for data processing
1.1 Responsible party for data processing via this app within the meaning of all data protection provisions (in particular within the meaning of the GDPR pursuant to Art. 4 Para. 7) is:
Outlander LB GmbH
Mr. Alexander Lechner
You will find our complete provider identification under the following link: https://huntersmapp.com/en/impressum.
The party responsible for the dissemination of personal data is a natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data.
1.2 When you contact us by email or via a contact form, we will store your email address and, if you provide it, your name and telephone number in order to answer your questions. We delete the data arising in this context after storage is no longer necessary or – in the case of statutory retention obligations – limit processing.
1.3 If we rely on contracted service providers for individual functions of our offer or if you wish to use your data for advertising purposes, we will inform you in detail below about the respective transactions. We also specify the defined criteria for the storage period.
2. collection of personal data when using our mobile app
2.1 When downloading the mobile app, the required information is transmitted to the respective App Store, in particular user name, email address and customer number of your account, time of download, payment information and the individual device code number. We have no influence over this data collection and are not responsible for it. We process the data only to the extent necessary for downloading the mobile app to your mobile device.
2.2 When using the mobile app, we collect the personal data described below in order to enable convenient use of the functions. If you would like to use our mobile app, we collect the following data, which is technically necessary for us to provide you with the functions of our mobile app and to ensure stability and security (legal basis is Art. 6 Par. 1 p. 1 lit. f GDPR): (1) IP address, (2) date and time of the request,
(3) time zone difference to Greenwich Mean Time (GMT), (4) content of the request, (5) access status/HTTP status code, (6) amount of data transmitted, (7) website from which the request came, (8) browser, (9) operating system and interface, (10) language and version of browser software.
2.3 Your telephone number will also be stored if you enter it voluntarily and independently in the profile. In the case of a bug report, the following data is also stored in order to be able to provide support services: Manufacturer of the smartphone used, model name, platform used, version used, serial number of the device used, MAC address of the device used.
2.4 In addition to the aforementioned data, cookies are stored on your mobile device when you use our mobile app. Cookies are small text files that are stored in the device memory of your mobile device and assigned to the mobile app you are using. Cookies allow certain information to flow to the site that sets the cookie (here: us). Cookies cannot run programs or transmit viruses to your device. They serve to make mobile apps more user-friendly and effective overall.
Our app uses transient and persistent cookies in particular.
a) Transient cookies are automatically deleted when you close our mobile app and/or the app is deleted. These particularly include the session cookies. They store a so-called session ID, which can be used to assign various requests to your mobile app. This allows your mobile device to be recognized when you use our mobile app again. Session cookies are deleted when you log out or close the browser.
b) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie in question. You can configure the settings of your mobile operating system and the app according to your wishes and reject, for example, the acceptance of third party cookies or all cookies. Please note that you may not be able to use all functions of our mobile app.
2.5 For advertising purposes we use the so-called “Advertising Identifier” (IDFA). This is a unique, non-personalized and non-permanent identification number for a particular device provided by iOS. The data thus collected is not associated with other device-related information. We use the IDFA to provide you with personalized advertising and to evaluate your use. If you activate “No ad tracking” in your iOS settings under Privacy > Advertising, Travelcoup is restricted to the following actions: measuring your interaction with banner ads by counting the number of times a banner is displayed without receiving a click (“frequency capping”), CTR, counting unique users, as well as security measures to combat fraud and error recovery. You can delete the IDFA (“Reset Ad-ID”) at any time in the device settings, then a new IDFA is created which is not merged with the previously collected data. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA.
2.6 Use your address book, your calendar, your photos, your camera
(1) When you start using a service of our app, we ask you in a pop-up for permission to use your address book, your calendar, your photos and your mobile phone camera. If you do not grant permission, we will not use this data. In this case you may not be able to use all functions of our app. You can grant or revoke permission later in the operating system settings.
(2) If you allow access to this data, the mobile app will only access your data and transfer it to our server to the extent necessary to provide the functionality.
Your data will be treated confidentially and deleted if you revoke the rights to use or are no longer required to provide the services and there are no legal retention requirements. The legal basis for processing is Art. 6 para. (1) sub-paragraph 1 (f) of the GDPR.
2.7 Collection of your location data
Within our app you have the possibility to display weather information for the current location, to display your own position and the position of persons on the map, to participate in a hunt, to set border markings and landmark positions, to carry out distance measurements and to use the augmented reality mode, position determination within the messenger of the app including the hunt planning and the holding of a hunt, storage of the location with diary entries. You can only use these functions after you have expressly agreed via a pop-up that we can collect your location data anonymously using GPS and your IP address for the purpose of providing the service. In particular, the transmission of the position data can be terminated by executing the command “Stop hunting” or by closing our app. You can allow or deny the aforementioned functions in the settings of the app or your operating system at any time by calling up the settings of our app. Your location will only be transferred to us if you use functions when using the app which we can only offer you if we know your location.
2.8 Access permissions for general
Depending on how the app is used, it can request certain authorizations to access the data of the device used. You must grant the respective access authorization. Once you have given your consent, you can revoke it at any time in the settings. If access authorizations are denied or revoked, you may not be able to use our app to the full extent. The queried and access rights include in particular the following:
a) Authorization for accounts in social networks: Access to social media profiles
b) continuous location determination: continuous determination of the specific device location, location data is processed and stored in order to be able to offer location-based services
c) non-continuous location determination: Determination of the specific device location, location data are processed and stored in order to be able to offer location-based services.
d) motion sensor authorization: Determination of the user’s activities (step count, steps walked and type of movement (walking, cycling, etc.)), orientation of the device (determination of the compass direction)
e) camera authorization: Recording of pictures and videos
f) contact authorization: Access to the contacts and profiles on the device used
g) sensor authorization: Access to data from sensors (body data such as heart rate)
h) storage authorization: Access to external shared memory
3. further functions and offers of our app
3.1 In addition to the purely informational use of our website, we offer various services that you can use if interested. For this purpose, you must provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
3.2 In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.
3.3 Furthermore, we may disclose your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. For more information, please provide your personal data or see the description of the offer below.
3.4 If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
3.5 If you would like to use our app, you must register by entering your email address and a password of your choice. The assignment of a freely selectable user name is voluntary. If no user name is selected, the user name is the email address. We use the “double opt-in” procedure for registration, i. e. your registration is not complete until you have confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. If your confirmation does not arrive within 24 hours, your registration will be automatically deleted from our database. It is obligatory to provide the aforementioned data; all further information can be provided voluntarily by using our portal.
3.6 If you use our app, we store your data required for the fulfillment of the contract, possibly also details of the payment method, until you delete your access with finality. Furthermore, we will store the optional data provided by you for the duration of your use the of portal, unless you delete it prior to this. You can manage and change all information in the protected customer area. The legal basis is Art. 6 para. (1) sub-paragraph 1 (f) of the GDPR.
3.7 If you use the app, your data may be made available to other users of the app in accordance with the contractual service. Users who are not logged in will not receive any information about you. For all registered members your user name, your email address and your profile picture are visible exclusively when using the chat and within the contacts, regardless of whether you have released them or not.
3.8 In order to prevent unauthorized access by third parties to your personal data, in particular financial data, the connection is encrypted using TLS technology.
4. Duration of personal data retention
Personal data will be stored for the duration of the respective statutory retention period (in particular measured in accordance with commercial and tax law). If these data are not necessary for the fulfillment of the contract or for the initiation of the contract after the expiry of this statutory retention period or if there is no justified interest on our part in the continuous storage of the data, these will be deleted.
5. Legal basis for the data processing carried out by the data processor
5.1 If you have given your consent to the processing of your personal data for one or more purposes, the data will be processed by us on the basis of Art. 6 I lit. a GDPR.
5.2 If the processing is necessary due to the fulfillment of a contractual relationship to which you are a party, e.g. for the delivery of products following an order or for the implementation of pre-contractual measures, in particular for answering an enquiry made by you, the processing of the data takes place on the basis of Art. 6 I lit. b GDPR.
5.3 If the processing of the data is necessary due to the fulfillment of a legal (e.g. tax) obligation to which we are subject, the processing of the data is carried out by us on the basis of Art. 6 I lit. c GDPR.
5.4 If the data is processed in order to protect your vital interests or the vital interests of another natural person, this is based on Art. 6 I lit. d GDPR.
5.5 If the processing of personal data is not covered by any of the aforementioned legal bases, the data will be processed on the basis of Art. 6 I lit. f GDPR. Thereafter, the processing is carried out to safeguard our legitimate interest or the interest of a third party, unless your interests, fundamental rights and fundamental freedoms prevail.
6. Your rights
You have the following rights vis-à-vis our company with regard to your personal data.
6.1 Right of access, Art. 15 GDPR
You have the right to request free information and a copy from us about personal, processed data that concerns you. It also provides information on (1) the processing purposes, (2) the categories of personal data being processed, (3) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organizations, (4) – if possible – the planned duration for which the personal data are stored, or, if that is not possible, the criteria for determining that duration, (5) the existence of a right to rectification or deletion of personal data concerning you or restriction of processing by the controller or a right to object to such processing; (6) the right of appeal to a supervisory authority; (7) all available information on the origin of the data if the personal data is not with us (8) the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the DSBER Regulation and – at least in these cases – meaningful information about the logic involved and the implications and intended effects of such processing on you as the data subject; (9) the appropriate safeguards in accordance with Article 46 of the GDPR in connection with the transfer, provided that personal data are transmitted to a third country or to an international organization.
6.2 The right to rectification – Art. 16 GDPR
You have the right to request the correction of your personal data without undue delay. In addition, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
6.3 Right to cancellation, Art. 17 GDPR (“Right to be forgotten”)
You have the right to the immediate erasure of personal data, if any of the following is true: (1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (2) you revoke your consent, to which the processing referred to in Article 6 (1) lit. a DS-GMO or Article 9 paragraph 2 lit. a DS-GMO and there is no other legal basis for processing (3) In accordance with Article 21 (1) of the GDPR, they object to the processing and there are no legitimate grounds for the processing, or they lay down (4) the personal data have been unlawfully processed, (5) the deletion of the personal data is necessary to fulfill a
legal obligation under Union or national law, (6) the personal data were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.
In case of deletion of your personal data, please contact:
Outlander LB GmbH
Mr. Alexander Lechner
6.4 Right to restriction of processing, Art. 18 DS-BER
You have the right to demand that we restrict the processing if any of the following conditions apply: (1) the accuracy of your personal information is contested by you for a period of time that allows us to verify the accuracy of your personal information (2) the processing is unlawful and you refuse the deletion of the personal data and instead require the restriction of the use of the personal data, (3) we no longer need the personal data for the purpose of processing, you need them however, to assert, exercise or defend legal claims, or (4) you have objected to the processing in accordance with Article 21 (1) GDPR, as long as it is not certain that our legitimate reasons prevail.
6.5 Right of notification, Art. 19 GDPR
We have a duty to notify all recipients whose personal data have been disclosed of any rectification or erasure of the personal data or of any limitation of processing under Articles 16, 17(1) and 18 of the DS Block Exemption Regulation, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of such recipients if you so request.
6.6 The right to data portability, Art. 20 GDPR
You have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format and to transfer such data to another data controller without any hindrance from us to whom the personal data have been provided, provided that the processing is based on an agreement pursuant to Article 6 paragraph 1 lit. a or Article 9 paragraph 2 lit. a GDPR or on a contract pursuant to Article 6 paragraph 1 lit. b GDPR and the processing is carried out using automated procedures. Furthermore, you have the right to demand that the personal data be transmitted directly by us to another responsible person, as far as this is technically feasible.
6.7 You also have the right to file a complaint with a data protection supervisory authority concerning our processing of your personal data.
7. Objection or revocation against the processing of your data, Art. 7 par. 3 GDPR
7.1 If you have given your consent to the processing of your data, you can revoke this at any time. If you exercise this right, this will affect our ability to process your personal data after you have already given it to us.
7.2 Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.
7.3 Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising conflict under the following contact data:
Outlander LB GmbH
Mr. Alexander Lechner
8.1 With your consent, you can subscribe to our newsletter and receive push notifications on your mobile phone to inform you about our current offers.
8.2 To subscribe to our newsletter, we use the “double opt-in” procedure. This means that after your registration we will send you an email to the specified email address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to verify your registration and, if necessary, to clarify a possible misuse of your personal data.
8.3 The only required information for sending the newsletter is your email address. Any other further information is voluntary and is used to address you personally. After your confirmation we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.
8.4 You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the cancellation by clicking on the link provided in each newsletter email, by email to firstname.lastname@example.org or by a message to the contact information specified in the imprint.
8.5 We would like to point out that we evaluate your user behavior when sending the newsletter. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are stored on our website. For evaluation purposes, we link the above data (para. 3) and web beacons to your email address and an individual ID. The data will only collect pseudonyms, so the IDs are not linked to your personal data and are not directly linked to you personally. You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact method. The information is stored for as long as you are subscribed to the newsletter. After cancellation, we store the data purely statistically and anonymously.
9. Integration of Google Maps
9.1 On our app we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables your convenient use of the map function.
9.2 By using our app, Google receives the information that you have accessed the corresponding subpage. In addition, the data mentioned under section § 3 of this declaration will be transmitted. This takes place regardless of whether Google makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated to your Google profile, you must first log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website, with which a justified interest exists, cf. Art. 6 Para. (1) (f) of the GDPR. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customized advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
10. Inclusion of YouTube videos
10.1 We have integrated YouTube videos (Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) into our app, which are saved on http://www.youtube.com and can be played directly from our app.
10.2 By using our app, Google receives the information that you have accessed the corresponding subpage. In addition, the data mentioned under section § 3 of this declaration will be transmitted. This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customized advertising and to inform other social network users about activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
10.3 Data processing is carried out on the basis of a justified interest on the part of YouTube in an Internet presence tailored to the needs of the visitor, cf. Art. 6 Para. (1) f DSGVO.
11. Facebook Connect
11.1 To make it easier for you to use our app, we use the Facebook Connect service. A customer account can easily be created if you have a Facebook account.
11.2 When using this service, a direct connection is established to Facebook’s servers in the US. Facebook will recognize your IP address and that you have accessed our app – even if you do not have a Facebook account or are logged out of Facebook. These data are stored by us. The legal basis for the data processing by Facebook is based on Art. 6 Para. 1 lit. f GDPR and the legitimate interest on the part of Facebook in the transmission of personalized advertising.
11.3 If, within the scope of using this service, a registration or login is made in our app with the Facebook login data, we will receive – exclusively after granting your express consent pursuant to § 2.1 of the German Facebook Data Protection Act – your personal data. Art. 6 para. 1 lit. a GDPR – from Facebook, the data you have stored there and publicly accessible information. These include in particular user ID, name, profile picture, age and gender. The data transmitted by Facebook in this context is determined by the data protection settings you make there. If profile pictures, user IDs of your friends and your friends list have been marked as “public,” this data may also be transmitted. We process and store the data provided by Facebook in this context, which may in particular include title, names, addresses, country, email address(es), date of birth.
11.4 To prevent the information collected in our app from being associated with your Facebook profile, it is necessary for you to log out before accessing our app or using an appropriate add-on.
12. Google+ Sign-In
12.1 To make it easier for you to use our app, we use the Google+ Sign-In service. A customer account can easily be created if you have a Facebook account.
12.2 When using this service, a direct connection is established to Facebook’s servers in the US. Google+ will recognize your IP address and that you have accessed our app – even if you do not have a Google+ account or are logged out of Google+. This data is stored by Google+. The legal basis for the data processing by Facebook is based on Art. 6 Para. 1 lit. f GDPR and the legitimate interest on the part of Facebook in the transmission of personalized advertising.
12.3 If, within the scope of using this service, a registration or login is made in our app with the Facebook login data, we will receive – exclusively after granting your express consent pursuant to § 2.1 of the German Facebook Data Protection Act – your personal data. Art. 6 para. 1 lit. a GDPR – from Facebook, the data you have stored there and publicly accessible information. These include in particular user ID, name, profile picture, age and gender. The data transmitted by Facebook in this context is determined by the data protection settings you make there. If profile pictures, user IDs of your friends and your friends list have been marked as “public,” this data may also be transmitted. We process and store the data provided by Facebook in this context, which may in particular include title, names, addresses, country, email address(es), date of birth.
12.4 To prevent the information collected in our app from being associated with your Facebook profile, it is necessary for you to log out before accessing our app or using an appropriate add-on.
13. Google Analytics
13.2 Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
13.3 Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. The processed data can be used to create pseudonymous user profiles of the users.
13.4 We only use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
13.5 The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
13.7 The users’ personal data will be deleted or anonymised after 14 months.
Item 13 Google Analytics created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke
© Wrase Law Firm, Hamburg