Source: https://www.jimdo.com/info/privacy-creator-app/
Timestamp: 2019-04-24 15:51:44+00:00

Document:
We collect, process and use personal data (in accordance with the definitions of the German Federal Data Processing Law) in order to provide our Jimdo Creator App services.
When creating a Jimdo website via the Jimdo Creator App the user must provide a valid email address. The email address is used to create an administer the Jimdo Creator App user’s account and to enable the user to use the Jimdo Creator App. The Jimdo users website shall be published under a subdomain name of the Jimdo website address that shall either be chosen by the Jimdo user or generated automatically. The legal basis is that the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 (1) sentence 1 b GDPR.
The data submitted by the Jimdo user shall be saved until the termination of the user’s account i.e. until the deletion of the Jimdo Creator App. with the exception of payment data. Due to tax regulations we are obliged to save billing information for a period of 10 years.
When users are logged into their Jimdo website via the Jimdo Creator App, the Jimdo server automatically collects and composes an activity log which logs the way in which Jimdo is used. This log includes information regarding the activity (including used storage space, number of logins, etc.), statistical data (such as e.g. browser type, date and time of access) as well as the IP address of the Jimdo-user.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal activities. This data shall be necessary anonymized and deleted where appropriate at the latest after a period of 7 days.
The Jimdo Creator app uses Google Analytics SDK for iOS and Android, a web analytics service provided by Google Inc. ("Google") Jimdo uses Google Analytics to improve the performance of our Jimdo Creator app and to prevent misuse of our services.
Google Analytics SDK for iOS and Android uses the Google Analytics Api, which allows an analysis of the use of this app by the Jimdo Creator App user. The information generated by the tracking code about the use of this app are transmitted to a server of Google in the USA and stored there. However, due to the use of IP anonymization by Google, the IP address of the Jimdo Creator App user is shortened by Google within the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On behalf of Jimdo, Google will use this information to evaluate the use of the app by the Jimdo Creator app user, to compile reports on the app's activities and to provide other app-related services to the app operator. The IP address provided by Google Analytics within this app will not be merged with other data provided by Google. Furthermore, Jimdo have entered into a Data Processing Agreement with Google, in which Google has committed itself to protect the data of our customers.
Google Analytics™ is an integral part of the Jimdo Creator app. The Jimdo Creator App User may object at any time to the processing of his data by Google in the future by deleting the Jimdo Creator App. The deletion of the app and the corresponding objection to the use of Google Analytics means that the Jimdo Creator app is no longer available to the user.
We use the Firebase Cloud Messaging service to send push messages or so-called in-app messages to the Jimdo Creator App user on their device. If the Jimdo Creator App user uses our apps through a push-enabled device, they can agree on device level to receive push notifications. In this case, the terminal is assigned a pseudonymized device token ID, a unique connection number generated from the device ID, by which Jimdo can address the push messages or in-app messages to the Jimdo Creator App users. Consent to the push message notification can be changed at any time in the settings of the Jimdo Creator App.
We also use Firebase Remote Config, which allows us to run A / B tests and customize the behavior and appearance of the app without having to download a new version. Personal data is not stored.
In addition, other features of Firebase shall also be used, which allow better user guidance or an evaluation of crash causes in the apps as long as the data protection provisions remain as described above.
The legal basis for the use and analysis of the data and use of Firebase is our legitimate interest (ie interest in the analysis, optimization and economic operation of our apps) within the meaning of Art. 6 (1) (f) GDPR).
The legal basis for the transmission of the data is Art. 6 para. 1 lit. a GDPR. The data will be deleted as soon as they are no longer necessary for the achievement of the respective purpose, that is, there is no legitimate interest and, moreover, we are no longer legally obliged to keep records in which personal data may be contained.
According to legal requirements in Germany, the storage of certain data may take place in particular for 6 years pursuant to § 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records , Management reports, accounting documents, trade and business letters, documents relevant for taxation, etc.).
All information that the Jimdo Creator App user puts on their Jimdo website can generally be viewed by other internet users. Therefore, we naturally encourage you to be careful and responsible with any personal information and confidential data you publish on your website. Please keep in mind that password-protected areas do not offer absolute protection against unauthorized access.
The prerequisite for using the Jimdo Creator App is that the Jimdo Creator App user has a minimum age of 16 years. We do not knowingly collect any information from persons who are younger than 16 years of age or other persons who are legally unable to use our services and websites. If we become aware that we have collected personal information from persons who are younger than 16 years of age, we will delete that data immediately; unless we are required by law to retain the data.
Please be aware that the Jimdo mobile team members can also be authorized in specific cases to access the administrative section (menu) of the Jimdo Creator App when fulfilling customer service requests and tracking errors. This necessarily grants them the possibility to view all parts of the Jimdo Creator App. All members of our Jimdo support team are regularly trained in privacy and data protection sensibility and confidentiality.
We never share the personal data of the jimdo Live Chat user with third parties for their marketing and promotional purposes without our express consent.
e.g. to law enforcement agencies, government agencies, or authorized third parties seeking information in connection with a preliminary investigation or suspected criminal offense, unlawful act, or other act that can results in legal liability for us, the Jimdo Creator App User, or for any other user. In such cases, we will only provide the relevant data for the investigation or the request for information such as name, location, postal code, telephone number, e-mail address, previous usernames, IP address, fraud complaints etc..
To legally authorized third parties involved in a lawsuit, if they provide us with a legal, court or equivalent legal act, or if we believe in good faith that disclosure of the data is necessary in order to remove an imminent threat to life and limb or financial loss or report a suspected illegal activity.
For the defense of legal claims, if an offer or other content in our apps violates the rights of third parties.
To protect the rights, property or safety of third parties.
If Jimdo is acquired by another company, information including personal data could be transferred to the acquiring party within the framework of the relevant data protection provisions.
If you have enabled and/or consented to receiving push notifications from the Jimdo Creator App on your device, then Jimdo may send you push notifications via said device from time to time in order to keep you up to date and inform you about new events, technical developments, new active chats, etc.. Should you not or no longer wish to receive these notifications you may deactivate them via your device and device settings.
In order to ensure that you receive the required notifications, Jimdo needs to collect specific device data, such as your operating system and/or version and unique device identifier(UDID).
How long we retain personal information may vary considerably depending on the services we offer and our legal obligations.
We process and store the user's personal data only for the period necessary to achieve the purpose of the storage until the consent to the storage is revoked or, if so required by the European directives or other legislators in laws or regulations was provided for.
If the purpose of the storage is extinguished, if the consent is revoked or if a storage period prescribed by the European directives or regulations or any other relevant legislature expires, the personal data will be routinely and in accordance with the statutory provisions blocked or deleted.
Incidentally, we store accounting documents for a period of ten years and business letters, that is, any message relating to the preparation, execution or cancellation of a transaction, for a period of six years, in order to fulfill our statutory retention obligations under section 257 (1) 2 HGB and § 147 AO, whereby the deadline begins with the end of the calendar year in which the business letter was received or sent, or the accounting voucher arose. The legal basis is Art. 6 para. 1 lit. c GDPR.
In accordance with the relevant legislation and the GDPR, the Jimdo Creator App user has certain rights with respect to their personal information. In particular, they have a right to information, rectification, data transferability or deletion of their data. The Jimdo Creator App user also has the right to object or limit processing in relation to the processing of certain data.
The Jimdo Creator App user can usually access, review and edit his personal information in his Jimdo account by logging in and directly updating or deleting the information.
In some cases it is not possible to change or remove content after it has been communicated in the Jimdo Creator App. Upon receipt of such request, Jimdo may close the Jimdo Account and remove the offending personal information from public areas as soon as possible based on account activity and applicable law. The legal right to access, rectification or deletion of personal data remains unaffected.
The Jimdo Creator App can be deleted or uninstalled at any time by the Jimdo Creator App user at the device level via the settings.
If the purpose for the data processing extinguishes, or if the consent is revoked or if a storage period prescribed by the European directives or regulations or any other relevant legislature expires, all personal data will be routinely and in accordance with the statutory provisions blocked or deleted.
The Jimdo Creator App user may object to the future processing of his data in accordance with Art. 21 GDPR at any time for the future. The objection may in particular be expressed against processing for direct marketing purposes(via sending an email to privacy@jimdo.com or unsubscribing directly from such communications). A corresponding note as regards the Jimdo Newsletter unsubscription process can be found in every newsletter email.
The Jimdo Creator App user also has the right to process personal data that is used for statistical purposes in accordance with Art. 89 para. 1 GDPR for reasons that arise from the particular situation. of the Creator App user in question.
In order to exercise the aforementioned and other data subject rights as well as to obtain information on the fees that may be required under applicable law, an affected party may, at any time, contact the contact address provided below.
If the Jimdo Creator App User is required to provide information, correction or deletion of its personal information, Jimdo may in certain circumstances, under applicable law, refuse such information or refuse to correct or delete your personal information. However, Jimdo will give the reasons in these cases.
Without prejudice to any other administrative or judicial remedy, the Jimdo Creator App User has the right in accordance with Art. 77 GDPR to complaint to a supervisory authority, in particular in the Member State of their residence, place of work or place of alleged infringement, or if the Jimdo Creator App user considers that this processing of the personal data violates the GDPR.
The personal information of the Jimdo Creator App user is protected by technical and organizational security measures to minimize risks associated with their loss, misuse, unauthorized access, unauthorized disclosure, and alteration. For example, we use firewalls and data encryption, as well as physical access restrictions for our data centers and data access authorization controls.
To provide our services, we may transfer the personal information of the Jimdo Creator App user to subprocessors. Such data sharing may be required to provide access to our services, to comply with our legal obligations, to enforce our Terms and Conditions, to conduct our marketing and promotional activities, and to prevent fraud or illegal activity associated with our services, to recognize, curb and investigate. We limit the amount of personal information we share to what is directly relevant and necessary to achieve the stated purpose.
Provider: Firebase is a Google subsidiary and is based in San Francisco (CA), USA.
Provider: Fabric is a Google Inc. subsidiary and is based in San Francisco (CA), USA.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 § 147
 Art. 6
 Art. 21
 Art. 89
 Art. 77