Source: https://app.hypd.co/privacy_policy
Timestamp: 2019-04-25 14:32:10+00:00

Document:
We, Hypd, a brand of Ticketrunner GmbH, are pleased about your interest in our services and our company. We are committed to protecting your privacy and your personal data. The following data protection declaration informs you comprehensively about the handling of your personal data and about your rights in this connection when using the website to purchase products and other services in relation to the offers made by the brand ambassadors as well as the use of the services, offers and applications within the framework of the brand ambassador programme also under the corresponding subdomains and the corresponding mobile apps. (hereinafter: the Services).
The definitions used in our data protection declaration correspond to those of Art. 4 of the Basic Data Protection Ordinance (GDPR).
the data subject shall receive any voluntary statement of intent in the specific case, in an informed and unequivocal manner, in the form of a statement or other clear affirmative act, which the data subject indicates that he/she agrees to the processing of his/her personal data.
We only collect and use personal data of our users to the extent necessary to provide our website, content and services. Your personal data will only be collected and used with your consent or if the processing of the data is permitted by law.
If you have given us your consent for the processing of personal data, the legal basis is Art. 6 para. 1 lit. a GDPR.
If the processing serves the fulfilment of a contract concluded between you and us (if necessary also via a trademark ambassador) or if it is necessary for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR is the legal basis.
Any processing of personal data required to fulfil a legal obligation to which we are subject (e.g. statutory retention and storage obligations) is based on Art. 6 para. 1 lit. c GDPR as the legal basis.
Processing which is necessary to protect our interests or the legitimate interests of a third party and in which their interests, fundamental rights and freedoms do not outweigh this legitimate interest may be based on Art. 6 para. 1 lit. f GDPR.
Your personal data may be transferred to third parties if you have given your express consent, if this is required by law or if this is based on another legal basis mentioned above.
If you are a brand ambassador participating in or working for a brand owner's campaign or have acquired products or services in this context, we will also transfer your data to the respective campaign creators to the extent necessary to fulfil your request or to carry out the ambassador campaign.
We only work with carefully selected campaign producers who meet our standards for the protection of your personal data and the legal requirements.
In some cases, we use carefully selected external service providers and cooperation partners to process personal data.
This is done within the framework of so-called order processing on the basis of Art. 28 GDPR.
The processing of personal data in a third country, outside the European Union or the European Economic Area, is only carried out on the basis of special guarantees, such as the official recognition by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognised special contractual obligations, the so-called "standard contractual clauses". A data protection level corresponding to the EU is also given in particular if the service provider has submitted to the "EU-US Privacy-Shield” (www.privacyshield.gov).
We will delete or block your personal data as soon as the purpose for storage ceases to apply.
Within this framework we store your data at the most up to three years after the last establishment of contact with us and/or since the last registration over their account with Hypd.
Beyond this, however, data may be stored if this is provided for by national or European laws or other regulations to which we are subject. Your data will be blocked or deleted when a storage period prescribed by these regulations expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Our services are basically aimed at adults. Persons under 16 years of age may not transmit any personal data to us without the consent of their parents or legal guardians.
When you visit our website, our system always temporarily stores your IP address. This also represents a personal date.
To make the page available to you, it is necessary that the information is collected by the computer system of the calling computer (server log files). The data are as follows: Name of the requested file, your IP address, date and time of access, the amount of data transferred and the requesting provider (access data). The access data is used exclusively for the purpose of delivering the website content. An evaluation of the data for marketing purposes does not take place in this context. All access data will be deleted no later than seven days after the end of your visit to the site.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. The storage takes place on our legitimate interest in the stability and security of the website.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website and IT security; you have no possibility of objection in this respect.
_session_id, unique token, sessional, Website session cookie. Ensures that the user remains logged in.
_secure_session_id, unique token, sessional storefront_digest, unique token Stored for an indefinite period of time, provided that the login takes place with password and serves to determine whether the user has usage rights.
g Analytics Tracking from Google Analytics.
gat Analytics Tracking from Google Analytics. This cookie keeps bandwidth usage low (throttling).
PREF Only active for a few moments; is queried by Google and tracks who visits the page from where.
fr Tracking the Facebook Connect ID. Only active when the user logs on to Facebook.
_mkra_ctxt Use of Intercom Session.
Google Tag Manager is a solution that allows us to manage different so-called tags via a common user interface. The Tag Manager itself does not process any personal data. With regard to the processing of users' personal data, reference is made to the following information. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.
We use the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies" to enable an analysis of your use of this website. The usage information generated in this way is usually transmitted to a US-American Google server and stored there. Pseudonymous user profiles can be created from the processed data.
Google Analytics is only used on this website with IP anonymisation activated. This means that your IP address will be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transmitted and shortened on the US-American Google server. The IP address transmitted by your browser is not merged with other Google data.
You can prevent the storage of Google Analytics cookies and the collection of data generated by the cookie and related to your use of the online offer and the processing of this data by Google by downloading and installing the following browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=en.
We use the web analysis service Hotjar. The provider is Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta.
Hotjar helps us provide you with a better user experience and service, helps you diagnose technical problems and analyses user trends. Above all, the functionality of the Hotjar-based website can be improved through the services of Hotjar by making them more user-friendly, more valuable and easier for end users to use.
or activate'Do Not Track (DNT)' in your browser.
In addition, we use the Intercom Messenger, an external CRM system for processing user inquiries and tool for web analysis on our websites of Intercom Inc. 55 2nd St, 4th Fl., San Francisco, CA 94105, USA ("Intercom"). All data that we transmit via Intercom is sent with 256 bit encryption and stored in the USA.
Intercom is subject to the Privacy Shield Agreement and thus offers the guarantee to comply with European data protection law (www.privacyshield.gov).
Intercom uses the data of the users only for the technical processing of the inquiries and does not pass them on to third parties. Users are assigned by the respective session cookie. During the processing of service requests, it may be necessary to collect further data (name, address). The use of Intercom is optional and serves to improve and accelerate our customer and user service.
During the chat connection the following data will be processed: Location, IP address, browser and website visited. This is done on the basis of our legitimate interests in the analysis, optimization and economic operation of our website and services. The legal basis is Art. 6 para. 1 lit. f. GDPR.
The data within the scope of this registration process is entered into an input mask and transmitted to us and stored. Once you have registered, you will receive an e-mail in which you must click on a link to confirm your registration. This is how we prevent unauthorized third parties from registering using your e-mail address. To complete the registration you have to enter the phone number (country) and upload a profile picture.
The legal basis for the processing of the data is your consent, Art. 6 para. 1 lit. a GDPR. If the registration serves the fulfilment of a contract to which you are a contracting party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
You can control the information we receive from Facebook through the privacy settings in your Facebook account.
• Further develop our offerings, website and services to provide you with an even better user experience and to make our services as convenient and useful as possible.
We process the personal data for the purposes mentioned above on the basis of the legal bases mentioned under III.2. These are in particular the fulfilment of contractual obligations (Art. 6 para. 1 lit. b GDPR), insofar as the data are required for the execution of the contract, as well as your consent to the processing of the data (Art. 6 para. 1 lit. a GDPR) and the protection of legitimate interests (Art. 6 para. 1 lit. f GDPR).
Justifiable interests in this context are our interest in the further development and optimisation of the services, our interest in optimised and user-friendly communication, our interest in the provision of campaigns or partners of interest to users and, where applicable, our interest in effective public relations work.
We use Facebook Plug-Ins (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) to ensure an attractive presentation of our online offering. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
This establishes a connection to the Facebook servers when you visit our site and informs them that you are visiting our site. This also applies if you do not have a Facebook account or are not currently logged in to Facebook. If you are logged into your Facebook account, Facebook will map your user behavior directly to your personal profile. You can prevent this by logging out of your Facebook account.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in the data protection information of Facebook: https://www.facebook.com/about/privacy/.
For the same legitimate interest, we also use Instagram plug-ins (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA).
This establishes a connection to Instagram's servers when you visit our site and informs them that you are visiting our site. This also applies if you do not have an Instagram account or are not currently logged in to Instagram. If you are logged into your Instagram account, Instagram will map your user behavior directly to your personal profile. You can prevent this by logging out of your Instagram account.
A Content-Delivery-Network (CDN) is a service with which we can deliver certain files of our online content (especially large media files) faster with the help of regionally distributed servers connected via the Internet.
We use a content delivery network offered by Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare is certified under the Privacy Shield Agreement and undertakes to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).
The use is based on our legitimate interests, i.e. interest in a secure and efficient provision, analysis and optimisation of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.
In order to display our contents correctly and graphically appealing across all browsers, we use script libraries and font libraries ("Google Fonts") from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on this website. Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
These web fonts are integrated by a server call, usually a Google server in the USA. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the visitor's terminal device is also stored by Google.
An opt-out option can be found here: https://adssettings.google.com/authenticated.
We attach great importance to fulfilling our obligation to protect your personal data. We use a variety of security technologies and procedures to protect your personal data from unauthorized access, use or disclosure.
For example, we store the personal data you provide on computer systems with limited access in facilities to which access is restricted.
To protect your personal information, we take all appropriate and industry-standard precautions. In this way we ensure that your data is neither lost nor misused, made public, shared, changed or deleted. If you have entrusted us with your credit card details, this information is encrypted with secure socket layer technology (SSL) with AES-256 encryption. We follow PCI-DSS requirements to ensure the highest possible security of your data.
As far as you as the data subject in terms of. According to Art. 4 No. 1 GDPR, you have the following rights regarding the processing of your personal data according to the GDPR.
Under the conditions of Art. 15 GDPR, you have the right to request confirmation as to whether personal data relating to you are being processed and to obtain, at any time and free of charge, from the data controller, information on the personal data relating to your person stored and a copy of this information.
Under the conditions of Art. 16 GDPR, you have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration.
Under the conditions of Art. 17 GDPR, you have the right to demand that we immediately delete the personal data concerning you, provided that one of the reasons stated in Art. 17 GDPR exists and insofar as processing is not necessary.
Under the conditions of Art. 18 GDPR, you have the right to request us to restrict processing.
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, current and machine-readable format, and you have the right to transmit this data to another person responsible without our interference, provided that the other conditions of Art. 20 GDPR are met.
You have the right not to be subjected exclusively to automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner.
Under the conditions of Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. If the conditions for an effective objection are met, processing by us may no longer take place. The foregoing general right of objection applies to all processing purposes described in this Privacy Information that are processed on the basis of Article 6(1)(f) GDPR.
After exercising your right of objection, we will not process your personal data further for these purposes, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.
a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the provisions of the GDPR.
If you have any questions regarding this privacy statement or our handling of your personal data, please contact us at: info@hypd.co .
We will process your request immediately and endeavour to find a satisfactory solution.
In order to improve Hypd, we are constantly developing our website and services. We will always keep this data protection declaration up to date and adapt it accordingly if and insofar as this should become necessary. We will of course inform you of any changes to this data protection declaration in good time and in an appropriate form. Should further consent be required from you for processing your data, we will obtain it from you in good time before the relevant changes take effect or, in the event of non-issuance, we will discontinue the data relating to processing.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 4
 Art. 15
 Art. 16
 Art. 17
 Art. 17
 Art. 18
 Art. 20
 Art. 20
 Art. 21