Source: https://www.spyoff.com/en/data-protection-regulations
Timestamp: 2019-04-22 05:11:15+00:00

Document:
SpyOFF is committed to protecting online privacy. Therefore, we encrypt and anonymize the Internet connection of our users according to military standards. Our entire system has been designed to capture only the bare minimum of data needed to provide a world-class VPN service.
We attach great importance to understanding what information we collect, which information we DO NOT collect and what we use your information for.
The highest priority for us is data protection. There is no data retention in San Marino. So we can guarantee our no-log-policy (https://www.spyoff.com/en/no-logs). Once a user uses our VPN software, their Internet data is encrypted and their activities become invisible to ISPs, snoopers and criminals thanks to the latest security technologies. Users and their activities will at no time be monitored, logged, recorded, stored or shared with third parties while using our software.
Insofar as we obtain your consent for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis. In the processing of personal data required for the performance of a contract of which you are a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c DSGVO as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 (1) lit. d DSGVO as legal basis. If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of yours do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.
Your personal information will be deleted or blocked as soon as the purpose of the storage is removed. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
A storage of this data together with other personal data of you will NOTtake place.
The temporary storage of the data is necessary to enable delivery of the website to your computer, to ensure the functionality of the website, to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.
The collection of the data for the provision of the website and the storage of the data is essential for the operation of the website. There is therefore no contradiction on your part.
The collection of your e-mail address serves to deliver the newsletter.
The collection of other personal data as part of the registration process is intended to prevent abuse of the services or the e-mail address used.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Your e-mail address will therefore be saved as long as the subscription to the newsletter is active.
Subscription to the newsletter may be terminated at any time by you. For this purpose, there is a corresponding link in each newsletter. This also allows a revocation of the consent to the storage of the personal data collected during the registration process.
Diagnostic information about failure of a VPN connection attempt.
Crash reports, even without personally identifiable information.
After activating the SpyOFF app you will be asked if you want to share this data. You can start or stop this diagnostic data at any time in the settings menu of the app. This is non-personal information. There is NO information about the activity that is being performed in the SpyOFF VPN tunnel, such as: Browser history, saved web content, VPN traffic destinations, DNS queries, and IP addresses.
SpyOFF uses the best physical, procedural and technical security with respect to our offices and information storage facilities to prevent loss, misuse, unauthorized access, disclosure or alteration of information. Access to user information is restricted to employees who need such access to perform their tasks. Although we believe that these systems are robust, it is important to understand that no data security measures in the world can provide 100% protection. Servers are located in data centers with strong security practices. None of these data centers require the collection or storage of traffic data or personal information related to your use of SpyOFF services. If any data center asked us to log such data, we would immediately stop using the data center and find alternative ways. Even if a government physically confiscates one of our VPN servers and manages to break their hard drive encryption, there are no protocols or information that bind a single user to a particular event, site, or behavior.
As part of the registration process, your consent to the processing of this information will be obtained.
Legal basis for the data processing is in the presence of your consent Art. 6 para. 1 lit. a GDPR.
If the registration serves the fulfillment of a contract of which you are a party or the implementation of pre-contractual measures, then additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO..
As a user, you have the option at any time to cancel the registration and / or to modify the data stored about you. Simply send us an e-mail requesting deletion or modification to info@spyoff.com.
Alternatively, contact via the provided e-mail address is possible. In this case, your personal data transmitted by e-mail will be stored.
The processing of the personal data from the input mask serves us only to process the contact and subsequent improvement of our service. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
You have the option at any time by e-mail to info@spyoff.com to revoke your consent to the processing of personal data. In such a case, however, the conversation can not continue.
The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
The collection of data serves to ensure security, as well as use of the blog. The collection of the e-mail address is intended to prevent misuse and the delivery of the e-mail reminder, if desired.
The subscription of the comments as well as the registration to the blog and the associated consent to the data processing can be terminated at any time. For this purpose, we find in every email from us a "unsubscribe link". After clicking on the link, the subscription to the comments will be deleted and you will no longer receive any reminder emails. To delete your pseudonym and your email, please send an e-mail to info@spyoff.com with the appropriate request.
Your data will only be disclosed if absolutely necessary for the provision of our VPN service and only for this purpose.
The transfer of the aforementioned data and their processing is mandatory for the fulfillment of the contract and the fraud detection and prevention necessary.
The collection of the data and their storage and processing is mandatory for the execution of the contract. There is therefore no premature contradiction and elimination possibility on your part.
For marketing purposes, we use Google Adwords, an advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
This will set a conversion tracking cookie on your machine when you click on a Google-served ad. These cookies lose their validity after 30 days, contain no personal data and are thus not used for personal identification. The information gathered using the conversion cookie is only used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking.
For marketing purposes, we use Bing Ads (bingads.microsoft.com), a product of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). When you reach our website from a Microsoft Bing ad, Microsoft places a cookie on your machine. So for us Microsoft understands that someone has clicked on an ad, has been redirected to our website and has reached a previously determined landing page (conversion page). We only hear the total number of users who clicked on a Bing ad and were then redirected to the conversion page. Microsoft uses the cookie to collect, process and use information that generates usage profiles using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about your identity will be processed.
For more information about privacy and cookies on Microsoft and Bing Ads, visit the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
other personal information, depending on the information provided.
This data will not be disclosed to third parties and will only be used to process and document the requests. By using the chat, you agree that you agree.
For the provision of payment services and payment methods, we use IXOPAY. IXOPAY, an offer of IXOLIT GmbH, Mariahilfer Str. 77-79, 1060 Vienna, is a PCI-DSS Level 1 certified payment platform. It combines a variety of alternative payment methods and credit card acquirers and enables the secure storage of credit and debit card data (PANs). We use this cookie to prevent fraud and increase the security of payment transactions. The moment you reach our website, an anonymous visitor ID is stored in a cookie for this purpose.
To provide and secure this website and to maximize loading times, CloudFlare (a service of CloudFlare Inc., 101 Townsend St., San Francisco, CA 94107) is being used as a "Content Delivery Network" (CDN service). A CDN is a service that helps deliver content from our online offering, especially large media files, such as graphics or scripts, using regionally distributed and Internet-connected servers. For the CDN service, content data is purpose-bound for performance improvement on CloudFlare servers.
Cloudflare is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active).
On our website we use the so-called "Facebook Pixel" of the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU) to analyze and optimize our online offer. Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland).
With the help of the Facebook pixel, Facebook is able to designate the visitors to our website as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we have been sent only to those Facebook users who have also shown an interest in our online shop or who have certain characteristics (interest in certain products, etc.) that we use Facebook (so-called "Custom Audiences"). In addition, by using the Facebook Pixel, we want to ensure that our Facebook Ads are in line with the potential interest of users and are not annoying. Finally, with the help of the Facebook pixel, we can track the effectiveness of Facebook ads for statistical and market research purposes, by seeing whether users have been redirected to our site after clicking on a Facebook ad (so-called "conversion").
Information and details about the Facebook pixel can be found here: https://www.facebook.com/business/help/651294705016616.
You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads under the following link: https://www.facebook.com/settings?tab=ads.
By using the aforementioned cookies, we aim to improve the performance and enjoyment of our service, as well as to ensure the marketing of our website.
You can sign out of Google Analytics through the Google Analytics opt-out page (https://support.google.com/dfp_premium/answer/2839090?hl=de) .
You may disable the use of third-party cookies by visiting the opt-out page of the Network Advertising (http://optout.networkadvertising.org/?c=1#!/) initiative.
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. By activating the IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all the features of this website in full.
In addition, we use the tracking tool from www.mixpanel.com, a web analytics service provided by Mixpanel Inc. Cookies can be used for this purpose. These are small text files that are stored locally on the site visitor's computer, allowing them to be recognized when revisiting our website. Mixpanel Inc. collects and stores usage data in pseudonymous profiles. The pseudonymous usage profiles are not merged with personal data about the bearer of the pseudonym.
Mixpanel is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
The use of the website analysis services optimizes the website and our offer. Google and Mixpanel uses the information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and Internet usage to the website operator.
You can prevent the storage of cookies by setting your browser software accordingly; However, we point out that in this case you may not be able to use all the features of this website in full.
In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en. Mobile users can disable Google Analytics at this link.
The data collection and storage for the purpose of web analytics, you can at any time object to the future by clicking the service by clicking on "Yes, I would like to opt out" on this page https://mixpanel.com/optout/ In this case, please note that as a result of this a cookie will be set on your device, which will stop you from collecting and evaluating any data, so you should not delete this cookie.
For sending e-mails or newsletters we use the list provider MailChimp, an offer from The Rocket Science Group, LLC, 512 Means St, Suite 404 Atlanta, GA 30318.
MailChimp is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)..
The information gained helps us to optimize our service.
You can cancel the subscription to the newsletter at any time. (short description, for example link to cancellation is in each newsletter). The data you provide will be deleted.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this regard, you can ask for the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
You have a right to rectification and / or completion to the controller, if the processed personal data relating to you is incorrect or incomplete. The responsible person must make the correction without delay.
(4) if you have filed an objection to the processing pursuant to Art. 21 para. 1 DSGVO and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of your personal information has been restricted, such data may be stored, except for yours, only with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for important public interest Union or a Member State.
If the limitation of the processing after the o.g. If conditions are restricted, you will be instructed by the person in charge before the restriction is lifted.
(3) You lay gem. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for processing, or you submit gem. Art. 21 para. 2 DSGVO Opposition to processing.
If the person in charge has made the personal data relating to you public and is in accordance with. Article 17 (1) of the GDPR, with due regard to available technology and implementation costs, shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you are affected Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
If you have asserted the right of rectification, erasure or restriction of the processing to the controller, he / she is obliged to notify all recipients to whom the personal data relating to you have been corrected or deleted or processing restricted, unless: this proves to be impossible or involves a disproportionate effort. You have a right to the person responsible to be informed about these recipients.
You have the right at any time, for reasons that arise from your particular situation, against the processing of personal data concerning you, which, pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of alleged infringement, if you believe that the processing of your personal data is against you the DSGVO violates.
The legal basis is Art. 6 para. 1 lit. f DSGVO.
If you do not want Facebook to collect data about you through our Fanpage, should you log out of Facebook or deactivate the function "stay logged in", delete the cookies on your device and stop and restart your browser. In this way, Facebook information about which you could be immediately identified will be deleted. Of course you can get all the essential information on our Facebook Fanpage can also be found on our website [https://www.facebook.com/SpyOFFVPN].

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 21
 Art. 21
 Art. 6
 Art. 6