Source: https://www.paywithatweet.com/privacy_notice?locale=es
Timestamp: 2019-05-24 12:04:01
Document Index: 653037797

Matched Legal Cases: ['Art. 4', 'art. 6', '§ 257', '§ 147', 'Art. 6', 'Art. 6', 'Art. 6', '§ 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 45', 'Art. 45', 'Art. 45']

Thank you for visiting our website and for your interest in our services. Pay with a Tweet services (hereinafter also referred to as "PWAT", “Services” or "PWAT Services") are operated by aklamio GmbH (hereinafter also referred to as "we", "us", "our"). The protection and confidentiality of your data is very important to us. In this Privacy Policy we inform you about the type, scope, purpose, recipient and legal basis of the personal data processed by us in connection with our services (hereinafter collectively referred to as "Services"), which we offer at www.paywithatweet.com, www.paywithapost.de or other websites or other apps (hereinafter collectively referred to as "Platforms") which incorporate this Privacy Policy. Furthermore we inform you about your rights. Personal data are all information relating to an identified or identifiable natural person (Art. 4 No. 1 EU General Data Protection Regulation (hereinafter referred to as "GDPR")). This includes information such as your name, e-mail address, postal address or telephone number. Information that is not directly associated with your identity, such as anonymous Internet traffic data (e.g. the number of visits to a website), is not included here.
Who is responsible for the processing of my data?
The person responsible within the meaning of the GDPR and other national data protection laws of the EU member states as well as other data protection regulations is
Phone: (030) 20239750
E-mail: support@paywithatweet.com
E-Mail: privacy@paywithatweet.com
3.1 Scope of the Processing and its Legal Basis
3.2 Storage and Deletion of Data
In the event that we outsource certain parts of data processing (so-called "order processing"), we contractually oblige contractors to process personal data only in accordance with the requirements of the GDPR and the applicable national data protection laws and to guarantee the protection of the rights of the data subject. Information on existing order processing relationships is summarised in Section 6 for the sake of clarity.
4. Data Processing in Detail
4.1 Data Processing for General Use of our Services
4.1.1 General Access to our Platforms
4.1.2 Data Processing for Support Services
We provide our platforms with contact options which can be used by our users for electronic contact for information and support purposes. By sending the information you consent to the transmission and storage of the transmitted data to us. In addition, we save the date and time of your contact.
4.2 Data Processing in Connection with the Use of our Services
4.2.1 PWAT-Account
When registering on our platforms for the purpose of using our PWAT services, we offer you the conclusion of a contract for the use of our services on the basis of our Terms of Use. We collect your e-mail address as well as your name or a freely selectable user name (pseudonym). The e-mail address and your password act as login data for access to your account. For more details on the PWAT account, please see our Terms of Use. In connection with the registration of a PWAT account and the setting of the various functions, we also store your respective IP address and the date and time at the time of registration or the setting of the respective functions.
you can make use of our services, in particular to carry out and have carried out a campaign via our platforms;
you can get an overview of the status of your campaigns and an evaluation of the campaign success (only for paid products);
You can upgrade to a paid product;
You can enter and change your payment information;
you can enter and change your address for invoicing.
We store your personal data for as long as this is necessary to provide the contractually agreed service. The personal data stored by you in your PWAT account is available to you for the duration of the contract and is stored by us for this period. The personal data will be deleted if you do so in relation to individual data or the PWAT account as a whole, request us to do so accordingly or if the contract ends, i.e. if you or we terminate the contract. Please refer to our Terms of Use for more details.
4.2.2 Objections Against Receiving Commercials
4.2.3 Billing of Chargeable Products
If you subscribe to a paid PWAT product in your PWAT account, we ask for your address, your VAT ID, other payment information and, if applicable - when paying by credit card - credit card information (hereinafter also referred to collectively as "billing data"), depending on the desired payment method. We transfer this data together to our payment service providers for payment processing. In these cases the purpose is to enable the billing of your order. The legal basis is the fulfilment of your contract with us according to art. 6 par. 1 lit. b GDPR. The data is stored for the duration described in Section 4.2.1.
Within the framework of our statutory accounting obligations, we may also transmit accounting data to our accounting offices and tax advisors. We also store the booking documents on which the payments are based, including the payment data contained therein, for a period of ten years in order to fulfil our statutory retention obligations pursuant to § 257 (1) No. 2 HGB and § 147 AO, whereby the period begins at the end of the calendar year in which the booking document arose. The legal basis for such processing is Art. 6 para. 1 lit. c GDPR, the fulfilment of our legal obligations.
4.2.4 Data Processing for Contract Preparation and Execution Purposes
We process personal data for the purpose of contract initiation, contract administration and execution as well as support in the context of ongoing business relationships, so that we can provide our customers with the contractual services and can always guarantee an efficient and profitable use of our services. If the contractual partner is a natural person, the legal basis is that the processing is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. If we process personal data of employees of the contractual partner, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, namely the facilitation of our business activities and the promotion of the business activities of the customer. There is no conflicting interest on the part of the respective data subject because processing by us within the framework of the existing employment relationship with the data subject is already necessary from the point of view of our customer (§ 26 BDSG-neu). For this purpose we store personal data for the duration of the contract.
4.2.5 Data Processing for Advertising Purposes
4.2.6 Data Processing for Advisory Purposes
We process the personal data of the customer or prospective customer or his employees received in connection with a business relationship or an inquiry of an interested party even after the end of the business relationship or if such a relationship does not come about for the purpose of being able to recommend suitable services on the basis of the previous inquiries or business relationships to our customers or interested parties in the event of a renewed interest in our services. The legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, the performance of our business activities. In this respect, we store personal data for the duration in which we can expect that the respective customer would like to conclude a further or first contract with us in the future. This is not possible if the customer in question indicates that he will under no circumstances ever enter into a business relationship with us.
4.2.7 Data Processing about the Users of a Campaign
If you use a PWAT campaign, for example by clicking on a PWAT button on a website of the campaign operator, you can participate in the campaign by using one of the following social media accounts:
Facebook account. Facebook-Connect is an offer of the social network "Facebook", which is operated by Facebook, Inc. based in 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). Use of Facebook is subject to Facebook's Privacy Policy and Terms of Use. When using Facebook, we gain access to the email and other information stored on Facebook that is available in your Facebook profile as public and publicly accessible. Furthermore we get access to your friends list and your newsfeed, unless you contradict the transmission of this data in the setting options on Facebook.
Google+ account. Google+ is a service of Google LLC, 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA (hereinafter referred to as "Google"). The use of Google+ is subject to Google's Privacy Policy and terms of use. When you use Google, we gain access to the email and other information stored with Google that is available in your Google profile as public and generally accessible. Furthermore, we will gain access to your timeline, unless you object to the transmission of this data in the setting options on Google+.
LinkedIn account. LinkedIn is an offer of LinkedIn Inc, 2029 Stierlin Ct, Mountain View, CA 94043, USA (hereinafter referred to as "LinkedIn"). The use of LinkedIn is subject to LinkedIn's Privacy Policy and Terms of Use. When using LinkedIn, we will have access to the email and other information stored with LinkedIn that is available in your LinkedIn profile as public and generally accessible. Furthermore we get access to your name, your friends list and your timeline, unless you contradict the transmission of this data in the setting options at LinkedIn.
Twitter account. Twitter is an offer of Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as "Twitter"). Use of Twitter is subject to Twitter's Privacy Policy and Terms of Use. When using Twitter, we receive access to the e-mail stored on Twitter and other information that is available in your Twitter profile as public and generally accessible. Furthermore we get access to your timeline and your feed, unless you contradict the transmission of this data in the setting options on Twitter.
VK.com. VK.com is an offer of V Kontakte LLC, 1-N, bld. 12-14, Lit. A, Khersonskaya st., St. Petersburg, Russia, 191024 (hereinafter referred to as "VK"). The use of VK is subject to VK's Privacy Policy and Terms of Use. If you use VK, we will have access to the e-mail stored with VK and other information that is available in your VK profile as public and generally accessible. Furthermore we get access to your name, your friends list and your timeline, unless you contradict the transmission of this data in the setting possibilities at VK.
XING account. XING is an offer of XING SE, Dammtorstraße 30, 20354 Hamburg (hereinafter referred to as "XING"). Use of XING is subject to XING's Privacy Policy and Terms of Use. When using XING, we receive access to the e-mail stored with XING and other information that is available in your XING profile as public and generally accessible. Furthermore, we will have access to your name and your friends list, unless you object to the transmission of this data in the setting options on XING.
The data transmitted to us by the respective provider will be processed by us in order to provide you with a post that you can post on the respective social media network in order to receive the bonus offered by the campaign operator. The posting of the link will be communicated to us by the respective network for the purpose of checking the conditions of the premium offer.
You will receive a link after the post has been placed in the timeline of the respective social media network. If you follow this link, you will be taken to the bonus offer. The link is provided in a form shortened by the technology of bitly, Inc, 139 5th Avenue, 5th Floor New York, NY 10010, USA (hereinafter "bitly") so that you can post the link better. As a result, you will be forwarded to the offer via bitly's servers. Individual data is also recorded. With the exception of the IP address, this data is exclusively anonymous. The IP address is not stored by bitly or immediately made anonymous.
The legal basis for the various processing operations is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the implementation of our business activities.
Your personal data will be stored with us for the period of time during which we can expect technical problems to occur during the collection of the mail or the processing of the services. Furthermore, we store your data for the duration for which you have given us your consent via the respective social media network. You can revoke this at any time.
4.2.8. Data Processing for Statistical and Analytical Purposes
5.1 Technical Cookies
5.1.1 Custom Cookies
5.2 Other Third Party Cookies and Technologies
We use the cookies and other technologies listed below and used by us on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR. With the technologies we use, we want to ensure that our platforms are designed to meet the needs of our customers and are continually optimized. On the other hand, we use the technologies for advertising purposes in order to statistically record the use of our website and for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
Under no circumstances will your IP address be merged with other Google data. We only use Google Analytics with IP anonymization enabled. This means that the IP address of Google users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area will be reduced. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
5.2.2 Remarketing and Conversion Tracking
On our platforms, we use Google AdWords and DoubleClick technologies to serve ads based on the use of previously visited pages on our platforms or other websites. Google AdWords and DoubleClick is an offer of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter "Google"). This enables us to target visitors to our platforms with personalized, interest-based advertising. The websites on which we place such advertising include those of the Google Display Network. To perform the analysis of website usage, which forms the basis for displaying interest-based advertising, we use tags that are integrated into our platforms. These tags are used to store or read a cookie from the advertising network on the user's device. If you subsequently visit another website of the aforementioned networks, you will see advertisements that are most likely related to previously accessed areas of our platforms.
The information collected by the cookies about your visit to the website is transmitted to and stored by Google on servers. The information will not be merged with other existing personal data about you. We receive no knowledge of the content of the transmitted data and their use by the advertising networks. We can only select which segments of users (e.g. by age, interests) our advertising should be displayed.
The legal basis for such processing is a legitimate interest pursuant to Art. 6 (1) (f) GDPR, namely the pursuit of our business purposes, which also includes the targeted advertising of our services.
We also use the cookies and tags described above to statistically record the use of our platforms and newsletters and to evaluate them for the purpose of optimising our services for you. We collect certain activities, such as calling up or filling out the contact form on our website, to determine whether an advertisement was successful (conversion tracking).
Google is based in the USA. Insofar as data are therefore transmitted there, this transmission is permitted under Art. 45 GDPR, as Google Privacy Shield is certified and therefore has an adequate level of data protection in accordance with the implementing decision of the Commission (EU) 2016/1250.
You can prevent the use of the cookies described here by using the opt-out option in the Google settings.
5.2.3 Newsletter Tracking
For statistical evaluation of our newsletter campaigns, our newsletter can contain tags with which we can recognize whether and when you have opened an e-mail. Furthermore, we can trace which links were called up in the e-mail. Your IP address will also be recorded. However, this is not stored. No other personal data is also recorded. The legal basis for this processing is a legitimate interest within the meaning of Art. 6 Para. 1 letter f GDPR, whereby the legitimate interest is the evaluation and optimisation of our newsletter. You can object to receiving all types of newsletters at any time by using the opt-out link provided by Duden in the respective e-mails.
6. recipient and use of order processors
We use the services of the contractors listed in this section to provide our services. The legal basis for the use of these contract processors is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interest is in the pursuit of our business purposes, in particular the provision of the services described in this data protection declaration. Insofar as we also implement measures to protect the security of personal data stored by us with the involvement of order processors, such as Amazon Webservices Inc, there is an additional legitimate interest in ensuring our technical and organisational measures in this regard. No conflicting interest is apparent, in particular because we have concluded a contract with the respective contractors in accordance with Art. 28 GDPR.
The data is stored by these service providers for the duration for which otherwise storage is legal for purposes according to this data protection declaration, i.e. in particular for the execution of existing contracts, for analysis purposes, for communication or for advertising communication.
For the purpose of hosting our platforms and back-up services, we use the services of Amazon Webservices, Inc, 410 Terry Drive Ave North, WA 98109-5210 Seattle, USA by way of order processing, so that personal data stored on our platforms is transferred to this processor. The data will be processed in the EU and the USA. As far as data are transmitted to the USA and thus to a state outside the EU or the EEA, this transmission is permissible according to Art. 45 GDPR, as Amazon Webservices Inc. is Privacy Shield certified and thus an adequate level of data protection exists according to the implementing decision of the Commission (EU) 2016/1250. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
For support services, we use the services of Zendesk Inc, 1019 Market St., San Francisco CA 94103-1612, USA, on the basis of an order processing relationship. The data is transmitted to Zendesk Inc. in the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as Zendesk Inc Privacy Shield is certified as described in Section 6.1 above. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
6.3 E-Mail Service Providers
We use the services of the following service providers for sending e-mails on the basis of order processing relationships:
MailChimp, an offer from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000
The above-mentioned service providers can receive and process your personal data within the scope of the existing order processing with us. The data is transmitted to the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as the provider is Privacy Shield certified, as described above under Section 6.1. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt000000000Gn4RAAS&status=Active and https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG.
6.4 Administration and Communication
For internal administration and communication purposes we use Slack Technologies Limited, 4th Floor, One Park Place, Hatch Street Upper, Dublin 2, Ireland, on the basis of an order processing agreement. Slack can receive and process personal customer data within the scope of the existing order processing agreement with us.
6.5 Customer Management
We use the services of Salesforce.com EMEA Limited, Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK (hereinafter also referred to as "Salesforce") on the basis of an order processing relationship for customer service and to improve the quality of service for our corporate customers. Salesforce may receive and process personal customer information under our existing order processing agreement. Salesforce provides several tools to analyze indexed content and draw conclusions.
7.4.1 Duty to delete
7.7 Right to revoke the data protection declaration of consent
7.9 Right of appeal to a supervisory authority
If you create an Aklamio account (see point 4.2.1 above), you must provide certain data within the scope of the contract to be concluded with us. If you wish to withdraw any bonuses credited to your account, you must provide the required withdrawal details. If you make a follow-up request to our support team, you must provide the information necessary to track your order. Furthermore, the provision of personal data is neither required by law nor by contract, nor are you obliged to provide personal data. However, the provision of personal data for the use of our services may also be necessary in individual cases. If you do not provide us with the data we consider necessary, we may not be able to provide our services to you in full.
7.11. Amendment of the data protection declaration; change of purpose
We reserve the right to change this data protection declaration in compliance with data protection regulations. The current version can be found here or at any other easily accessible location on our website or platform. If we intend to process data for purposes other than those for which it was collected, we will inform you in advance in compliance with the statutory provisions.