Source: https://siwalusoftware.com/it/scanner-app-privacy-policy/
Timestamp: 2020-05-25 15:12:10
Document Index: 553547640

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 5', 'Art. 15', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 7', 'Art. 17']

Privacy Policy Apps | Siwalu Software
Thank you for your interest in our apps (Dog Scanner, Cat Scanner and Horse Scanner; the “Services”).
The protection of your personal data is important to us at Siwalu Software GmbH (“Siwalu”, “us”, “we”). Therefore, we would like to offer you comprehensive transparency regarding the processing of your data. Because only if the processing is comprehensible for you as the person concerned are you sufficiently informed about the extent, the purposes and the use of the processing. In the following, we will also show you which accompanying protective measures we have taken from a technical and organizational point of view.
Siwalu Software GmbH with its address is the responsible body within the meaning of the Basic Data Protection Ordinance (DSGVO) and the Federal Data Protection Act (BDSG): An der Schluse 122a, 48329 Havixbeck, Germany. Please address any questions or comments regarding this data protection declaration or data protection in general to the following e-mail address: privacy@siwalusoftware.com.
We process personal data within the legally permissible limits. This means that data processing operations must be based on a legal basis. These are standardized in Art. 6 para. 1 DSGVO. Most data processing operations are based on a legitimate interest on our part (Art. 6 para. 1 lit. f DSGVO), on processing operations necessary for the execution of the contract (Art. 6 para. 1 lit. b DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO). In these cases, you will be informed separately of the consent procedure and will receive additional information. Personal data will only be passed on in the cases described below.
Personal data must also be processed for clear purposes (Art. 5 para. 1 lit. b DSGVO). As soon as the purpose of the processing no longer applies, your personal data will be deleted or protected by technical and organizational measures (e.g. pseudonymization). The same applies to the expiry of a prescribed storage period, subject to the cases in which further storage is necessary for the conclusion or performance of a contract. In addition, there may be a legal obligation to store the data for a longer period of time or to pass it on to third parties (in particular to law enforcement authorities). In other cases, the storage period and type of data collected as well as the type of data processing depend on which functions of the apps you use in the individual case. We will also be happy to provide you with information on this in individual cases, in accordance with Art. 15 DSGVO.
As soon as you use our apps, an anonymous user account (“Anonymous Account”) is automatically created. This Anonymous Account does not allow any identification of personal data.
As a user of an Anonymous Account, you will lose access to the associated data after the app has been uninstalled. However, it is possible to register again. In this case the data from the Anonymous Account will be transferred to the newly created personal user account (“Personal Account”).
You will also lose access to your Anonymous Account data if you log in with an existing Personal Account.
In general, an Anonymous Account (with the exception of section 4.2) stores the same data as a Personal Account.
4.1 Using the apps with an Anonymous Account
If you use our apps with an Anonymous Account, the following data will be saved and processed by us. The data processing is carried out to ensure the functionality and security of our information technology systems and services and the further development and optimization of our services, including for marketing purposes. Such purposes constitute legitimate interests in the sense of Art. 6 Para. 1 lit. f DSGVO. The processing is therefore carried out with legal grounds.
a) Feedback functions
You can send us user feedback in text form via a button on the apps. The feedback can consist of a general contact request, a suggestion to add new or missing animal breeds or a manual bug report.
Additionally, you can provide feedback on the predicted result of the image recognition. The result feedback is divided into right/wrong/unclear form. If a result is marked by you as false, you can additionally correct the result by providing the actual breed information and provide it to us as part of the feedback. A processing of the image file, which under certain circumstances may contain personal data, will be carried out in case of non-recognition in order to optimize and improve the service.
You can give a rating of the apps in the form of graphical stars directly via a request in the apps.
All three of the aforementioned processes use the following data, in addition to the inherent data, such as an image file or text file:
The version number of the apps used, information about the platform used (OS type and version), the language used in the apps and the time of sending and the time of server-side reception.
In online mode, photos and/or videos taken or selected from the gallery are processed. These are used for the analysis of the requested breed recognition and for the further development and improvement of breed recognition.
b) Application-related data
Application-related data is, in particular, a chronological list of the scanning processes you have performed (“History”). Belong to the History:
Image/video material analyzed for identification
Percentage of the identified breed(s)
If applicable, feedback on the predicted outcome (see a))
Other application-related data include your experience points and challenges achieved, their progress, and usage statistics needed to determine the experience points or challenges (for example, which breeds have already been scanned, the number and date of scans performed). In this context the following data will be stored and processed anonymously or pseudonymously:
Randomly generated username (can be adjusted by you afterwards)
Time of creation and, if applicable, the time stamps of modifications to your account
In addition, the storage of data (images, text contributions and activities such as Likes), which you share with other users.
The associated processing procedures serve the purpose of being able to assign future usage procedures and to be able to call up the entire range of apps. The processing of your data also serves the purpose of contract implementation, and is therefore earmarked and necessary in accordance with Art. 6 Para. 1 lit. b DSGVO.
The storage of IP address and time of registration is necessary to ensure the security of our information technology systems. This is also in our legitimate interest, which is why the processing is also lawful in accordance with Art. 6 para. 1 lit. f DSGVO.
4.2 Using the Apps with a personal account
You can register in our apps to take advantage of additional services of the apps. If you do so, in addition to the data already stored in an anonymous account, the personal data you provide during registration will be transmitted to us and stored in our information technology systems.
Depending on the chosen form of registration, this may include the following data:
The associated processing procedures serve the purpose of being able to assign future usage procedures and to be able to call up the entire range of apps. Furthermore, the processing of your data serves the purpose of contract implementation, is therefore earmarked and necessary in accordance with Art. 6 para. 1 lit. b DSGVO.
The storage of the personal data entered by you is carried out up to the time of the deletion of your personal account, beyond that only as long as the processing is necessary for possible fulfilment of the contract.
Furthermore, your registration will result in a personal link to the data previously pseudonymized or anonymized in section 4.1. This serves the development process of the service. Furthermore, the data can be evaluated for marketing purposes. This is also in our legitimate interest, in accordance with Art. 6 para. 1 lit. f DSGVO.
4.3 Passing on personal data for order processing
4.4 Forced disclosure
In our apps we use AdMob, a service of Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland (“AdMob”). AdMob allows us to display individualized and relevant ads for you within our apps. To do this, AdMob collects personal information such as device IDs, GPS data or demographic data. Alternatively, users who use the apps within the spatial and material scope of the DSGVO may also receive non-personalised advertising. You will be given the opportunity to give your consent to receive personalised advertisements as soon as you open the apps for the first time. Outside the territorial and material scope of the DSGVO, you will only be shown personalised advertising.
Personal data is processed for marketing purposes and direct advertising, which represent legitimate interests within the meaning of Art. 6 Para. 1 lit. f DSGVO. Your rights will also be sufficiently respected by the possibility of consenting to personalized advertising. Further details on the data collected by Google AdMob can be found in Google’s data protection declaration at https://www.google.com/policies/privacy/.
We use the services of Google Ads, an online advertising program of Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland (“Google”), to advertise our services on external websites by means of advertising media (so-called Google Ads). Siwalu Software GmbH thus pursues a legitimate interest pursuant to Art. 6 Para. 1 lit. f DSGVO in displaying targeted advertising to you, adapting advertising offers and analysing user behaviour.
In our apps we use Google Firebase, a service of Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland (“Firebase”). Firebase describes a variety of tools that, among other things, create detailed reports about user behavior and usage modes of our apps (we use Google Analytics for Firebase). We use these reports to improve the user experience, optimize marketing efforts, and improve the quality of our services. Data is collected anonymously prior to a user’s log-in and is not linked to data from third-party sources. The data collected about the use of our apps is transmitted to Firebase and stored there. Firebase uses the advertising ID of the end device of the respective user for this purpose. The advertising ID can be modified in the device settings of the terminal device.
Users can find Google’s data protection declaration at https://www.google.com/policies/privacy/.
Instagram’s privacy policy (operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) can be found at https://help.instagram.com/155833707900388.
YouTube’s Privacy Policy (operated by Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland) can be found at https://policies.google.com/privacy.
In our apps we use Google Firebase Authentication, a service of Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland (“Google”). Firebase Authentication is a login and authentication service provided by Google. To simplify the sign-in and authentication process, Firebase Authentication can use third-party identity services and store the information on its platform. With respect to the possible collection of data by third parties, we point out 7.2. and 7.3. where the respective data collected is listed. Firebase Authentication thus acts as an intermediary for data collection, third parties and us. Firebase Authentication stores the data collected on our behalf so that we can use and process it for the Apps. We comply with the strict legal requirements for such a contract with Firebase Authentication with regard to the contract processing as defined in Art. 28 DSGVO.
This concerns the following personal data collected: Username, profile picture and e-mail address. When registering via SMS identification, the corresponding mobile number is also collected.
Further information on data protection can be found in Google’s data protection conditions https://policies.google.com/privacy.
Our apps allow you to login through Facebook-Connect. Facebook Connect is a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). This service makes an additional separate registration with your personal data mandatory. For registration purposes, you will either switch to the locally installed Facebook app or be redirected to an appropriate Facebook website. There you can log in with your user data and consent to the processing of the following data by us. This links your Facebook profile to our platform. Through this link, Facebook provides us with the following information about your public profile: User ID, first name, last name, e-mail address, gender, language, country, age range, friends, likes, profile picture and relationship status. We will only use the following information: Your user ID, first name, last name, e-mail address and profile picture. This information is required for registration – it is necessary for identification purposes. The processing takes place on the basis of your consent expressly given during registration in accordance with Art. 6 Para. 1 lit. a DSGVO. You may revoke this consent at any time in accordance with Art. 7 para. 3 DSGVO.
Our apps allow you to log in through the Google login, a link to the service provider Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin, Ireland (“Google”). This service makes an additional separate registration with your personal data mandatory. You will be redirected to a Google page for registration purposes. There you can log in with your user data and consent to the processing of the following data by us. This links your Google profile to our apps. Through this link we receive the following information from Google: User ID, first name, surname, username, e-mail address and profile picture. We only use the following data: Your user ID, first name, last name, e-mail address and profile picture. This information is mandatory for registration – it is necessary for identification. Processing takes place on the basis of your express consent given during registration in accordance with Art. 6 Para. 1 lit. a DSGVO. You may revoke this consent at any time in accordance with Art. 7 para. 3 DSGVO.
Google’s privacy policy is available here: https://www.google.com/policies/privacy/.
If the processing of your personal data is based on your consent (Art. 6 para. 1 lit. a DSGVO), you can revoke this at any time in accordance with Art. 7 para. 3 DSGVO. The processing is lawful until your revocation – the revocation therefore only affects the processing after receipt of your revocation. You can declare your revocation informally by post or e-mail. The processing of your personal data will then no longer take place, subject to approval by another legal basis. If this is not the case, your data must be deleted immediately after revocation in accordance with Art. 17 para. 2 DSGVO.
Last change: 15 February 2020