Source: https://www.sharpist.com/legals/privacy-policy
Timestamp: 2020-04-04 03:06:51
Document Index: 98400203

Matched Legal Cases: ['Art. 4', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 6', 'art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 20', 'Art. 13', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 22', 'Art. 6']

This privacy policy applies to the personal data that is processed in connection with the initial registration as a Sharpist user, with the download of our apps and their use.
Regarding the personal information we process when you visit our public website at www.sharpist.com, the privacy policy applying to the visit to our website, can be found at https://www.sharpist.com/privacy.
The body responsible within the meaning of the EU General Data Protection Regulation (Art. 4 Para. 7 GDPR) and other national data protection laws as well as other data protection provisions is the data controller:
If you have any questions about the data protection of the Sharpist Apps or suspect a breach of data protection regulations, the company data protection officer of the responsible body can be reached at
Philipp Nordhus
c/o Sharpist GmbH
datenschutz@sharpist.com
General Information on data use
The personal data collected by us is used to provide and improve our content and services. The collection and use of personal data is carried out only if the processing of personal data is permitted by law.
Specific services and associated service providers
The following list explains the scope of the processing of personal data within the scope of the specific service, the legal basis for data processing, the purpose of data processing, the duration of storage and further provisions of any service providers.
All our service providers have undertaken to comply with at least equivalent data protection standards as we do and work for Sharpsit within the framework of data processing agreements. Service providers outside the European Union are also subject to the Privacy Shield Framework (cf. Art. 45 GDPR).
Registration form on the Sharpist website:
As part of the registration process, we collect and process the following data, depending on the user: Name, email address, telephone number, professional position, language preferences, and answers to questions about the coaching goals. These data are processed to create your user account, to provide you with the necessary login data and to contact you. This data is stored in a protected data area of Bubble Group Inc., NY, (https://bubble.is/dpa).
The legal basis for the processing is Art. 6 Para. 1 lit. b GDPR (fulfillment of contract to use the mobile apps and the corresponding digital coaching).
You can download Sharpist Mobile Apps exclusively from the Apple App Store and the Google Play Store. When downloading, the providers of these app stores collect personal data:
When downloading from the Apple App Store, Apple Distribution, Hollyhill, Cork, Republic of Ireland, contactus.de@euro.apple.com, a subsidiary of Apple Inc. collects a variety of information, including name, address, telephone number, email address, contact preferences, device IDs, IP addresses and location information. Further processing of this data is the sole responsibility of the above-mentioned operator of the App Store, with whom you as a user have entered into a corresponding contractual relationship.
Further information on the subject of data protection at this provider can be found at https://www.apple.com/legal/privacy/en-ww/.
Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA, collects a variety of data, including your name and password, when you download from the Google Play Store. The further storage and processing of this data is the sole responsibility of the aforementioned operator of the App Store, with whom you as a user have concluded a corresponding contractual relationship.You can find more information on the subject of data protection at this provider at www.policies.google.com/privacy.
When using the Sharpist Apps to take benefit from our coaching services and to use our media services, we store and process name, email address, profile picture, language preferences, inputs in the app content, logbook entries for coaching sessions, appointments, assignments of media content and duration and technical data for coaching sessions. The data is stored in data centres of Hetzner Online GmbH, 91710 Gunzenhausen on behalf of Sharpist, protected against unauthorized access.
The legal basis for the processing is Article 6 paragraph 1 sentence 1 lit. b GDPR (fulfillment of contract).
Your data will remain stored as long as your user account exists; You can cancel your user account at any time without notice.
In order to improve the quality and functionality of our app as well as to identify, clarify and prevent any misuse of our infrastructure, we store the following information about the data retrieved from our server:
the result of the data request (data transfer, request invalid, other error),
description of the type of mobile device used,
the IP address of the requesting terminal.
The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest of the body in charge).
We delete the stored data at the latest 12 months after their recording.
In order to enable optimal coaching, answers to test questions are evaluated. This data is securely transmitted and stored by JotForm Inc. in San Francisco. In addition, the data is stored pseudonymously only, so that information can only be assigned to a natural person by instructed Sharpist employees.
The legal basis for processing said data entered is Art. 6 Para. 1 lit. b GDPR (fulfillment of contract). Your data will remain stored as long as your user account exists; You can cancel your user account at any time without notice.
When accessing training media such as text content, audio content or video content, the following data is processed:
the name of the requested media file,
the result of the file request (file transfer, file not found, other errors),
Description of the type of web browser and mobile device used,
We process this data in order to improve the quality and functionality of our technical infrastructure as well as to ascertain, clarify and prevent any misuse of our infrastructure (Article 6 para. 1 lit. f of the GDPR - legitimate interest).
The initial date and time appointment for personal coaching and with the Sharpist team are arranged via the service provider Calendly LLC. For this purpose, the name of the user and the availability of the dates stated will be processed. The strict regulations for data storage and data protection of Calendly LLC (https://calendly.com/pages/privacy) apply.
The Legal basis for the processing of said data is art. 6 para. 1 lit. b GDPR (fulfillment of contract).
Chat in the app and on our website:
The messenger service Intercom (Intercom Inc., San Francisco, USA) in the Sharpist Apps can be used for communication between the user and the Sharpist coach as well as the Sharpist team. The strict regulations on data storage and data protection of Intercom Inc. apply. (https://www.intercom.com/en/security).
Legal basis for the processing of the data resulting from the chat (text messages, user ID, date and time) is art. 6 para. 1 lit. b GDPR (fulfillment of contract).
The data generated during the chat is stored in accordance with current technical standards, so that only instructed employees of Sharpist have access to this data. They remain stored for as long as your user account exists.
We use Twilio, a service of Twilio Inc., 375 Beale Street, 3rd Floor, San Francisco, California 91405, privacy@twilio.com for the video calls in the Sharpist Apps. For more information on Twilio Inc.'s privacy policy, please visit www.twilio.com/legal/privacy.
The transmission of video and audio data as part of the coaching between user and Sharpist coach or the consultation of a Sharpist employee is end-to-end encrypted in accordance with the technical standard DTLS-SRTP.
This data is stored and transmitted exclusively for the duration of the video coaching and is not further stored or processed.
The legal basis for the processing of the image and sound data generated during video coaching is Art. 6 para. 1 lit. b GDPR (fulfillment of contract).
In addition, Sharpist processes protocols, notes and user navigation in the mobile app to provide individual and user-related coaching by Sharpist experts and the individual Sharpist Coach. These data are stored access-protected as part of a data processing agreement on storage media of Google LLC Ireland und Hetzner Online GmbH, Gunzenhausen. The legal basis for the processing of this data is Art. 6 para. 1 lit. b DSGVO (fulfillment of contract). They remain stored as long as your user account exists.
Analysis programs and cookies
The media content offered on the Sharpist platform and in the Sharpist apps uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.
Further information on the use of your data by Google can be found at http://www.google.com/analytics/terms.
Google Analytics cookies are stored on the basis of Art. 6 Para. 1 lit. f GDPR. Sharpist has a legitimate interest in the analysis of user behaviour in order to optimise its website and thus also serves the financing and customer-oriented use, adaptation and updating of the website.
Any data subject shall have the right to obtain confirmation as to whether personal data relating to her, him or them are being processed.
b) Right of access (Art. 15 GDPR):
Every data subject has the right to obtain, free of charge, information on the personal data stored concerning her, him or them and a copy of this information.
c) Right to rectification (Art. 16 GDPR):
Every data subject has the right to demand that the data controller rectify any inaccurate personal data concerning her, him or them without delay.
d) Right to cancellation (right to be forgotten) (Art. 17 GDPR):
Every data subject has the right to request that personal data relating to her, him, or them be deleted immediately.
If you wish your user account to be deleted, simply send an informal request to support@sharpist.com and we will delete all personal data so that no conclusions can be drawn about your person.
e) Right to limitation of processing (Art. 18 GDPR):
Every data subject has the right to demand that the processing be restricted if one of the reasons stated by law applies.
f) Right to data transferability (Art. 20 GDPR):
Every data subject has the right to obtain the personal data concerning her, him, or them provided by her or him or them to a data controller in a structured, common and machine-readable format and to communicate these data to another data controller without hindrance, provided that the processing is based on the consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or is based on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, when exercising his right to data transferability pursuant to Art. 20 para. 1 GDPR, the data subject shall have the right to obtain that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.
g) Right to revoke consent under data protection law (Art. 13 GDPR):
Every data subject has the right to revoke consent to the processing of personal data at any time if the processing is based on Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
h) Right to dissent (Art. 21 GDPR):
Any data subject shall have the right to dissent at any time to the processing of personal data concerning her, him, or them on the basis of Article 6(1)(e) or (f) of the GDPR relating to reasons of her, his or their particular situation. This also applies to profiling based on this data privacy agreement.
i) Automated decisions in individual cases, including profiling (Art. 22 DSGVO):
Any data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects upon her, him, or them or significantly affects her, him or them in a similar way, unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller, or (2) is authorized by European Union or national law to which the controller is subject and which contains adequate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, or (3) is taken with the explicit consent of the data subject. In the cases referred to in (1) and (3), appropriate actions shall be taken to safeguard the rights and freedoms and the legitimate interests of the data subject, including at least the right to have the data subject intervene, to present her or his or their views and to challenge the decision.
The storage of personal data takes place for the purpose of fulfilling the contract (Art. 6 (1) (b) GDPR) as long as the user account exists. You can cancel your user account with us at any time without notice.
On the pages of our website and in our coaching products, third-party content (e.g. YouTube videos or videos from other providers, Google Maps, RSS feeds, etc.) may also be integrated. The providers of this content usually store cookies on the user's device. You can prevent this by making the appropriate settings in your device and browser, but this may result in these contents not being displayed correctly. In addition, many (third-party) providers store the IP address of the user in order to be able to send the corresponding contents to the user's browser. Unfortunately, we have no influence on the use of the IP address by the (third-party) provider.