Source: https://www.bodyfast.de/privacy
Timestamp: 2019-03-22 10:16:25
Document Index: 307971440

Matched Legal Cases: ['Art. 16', 'Art. 77', 'Art. 7', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Data Privacy Policy - the intermittent fasting app. Lose weight fast and easy, get healthy without a diet.
DATA PROTECTION POLICY (EFFECTIVE AS OF MAY 24, 2018)
This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within our online offering and the related websites, apps, features and content, as well as external online presence, e.g. our social media profiles (collectively referred to as “online offer”). With regard to the terminology used, e.g. “Processing” or “Responsible”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR). For specific information on data processing in the BodyFast app, read the appropriate section at the bottom of this page.
BodyFast UG (limited liability)
Carola Neher-Str. 10
BodyFast UG, c / o Mindspace
support@bodyfast.de
In accordance with Art. 16 DSGVO, you have the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you.
In accordance with Art. 77 DSGVO, you have the right to file a complaint with the competent supervisory authority.
You have the right to revoke the granted consent in accordance with. Art. 7 para. 3 DSGVO with effect for the future.
“Cookies” are small files that are stored on users’ computers. Diverse information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online store or a login status. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A “third-party cookie” refers to cookies that are offered by providers other than the person who manages the online offer (otherwise, if it is only their cookies, this is called “first-party cookies”).
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer acc. Art. 6 para. 1 lit. f DSGVO i.V.m. Art. 28 DSGVO (conclusion of data processing contract).
We, or our hosting provider, collects data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO on every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Furthermore, applicants can send us their applications via e-mail. However, please note that e-mails are generally not sent in encrypted form and that applicants themselves must provide encryption. We can therefore take no responsibility for the transmission of the application between the sender and the reception on our server and therefore recommend rather to use an online form or the postal delivery. Instead of applying via the online form and e-mail, applicants still have the opportunity to send us the application by postal delivery.
Users can optionally create a user account. As part of the registration, the required mandatory information will be communicated to the users. The data entered during registration will be used for the purpose of using the offer. Users may be informed by e-mail about offer- or registration-related information, such as changes in the scope of the offer or technical circumstances. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention is for commercial or tax law reasons according to Art. 6 para. 1 lit. c DSGVO necessary. It is the responsibility of the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
To manage inbound emails, we use Freshdesk, a service of Freshworks, Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA as a Help Center solution on our website and in our app. If you use the Help Center and make a request, certain personal information, such as your first and last name and your e-mail address, will be collected in connection with your support request and saved by Freshdesk. Depending on the nature of your request, further data such as your address or mobile phone number is collected and stored. These data are hosted by Freshdesk in a data center in Frankfurt am Main. However, since Freshdesk uses third-party applications, your data may sometimes be processed and stored outside the EU. However, we have entered into contractual agreements with Freshworks, Inc. to ensure sufficient levels of data protection (EU standard contract clauses).
However, there will be no reconciliation of the data collected with data collected by other components of our website. More about data processing at Freshdesk: https://www.freshworks.com/data-processing-addendum/
Google Marketing Services allows us to better target advertisements for and on our website so that we only present ads to users that potentially match their interests. If a user e.g. is shown ads for products he’s been interested in on other websites is called remarketing. For these purposes, when Google and our other websites accessing Google Marketing Services are directly accessed by Google, a code will be executed by Google and so-called (re) marketing tags (invisible graphics or code, also called “Web Beacons “) incorporated into the website. With their help, the user is provided with an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which web pages the user visited, for what content he is interested and what offers he has clicked, as well as technical information about the browser and operating system, referring web pages, visit time and other information on the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google Analytics we announce that the IP address is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area and only in exceptional cases to one Google server in the US is transmitted and shortened there. The IP address will not be merged with data of the user within other offers from Google. The above information may also be linked by Google with such information from other sources. If the user then visits other websites, they can be displayed according to his interests, the ads tailored to him.
The data of the users are pseudonym processed in the context of the Google marketing services. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That means from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users through Google Marketing Services is transmitted to Google and stored on Google’s servers in the United States.
With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads we have been sent only to those Facebook users who have shown an interest in our online offer or who have certain features (eg determined by interests in certain topics or products visited by them on other Web pages), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
Collection of personal data when using the mobile BodyFast app
a) For the use of the BodyFast app no ​​registration is necessary. Just use the function “anonymous login”. Your data will be stored anonymously and without direct personal links (such as e-mail or name).
If you decide to register for Facebook (Facebook Inc., 1601 South California Ave., Palo Alto, CA 94304, USA, “Facebook”), we will receive the following personal information:
Friends list (this can be deselected under the link “edit”)
If you decide to register by e-mail, we will receive the following personal data:
All data that you send to us from login or login (eg e-mail address, profile information) will be transmitted in encrypted form. This encryption protects the confidentiality of the data exchange between your computer and our web server and helps, e.g. to prevent the interception of data. As encryption technology we use SSL (Secure Socket Layer).
With regard to our databases, all technical precautions have been taken to store your data in a secure environment. Access to the entirety of your information is reserved only for employees who need to complete their professional activities and is only granted for quality control, complaint review and fraud prevention purposes. All our employees are required to comply with data protection regulations and instructed accordingly.
Any personal information that you provide to us through our app will only be used for the purposes for which you provided us with this information.
All data that can be entered after registration in the app is voluntary and is intended to improve the effectiveness of BodyFast services. These optional data are as follows:
Experience level during fasting
Notes for the fasting week
Drunk amount of water
Reviews of fasting plans and weekly challenges
Furthermore, the app needs some permissions to access data and features of your smartphone, these are:
* Show about other apps
* Disable hibernation of the phone
* Control vibrating alarm
b) By downloading the mobile app, the required information is transmitted to the respective App Store, in particular the username, e-mail address and customer number of your account, time of download, payment information and the individual device code. This data collection is carried out by the respective app stores. We have no influence and are not responsible. We only process the data as far as necessary to download the mobile app to your mobile device.
c) If you want to use the mobile app, we also collect the following data that is technically necessary for us to offer you the features of our mobile app and to ensure the stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO):
Type and version of your mobile device (for example, “iPhone 6, iOS 8.1”)
Content of the request (concrete page);
Access status / HTTP status code (file transfer, file not found etc.);
Each transmitted amount of data;
Filename of the requested file
Operating system of the device used and its surface;
Language and region settings of the device
Screen resolution, CPU brand, CPU model, screen size and screen density of the device
RAM memory of the device
After the end of the usage process, this data will be stored anonymously, this means without your IP address, stored in so-called log files. These log files are evaluated exclusively for statistical purposes, a disclosure to third parties does not occur.
d) We use advertising identifiers in the app based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO). For advertising purposes, we use the so-called “Advertising Identifier” on iOS devices, and the “Google Advertising ID” on Android devices (collectively “Identifier”). This identifier is a unique but non-personalized and non-permanent identification number for a particular device provided by iOS or Android. The data collected via the identifier will not be linked to any other device-related information. We use the identifier to provide you with personalized advertising and to evaluate your use. If you have ad tracking in the settings of your operating system (in iOS under “Privacy” – “Advertising” the option “no ad-tracking”, under Android “Settings” -> “Google Settings” -> “Google” -> View “->” Disable Personalized Advertising “), we can do the following:
Measure your interaction with banners by counting the number of ads on a banner without clicking on them (“frequency capping”),
Determination of unique use (“unique user”)
You can always delete the identifier in the device settings (in iOS “Reset ID”); then a new identifier is created, which is not merged with the previously collected data. We point out that you may not be able to use all the features of our app if you restrict the use of the identifier.
e) You can subscribe to our e-mail newsletter within the app using the Double-Opt-in procedure. Please read the sections “Newsletter”, “Success Measurement Newsletter” and “Newsletter Shipping Service Provider” above on of this page.
We use push notifications within the app based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer as defined in Art. 6 (1) lit. DSGVO). The app can inform you by push message on certain news, even if you are currently not actively using the app or have it opened. The app uses these push messages only if you have them enabled in the operating system.
When you enable the push message service, your device will be assigned a so-called device token from Apple or a Google Registration ID. Purpose of their use of these IDs is solely the provision of the push services. Without a device token or registration ID, you will not be able to receive push notifications for technical reasons. These identifiers are only encrypted, randomly generated numbers. A conclusion to individual users is excluded for us.
To be notified of specific events and topics by push notifications, even if you are not currently using the app, you must grant the app the required permission. Without your consent, which you give by activating in the settings, we can not send you a push message. You can customize the permissions for push notifications in iOS settings, and turn push messages on or off at any later time.
To do this, open the app settings for iOS and select the menu item “Notifications”. The following menu provides an overview of all the apps installed on your device that have a push notification feature. Choos our app here. Here you can switch the push notification function on or off. In addition, you have the option to customize the appearance of push notifications of the app to your liking.
Notes for Android users:
On Android, all apps are set by default to allow you to receive push notifications, even if you have not opened or used the app. This can not be avoided due to the technical specifications of Google, on which we have no influence.
Within the app, you can switch off the push services you activated (more -> messages) at any time. Regardless of the settings in the app, you can also switch off the reception of push notifications by going to the App Settings “in the main menu of your device and selecting” Apps “in the following menu item. There you will find an overview of all the apps installed on your device. Choose here our app. You can then switch the push message function on or off using the “Show notifications” check mark.
Based on our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we use Firebase for our app. Firebase is a real-time database that integrates real-time information into your own websites or apps. All personal data and app usage data will be transmitted to Firebase. Firebase is a Google subsidiary based in San Francisco, CA, USA.
We use the Firebase real-time database to store and keep your personal information and app usage data for:
Tracking user behavior via the Firebase database and Google Analytics for Firebase (s.u. in par. B)
Comprehension of crashes of the app and their reasons via Firebase Crashlytics (see below in section c)
Push notifications via Firebase Cloud Messaging (see below and in section d)
Configuration of app settings via Firebase Remote Config (see below and in section e)
The Firebase privacy policy can be found at https://www.firebase.com/terms/privacy-policy.html.
B) EVALUATING THE USER BEHAVIOR (APP TRACKING) INSIDE THE APP – WITH GOOGLE ANALYTICS
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we set Google Analytics, a web analytics service of Google LLC (“Google”) within the App.
The insights gained help us to improve this app, making your experience more comfortable and effective. Google Analytics is a real-time database that we use for real-time data exchange and storage. Here, the user data is transmitted to Google Analytics. Google Analytics is a service of Google Inc. The Google Analytics privacy policy can be found at https://www.google.com/intl/en/policies/privacy
We use Firebase Crashlytics to understand and prevent future crashes. In the event of a crash, a crash report will automatically be generated containing the type of device used, the operating system, your recent activities in the app and your geolocation in pseudonymous form and sent to Google. For information on how Crashlytics works, visit: https://firebase.google.com/products/crashlytics/
The app uses Firebase Cloud Messaging to send messages to users of the app. To do this, the app sends a previously generated, anonymous device ID (token) to Google so that we can identify users of the app and address them with message content. For information on how Cloud Messaging works, visit: https://firebase.google.com/products/cloud-messaging/
The app uses Firebase Remote Config to allow us to modify the app on the devices on which it is installed, without having to completely re-install it from the respective app store with each change. For this will be
Your device information,
Your language settings and
Transfer your locales to Google in the US and process them there.
For information about how Remote Config works, click here: https://firebase.google.com/products/remote-config/
If you do not want the data categories mentioned in this section to be collected and processed, you must not use the app.
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we use the marketing service Apple Search Ads, which has been approved by Apple Inc. 1 Infinite Loop, Cupertino, California, USA, 95014, is operated.
Apple Search Ads is a service that serves ads for our app that appear on the Apple Appstore. Within the app, the clicks and conversions (such as registrations and in-app purchases) of these ads are evaluated anonymously. The Apple Search Ads privacy policy can be found at https://searchads.apple.com/privacy/.
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we use Facebook Analytics of the social network facebook.com, which is operated by Facebook Ireland Ltd ., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (more information here). In this way, we can track and analyze which marketing channels or sources associated with Facebook provide the best results to encourage users to download the products and better understand how our users use our app. For this purpose, Facebook Analytics processes the IDFA and GAID or similar IDs for mobile devices.
The BodyFast app uses Kochava, an analysis service of Kochava Inc. (Kochava HQ, 201 Church St, Sandpoint, Idaho 83864). Various session and interaction data will be collected from you and stored for this purpose. We need this information to improve the content and usability of our app and to optimize the user experience for you. The session and interaction data are never processed in a personalized form, but only under a pseudonym. Further information on data processing by Kochava can be found in the provider’s privacy policy: https://www.kochava.com/support-privacy/.
The legal basis for use is Article 6 (1) (1) (f) GDPR. Kochava is certified according to the EU-US Privacy Shield agreement and guarantees compliance with European data protection laws https://www.privacyshield.gov/participant?id=a2zt0000000GnEHAA0&status=Active. If you no longer wish to be covered by Kochava in the future, you can always send an e-mail to support@bodyfast.de.
Svenja Taubert on What does the Coach cost?
Branimir on What does the Coach cost?
Svenja Taubert on Was kann ich während des Intervallfastens essen und trinken?
Marlies Hauswald on Was kann ich während des Intervallfastens essen und trinken?