1. Responsible
This data protection declaration applies to data processing by us as the controller in accordance with Art. 4 para. 7 General Data Protection Regulation (GDPR):
THE PRINCIPALS GmbH
Augsburger Strasse 33 10789 Berlin
Germany GERMANY
Managing Directors: Marcus Ruschmeyer
E-mail address: info@theprincipals.de
Registered in the commercial register at the district court Berlin-Charlottenburg under the commercial register number: HRB 125857 2
2. Definitions of terms
Insofar as this data protection declaration does not contain or implied a different definition, reference is made to the definitions in Article 4 GDPR with regard to the terms used. According to Article 4 No. 1 GDPR, personal data is all information relating to an identified or identifiable natural person. These are e.B. first and last name, date of birth, private and official contact details.
3. Use of processors
In order to be able to offer you our app, we rely on the services of the processor Fanbaze GmbH, Köpenicker Str. 7, 10997 Berlin, selected by us. Fanbaze GmbH itself uses servers of
1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany,
where the data is ultimately processed. If data is processed elsewhere in exceptional cases, we will point this out separately. Fanbaze GmbH was carefully selected by us as a processor and checked in advance. We have concluded an agreement with Fanbaze GmbH pursuant to Article 28 GDPR and of course regularly assure ourselves of the reliability and compliance with all data protection regulations by Fanbaze GmbH and its sub-processors, so that your data is always secure.
4. Legal basis for processing
The legal basis for the temporary storage of the data is Article 6 (1) (f) GDPR. Our legitimate interest lies in the purpose of data processing.
5. Purpose of data processing
The collection and storage of the processed data takes place for the use of the respective function of our app and is further processed by us for the following purposes:
6. Processing of your personal data
Below we give you an overview of data processing operations that may affect your personal data in the course of your use of our app:
a. When downloading and purchasing the app
When downloading and purchasing the app, the necessary information is transferred to the Google Play Store (if you use our app on an Android device) or the Apple App Store (if you use our app on an iOS device). In particular, user name, e-mail address, time of download, payment information and the individual device identification number as well as any other data are required. We have no influence on this data collection and processing and are not responsible for it. We process the data only to the extent necessary to download the app your device.
Take a look at the privacy statements of Google (https://www.google.de/intl/de/policies/privacy/) or Apple (https://www.apple.com/de/privacy/privact-policy/).
b. Registration
If you register as a user of our app, then we collect and store your email address, your first and last name, the user name you entered, your telephone number, the time (date/time) of your registration as well as the password you have chosen in encrypted form and the date of creation. We will also assign you an ID number. This ID number is used exclusively for your identification within the app. Your last login date will also be stored by us. Finally, we store whether you want to stay logged in to the app or whether you always want to log in again when the app is started.
c. Setting up a profile
Our app offers you the possibility to set up your user profile after your registration. Here you can upload and save a profile picture, specify your gender as well as the city and country in which you live. We store the data you provide.
d. When calling the app
Every time you start the app, your device connects to a server of 1&1 IONOS SE, Elgendorfer Stra e 57, 56410 Montabaur, Germany. This results in connection data, which is stored in so-called log files. The data includes: Device ID of your device Version of your operating system IP address Date and time of the request Language settings
This data is required for us to provide you with our app and to be able to assign your device as well as to improve the app and our services. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f GDPR. The deletion takes place after seven days.
e. Use of push messages
You can subscribe to so-called push notifications in the mobile apps. This function is provided by the respective provider of the operating system that uses their devices and recorded by the app. If you use this service, it is necessary that the provider of your operating system (Apple or Google) collects data from you in order to be able to provide you with the service. The legal basis for data processing is the consent that you give directly on your device.
f. when forwarded to ticket shops
By clicking on the individual events, you will be forwarded through the app via your web browser to various ticket providers. If you should use the offers of these providers, the terms and conditions and the data protection information of the respective providers apply here, which can be called up within the respective websites.
7. Usage analysis
So that we can further improve the app, anonymous statistics are automatically created on how you use the app, such as how often, on which days and on which devices. The data on the way you use our app is required for us to ensure and further improve the stability and security of the app. The data collected in this way is not merged with your other profile information, but is included in anonymous statistics that help us to get to know our users better and to better adapt the app to their needs. This processing is necessary to ensure and further improve the stability and security of the app and is carried out on the basis of Art. 6 para. 1 p. 1 lit. f GDPR.
8. Transfer to third countries
We only process your personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary to fulfil our (pre)contractual obligations (in accordance with Art. 6 para. 1 p. 1 lit.b GDPR), on the basis of your consent (in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO), on the basis of a legal obligation (in accordance with Art. 6 para. 1 p. 1 lit.c GDPR) or on the basis of our legitimate interests (in accordance with Art. 6 (1) s. 1 lit. f DSGVO). The same applies if third parties process your data on our behalf in a third country. Furthermore, a transfer to a third country only takes place if this is permitted under Article 44 et seq. GDPR.
9. Your other rights
According to the GDPR, you have the following rights:
- A right to information pursuant to Article 15 GDPR
- The right to rectification pursuant to Article 16 GDPR
- The right to erasure pursuant to Article 17 GDPR
- The right to restriction of processing pursuant to Article 18 GDPR
- The right to object pursuant to Art. 21 GDPR
There is also the right to complain to a supervisory authority for data protection about the data processing carried out by us.
10. Security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. These measures can be viewed in Annex 1 (TOM).
11. Changes to this privacy policy
We reserve the right to change our privacy policy if this should be necessary due to new technologies or changes to our data processing processes or to adapt it to changes in the legal situation that is relevant to us. However, this only applies to this privacy policy. If we process your personal data on the basis of your consent or contain components of the privacy policy provisions of the contractual relationship with you, any changes will only be made with your consent. You can call up the current version of our privacy policy at any time in our app.
Annex 1: Technical organisational measures (TOM)
Preamble
The controller has implemented appropriate measures for confidentiality, integrity, availability and resilience, as well as procedures for regular review, evaluation and evaluation. The general part describes technical and organizational measures that apply regardless of the respective services, locations and customers. The Annexes describe measures that apply beyond the measures documented in the general part.
1. Confidentiality
Confidentiality is the property that personal data is not made available or revealed to unauthorized persons, entities or processes.
Access
Physical access control
Pseudonymization
Separation control
2. Integrity
The integrity of personal data is maintained if it is correct, unchanged and complete.
Forwarding control
Input control
3. Availability and resilience
The availability of personal data is available if they can always be used by users as intended.
4. Procedures for periodic review, evaluation and evaluation
How is it ensured that the aforementioned data backup measures are regularly reviewed?
Data Protection Management
Order control
Privacy-friendly preferences
Incident response management
Annex 1.2: Special technical and organizational measures for data centers