Privacy Policy

We process personal data (hereinafter mostly referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Art. 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we either alone or jointly with others determine the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

I. Information about us as the controller

The controller responsible for this website in terms of data protection law is:

Stefan Helker
Schloßallee 18
50181 Bedburg
Germany

Phone: +49 156 78567932
Email: support@schnappschuss.app

Data protection officer at the provider:
Stefan Helker

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

• to confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the processing and to copies of the data (cf. also Art. 15 GDPR);
• to rectification or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
• to immediate erasure of data concerning them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is required pursuant to Art. 17(3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
• to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (cf. also Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they consider that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out in accordance with Articles 16, 17(1) and 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right to object to the future processing of data concerning them in accordance with Art. 21 GDPR, insofar as the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.

III. Information on data processing

The data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, no legal retention obligations prevent deletion and no different information is given below for individual processing procedures.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our web hosting provider. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the page(s) of our website you visit, the date and time of the respective access and the IP address of the internet connection from which our website is used.

The data collected in this way is temporarily stored, but not together with other data from you.

This storage is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted at the latest after seven days, unless further retention for evidence purposes is required. Otherwise, the data is wholly or partially excluded from deletion until the incident has been finally clarified.

Cookies

We use cookies on our website in part. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed.

This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the display of our website in different languages or the use of form functions.

a) Session cookies

We use mainly so-called session cookies, especially when you use forms or make settings. These cookies store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your device to be recognised when you return to our website.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the functionality of our website. If the processing of data serves the initiation or performance of a contract, Art. 6(1)(b) GDPR is an additional legal basis.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies

If we work with third parties in the future (e.g. for reach measurement or embedded content) and they set cookies, we will inform you separately in this privacy policy.

c) Removal option

You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the internet browser you use. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.

If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Matomo (web analytics)

We use Matomo on our website, an open-source software for the statistical evaluation of page views. Matomo runs exclusively on our own servers under the domain matomo.schnappschuss.app. No data is passed on to third parties.

Use is only with your express consent via our cookie banner. The legal basis is Art. 6(1)(a) GDPR (consent). Without your consent, Matomo will not be loaded.

Data collected includes anonymised information on pages visited, dwell time and origin (referrer). This data is used exclusively for the analysis and optimisation of our website. Matomo sets cookies that are only stored when consent is active.

You can revoke your consent at any time via the "Cookie settings" link in the footer of our website. After revocation, Matomo will no longer be loaded and no further data will be collected.

Contact

If you contact us by email or via a contact form, the data you provide will be used to process your request. The provision of this data is necessary for processing and answering your request – without it we cannot answer your request or can only do so to a limited extent.

The legal basis for this processing is Art. 6(1)(b) GDPR if your request relates to the conclusion or performance of a contract. Otherwise, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in processing and answering your request.

Your data will be deleted if your request has been conclusively answered and the deletion does not conflict with any statutory retention obligations.

Use of our app "Schnappschuss"

When you use our mobile app "Schnappschuss", we process personal data (e.g. device information, IP address, photos, usernames) to the extent necessary to provide the app functions. Processing is based on Art. 6(1)(b) GDPR insofar as it concerns the use of the app and the functions offered there (e.g. creating and running events), and on Art. 6(1)(f) GDPR insofar as we have a legitimate interest in a secure and technically stable provision of the app.

Photos and user content

Photos are uploaded by you as part of the app functions (e.g. participating in photo challenges) and stored in our storage (Supabase). They are visible to the other participants of the respective event. You can also set a display name (nickname) and avatar colour per event. This information is processed together with your photos (e.g. to identify who took which photo). The legal basis is Art. 6(1)(b) GDPR (contract performance or use of app functions).

Push notifications

If you grant the app permission, we store a push token (device ID for push services) and your user account in order to send you notifications – e.g. when an event starts, new challenges are available, your photo receives a like, or an event ZIP is ready for download. Notifications are sent via Expo/APNs (iOS) or FCM (Android). You can disable push notifications at any time in your device settings. The legal basis is Art. 6(1)(b) GDPR (app use) and Art. 6(1)(a) GDPR (consent by granting the permission).

In-app purchases

For in-app purchases (e.g. guest packages, additional participants), payments are processed exclusively through the respective store (Apple App Store or Google Play). We do not process credit card or payment data. For verification and accounting purposes, we only store technical data such as product ID, transaction ID, platform (iOS/Android) and your user account, as well as amount and currency where applicable. This processing is carried out for the performance of the purchase contract (Art. 6(1)(b) GDPR) and to comply with statutory retention obligations.

Storage duration

Unless a more specific storage period is specified in this privacy policy, we process and store your personal data only for as long as is necessary for the fulfilment of our contractual and statutory obligations. Once the purpose of data processing no longer applies or statutory retention periods have expired, the data will be routinely blocked or deleted in accordance with statutory provisions.

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.