Web configuration platform
my.snoopstar.de (snooperator)
Privacy Policy

of
snoopstar GmbH

 

Status as at: April 2019

Privacy Policy of the web configuration platform my.snoopstar.de (snooperator)

1. INFORMATION about the processing of personal data

1. The protection and confidentiality of your data is of particular importance to snoopstar GmbH, In der Steele 11-13, D-40599 Düsseldorf (hereinafter: “snoopstar” or “We”). Your personal data is collected and used exclusively within the limits of the statutory provisions set out in applicable data protection law. With this privacy policy, We inform you about which personal data We collect in the context of your use of the web configuration platform my.snoopstar.de (hereinafter: the “Platform” or “snooperator”) and for what purpose the data is used. The platform is usable as web version in a browser-based manner.

2. You may use Our Platform as a browser-based online offer. Below We provide information about the type, scope and purpose of processing personal data when using Our Platform. You may retrieve this information at any time in Our Platform under the menu item “Privacy policy” in the main menu. Personal data is all data that is personally referable to you, such as name, email address, year of birth, user data. User data is the data required for using Our Platform, such as details about the start, end and scope of use of Our Platform, log-in information and payment data. The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is: snoopstar GmbH, In der Steele 11-13, D-40599 Düsseldorf (see Our legal notice, email: contact@snoopstar.com). You may reach Our Data Protection Officer at legal@snoopstar.com or at Our postal address with the addition: “the Data Protection Officer”.

3. If you contact Us by mail, email or using the Platform, We store your email address and, if stated by you, your name, your phone number and further data stated by you to answer your questions. We erase the data collected in this connection after its storage is no longer required or We restrict processing – in the case of statutory retention obligations.

4. We may occasionally rely on third-party contractors and external service providers for the provision of the services, for example, in the areas of sending advertising material (only if you have previously explicitly consented hereto) and customer service. In such cases, information is passed on to these companies or individuals for further processing. We select these external service providers carefully and review them regularly to ensure that your privacy is protected. The service providers may use the data exclusively for the purposes specified by snoopstar. In addition, the service providers are contractually obliged by snoopstar to treat your data exclusively in accordance with this privacy policy and the German data protection laws.

2. your rights

You have the following rights against Us with regard to your personal data:

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

Moreover, you have the right to complain to a data protection authority about the processing of your personal data in Our company.

3. Processing of personal data WHEN using our platform

1. We collect the following information for the use of Our platform:

  • Email address
  • Password
  • Company, if required
  • Salutation
  • First name, surname
  • Address
  • VAT ID no.
  • Your customer account no.
  • Start and end of use
  • Scope of use
  • Payment information
  • Contact details of a contact person, if required

The above-mentioned data is processed

  • to be able to identify you as a snoopstar client
  • to correspond with you
  • to make out invoices
  • to handle and settle payments
  • to handle any liability claims and to assert any claims against you.

Data is processed for the stated purposes, to take pre-contractual action as well as to perform the contract concluded with you (Art. 6 (1) s. 1 letter b GDPR serves as legal basis). In addition, Our legitimate interest is the achievement of the stated purposes (Art. 6 (1) s. 1 letter f GDPR serves as legal basis).

2. You may use Our Platform browser-based directly on your PC, tablet or smartphone via Our website. In addition, you may also view or use Our corporate website in all Our offers by linking. With this form of use, the website processes further user data about which We provide information in the privacy policy stated on Our website snoopstar.com.

3. When you visit or use the Platform, We collect the personal data described below to enable convenient use of the features. If you wish to use Our Platform, We collect the following data, which is technically necessary for Us to offer you the functions of Our Platform and ensure stability and security (Art. 6 (1) s. 1 letter f GDPR serves as legal basis):

  • IP address
  • Date and time at which the inquiry was sent
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/http status code
  • Data volume transmitted respectively
  • Website from which the inquiry is sent
  • Browser
  • Operating system and its surface
  • Language and version of the browser software.

4. In addition to the aforementioned data, cookies are stored on your computer when you use Our Platform. Cookies are small text files that are stored on your hard drive and assigned to the browser used by you and by which the body that sets the cookie (here: Us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Platform more user-friendly and effective overall.

Use of cookies:

a) This Platform uses the following types of cookies, the scope and operation of which are explained below:

  • Transient cookies (see letter b)
  • Persistent cookies (see letter c).

b) Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognised when you return to Our Platform website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You may delete the cookies in the security settings of your browser at any time.

d) You can configure your browser setting according to your wishes and, for instance, reject the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all functions of this Platform.

e) We use cookies to identify you for follow-up visits if you have an account with Us. Otherwise you would have to log in again for each visit.

f) Furthermore, We use HTML5 storage objects, which are stored on your device. These objects store the required data regardless of your browser and do not have an automatic expiration date. You can prevent the use of HTML5 storage objects by using private mode in your browser. In addition, We recommend that you regularly delete your cookies and the browser history manually. In addition to the aforementioned data, cookies are stored on your computer when you use Our Platform. Cookies are small text files that are stored in the memory of your device and stored in association with the Platform website you are using. Through cookies, the body that sets the cookie (here: Us) can receive certain information. Cookies cannot run programs or transmit viruses to your mobile device. They serve to make the Platform more user-friendly and effective overall.

5. Unless expressly otherwise stated in the context of this privacy policy, the data stored by Us is erased as soon as it is no longer required for its intended purpose and the erasure does not conflict with any statutory retention requirements. If the data is not erased because it is necessary for other and legally permissible purposes and it is required by Art. 18 GDPR, its processing is restricted.

4. YOUR UPLOADED CONTENT – PERSONAL DATA

You are legally responsible for the content that you upload, in particular in terms of data protection. If the content that you upload contains personal third-party data of any kind, you will comply with data protection laws and ensure that you fulfil all obligations under data protection law. In particular, you ensure that there is a legal basis for the processing of personal data, inform the data subjects accordingly about the processing and ensure that the data subjects obtain knowledge of this privacy policy.

We store the content uploaded by you on a server for you. In addition, We register the number of uploaded contents per month as well as the number of recognitions per day and month. We will inform you about the usage statistics and use them for invoicing.

We will delete your uploaded content in the event of a breach of Our Terms of Use. After the contract with you has been terminated, We will store the contents for up to six months to check whether there have been any violations of Our Terms of Use. Afterwards, your contents will be deleted provided there exist no legal retention requirements.

If personal data is processed by Us in this context, data is processed to perform the contract concluded with you (Art. 6 (1) s. 1 letter b GDPR serves as legal basis). In addition, Our legitimate interest is the achievement of the above-mentioned purposes (Art. 6 (1) s. 1 letter f GDPR serves as legal basis).

5. DISCLOSURE OF DATA

Basically, your personal data is disclosed without your express prior consent only in the following cases:

  • If it is used to investigate unlawful use of the Platform or is required for bringing an action, personal data will be forwarded to the prosecuting authorities and, if necessary, to third parties who have suffered damage. However, this only happens if there are concrete indications of unlawful or abusive behaviour. Personal data may also be disclosed if this serves to enforce Terms of Use or other arrangements. snoopstar is also required by law to provide information to certain public authorities upon request. These are prosecuting authorities, authorities prosecuting administrative offences subject to a fine and tax authorities.
  • As part of the further development of Our business, it may happen that the structure of snoopstar GmbH is changed by changing the legal form, or forming, buying or selling subsidiaries, sections of the company or components. In such transactions, the client information is shared with the part of the business to be transferred. In the event of any disclosure of personal data to third parties to the extent described above, snoopstar shall ensure that this is done in accordance with this privacy policy and the relevant data protection laws.

6. FURTHER FUNCTIONS AND OFFERS OF OUR PLATFORM

In addition to the purely informational use of Our Platform, We offer various services that you can use if you are interested. To do this, you will generally need to provide further personal information that We use to provide the respective service and to which the above-mentioned data processing principles apply.

In some cases, We revert to external service providers to process your data. They have been carefully selected and commissioned by Us, are bound by Our instructions and are regularly inspected.

Furthermore, We may pass on your personal data to third parties if participations in campaigns, competitions, contract signings or similar services are offered by Us together with partners. You receive more information upon the indication of your personal data or below in the description of the range of services offered.

Insofar as Our service providers or partners are based in a country outside the European Economic Area (EEA), We inform you about the consequences of this circumstance in the description of the range of services offered.

7. objection to or revocation of PROCESSING OF YOUR DATA

If you have given your consent to the processing of your data, you may revoke it at any time. Such revocation will affect the admissibility of processing of your personal data after you have expressed it vis-à-vis Us.

Insofar as We base the processing of your personal data on the balancing of interests, you may object to the processing. This is the case if, in particular, the processing is in particular not required to perform a contract with you, which We describe in each case in the following description of the functions. If you make an objection, We ask you to set forth the reasons why We should not process your personal data as We have done. In case of your justified objection, We will examine the situation and will either discontinue or adapt the data processing or point out to you Our compelling reasons meriting protection due to which We continue to process the data.

Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You may inform Us about your objection to advertising at the following contact details:

By mail: snoopstar GmbH, In der Steele 11-13 in D-40599 Düsseldorf

By email: contact@snoopstar.com

8. USE OF LINKS TO Social Media Websites

Currently Our Platform contains links to the following social media websites: Facebook, Xing and LinkedIn. Whenever you visit Our website, personal data is basically not disclosed to the operators of the social media websites. The link to the social media website can be recognised by the marking on the box above the first letter or the logo. We give you the opportunity to directly access the corresponding social media website via this link. We recommend that you log out regularly after using a social network, but especially before activating the link, as this will prevent you from being associated with your profile on the social media site.

If you visit any of the linked social-media sites, We have neither control over the data collected and data processing operations, nor are We aware of the full extent of the data collection, the purposes of processing or the retention periods. We also have no information about the erasure of the collected data by the social media provider.

For more information on the purpose and scope of the data collection and its processing by the social media provider, please refer to the following privacy policies of these providers. There you will also find further information about your rights and settings options for the protection of your privacy.

Addresses of the respective social media providers and URL with their privacy notices:

9. INTEGRATION OF YouTube Videos

We have integrated YouTube videos in Our Platform that are stored on http://www.YouTube.com and are directly playable from Our Platform. They are all integrated in the “extended privacy mode”, which means that no data about you as a user are transmitted to YouTube if you do not play the videos. Only when you play the videos, the data set out in paragraph 2 below will be transmitted. We have no influence on this data transmission.

By visiting the platform, YouTube receives the information that you have accessed the corresponding sub-page of Our Platform. In addition, the above data will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for purposes of advertising, market research and/or custom design of its website. Such an evaluation is carried out in particular (even for non-logged-in users) to provide needs-based advertising and to inform other users of the social network about your activities on Our Platform. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise it.

For more information on the purpose and scope of the data collection and processing by YouTube, please read the privacy policy. YouTube belongs to Google, so you can obtain more information about your rights and settings options to protect your privacy at: https://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the U.S. and has subjected to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

10. Newsletter

With your consent, you can subscribe to Our newsletter, which informs you about Our current, interesting offers.

To sign up for Our newsletter, We use the so-called double opt-in procedure. This means that after you have signed up, We will send you an email to the email address specified in which We ask you to confirm that you wish to receive the newsletter. If you do not confirm your sign-up within seven days, your information will be blocked and automatically deleted. In addition, We store your IP addresses, time of signing up and confirmation. The purpose of the procedure is to prove your sign-up and, if necessary, to inform you about possible misuse of your personal data.

The only requirement for sending the newsletter is your email address. The specification of additional separately marked data is voluntary and will be used to address you personally. After receipt of your confirmation, We will save your email address for the purpose of sending you the newsletter. Art. 6 (1) s. 1 letter a GDPR serves as legal basis.

You may revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. The revocation may be declared by clicking on the link provided in each newsletter email.

11. USE OF Google analytics

This Platform uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow an analysis of your use of the Platform. The information generated by the cookie about your use of this Platform is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this Platform, Google will truncate your IP address beforehand within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there. On Our behalf, Google will use this information to evaluate your use of the Platform, to compile reports on the Platform’s activities and to provide Us with other services related to the use of the Platform and the Internet.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data provided by Google.

You may prevent the storage of cookies by a corresponding setting of your browser software; however, please note that in this case you may not be able to use all the features of this Platform to the full extent. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the Platform (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This Platform uses Google Analytics with the extension “_anonymizeIp()”. IP addresses are thereby processed in shortened form, a person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will thus be deleted immediately.

We use Google Analytics to analyse and regularly improve the use of Our Platform. With the statistics We can improve Our range of services offered and make it more interesting for you as a user. For the exceptional cases in which personal data is transmitted to the United States, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Art. 6 (1) s. 1 letter f GDPR serves as legal basis for the use of Google Analytics.

Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms/de.html, Overview of privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy notice: http://www.google.de/intl/de/policies/privacy.

This Platform also uses Google Analytics for a cross-device analysis of traffic flow through a user ID. You may disable the cross-device analysis of your usage at “My data”, “Personal data” in your customer account.

12. INTEGRATION OF Google Maps

We use the services offered by Google Maps on this Platform. This allows Us to show you interactive maps directly in the Platform, allowing you to conveniently use the map feature.

By visiting the platform, Google receives the information that you have accessed the corresponding sub-page of Our Platform. In addition, the above data will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses it for purposes of advertising, market research and/or custom design of its website. Such an evaluation is carried out in particular (even for non-logged-in users) to provide needs-based advertising and to inform other users of the social network about your activities on Our Platform. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise it.

For more information on the purpose and scope of the data collection and processing by the plug-in provider, please read the privacy policy of the provider. You can obtain more information about your respective rights and settings options to protect your privacy at: http://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

13. USE OF Google Web Fonts

We use external fonts, so-called Google Fonts provided by Google, on Our Platform for the uniform presentation of fonts on your device. Google Fonts is a service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font will be used by your computer.

The web fonts are integrated using an interface (“API”) to the Google services. By integrating the web fonts, Google may collect information (including personal information) and process it in the United States. Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

We ourselves do not collect any data as part of the provision of the Google Fonts.

6 (1) letter f GDPR serves as legal basis for the processing of personal data described herein. Our legitimate interest required for this purposes is the great value offered by a uniform representation of the typefaces. Due to the possibility of a consistent presentation, We keep the design effort lower than if We had to respond to font standards of different operating systems or browsers with their own graphically adapted websites. In addition, Google, inter alia, has a legitimate interest in the data collected in order to improve its own services.

The provision of personal data is neither legally nor contractually required and also not required for contract signing. You are also under no obligation to provide personal data. Non-provisioning, however, may result in your failure to use Our Platform or to use it to the full extent, and changes in the presentation of the website.

You can set your browser to not download the fonts from the Google servers. If your browser does not support Google Fonts or you block access to the Google servers, the text will be displayed in the system default font.

For more information, see www.google.com/fonts#AboutPlace:about as well as https://developers.google.com/terms/ and https://policies.google.com/privacy?hl=de.

14. USE OF CLoudFlare

On this Platform, We use the “Content Delivery Network” (CDN) CloudFlare of the company Cloudflare Inc., 101 Townsend St, 94107 San Francisco, USA. Cloudflare is certified under the EU-US Privacy Shield Agreement:

https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active

To ensure the full functionality of Our Platform, all data transmitted to or from this Platform’s website (including your IP address) will be processed through Cloudflare’s worldwide network. Cloudflare uses cookies that are stored on your computer and increase the performance and security of the Platform. The information generated by cookies about your use of this Platform is cached and logged inside and outside the European Union. According to the information provided by Cloudflare, the cached data is deleted within 4 hours, but after one week at the latest.

Data is processed for the above-mentioned purposes as well as for the safe and efficient provision, analysis and optimisation of Our Platform. Art. 6 (1) letter f GDPR serves as legal basis for data processing.

You can prevent the collection and processing of your data by Cloudflare by disabling the execution of script code in your browser or by installing a script blocker in your browser (which, for instance, is available at www.ghostery.com).

For further information, see the privacy policy of Cloudflare at: https://www.cloudflare.com/privacypolicy/.

Status as at: April 2019