We, Aumio GmbH, respect the privacy of all persons who use our mobile applications from the Apple App Store and/or the Google Play Store (hereinafter "App"). We therefore wish to inform you about how we use your personal data (this is all data that relates to you personally, e.g. name, address, e-mail address, user behavior).
It is recommended that you read this Privacy Policy so that you understand how we use your personal data. This Privacy Policy governs the use of your personal data by us through or in connection with the App and all of its sub-pages. Privacy policies that differ from the present Privacy Policy may apply to other websites and portals operated by us.
We adhere to all applicable data security and data protection laws, including the respective applicable EU data protection regulations. We treat your personal information confidentially and in accordance with legal requirements.
1 - Contact Information
a) Name and Contact Details of the Controller
The controller for data collection, processing, and use ("data processing") within the meaning of the General Data Protection Regulation (GDPR) is: Aumio GmbH Mühlenstraße 8a 14167 Berlin datenschutz@aumio.de Tel.: 030 / 86 32 32 49
b) Data Processing When Contacting Us
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and your telephone number) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.
c) Contact Form
If you use the contact form in our App to send an inquiry to us, we require the following information: e-mail address, possibly name, telephone number and company. Before submitting your inquiry, we require your consent for the processing of the transmitted data in accordance with Art. 6 (1) lit. a GDPR. Your inquiry, including all resulting personal data (e.g. IP address, name, inquiry), will be stored and processed by us for the purpose of handling your request. The data collected by us will only be used to answer the inquiry. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.
d) Miscellaneous
If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the established criteria for the storage duration.
2 - General Information on Data Processing
We are responsible for the data processing that takes place when using this App. Our employees have been obliged to maintain the confidentiality of personal data and have also been sensitized to the special significance of data protection.
You can retrieve, print, or download this Privacy Policy permanently and at any time at the address https://aumio.de/datenschutzerklaerung-app.
Performance of a contract or execution of pre-contractual measures (Art. 6 (1) lit. b) GDPR / Section 26 BDSG-New):
Processing only takes place to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us only takes place to this extent.
Legitimate Interest (Art. 6 (1) lit. f) GDPR):
Processing takes place insofar as we have a legitimate interest and there are no overriding opposing interests on your part. The specific interest is explained in this Privacy Policy within the context of the processing description.
Consent (Art. 6 (1) lit. a) GDPR):
Processing takes place insofar as you have expressly consented to this and on the basis of transparent information about the nature and scope of the data processing. You can revoke your consent at any time. However, the processing carried out up to that point will not be affected by this.
Legal Obligation (Art. 6 (1) lit. c) GDPR):
Processing takes place insofar as it is necessary for the fulfillment of German or European legal obligations.
3 - Your Rights
If your personal data are processed by us, you are a data subject within the meaning of Art. 4 (1) GDPR. You therefore have the following rights regarding the personal data concerning you:
As a user of our App, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.
Should you disagree with the way we process your data, please contact us at datenschutz@aumio.de. Furthermore, you have the right, pursuant to Art. 77 GDPR, to lodge a complaint with the supervisory authority responsible for you.
4 - Collection of Personal Data when Using our App
a) Collection of Personal Data
When downloading the mobile App, the required information is transferred to the App Store (Apple) or Play Store (from Google). We have no influence on this data collection and are not responsible for it. We only process the data insofar as it is necessary for downloading the mobile App to your mobile device.
If you wish to use the full scope of the App, you must register as a user. You have the option to set up a user account with us, in which we store your personal data. This serves the purpose of enabling you to access our service in accordance with our terms of use (https://aumio.de/agb).
If you wish to set up a password-protected user account with us, we require the following information from you:
In addition, you must provide a self-selected password for setting up a user account. Together with your e-mail address or your username, this password enables access to your user account. In your user account, you can view and change your stored data at any time.
There is also the possibility of providing the following voluntary information:
When using the mobile App, we collect the personal data described below to enable the use of the functions.
If you want to use our mobile App, we collect the following data, which are technically necessary for us to offer you the functions of our mobile App and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 lit. b GDPR):
In addition, we collect usage data that arises when using the App (e.g. App sessions, session duration, App interactions, completed courses and exercises) in order to process them for the optimization of the App and for the communication of our offers (legal basis is Art. 6 (1) sentence 1 lit. f GDPR).
The processing of your personal data takes place at your request and is required according to Art. 6 (1) sentence 1 lit. b GDPR for the aforementioned purposes for the use of our products and thus for the fulfillment of the contract and pre-contractual measures or based on legitimate interests according to Art. 6 (1) lit. f GDPR, which are always weighed against your interests.
The personal data collected by this App will be stored until you request us to delete them, revoke your consent to storage, or the purpose for data storage ceases to apply, unless we are obliged to store them for a longer period according to Article 6 (1) sentence 1 lit. c GDPR due to tax and commercial retention and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this according to Art. 6 (1) sentence 1 lit. a DSGVO. This is done subject to deviating or specifying information within this Privacy Policy.
b) Objection or Revocation against the Processing of Your Data
If you have given consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case, in particular, if the processing is not required for the fulfillment of a contract with you, which is shown by us in the description of the functions. When exercising such an objection, we ask for a presentation of the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling legitimate grounds based on which we will continue the processing.
Of course, you can object to the processing of your personal data for advertising purposes at any time. You can inform us about your advertising objection using the following contact details: datenschutz@aumio.de.
5 - Recipients of Data and Data Transfer to Third Countries
a) Recipients of Data
The personal data that we collect from you within the scope of the App are generally only passed on to recipients insofar as this is necessary for the provision of the App and its functions or you have consented.
For this purpose, we use the following categories of recipients in particular (each as a processor based on a contract pursuant to Art. 28 GDPR, provided they act on our behalf):
b) Data Transfer to Third Countries
The personal data that we collect from you within the scope of the App are – depending on the service used and configuration – partly also transferred or processed there (especially USA) to recipients in third countries outside the European Economic Area (EEA).
Insofar as a transfer to a third country without an adequacy decision takes place, we ensure an adequate level of data protection, in particular through the conclusion of EU standard contractual clauses (SCC) and, if necessary, supplementary technical and organizational measures.
Data may be transferred to third countries when using the following applications:
The specific details on data transfer can be found in this Privacy Policy at the respective sections of the individual functions (Contact Form, Newsletter, Analysis Tools).
c) Encryption
For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the App operator, or the communication between App users, the App uses encryption. This encryption prevents the data you transmit from being read by unauthorized third parties.
6 - Access Rights of our App
To provide our service via the App, we require the following access rights that enable us to access certain functions of your device:
Note: The specific permissions requested depend on the operating system (Android/iOS), the OS version, and which functions you use. You can grant or withdraw permissions at any time in your device's system settings.
a) Android
b) iOS
The processing of your personal data is based on Art. 6 (1) sentence 1 lit. b GDPR for the fulfillment of the contract for the use of our App. In addition, the processing is based on our legitimate interests according to Art. 6 (1) sentence 1 lit. f GDPR. Our interests are legitimate within the meaning of the aforementioned provision and follow from the purposes for data processing listed above.
7 - Use of our Newsletter
With your consent, you can subscribe to newsletters with which we inform you about various topics. The advertised goods and services are named in the declaration of consent.
In addition, we store your respective IP addresses and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is used to be able to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to datenschutz@aumio.de, or by a message to the contact details provided in the imprint.
We point out that we may evaluate your user behavior when sending the newsletter. For this evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your user profile. Links received in the newsletter may also contain this information. With the data thus obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them, and infer your personal interests from this. We link this data with actions you take on our website.
You can object to this tracking at any time by clicking on the separate link provided in every e-mail or by informing us via another contact method. The information is stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking takes place.
For forms within our newsletters, we use services from the provider https://www.typeform.com. Typeform is a service of TYPEFORM S.L., Carrer Bac de Roda 163, 08018 Barcelona, Spain. Typeform collects and stores your information when you register for the newsletter. We are ourselves responsible for the Typeform forms we publish and manage the data collected through them. We delete this data from the Typeform servers after we have downloaded it.
Typeform collects usage data whenever you use the registration form. Typeform collects data about the type of device and program through which a form is accessed, such as the IP address, browser type, and operating system. This may also include the user's geographical location determined by the IP address. Typeform stores information about the source that referred the user to the form (e.g., the link on a website or in an e-mail). Typeform uses third-party tracking services, including cookies and page tags (also known as web beacons or web bugs), to collect aggregated and anonymized data. This data may include user and usage statistics. This data is processed on servers located in the USA.
Further information on the collection and use of data by Typeform can be found in Typeform’s privacy policy https://admin.typeform.com/to/dwk6gt.
8 - Use of Analysis Tools
When you access our App, your behavior, as described in No. 4 a), can be statistically evaluated with the help of certain analysis tools and analyzed for advertising and market research purposes or for the improvement and individualization of our offers. When using such tools, we ensure compliance with statutory data protection regulations. When using external service providers (processors), we ensure through corresponding contracts with the service providers that the data processing complies with German and European data protection standards.
These analysis tools are used to optimize the App and to improve our offers. According to GDPR / TTDSG, this only takes place after explicit consent by the user.
The following external services are used for these purposes:
Note: Which of the following services are active depends on which functions you use and whether you have given consent (if required). You can revoke granted consent at any time (see No. 2.4).
Sentry (Error and Stability Monitoring)
We use Sentry to record and analyze software errors (bug/crash reports) in order to improve the technical stability and security of our App. The provider is Functional Software, Inc. (Sentry), 1501 Mariposa St #408, San Francisco, CA 94107, USA.
In particular, technical diagnostic data may be processed (e.g., time of the error, App/OS version, device type, technical error messages/stack traces). Content that you enter in the App (e.g., free text in forms) is not specifically collected for analysis purposes. We configure Sentry according to the principle of data minimization (Privacy Hardening) to avoid personal data as far as possible.
The legal basis is our legitimate interest in the secure and error-free provision of the App (Art. 6 (1) lit. f GDPR) or – where legally required – your consent (Art. 6 (1) lit. a GDPR). You can object to the processing for reasons arising from your particular situation (Art. 21 GDPR) or revoke granted consent.
Further information: https://sentry.io/privacy/
Mixpanel (Usage Analysis for Product Improvement)
We use Mixpanel for the statistical evaluation and visualization of the use of the App to improve functions and identify sources of error. The provider is Mixpanel, Inc., 405 Howard Street, Floor 2, San Francisco, CA 94105, USA.
Usage events (e.g., views/functions accessed, interactions), technical device information, and a pseudonymous identifier may be processed here. If you use a user account and store corresponding information, contact data (e.g., e-mail address) can also be processed to assign use across devices. Where required, this only takes place after your consent.
The legal basis is – where required – your consent (Art. 6 (1) lit. a GDPR in conjunction with TTDSG). You can revoke granted consent at any time.
Further information: https://mixpanel.com/privacy
Firebase Analytics (Usage Analysis; Google)
We use Firebase Analytics (Google) for the analysis of App use and to improve our offer. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (possibly with transfer to Google LLC, USA).
Usage events, technical device information, and an App instance ID may be processed here. We use Firebase Analytics in such a way that, where required, it only actively collects data after your consent. You can revoke granted consent at any time.
Further information: https://firebase.google.com/support/privacy
CleverTap (CRM/Push, In-App Communication)
We use CleverTap for the provision and evaluation of App communication functions (e.g., push notifications, in-App messages/content cards) to inform you about App-relevant content and to enable delivery. The provider is CleverTap, Inc. (Details see provider information from CleverTap).
In particular, push tokens, device information, usage events in connection with in-App communication, and – if available – account information (e.g., pseudonymous user ID, possibly e-mail address) may be processed. Processing for analysis/profiling purposes only takes place after your consent, where required; essential delivery/operation functions may be necessary regardless.
The legal basis is – depending on the function – your consent (Art. 6 (1) lit. a GDPR) and/or our legitimate interest in the provision of the communication functions (Art. 6 (1) lit. f GDPR). You can revoke granted consent at any time; you can also deactivate push notifications via your device's system settings.
Further information: https://clevertap.com/privacy-policy/
Singular (Attribution/Measurement of Campaign Success)
We use Singular for measuring the sources from which the App installation or App use results (Attribution) and for measuring the success of campaigns. The provider is Singular (Singular Labs, Inc.; Details see provider information from Singular).
Technical device information and (on Android) information from the Install-Referrer/Attribution mechanism may be processed here. Use only takes place after your consent, where required; you can revoke granted consent at any time.
Further information: https://www.singular.net/privacy-policy/
We do not use advertising SDKs in the App for the display of personalized advertising (e.g., AdMob) for the purposes described here.