App Privacy Statement

It is essentially possible to use our HypnoBox App without providing any personal data. However, processing personal data may be necessary if you wish to use special services via our App. If processing of personal data is necessary, but there is no legal basis for this processing (e.g. for performance of a contractual agreement), we will ask for your agreement.

We will provide notification to inform you about which data we collect from you, how we use it and how you can object to the use of your data.

Who is responsible for data collection and processing?

Kiez Hypnose Berlin, Bernhard Tewes, Petersburger Platz 3, 10249 Berlin/Germany

collects and processes your data as the data controller.

If you have any questions or suggestions concerning data protection in our App, please contact us: info@hypnobox.com

What data do we collect and why?

We only collect and process your data for specific purposes. This can be out of technical necessity, or due to contractual requirements or explicit user requests.
For technical reasons, certain data (e.g. IP address) must be collected and stored when you use our App.
We require personal data from you in order to perform a contract. This data is required, e.g. to carry out payment transactions.

Access rights

Certain access rights are necessary for technical reasons, to enable the App to function.

Legal basis for data processing
If we obtain your agreement to process your personal data, this will be the legal basis pursuant to Article 6(1)(a) GDPR.

Pursuant to Article 6(1)(b) GDPR, the contract is the basis for processing personal data that is required to perform a contract with you. Article 6(1)(b) GDPR also applies to processing that is necessary to execute pre-contractual measures, for example in cases of enquiries about our services.

If we are subject to a legal obligation that necessitates processing of personal data, e.g. to fulfil tax obligations, processing is based on Article 6(1)(c) GDPR.

In order to continually improve our offer, we collect pseudonymised user data using cookies. The legal basis for this is Article 6(1)(f) GDPR.

Newsletter
If you subscribe to our newsletter, the following compulsory information will be required:

  • email address

In this case, we may use your email for promotional purposes.
When you subscribe to the newsletter we will save the IP address of the terminal device you were using at the time of registration, as well as the date and time of registration. Collection of this data is necessary in order to be able to trace (possible) misuse of the email address of the person concerned at a later point in time. It is therefore for our legal protection.
You can unsubscribe from the newsletter at any time by clicking the unsubscribe link at the bottom of your newsletter.
If you object to use of your data for promotional purposes, your data will only be used, in anonymised form, for the purposes of statistical evaluation.

For how long is your data stored?

We only store your data for as long as is required to fulfil the purpose for which it was collected (e.g. in the context of a contractual relationship) or for as long as this is required by law. In the context of a contractual relationship, we store your data at least until completion of the contract. The data will then be kept for the duration of the statutory retention periods.

Are cookies used?

We use cookies in our App for analysis purposes. Cookies are small text files in which data can be saved on your terminal device. It is generally possible to use the App without cookies.

Are analysis tools used?

In order to continually improve your experience, we collect statistics about use of the App. We do this using analysis tools.
We use the tracking measures listed below. These measures are taken on the basis of Article 6(1)(f) GDPR. We intend the tracking measures used to ensure requirements-based design and on-going optimisation of our App. We also use tracking measures to capture statistics about use of our App and to evaluate them, in order to optimise our offer for you. This is to be regarded as a legitimate interest within the meaning of the aforementioned regulation.

Your ability to object You can object to collection of your data for the purposes of analysis by deactivating the “App use statistics” switch in the “Permissions” column. This deactivates the following analysis tools.

Google Firebase
Our Apps use technology from Google Firebase (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”). Firebase is part of the Google Cloud Platform and offers numerous services for developers. You can find a list of them here: https://firebase.google.com/terms/. Some Firebase services process personal data. In most cases, personal data is limited to “instance IDs” that are given a time stamp. “Instance IDs” issued by Firebase are unique and therefore allow different events or processes to be linked. This data is neither data that we can identify personally, nor do we endeavour to personalise it subsequently. We process this consolidated data to analyse and optimise user behaviour, such as evaluation of crash reports.

In addition to the “instance ID” described above, Google also uses the advertising ID of the terminal device for Firebase Analytics. You can restrict use of the advertising ID in the device settings of your mobile device.
For Android: Settings > Google > Advertisements > Reset advertising ID
For iOS: Settings > Privacy > Advertising > No ad tracking

Adjust

App performance tracking: HypoBox uses the app performance and analysis technology “adjust”, a service provided by adjust GmbH (“Adjust”). When you launch the HypnoBox app, adjust collects install and event data from our iOS and Android mobile apps in order to help us understand how our users are interacting with our apps and to optimize and analyze mobile ad campaigns. For such analysis, adjust uses your IDFA or Google Play Services ID, and your anonymized (hashed) IP- and MAC address. The hashes used are one-way hashes and it is not possible to identify you or your mobile device individually. The legal basis for the processing is based on Art. 6 para. 1 f) GDPR. The legitimate interest lies in the analysis and improvement of our mobile advertising campaigns. Your data will (not) be transferred transnationally.

What are the rights of users of the HypnoBox App?

  • You can request information about the data that is saved about you.
  • You can request correction, deletion and restriction of the processing (blocking) of your personal data, provided that this is permitted by law and possible within the framework of the existing contractual relationship.
  • You have the right to lodge complaints with a regulatory authority. The regulatory authority responsible for  Kiez Hypnose Berlin is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin/Germany
    Tel.: +49 (0)30 13889-0, Fax: +49 (0)30 2155050, email: mailbox@datenschutz-berlin.de
  • You have the right to portability of the data that you have provided us with on the basis of an agreement or a contract (data portability).
  • If you have given us your agreement to data processing, you can withdraw this agreement at any time, in the same way as you give the agreement. Withdrawal of the agreement does not affect the legitimacy of processing that has been done on the basis of the agreement prior to its withdrawal.
  • You can object to data processing for reasons that arise from your particular situation if data processing is done on the basis of a legitimate interest.
  • You can object to being approached for advertising purposes at any time, with effect for the future (objection to advertising).

Sending a letter by post is all that is required to exercise your rights:

 

Kiez Hypnose Berlin

Bernhard Tewes

Petersburger Platz 3

10249 Berlin/Germany

info@hypnobox.com
Tel: + 49 30 91701944

As of: March 2019