We are happy that you are using the app. We would like to introduce ourselves as the responsible authority within the meaning of data protection law:
Marc Bauer
Waterloostr. 46
22769 Hamburg
Germany
e-mail: marc@wanderwallet.app
Mobile: +49 156 78556066
Pursuant to our statutory obligations, we would like to inform you about the collection and use of your personal data.
When you use our app, personal data about you will be collected. This may happen by you entering the data yourself, for example your email address. But our system also collects your data automatically, for example whenever you open the app.
All data that you enter in our app is provided voluntarily; there are no disadvantages to you if you do not provide data. But without certain data, we are unable to provide services.
In this app, the user's personal data are only collected within the framework of the existing data-protection law, in particular the General Data Protection Regulation (GDPR). The legal terms used in the text are defined in Art. 4 of the GDPR.
The GDPR allows data processing in three cases in particular:
We collect inventory data (for example name, address and e-mail address, possibly services used) insofar as they are required for establishing, defining or amending a contract between us and the user.
We also collect usage data (for example visits to the app) to allow the user to use the services of our app and to invoice them. We will only combine usage data if and insofar as it is necessary for billing purposes. Otherwise, we will only put together usage data pseudonymously and only insofar as you have not objected. You may send this objection to the address indicated in the “About Us” section or the responsible authority indicated in this Privacy Policy at any time.
The legal basis for this data processing are our legitimate interests pursuant to Art. 6 para. 1 (f) GDPR in analysing the app and your use, possibly also the statutory permission to store data as part of the negotiation of a contract pursuant to Art. 6 para. 1 (b) GDPR.
If the app is used without registration, no data will be recorded, unless specific consent has been granted to do so. If the app is bought and used without registration, the user data will only be collected in anonymous form because we have none of your personal data and the location data cannot be attributed to a person. If the app is used after registration, the following information will be synchronised between our server and your devices and will be processed:
This data will only be used to ensure that the app functions in order to the contract being performed by us and within the limits of your consent.
Before sending you advertisements, we will ask for your explicit consent pursuant to Art. 4 no. 11 GDPR, except in cases of advertisements for similar products to the one you already acquired. This will happen in particular when you grant us consent to mail our newsletter or when you fill out a contact form.
Whenever we ask you for your consent for the processing of your data, we will inform you in clear language and in an easily accessible way about the cases for which you will be granting your consent. Any consent that we ask you for is voluntary. Any advantage that you wish to gain by granting consent is also available without consent; simply ask us.
Regarding any consent, you have the right to revoke any consent given to us for the processing of your personal data at any time. You just need to contact us without any particular formal requirement, for example through our contact form, an e-mail to the e-mail address indicated in the “About Us” section or a link to unsubscribe (if offered by us). Your withdrawal has no effect on the legality of the data processing carried out up to that point.
If you use the app without registration, we will ask you to consent to the anonymous analysis of your trips and expenses. Your data will then be collected by us, made anonymous and stored in an anonymous database for analysis purposes. The transferred data will be deleted without delay.
Your data will generally only remain stored for as long as the purpose of the relevant data processing requires it. Storage beyond that is mainly possible when it is still necessary for us to pursue our rights or for our other legitimate interests or if we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files, which is generally 6 years, but may last up to 10 years).
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, our website uses Session Tokens, allowing our offer to be used better, more effectively and more securely. Session Tokens are encrypted text files, which are saved on your mobile phone and contain your user data, allowing us to verify your legitimate use of the app. This storage will not occur as long as you have not registered.
We dislike spam as much as you do. We will therefore not transfer your data to third parties, unless permitted by law. Transfer of customer data may either
Transfer to Other Countries, in particular to the USA
Our website uses external providers located outside of the EU for different features. In particular, this may lead to processing and storage of your data outside of the EU. But we will not transfer your data to a third country, unless the EU Commission has determined that there is a similar level of data protection as in the EU or unless you have provided us with your informed consent or we have agreed on the standard contractual clauses for the protection of your data with the provider. Regarding the USA, the Privacy Shield Agreement - see https://www.privacyshield.gov/welcome – has re-established sufficient data protection under certain conditions.
You will find more information about your rights in the case of each of the data transfers to the USA mentioned subsequently at
http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.
You may request us anytime to provide information about the personal data stored about you free of charge. To avoid misuse, this will require personal identification.
You may at any time demand from us that we correct incorrect data as well as a limitation of the processing of data or the deletion of your data. We will then correct, block or even delete your personal data without delay, unless statutory reasons prevent us from doing so.
You may request us to transfer the data stored about you in machine-readable form.
If you feel that our data processing has violated any of your rights, you may file a complaint with the competent regulatory agency (here you find a list of the agencies).
If and when factual or legal reasons will compel us to amend the Privacy Policy, we will update this page accordingly. This will not change the consent provided by the user.
When you enter data in our app, whether in a contact form, during the registration process, when you log in or for payment purposes, the data will be transferred to our server in an encrypted way.
When you register with our app, we will ask for the following data:
This data exclusively serves the identification of the user, to allow the attribution of the data stored on the server. The name will be used to address you in invitations to share a trip or other transactional emails (for example resetting the password).
Basis for this storage is the processing of data for the purpose of the performance of the contract pursuant to Art. 6 para. 1 (b) GDPR and your consent pursuant to Art. 6 para. 1 (a) GDPR, which you provide to us when you register. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example by unsubscribing, contact form or e-mail). This withdrawal has no effect on the legality of the data processing that has occurred up to that point.
Your data remains stored for as long as you are registered in our app, as long as the storage is still required for the performance of the contract, to pursue our rights or for our other legitimate interests or as long as we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).
When you fill out a contact form or when you send us an e-mail or another electronic message, your information will be stored for the processing of the request, for possible follow-up questions or for other related questions and will only be used to follow up with the request.
Your data will be transferred in an encrypted manner, preventing third parties from reading your data while it is being entered.
Basis for this storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant us by filling in the contact form or by your other requests. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example in the contact form or by e-mail). This withdrawal has no effect on the legality of the data processing that has occurred up to that point.
Your data remains stored for as long as the processing of the request requires, in particular as long as the storage is still necessary to perform the contract, to pursue our rights or for our other legitimate interests or we are compelled by law to keep your data stored (for example based on tax-law requirements to maintain files).
In order to autocomplete trip destinations and based on our interest in an economically efficient design and helpful offers for our users pursuant to Art. 6 para. 1 (f) GDPR, we use Google Places API, a service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94.043 USA (“Google“).
By using the autocomplete services, Google will receive your entered text tokens as well as your IP address. Google does however not analyse this data, because this is a service that we have to pay for in order to use it to perform our contract for the app to work.
By using Google Places, information about your use of our app (including your IP address) may be transferred to a server of Google in the USA and stored there. Google has subjected itself to the Privacy Shield Framework. You will find more information about your rights thereunder at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf. More details about the use of your data by Google can be inferred from Google's Privacy Policy https://www.google.de/intl/de/policies/privacy/.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, our service runs on the servers of Amazon Web Services, an offer by Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States. Amazon has subjected itself to the Privacy Shield Framework, and you find more information about your rights thereunder at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf. You find more information about Amazon's rules on data protection in the Amazon White Paper on the General Data Protection Regulation at https://aws.amazon.com/de/data-protection/. We have also concluded a data processing contract with Amazon. By using Amazon's servers for hosting, Amazon will learn of all data entered in our app. Pursuant to the concluded data processing contract and the Amazon White Paper on Privacy, Amazon will neither analyse nor use this data.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, our app uses Fabric, a service by Google LLC, Ireland, in order to record crashes and to put together usage statistics. This analysis service uses certain technologies, through which Fabric will learn your mobile and advertising ID as well as your IP address. These will be stored on your mobile phone. Thus, we collect information about the usage and functionality of our app, which we use to improve our offer. The data will only be collected by Fabric in a way that is in line with data protection laws and will not be combined with other personal data about you.
You can prevent Fabric from collecting and using your personal data anytime by deactivating the sending of analytics data and crash reports in the app.
Google LLC is a subsidiary of Google Inc. in the USA. But Google has subjected itself to the Privacy Shield Framework. You will find more information about your rights thereunder at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.
If you want to learn about Fabric's policies to protect your data, please use the following link: https://fabric.io/dpst.pdf. We have also concluded a data processing contract with Fabric to ensure that your data with Google is protected.
Based on our legitimate interest in a technologically perfect online offering and its design and optimisation in an economically efficient manner pursuant to Art. 6 para. 1 (f) GDPR, our service uses an Apple Device Token, which is required for push notices. You have already accepted this feature and the accompanying rules on data protection by Apple when you registered your device. We refer to that.
For the purpose of better information of joint travellers, we offer the feature of sharing records. Before this is activated, we will ask for your consent pursuant to Art. 6 para. 1 (a) GDPR to the sharing of your data, without which this feature cannot be used. Then you will see the records of the users whom you gave permission, and they will see your records.
We do not know what third users will do with the data, but they are definitely not given to other users as a database in electronic form, but only displayed in the app. If you no longer like to share, you may revoke your consent at any time. To do so, simply remove the invited individuals.
If you subscribe to the newsletter offered on our website, we will inform you in detail about the information you will receive, which of your data will be stored and what it will be used for. We will not pass on your data to third parties and we will only use it to mail the newsletter. We will only mail you the newsletter if you have given us your prior permission. To that purpose, you will receive an email from us with a link and further instructions and our request for your consent. By clicking on this link, you declare your consent to receiving the newsletter and our advertising. The basis for the storage is your consent pursuant to Art. 6 para. 1 (a) GDPR, which you grant to us by registering for the newsletter. You may revoke this consent at any time, you just need to contact us without any particular formal requirement (for example through the contact form or an e-mail or the unsubscribe button in each email). This withdrawal has no effect on the legality of the data processing that has occurred until that point.
Because we are legally obligated to record your permission as part of the so-called double opt-in, your order of the newsletter, the mailing of our email of consent and your consent by clicking on the link will be recorded and saved with location and time as well as with your IP address.
For mailing the newsletter, we use (based on our legitimate interest in a technologically perfect processing of our customer information and analysis) the provider MailChimp (Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA) from the USA.
Thus, your data is forwarded to the USA, but MailChimp is registered with Privacy Shield and obligated to respect the EU data protection rules. You will find further information about your rights thereunder at http://ec.europa.eu/justice/data-protection/document/citizens-guide_en.pdf.
In our newsletter, we will also explicitly ask you to provide your consent to transferring data to MailChimp and to the USA. You will declare that consent by clicking on the link, but you may revoke it at any time. For the handling of your data at MailChimp, we refer you to the Privacy Policy of MailChimp. MailChimp will only use your data for mailing the newsletter and for evaluating that mailing on our behalf. In addition to that, MailChimp will only use your data to improve their own service. But MailChimp will not use the data to contact you directly or to pass on your data to third parties.
The data used by MailChimp contains a “web beacon“, which will inform MailChimp about the opening of the newsletter and/or the clicking on a link contained therein by you. As part of that process, information regarding your browser, your location and your IP address will be transmitted to MailChimp. This information will be used to optimise our communication with you.
Our newsletter provider will also use this data, but only in a pseudonymous form (meaning that they cannot identify you) to analyse and optimise their own services. Your data will never be used by the newsletter provider in order to contact you.
Your data will remain stored for as long as you are stored in our mailing list, the storage is required to enforce our rights or it is necessary for our legitimate interest or we are required by law to keep your data.