Privacy

Last updated: 16.08.2019

 

1. scope of application and subject matter of the privacy policy

1. The subject of this data protection declaration is to explain whether and to what extent we collect personal data and for what purpose it is processed.

2. This privacy statement applies solely to the website of FlipCar (FlipCar.app).

3. The FlipCar app privacy policy can be found in the Terms of use under point 14. In so far as our websites link to other sites, FlipCar has no influence or control over the linked offers and content and accepts no responsibility for compliance with the data protection provisions there. We recommend that you review the privacy policies of these linked websites to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

2. Responsible person

The person responsible in the sense of the European Data Protection Basic Regulation (DSGVO) is the

FlipCar GmbH
Konsul-Smidt-Straße 24
28217 Bremen
(subsequently also referred to as “FlipCar”).

Represented by: Mr. Okan Gürsel, Mr. Sven Gunkel
E-Mail: [email protected]

3. Privacy officer

You can contact our privacy officer with questions or concerns:

HEC GmbH
Herr Günther Ewald
E-Mail: [email protected]

4. Personal data

1. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, the name, e-mail address or telephone number. However, data about hobbies, memberships or which websites someone viewed may also be personal data.

2. Personal data may only be collected, used, processed or passed on if there is a legal basis for doing so, e.g. if you expressly agree.

5. Personal data while visiting our website

1. When you visit our website, we collect so-called server log files, i.e. data about access to our website (for the topic “cookies”, see also below). These data include the name of the website accessed, the file, the date and time of access, the amount of data transferred and the message about the successful access, the browser type and version, the operating system, the so-called referrer URL (the previously visited page) as well as the requesting provider and your IP address.

2. The before mentioned access data (especially the IP address) will only be used for statistical evaluations for the purpose of operation, security and technical optimization of our website and services and will be deleted automatically after 30 days.

6. Newsletter

1. When registering for our newsletter, you will have to provide your e-mail address and confirm it again as part of the subsequent verification (double opt-in). We will only use your email address to send you this newsletter and to keep you up to date with FlipCar news and events.

2. Legal basis for the processing of the data after registration to our newsletter is Art. 6 para. 1 lit. a DSGVO (consent). You can unsubscribe at any time via the link provided for this purpose in the newsletter or by notifying us accordingly without incurring any costs other than the transmission costs according to the basic tariffs. By unsubscribing, you disagree with the use of your e-mail address to receive the newsletter.

7. Cookies

1. We use so-called “cookies” when visiting our website. Cookies are small text files that are stored in the cache of your browser. The cookies are used to make the website more user-friendly, more effective and safer. Cookies allow us to analyse your surfing behaviour in anonymous form and to record, for example, the date and time of access, the URL (address) of the referring website, the pages you have visited, the browser type and version as well as your operating system. However, it is not possible to assign or deduce this information from your person.

2. The legal basis for the use of technically unnecessary cookies is Art. 6 para. 1 lit. f DSGVO. You have the option of setting your browser so that it does not save cookies in the first place or that the cookies are deleted (automatically or manually) at the end of your Internet session. Please refer to your browser provider’s instructions to find out how this works in detail. However, we would like to point out that some areas of the website may not function properly or at all.

8. Google Ads

1. Our website uses Google Conversion-Tracking. The operating company of Google Ads services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Ads places a cookie on your computer. The Conversion Tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages on our site and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was directed to that page. Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked through ads customer websites. The information collected from the conversion cookie is used to generate conversion statistics for ads customers who have opted for conversion tracking. Customers will know the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, they will not receive any information that personally identifies them.

2. The legal basis for processing your data is Art. 6 Para. 1 lit. f DSGVO. We use Google’s web analysis service to statistically record the use of our website and to continuously improve and optimise our website. Google processes your data in the USA and is subject to the EU-US Privacy Shield. You can find all information about this at https://www.privacyshield.gov/EU-US-Framework.

3. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of our website.

9. Google Analytics

1. Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics also uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of our website is transmitted to a Google server, where it is processed.

2. The legal basis for the processing of your data is Art. 6 Abs. 1 lit. f DSGVO. You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following Link. You can find more information about terms of use and data protection at : http://www.google.com/analytics/terms/de.html and http://www.google.com/intl/de/analytics/privacyoverview.html.

3. Google uses the DoubleClick DART cookie to generate personalized, user-specific advertisements when you visit our website. We use third-party advertising companies that collect information about your visit to our and other websites using so-called “DoubleClick DART cookies”. This allows us to better serve the interests of our users and offer them online advertising for goods and services that match their interests. No personal data is collected or used for this purpose. The DART cookies only contain the name of the domain from which the cookie (“ad.doubleclick.net”) was set, the validity period of the cookie and a “value”. The user can object to the use of DART cookies by submitting an opt-out statement under Google ad and content network privacy policy. For more information about DoubleClick DART cookies, please visit https://www.doubleclickbygoogle.com/de/ and review the Google ad and content network privacy policy.

10. Youtube

1. On some of our websites we embed Youtube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (subsequently “YouTube”). When you visit a page with the YouTube plugin, a connection is established to YouTube servers. This will tell YouTube which pages you are visiting. If you are logged in to your YouTube account, YouTube can personally assign your surfing behavior to YouTube. You can prevent this by logging out of your YouTube account.

2. Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy https://policies.google.com/privacy. Youtube processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

11. Use of the Live Chat System TidioChat (Tidio Ltd.)

1. Our website optionally offers the use of TidioChat (a live chat software of Tidio Ltd. 220C Blythe Road, W14 0HH, London, Great Britain). By using this website you automatically use the services of TidioChat. The data collected includes: Chat history, IP address at the time of the chat and country of origin. If you are a logged-in customer and the information exists, the following additional data will be provided: Name / User name, e-mail address, origin (zip code, city, country of origin). Cookies may be used for this purpose. If the information collected in this way is personal, it is processed in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in effective customer service and statistical analysis of user behaviour for optimisation purposes.

2. The legal basis for the processing of these data is Art. 6 para. 1 lit. f DSGVO. Our justified interest lies in the simple and comfortable possibility of communication with customers and interested parties. In order to avoid the storage of TidioChat cookies, you can set your Internet browser so that no more cookies can be stored on your computer in the future or already stored cookies are deleted. Disabling all cookies can, however, mean that some functions on our website can no longer be executed.

3. Purpose and scope of data collection and the further processing and use of the data by TidioChat as well as your related rights and privacy settings can be found in the privacy policy of Tidio Ltd.: https://www.tidio.com/privacy-policy.

12. Google Fonts

1. We use Google Fonts to display fonts uniformly. When calling up a page, the browser loads the required web fonts into its own browser cache in order to display texts and fonts correctly. For this purpose, the browser connects to Google’s servers. This enables Google to know that our website has been accessed from your IP address.

2. The legal basis for the processing of these data is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the need-based design of our website. Google LLC is responsible for further data processing. You can find further information on how Google handles your data at https://developers.google.com/fonts/faq.

13. Data security

1. We undertake to take all necessary technical and organisational measures to protect the data that you transmit to us and that we store about you.

2. Personal data will not be processed in countries outside the scope of application of the DSGVO, unless the service providers or third party providers named in this data protection declaration are concerned, which have their headquarters outside the European Economic Area.

3. In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.

4. In addition to the above organizations, we have retained the following company to process data: GoDaddy LLC Corporate Headquarters 14455 N. Hayden Rd., Ste. 226 Scottsdale, AZ 85260 USA. GoDaddy processes your data in the USA and is subject to the EU-US Privacy Shield. All information can be found at https://www.privacyshield.gov/EU-US-Framework.

14. Right of information, deletion and objection

1. You have the right at any time to request information as to whether and to what extent we have collected personal data from you, where such data originates, for what purpose we process it, the scheduled duration for which such data will be stored or, if that is not possible, the criteria for determining such duration, the logic with which such automated data will be processed, and to whom or which categories of recipients we disclose such data.

2. In addition, you have the right to request that inaccurate data be corrected, that incomplete data be completed, that data collected or processed by us without authorization be deleted, anonymized or blocked, that your data be deleted, anonymized or blocked if they are no longer required for the purpose for which they were collected or processed, unless there are legal or contractual provisions to the contrary.

3. In case you want to delete your account and all data including all personal data permanently, you can do so easily in the app. To do this, go to the settings and then you will find the item “Delete your account” under the item Privacy settings. If your account is deleted, all data will be permanently and completely deleted after 30 days. If you change your mind within 30 days, you can simply log back in and your request to delete your data will be automatically revoked.

4. You may exercise any of the above rights against us by sending an e-mail to [email protected] or by using the contact details provided in the imprint.

15. Right to appeal

You have the right to appeal to a supervisory authority if you are convinced that the processing of your personal data violates data privacy regulations. In particular, the right of appeal may be exercised before a supervisory authority in the Member State where you are staying, at your place of work or at the place where the alleged infringement occurred.

16. Change of our privacy policy

We have the right to adapt this data privacy statement in order to ensure that it always complies with current legal requirements or to take account of changes to our services in the data privacy statement, e.g. the introduction of new services. Your new visit will then be subject to the new data protection declaration.