Privacy declaration OneSurveyADay App
We take data protection very seriously.
The protection of your privacy when processing personal data is important to us.
Responsible body in terms of the law is
Yannick Stumpp and Niklas Stettner
+49 (0) 6150 8674748
This document can be printed out for storage purposes using the "Print" command in the browser.
All information by which the identity of a natural person is or can be determined directly or in connection with other information is personal data.
Data that you provide to us directly:
Apart from an anonymous user ID, you do not provide us with any data. This user id is only used to verify participation in surveys using a server-to-server callback.
Data collected via the Pollfish survey platform:
APPLE, GOOGLE AND AMAZON ARE NOT SPONSORS and are in no way involved in this competition / drawing. NO APPLE PRODUCTS ARE USED AS PRIZES.
Automatically collected data:
Technical provision data:
We use third-party services to ensure the technical availability of the app. The personal data collected are the IP address and instance ID.
Analysis data: In order to continuously improve the performance of our app and our marketing strategies, we collect information about your activity in our app. This includes the type of device and operating system used, anonymous demographic characteristics such as age and gender, information about the way our app is used, date and time of use, anonymous device ID for advertising purposes and anonymous crash reports from the app.
Installation data: When the app is downloaded, the necessary information is transferred to the Apple App Store or Google Play Store. These are in particular the user name, email address and customer number of your account, the time of the download, the unique number of the end device (IMEI), the mobile phone number (MSISDN), the MAC address for WLAN use and the unique number of the network subscriber (IMSI). We have no influence on this data collection and are not responsible for it. We process the data provided, insofar as this is necessary for downloading the app to your smartphone. Beyond that, they will no longer be saved.
When you start using the app, the app asks for the following access rights (only applies to iOS devices):
Advertising ID (IDFA)
Why do we need this authorization?
To provide you with surveys by our partner Pollfish, as they need the advertising ID for their services.
What happens if you don't grant this authorization?
If you do not give us this authorization, you can use the app, but the actual function of the app (generation of donations through surveys) cannot be used.
Why do we need this authorization?
To be able to send you push notifications, to remind you to take part in a survey and to notify you whether a survey was successful.
What happens if you don't grant this authorization?
If you do not grant this authorization, you can continue to use the app as normal, you just don't get any reminder notifications and you don't get a confirmation message if a survey was successful or unsuccessful.
Type and place of data processing
We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorized access. All of our employees and service providers working for us are obliged to comply with the applicable data protection laws.
Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a constant improvement process and our data protection declarations are constantly being revised. Please make sure that you have the latest version.
Legal basis for processing
We are only allowed to process personal data of users if one of the following points applies:
The users have given their consent for one or more specific purposes.
the data collection is necessary for the fulfillment of a contract with the user and / or for pre-contractual measures resulting therefrom;
the processing is necessary for the fulfillment of a legal obligation to which we are subject;
the processing is in connection with a task that is carried out in the public interest or in the exercise of official powers that have been assigned to us;
the processing is necessary to safeguard our legitimate interests or those of a third party.
In any case, we will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the disclosure of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.
The data is processed locally on your smartphone and in all other locations (see service providers) where the offices involved in data processing are located.
Depending on the location of the user, data transfers can include the transfer of the user's data to a country other than your own. To find out more about the place of processing of the transmitted data, users can consult the section with the detailed information on the processing of personal data.
Users also have the right to be informed about the legal basis for data transmission to a country outside the European Union and about the security measures we have taken to protect their data.
If such a transfer takes place, the user can find out more about it by reviewing the relevant sections of this document or by contacting us using the information provided in the contact section.
Personal data are processed and stored for as long as the purpose for which they were collected requires.
Personal data that are collected for the purpose of fulfilling a contract concluded between us and the user will be stored until this contract has been completely fulfilled.
Personal data that are collected to safeguard our legitimate interests will be stored for as long as is necessary to fulfill these purposes. Users can obtain more information about our legitimate interests in the relevant sections of this document or by contacting us.
In addition, we are permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. In addition, we may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.
After the retention period has expired, personal data will be deleted. Therefore, the right to information, the right to erasure, the right to correction and the right to data portability cannot be asserted after the retention period has expired.
Detailed information on the processing of personal data
Personal data is collected for the following purposes using the following services:
Google Analytics for Firebase
Google Analytics for Firebase or Firebase Analytics is an analysis service provided by Google LLC or Google Ireland Limited, depending on the location from which this application is accessed.
For Android: Settings> Google> Ads> Reset Advertising ID
For iOS: Settings> Privacy> Advertising> No ad tracking
Processed personal data: cookie; Unique device identifier for advertising (Google Advertising ID or IDFA, for example); Usage data.
Registration and authentication:
Firebase Authentication is one of Google LLC or Google Ireland Limited, depending on the location from which this application is being accessed. provided login and authentication service. To simplify the login and authentication process, Firebase Authentication can use third-party identity services and store the information on their platform.
Processed personal data: anonymous user id
Hosting and backend infrastructure:
The purpose of these types of services is to host data and files so that this application can be managed and used. Furthermore, these offers can provide a prefabricated infrastructure that handles specific functions or entire components for this application.
Some of these services work with geographically dispersed servers, making it difficult to determine where the personal data is stored.
Firebase Cloud Functions
Firebase Cloud Functions is a web hosting and backend service provided by Google LLC or Google Ireland Limited, depending on the location from which this application is accessed.
Firebase Cloud Firestore
Firebase Cloud Firestore is a database and backend service provided by Google LLC or Google Ireland Limited, depending on the location from which this application is accessed.
More information about personal data
This service is not aimed at children under the age of 16.
Children using this app must be at least 16 years old or the age required in their country to register or use our services. In addition to the requirement that the child must be of the minimum age required by applicable law to use our services, the following applies: If the child is not old enough to be eligible in their country to agree to our terms, the legal guardian must be on their behalf agree to our terms.
Users can exercise certain rights in relation to their data processed by us.
In particular, users have the right to do the following:
Revoke your consent at any time. If the user has previously consented to the processing of personal data, he can revoke his own consent at any time.
Object to the processing of your data. The user has the right to object to the processing of his data if the processing takes place on a legal basis other than consent. More information on this is given below.
Receive information about your data. The user has the right to find out whether the data is being processed by us, to receive information about individual aspects of the processing and to receive a copy of the data.
Check and have it corrected. The user has the right to check the accuracy of his data and to request that it be updated or corrected.
Request restriction of the processing of your data. Users have the right to restrict the processing of their data under certain circumstances. In this case, we will not process the data for any purpose other than storage.
Request deletion or other removal of personal data. Under certain circumstances, users have the right to request that we delete their data.
Receive your data and have it transferred to another person in charge. The user has the right to receive his data in a structured, common and machine-readable format and, if technically possible, to have it transmitted to another person responsible without hindrance. This provision applies if the data is processed automatically and the processing is based on the consent of the user, on a contract to which the user is a party, or on pre-contractual obligations.
Give a complaint. Users have the right to lodge a complaint with the competent supervisory authority.
Details on the right to object to processing
If personal data is processed in the public interest, in the exercise of a sovereign authority transferred to us or to safeguard our legitimate interests, the user can object to this processing by providing a reason for justification that relates to his particular situation.
Users are informed that they can object to the processing of personal data for direct mail at any time without giving reasons. Users can find out whether we process personal data for direct marketing purposes in the relevant sections of this document.
How the rights can be exercised
All inquiries to exercise user rights can be directed to us using the contact details given in this document. Applications can be made free of charge and will be processed by us as early as possible, at the latest within one month.
Changes to this data protection declaration
We reserve the right to make changes to this data protection declaration at any time by informing users on this page and, if necessary, about this application and / or - as far as technically and legally possible - by sending a message about the contact details of the users available to us. Users are therefore advised to visit this page regularly and in particular to check the date of the last change given at the bottom of the page.
Insofar as changes affect data usage based on the consent of the user, we will - if necessary - obtain new consent.
As of: 09/28/2020