top of page

 

Privacy Policy


Introduction

We (“we,” “us,” or “our”) take the protection of the data of users (“user” or “you”) of our website and/or mobile application (the “Website” and/or the “Mobile App”) very seriously and are committed to protecting the information users provide us in connection with the use of our Website and/or Mobile App (together: “Digital Assets”). Furthermore, we are committed to using your data in accordance with applicable laws.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information through your use of our Digital Assets (the “Services”) when you access the Services from your devices.

Please read this Privacy Policy carefully and ensure that you fully understand our practices regarding your data before using our Services. If you read and fully understand this policy and do not agree with our practices, you must cease using our Digital Assets and Services. By using our Services, you acknowledge the terms of this Privacy Policy. Continued use of the Services constitutes your acceptance of this Privacy Policy and any changes made to it.

​

This Privacy Policy explains:

​

  • How we collect data

  • What data we collect

  • Why we collect this data

  • Whom we share the data with

  • Where the data is stored

  • How long the data is retained

  • How we protect the data

  • How we treat minors

  • Updates or changes to the Privacy Policy

 

The main methods we use to collect data include:

​

  • We collect data when you use our Services. When you visit our Digital Assets and use the Services, we may collect, record, and store usage, session, and related information.

  • We collect data you provide us directly, for example when you contact us via any communication channel (e.g., an email with a comment or feedback).

  • We may collect data from third-party sources as described below.

  • We collect data you provide us when logging in to our Services via a third-party provider such as Facebook or Google.

 

We may use your data for the following purposes:

​

  • To provide and operate our Services;

  • To develop, customize, and improve our Services;

  • To respond to your feedback, inquiries, and requests and offer support;

  • To analyze usage and demand patterns;

  • For other internal, statistical, and research purposes;

  • To enhance our data security and fraud prevention capabilities;

  • To investigate violations and enforce our terms and policies, and comply with applicable laws, regulations, or governmental orders;

  • To send you updates, notices, promotional content, and other information related to our Services. For promotional emails, you can choose whether to continue receiving them. If not, simply click the unsubscribe link in those emails.

 

We may share your data with our service providers to operate our Services (e.g., storing data through third-party hosting services, providing technical support, etc.).

​

We may also disclose your information in the following circumstances:

 

(i) to investigate, detect, prevent, or address illegal activities or other wrongdoing;
(ii) to establish or exercise our rights of defense;
(iii) to protect our rights, property, or personal safety, or that of our users or the public;
(iv) in the event of a change of control at our company or any of our affiliates (via merger, acquisition, or sale of substantially all assets, etc.);
(v) to collect, store, and/or manage your data via authorized third-party providers (e.g., cloud service providers) as appropriate for business purposes;
(vi) to collaborate with third parties to enhance your user experience.

For clarity, we may share or otherwise use non-personal data at our own discretion.

​

Please note that our Services may enable social interactions (e.g., posting content, information, and comments publicly and chatting with other users). Be aware that any content or data you provide in these areas may be read, collected, and used by others. We advise against posting or sharing information you do not wish to be public. If you upload content or otherwise provide data in the course of using a Service, you do so at your own risk. We cannot control the actions of other users or members of the public who may access your data or content. You acknowledge and agree that even after deletion, copies of your data may remain viewable on cached and archived pages or if others have copied or stored your content.

​

Cookies and Similar Technologies

When you visit or access our Services, we authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services ("Tracking Technologies"). These Tracking Technologies may enable third parties to automatically collect your information to enhance navigation on our Digital Assets, optimize their performance, personalize your user experience, and for security and fraud prevention purposes.

​

To learn more, please read our Cookie Policy.

​

We may serve advertisements through our Services and Digital Assets (including websites and applications that use our Services), which may be tailored to you, for example, ads based on your recent browsing behavior across websites, devices, or browsers.

​

To deliver these ads, we may use cookies and/or JavaScript and/or web beacons (including clear GIFs) and/or HTML5 local storage and/or other technologies. We may also use third parties such as network advertisers (i.e., third parties that display ads based on your web activity) to serve targeted ads. Third-party ad network providers, advertisers, sponsors, and/or traffic measurement services may also use cookies and/or JavaScript and/or web beacons and/or Flash cookies and/or other technologies to measure ad effectiveness and personalize advertising content. These third-party cookies and technologies are governed by the privacy policies of the respective third parties—not by this Privacy Policy.

​

Non-Personal Data

Please note that our businesses, trusted partners, and service providers are located worldwide. For the purposes explained in this Privacy Policy, we store and process all non-personal data collected across different legal jurisdictions.

​

Personal Data

Personal data may be stored, processed, and maintained in the United States, Ireland, South Korea, Taiwan, Israel, and other jurisdictions as necessary for the proper delivery of our Services and/or as required by law (as further explained below).

​

Please note that we retain the data we collect for as long as necessary to provide our Services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements.

We may correct, update, or delete inaccurate or incomplete data at any time at our sole discretion.

 

Our Digital Assets are hosted on a platform that provides us with the online infrastructure to offer our Services. Your data may be stored through our hosting provider’s data storage, databases, and general applications. It stores your data on secure servers behind a firewall and provides secure HTTPS access to most areas of its services.

​

All payment options offered via our Digital Assets and by our hosting provider comply with the PCI-DSS (Payment Card Industry Data Security Standard) as managed by the PCI Security Standards Council—a joint effort of brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure secure handling of credit card data (including physical, electronic, and procedural measures) by our shop and service providers.

 

Despite the measures and efforts taken by us and our hosting provider, we cannot and do not guarantee the absolute protection and security of any data you upload, post, or otherwise share with us or others.

For this reason, we encourage you to set strong passwords and avoid sharing sensitive information with us or others if you believe its disclosure could cause you significant or permanent harm. Email and instant messaging are not considered secure communication methods, so we request that you refrain from sharing confidential information via any of these channels.

​

Children

Children may use our Services. However, if they wish to access certain features, they may need to provide specific information. The collection of certain data (including data collected via cookies, web beacons, and similar technologies) may occur automatically. If we knowingly collect, use, or disclose data collected from a child, we will notify and obtain parental consent in accordance with applicable law. We do not condition a child’s participation in an online activity on the child providing more contact information than is reasonably necessary.

​

We use the information we collect solely to provide the Services the child has requested.

We may also use a parent’s contact information to communicate about the child’s activities within the Services. Parents can view, prohibit further data collection from, and request deletion of their child’s information from our records.

​

Please contact us to view, update, or delete your child’s information. For the protection of your child, we may request proof of your identity. We may deny access to the data if we suspect your identity is questionable. Please note that certain data may not be deleted due to other legal obligations.

​

We only use your personal data for the purposes set out in the privacy policy and only when we believe that:

​

  • the use of your personal data is necessary to perform or enter into a contract (e.g., to provide you with the services themselves or customer support or technical assistance);

  • the use of your personal data is necessary to comply with applicable legal or regulatory obligations; or

  • the use of your personal data is necessary to support our legitimate business interests (provided that this is done in a proportionate way that respects your privacy rights at all times).

 

As an EU resident, you may:

​

  • request confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access your stored personal data along with certain supplementary information;

  • request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format;

  • request the correction of your personal data held by us;

  • request the deletion of your personal data;

  • object to our processing of your personal data;

  • request the restriction of the processing of your personal data; or

  • lodge a complaint with a supervisory authority.

 

Please note, however, that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. If you have general questions about the personal data we collect and how we use it, please contact us using the details below.

As part of providing the services, we may transfer data across borders to affiliated entities or other third parties, and from your country/jurisdiction to other countries/jurisdictions around the world. By using the services, you consent to the transfer of your data outside the EEA.

​

If you are located in the EEA, your personal data will only be transferred to locations outside the EEA where we believe there is an adequate or comparable level of data protection. We will take appropriate steps to ensure that we have suitable contractual arrangements in place with our third parties to ensure appropriate safeguards are implemented, minimizing the risk of unlawful use, alteration, deletion, loss, or theft of your personal data, and that these third parties act at all times in accordance with applicable laws.

​

Rights under the California Consumer Privacy Act (CCPA)

​If you use the services as a California resident, you may be entitled under the California Consumer Privacy Act (“CCPA”) to request access to and deletion of your data.

​

To exercise your right to access and delete your data, please refer to the contact details provided below.

​

Users of the services who reside in California and are under the age of 18 may request and obtain removal of content they have posted by emailing us at the address listed in the "Contact" section below. These requests must be labeled "California Removal Request." All requests must include a description of the content you wish to have removed and sufficient information to allow us to locate the material. We do not accept notices that are not properly labeled or properly submitted, and we may not be able to respond if you do not provide sufficient information. Please note that your request does not ensure complete or comprehensive removal of the material. Content you have posted may, for example, be republished or reposted by other users or third parties.

​

Updates or Changes to this Privacy Policy

We may revise this Privacy Policy at our sole discretion from time to time. The version posted on the website is always the most current one (see “Effective Date”). We encourage you to review this Privacy Policy regularly for any changes. In the event of material changes, we will post a notice on our website. Continued use of the services after notification of changes on our website will constitute your acknowledgment and acceptance of the changes to the Privacy Policy and your agreement to be bound by the terms of those changes.

​

If you have general questions about the services or the data we collect about you and how we use it, please contact us at:

​

Name: Simone Baur
Address: Metzstraße 29a, 81667 Munich, Germany
Email Address: hello@simone-baur.com

bottom of page