Welcome to zapptales GmbH. Thank you for visiting our website and for your interest in our company and our products. The protection of your privacy and personal data when using our website is very important to us. We therefore strictly adhere to the rules of the data protection laws. The following explanations give you information about how we guarantee this protection and which data is collected for which purpose. Despite careful content control, we cannot assume any liability for external links to external content.
The provider has taken organizational, contractual and technical security measures to ensure that the provisions of data protection laws are observed and that accidental or intentional manipulation, loss, destruction or access by unauthorized persons is prevented.
1. Company data protection officer:
Anna Kimmerle-Hürlimann, Management zapptales GmbH
Lucile-Grahn-Str. 47, 81675 München
Our company data protection officer can be contacted at the above address or at datenschutz[at]zapptales.com
2. Collection and storage of personal data as well as type and purpose of its use
a) When visiting the website
When you visit our website, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
- Name of the retrieved file
- Date and time of retrieval
- The amount of data transferred
- Message as to whether the retrieval was successful
- Description of the type of web browser used
- Operating system used
- The previously visited page
- Your IP address
The mentioned data will be processed by us for the following purposes:
- Ensuring a smooth connection of the website,
- Ensuring comfortable use of our website,
- Evaluation of system security and stability as well as
- For other administrative purposes.
The legal basis for data processing is Art. 6 para.1 lit.f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
b) When uploading a WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chat to create a book or PDF
When you upload a WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chat via our software, via iPhone or Android App, via e-mail or web uploader, the following data will be temporarily stored on our servers:
- First name
- E-mail address
- Operating system (e.g. iOS or Android)
- Messaging service (WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram)
- Date and time of the upload
- Chat data (messages and containing media)
The mentioned data will be processed by us for the following purposes:
- Sending the login data to the personal chat editing page
- Potentially sending a maximum of 3 emails to remind you of the deadline for deleting your data
- Ensuring smooth support in the event of questions or technical problems
- Provision of the offer and creation of the print data when ordering
After four weeks (from ordering or last login, and for a maximum of 6 months in total), the data you exported via WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram will be automatically and permanently deleted. You can also carry out this deletion process personally and independently at any time via our apps.
If you activate the QR-Code function to print and replay videos and voice memos sent by you from WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram, this data will be stored by us until the expiry of the commissioned storage period. Of course, you can also request the irrevocable deletion of videos and voice messages at any time by requesting us to do so in text form, which can also be done by e-mail. In this case the printed QR codes in the respective book lose their function.
The legal basis for data processing is Art. 6 para.1 lit.b GDPR (processing for contractual purposes). WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chats are always uploaded on a voluntary basis. This data will not be passed on to third parties without your express consent and will only be processed in the case of an order exclusively for the fulfilment and processing of the purchase contract.
c) When registering for our newsletter
If you have expressly consented according to Art. 6 para.1 lit.a GDPR, we will use your e-mail address to regularly send you our newsletter. To receive the newsletter, you only need to provide your name and e-mail address.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscription request at any time by e-mail to email@example.com.
d) When using our contact options
If you have any questions, we offer you several ways to contact us. Depending on how you contact us, the following data will be collected:
a. By e-mail to info[at]zapptales.com or support[at]zapptales.com, or when using our contact form:
- Your name
- Your e-mail address
- Date and time of the contact request
b. By direct message on our Facebook page:
- The user name you entered on Facebook
- Date and time of the contact request
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit.a GDPR on the basis of your voluntary consent and will be used exclusively to guarantee smooth support.
c. Furthermore, we offer the possibility to contact us via live chat while using our website or software. In this case, the following data is recorded:
- Operating system, device and browser
- The visited page
- Your IP address
- Location (country and, if applicable, city)
- Date and time of the contact request
We base the use of the live chat tool on Art. 6 para. 1 letter f) GDPR: the processing takes place to ensure smooth support and is therefore necessary to protect our legitimate interests.
e) On completion of an order
If you place an order for printing a book or downloading a PDF of your chat data, the following data will be provided by you during the order process and stored by us for the fulfilment of the purchase contract:
- The date and time of the order
- Information about the ordered product
- First and last name
- E-mail address
- Delivery address
- DHL customer number (for delivery to a packing station)
- Billing address (if different)
- Payment method (e.g. PayPal, Visa, etc.)
The mentioned data are processed by us expressly for the fulfilment of the purchase contract (Art. 6 exp. 1 lit. b GDPR).
In addition, some of this data will be used in our legitimate interest to analyze and improve our services. The legal basis for data processing is Art. 6 para.1 lit.f GDPR. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
3. Passing on of data
Your personal data will not be transmitted to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
- You have given your express consent pursuant to Art. 6 para. 1 lit.a GDPR,
- The disclosure pursuant to Art. 6 para.1 lit.f GDPR is necessary and there is no reason to assume that you have a predominant interest worthy of protection in the non-disclosure of your data,
- In the event that a legal obligation exists for the transfer pursuant to Art. 6 para.1 lit.c GDPR, and
- This is legally permissible and required by Art. 6 para. 1 lit.b GDPR for the processing of contractual relationships with you.
The legal basis for the data processing described in the following section is Art. 6 Para. 1 S. 1 lit. f GDPR, based on our legitimate interest in the needs-based design and continuous optimisation of our website. In the following list of the technologies used by us, you will also find information on the possibilities of objection regarding our analysis measures by means of a so-called opt-out cookie.
Please note that after deleting all cookies in your browser or later use of another browser and/or profile, an opt-out cookie must be set again.
5.1. Google Analytics
We would also like to point out that the code “gat._anonymizeIp();” has been added to Google Analytics to ensure anonymous collection of IP addresses (so-called IP masking).
You may also prevent Google from registering the data generated by the cookie and the data relating your use of our website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en).
An opt-out cookie is then set to prevent further collection of your data when you visit this website.
This procedure is particularly recommended when accessing our site via mobile devices.
We base the use of the aforementioned analysis tool on Art. 6 para. 1 letter f) GDPR: the processing takes place for the analysis of the usage behavior and is therefore necessary to protect our legitimate interests.
We would like to present our users advertising tailored to their interests or special offers (“interest-based advertising”) and to limit the frequency of displaying certain advertising. To this end, we use the tools described below.
Responsibility for processing data in connection with the tools lies with the respective provider, unless we have indicated otherwise. For each tool you will find information on the provider and on how you can object to the collection of data using this tool. Please note that your objection will not switch off the advertising. Your objection only means that no interest-based advertising based on your usage behaviour can be shown to you.
The legal basis for the data processing described in the following section is Art.6Abs. 1 S. 1 lit. f GDPR based on our legitimate interest in the promotion of our products and services in personalized form.
6.1 Facebook Tracking
a. Using the visitor action pixel from Facebook
We use the “visitor action pixel” offered by Facebook Inc, 1601 South California Ave, Palo Alto, CA 94304, USA (“Facebook”) within the web pages of this offer. This allows users’ behavior to be tracked after they have been redirected to the offer’s website by clicking on a Facebook ad. This process is designed to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help to optimize future advertising efforts. If you are a Facebook member and Facebook has allowed this through your account privacy settings, Facebook will also link the information we collect from your visit on our website to your member account and use it to target Facebook ads. A cookie may also be stored on your computer for these purposes. The data collected remains anonymous for zapptales GmbH, so it does not provide us with any information about the identity of the users. However, Facebook stores and processes the data so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (www.facebook.com/about/privacy). If you do not want data to be collected via the Facebook pixel, you can deactivate this here: www.facebook.com/settings?tab=ads (you must be logged in to Facebook). If you are not a Facebook member, you can prevent Facebook from processing your data by clicking the “Facebook” deactivation button on the YourOnlineChoices-website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices.
b. Facebook Custom Audiences
If you have consented to this on Facebook, we also use the Facebook Custom Audiences tool offered by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), which enables Facebook to target advertising to you on Facebook as part of retargeting on our behalf. To do this, we send your e-mail address, which you provided to us when you purchased a product from us, in encrypted form to Facebook. If you are a member of Facebook, it thus becomes known to Facebook when you make a purchase on zapptales.
We also use Facebook’s Look-A-Like Audiences feature, which allows Facebook to show ads to users who have similar profile characteristics to you on Facebook.
c. Facebook-SDK (Software Development Kit)
Within our app we use the Software Development Kit (SDK) from Facebook. The Facebook SDK is published and administered by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The Facebook SDK allows for various evaluations of the app’s installation and the success of the advertising campaign.
In addition, individual activities (events) of the user within the app can also be analyzed, for example to define the target group for advertising campaigns more precisely and better (as explained in point 6 b) Facebook Custom Audiences). For this purpose, our app sends Facebook pseudonymous data and the information that the app has been launched. The Advertising ID provided by the operating system of the end device serves as the pseudonym (name may differ depending on the operating system).
Further information about the Facebook SDK under iOS can be found here: https://developers. facebook.com/docs/ios For Android here: https://developers.facebook.com/docs/android.
6.2 Facebook Social Plug-ins
On our website we use social plugins of the social network Facebook on the basis of art. 6 para.1 lit.f GDPR.
The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. The integration of these plugins by us takes place by means of the so-called two-click method to protect visitors to our website in the best possible way.
Our website uses social media plugins from Facebook to personalize its use. For this we use the “LIKE” or “SHARE”-button. This is an offer from Facebook.
If you access a page from our website which contains such a plugin, your browser builds a direct connection to Facebook’s servers. The content of the plugin is sent directly from Facebook to your browser and integrated into the website. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged on to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account.
If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purposes of advertising, market research and demand-oriented design of Facebook pages. To this end, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regards to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in the data protection information (https://www.facebook.com/about/privacy/) of Facebook.
6.3 Google Ads
If you use a Google Account, Google may link your web and app browsing history to your Google Account and use information from your Google Account to personalize ads, depending on the settings on your Google Account. If you don’t want this association with your Google Account, you’ll need to sign out of Google before you visit our website.
You can configure your browser to reject cookies, as shown above. You can also disable the “Personalized Ads” button in Google’s advertising preferences. In this case, Google will only display general ads that are not selected based on information collected about you.
7. Trusted Shops
The Trusted Shops trust badge is included on this website to display our Trusted Shops seal of approval and any collected evaluations as well as to offer Trusted Shops products to buyers after an order. This serves the protection of our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is clicked, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
9. Rights of the parties concerned
a. Right to information
You have the right to request information from us whether personal data concerning you are processed by us.
b. Correction/Deletion/Restriction of processing
Furthermore, you have the right to ask us to
- Correct any incorrect personal data concerning you without delay (right of correction)
- Immediately delete personal data relating to you (right of deletion) and
- Restrict the processing of your personal data (right to restrict processing).
c. Right to data transferability
You have the right to receive personal data concerning you, which you have provided to us, in a structured, current and machine-readable format and to transmit this data to another person responsible.
d. Right of withdrawal
You have the right to withdraw your consent at any time. Withdrawing you consent does not affect the legality of any processing of your data prior to the withdrawal.
e. Right of objection
If the processing of personal data concerning you is necessary for the performance of a task that is in the public interest (Article 6, paragraph 1, letter e) GDPR) or to safeguard our legitimate interests (Article 6, paragraph 1, letter f) GDPR), you have a right of objection.
f. Right of appeal
If you believe that the processing of personal data concerning you violates the GDPR, you have the right of appeal to a supervisory authority.