Privacy Policy

1. Information Regarding the Collection of Personal Data and Contact Details of the Data Controller

We appreciate your use of our application ("app"). Below, we provide information regarding the handling of your personal data when utilizing our app. The personal data we gather encompasses your name, email address, and date of birth.

Responsible for data processing regarding this app within the meaning of the General Data Protection Regulation (GDPR) is Schaban Bochi, Spremberger Straße 6, 01239 Dresden, Germany, Tel.: 01703518048, email: baby-journal@qlevar.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

2. Contact

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form in the app. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

3. Data processing for contract processing

For the processing of contracts concluded via the app, we work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institute as part of the payment process, provided this is necessary for the payment process. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Article 6 (1) (b) GDPR.

4. Crash Reports

To improve the stability and reliability of our app, we collect crash reports and send them to our own server. If the app crashes, anonymous information will be transmitted to our servers. This information includes app status at the time of the crash, crash trace, manufacturer and operating system of the mobile phone, and last log messages. This information does not contain any personal data. You can give or revoke consent in the app settings.

5. Firebase

We use "Firebase Messaging" and "Firebase Analytics" services provided by Google Ireland Ltd., Google Building Gordon House, Barrow Street, Dublin 4, Ireland, to send push notifications and analyze the usage of our app. You can withdraw your consent at any time by disabling the respective features in the app's settings. For more information on data protection, see the Firebase privacy policy at https://firebase.google.com/support/privacy

6. RevenueCat

For in-app payments, transactions are processed by RevenueCat Inc., located at 300 Euclid Avenue, San Francisco, CA 94118, USA. We share the information you provide during the ordering process, along with details of your order, with RevenueCat. This data transfer is conducted in accordance with Article 6, Paragraph 1, Letter b of the GDPR, solely for payment processing purposes and only to the extent necessary.

We have an order processing agreement with RevenueCat Inc., ensuring that they protect the data of app users and do not share it with third parties.

For more information on RevenueCat's data protection practices, please visit https://www.revenuecat.com/privacy

7. Rights of the data subject

7.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the person responsible for the processing of your personal data, about which we will inform you below:

• Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or will be disclosed, planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed which guarantees pursuant to Art. 46 GDPR when your data is forwarded to third countries exist
• Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us
• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being checked, if you refuse to delete your data because of inadmissible data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail
• Right to information in accordance with Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible
• Right to revoke granted consent in accordance with Art. 7 Para. 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged infringement took place

7.2 Data Security: We prioritize safeguarding your information through the implementation of robust security measures:

• Encryption: Every uploaded file is securely encrypted upon storage on our servers, ensuring the confidentiality of your data. Additionally, all passwords are encrypted for enhanced protection.
• Access Controls: We maintain strict internal access controls, limiting data access only to authorized personnel, thereby minimizing the risk of unauthorized data breaches.
• Regular Reviews: Our security protocols undergo frequent and thorough reviews to ensure they remain effective and up-to-date, reflecting our commitment to maintaining the highest standards of data security.

7.3 Right to Object

If we process your personal data based on a balancing of interests, you have the right to object to this processing at any time for reasons arising from your specific situation, with effect for the future.

If you exercise your right to object, we will cease processing the data concerned. However, further processing may still occur if we can demonstrate compelling legitimate grounds for processing that outweigh your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes. You may object as described above.

If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make significant changes, we will notify you via email or a prominent notice within the app.

9. Contact Us

If you have any questions or concerns about our privacy practices, please contact us at: baby-journal@qlevar.de

How to delete your account

We respect your right to control your data. If you wish to delete your account and all associated data from Baby Journal, we've made the process simple and straightforward.

View Account Deletion Instructions