App privacy policy

Introduction

Protecting your privacy when we process personal data matters to us. This privacy policy applies to the “gurado – Gutscheine verkaufen” app. Visits to our website are covered by our general privacy policy.

When the app communicates with our servers, connection data such as your device's IP address and the date and time of access is processed for technical reasons. This data is strictly required for transmission and secure server operation (Art. 6(1)(f) GDPR). We don't analyze it on a personal level.

We use your data only to provide the app and our services to you, and we treat it as confidential. We only share it with third parties if they are processors working on our behalf (see section 4), if we are legally required to, or if you have given your consent. We don't sell your data.

The controller within the meaning of the law is:

gurado GmbH
Wittbräucker Straße 32
44287 Dortmund, Germany
Phone: +49 231 4420510
Email: info@gurado.de

Personal data

Personal data is information about you, such as your name, address and email address. To use the app, we only need the data listed below. In some cases, we need your name, address and other information to provide the service you've asked for.

When you use one of our services, we usually collect only the data we need to provide it. We may ask you for further information, which you can choose whether to give. Whenever we process personal data, we do so to provide our service to you.

Using the mobile app

In addition to our online services, we provide a mobile app that you can download to your mobile device.

When you download the app, the necessary information is sent to the App Store or Google Play Store. This includes in particular the username, email address and customer number of your account, the time of the download, your mobile number (MSISDN), the MAC address used for Wi-Fi, the unique device number (IMEI) and the unique subscriber number (IMSI). We have no influence over this data collection and are not responsible for it. We process this data only as far as needed to download the app to your smartphone. It isn't stored beyond that.

When you use the app, we collect the following additional personal data so that its features work:

Username
Password

When you start using the app, it asks for the following permissions, used only for the purpose stated:

Camera: to scan gift card codes so you can top up or redeem gift cards.
Device ID: used by the app stores for statistics.

If you decline, we don't use this data. You then can't use the related features of the app. You can grant or revoke permission later in your device settings. If you allow access, the app only accesses this data and sends it to our server as far as needed for the feature to work. We treat this data as confidential and delete it when you revoke the permission or it's no longer needed to provide the service, unless statutory retention obligations apply.

Security

We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees and the service providers working for us are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it's transmitted, so third parties can't misuse it. We continuously improve our security measures and regularly revise our privacy policies. Please make sure you have the latest version.

Information under Article 13 GDPR

1. What data do we process, and where does it come from?

We process the data we receive from you when preparing or performing a contract, or on the basis of your consent.

This personal data includes your master and contact data. For app users, this is only the username.

2. For what purposes and on what legal basis do we process the data?

We process your data in line with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as amended:

To fulfil (pre-)contractual obligations (Art. 6(1)(b) GDPR): We process your data to perform the contract online, in particular when initiating business and carrying out contracts with you.
To comply with legal obligations (Art. 6(1)(c) GDPR): Processing your data is required to meet various legal obligations, for example under the German Commercial Code or the German Fiscal Code.
To protect legitimate interests (Art. 6(1)(f) GDPR): Based on a balancing of interests, we may process data beyond what the contract requires to protect our legitimate interests or those of third parties, for example for business management and for developing our services and products.

3. Processing personal data for advertising

You can object at any time to the use of your personal data for advertising, either entirely or for individual measures.

4. Who receives your data?

If we use a service provider as a processor, we remain responsible for protecting your data. All processors are contractually obliged to treat your data confidentially and to process it only to provide their service. The processors we use receive your data only as far as they need it to provide their service.

Where there is a legal obligation, and in the course of legal proceedings, authorities, courts and external auditors may receive your data.

5. How long do we store your data?

We process your data until the end of the business relationship or until the applicable statutory retention periods expire (for example under the German Commercial Code or the German Fiscal Code), and beyond that until any legal disputes in which the data is needed as evidence have ended.

6. Do we transfer personal data to a third country?

As a rule, we don't transfer any data to a third country. A transfer takes place only in individual cases on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards or your explicit consent.

7. What are your data protection rights?

Right of access: You can ask us whether and to what extent we process your data.
Right to rectification: If we process data about you that is incomplete or incorrect, you can ask us to correct or complete it at any time.
Right to erasure: You can ask us to delete your data. Please note that there may be reasons that prevent immediate deletion, such as statutory retention obligations.
Right to restriction of processing: You can ask us to restrict the processing of your data if you dispute its accuracy (for the time we need to check it), if the processing is unlawful but you ask for restriction instead of deletion, if we no longer need the data but you need it to establish, exercise or defend legal claims, or if you have objected to the processing.
Right to data portability: You can ask us to provide the data you've given us in a structured, commonly used and machine-readable format and to transmit it to another controller without hindrance from us, where we process it on the basis of your revocable consent or to perform a contract and the processing is automated. Where technically feasible, you can also ask us to transmit it directly to another controller.
Right to object: You can object to the processing at any time. We will then stop processing your data unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You can object at any time to the processing of your data for direct marketing.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority.

Changes to this privacy policy

We may change this privacy policy where new technologies or legal requirements make it necessary. Please make sure you have the latest version. We will announce any material changes.

Contact for data protection questions

If you have questions about data protection, you can reach us at:

Mr Georg Dirk
gurado GmbH
Wittbräucker Straße 32
44287 Dortmund, Germany
Phone: +49 231 4420510
Email: support@gurado.de

You'll find the app terms of use here.