Privacy Policy

Our website is an information website. Nonetheless, some data is processed when our website is visited.
Regarding the terminology (e.g. “personal data” or “processing”), we refer the reader to Art. 4 of the General Data Protection Regulation (GDPR).

The following Privacy Policy serves to inform you about the nature, scope and purpose of the processing of personal data.

I. Controller

The controller in the sense of the General Data Protection Regulation and other national data protection laws of the Member States as well as other provisions under privacy law is:
WODOTO GmbH
Maya de Silva-Witte, Elroy Das
Herderstr. 92, 28203 Bremen, Germany
Contact: Maya de Silva-Witte
E-Mail: maya.desilva@wodoto.app

Imprint

II. General Information on Data Processing

We process personal data of our visitors and interested parties (visitors) only to the extent that this is necessary for the provision of a functioning website and our marketing measures.

1. Terms

Regarding the used terms,
a) “personal data” means any information relating to an identified or identifiable natural per-son (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factor(s) specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
b) “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
c) “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
d) “consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Processed Data

We process the following types of data
– usage data (e.g. access times)
– meta data (e.g. device information, such as operating system and browser version, IP addresses)
– analysis data (e.g. session duration, viewing contact data, playing media, adding favourites, campaign tracking)
– device data (e.g. device type, device settings)
– location data

3. Data Subjects

Visitors of our online presence.

4. Data Processing Purpose

The purpose of data processing by us is to keep our online presence incl. its contents and functions available. Furthermore, we process data to optimise our own security measures and the online presence as well as to improve the success monitoring of our web presence.

5. Legal Bases for Personal Data Processing

To the extent that we obtain a consent from the data subject for processing operations of personal data, point (a) of Art. 6(1) GDPR serves as the legal basis.
To the extent that any processing of personal data is necessary for compliance with a legal obligation to which our company is subject, point (c) of Art. 6(1) GDPR serves as the legal basis.
For the case that the vital interests of the data subject or of another natural person requires any processing of personal data, point (d) of Art. 6(1) GDPR serves as the legal basis.
If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, point (e) of Art. 6(1) GDPR serves as the legal basis.
Where the processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party, except where such interest is overridden by the interests or fundamental rights and freedoms of the data subject, point (f) of Art. 6(1) GDPR serves as the legal basis for the processing.
The processing of data for purposes other than those for which it has been collected by us is governed by Art. 6(4) GDPR.

6. Data Erasure and Retention Period

The data subject’s personal data will be erased or blocked once the purpose of retention ceases to be relevant. In addition, data may be retained if this is provided for by the European or national legislator in legal EU regulations, laws or other regulations to which the controller is subject. Data is also blocked or erased if a retention period prescribed by these norms expires. A verification is regularly performed every 14 months.

7. App-Store Buttons

On this website you will find buttons for the Apple App Store and the Google Play Store. When you click on these buttons, you will be redirected to the corresponding platforms. Personal data such as your IP address may be transmitted to the operators of the platforms (Apple Inc. and Google LLC). Further information on data processing can be found in the privacy policies of Apple (https://www.apple.com/legal/privacy/) and Google (https://policies.google.com/privacy). By clicking on the links, you will be redirected to third-party websites.

III. Data Subject Rights

1. Right of Access

You have the right to obtain confirmation as to whether or not data concerning you is being processed. The controller provides a copy of the personal data undergoing processing.

2. Right to Rectification

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you.

3. Right to Erasure / Restriction of Processing

You have the right to obtain the erasure of data concerning you without undue delay or a restriction of processing of the data in accordance with the legal stipulations.

4. Right to Data Portability

You have the right to receive data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller in accordance with the legal stipulations.

5. Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you are of the opinion that the processing of the personal data concerning you infringes the GDPR.

6. Right of Withdrawal

You have the right to withdraw granted consents with effect for the future. This does not affect the lawfulness of the data processed based on consent before its withdrawal.

7. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1). Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.

IV. Website / Contents

1. Meta Data

Where our online services are utilised, we may log the IP address and access time and duration. This is based on our legitimate interests as well as on those of the visitors in the protection against misuse or similar unauthorised use. This data is disclosed to third parties only to the ex-tent that this is necessary to pursue our claims under point (f) of Art. 6(1) GDPR or a legal obligation exists in the sense of point (c) of Art. 6(1) GDPR. The retention period is usually one month.

2. Hosting

The server capacities utilised by us serve to provide infrastructure services, computing capacities, memory space and database services, security as well as technical maintenance services used by us to provide our online presence. Within this framework, we process meta data of visitors of our online presence. Our legitimate interest is an efficient and safe provision of our online presence. The legal bases for this are point (f) of Art. 6(1) and Art, 28 GDPR.

3. Log Files

We collect data on every access to the server on which www.wodoto.app is located (log files); this data collection is based on legitimate interests as per point (f) of Art. 6(1) GDPR. This includes the accessed webpage, access date and time, transferred data volumes, browser type and version, operating system, previously accessed website (referrer URL), IP address and provider of the access request. This serves the security of our online presence.
Log files are retained for a duration of 7 days and erased afterwards. This does not apply to data requiring retention for evidentiary purposes.

4. Cookies and similar technologies