Anna Kimmerle-Hürlimann, Management zapptales GmbH

Lucile-Grahn-Str. 47, 81675 München

Our company data protection officer can be contacted at the above address or at datenschutz[at]zapptales.com

a) When visiting the website

When you visit our website, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• Name of the retrieved file
• Date and time of retrieval
• The amount of data transferred
• Message as to whether the retrieval was successful
• Description of the type of web browser used
• Operating system used
• The previously visited page
• Provider
• Your IP address

The mentioned data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability as well as
• For other administrative purposes.

The legal basis for data processing is Art. 6 para.1 lit.f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations under sections 4, 5 and 6 of this data protection declaration.

b) When uploading a WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chat to create a book or PDF

When you upload a WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chat via our software, via iPhone or Android App, via e-mail or web uploader, the following data will be temporarily stored on our servers:

• First name
• E-mail address
• Operating system (e.g. iOS or Android)
• Messaging service (WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram)
• Date and time of the upload
• Chat data (messages and containing media)

The mentioned data will be processed by us for the following purposes:

• Sending the login data to the personal chat editing page
• Potentially sending a maximum of 3 emails to remind you of the deadline for deleting your data
• Ensuring smooth support in the event of questions or technical problems
• Provision of the offer and creation of the print data when ordering

After four weeks (from ordering or last login, and for a maximum of 6 months in total), the data you exported via WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram will be automatically and permanently deleted. You can also carry out this deletion process personally and independently at any time via our apps.

If you activate the QR-Code function to print and replay videos and voice memos sent by you from WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram, this data will be stored by us until the expiry of the commissioned storage period. Of course, you can also request the irrevocable deletion of videos and voice messages at any time by requesting us to do so in text form, which can also be done by e-mail. In this case the printed QR codes in the respective book lose their function.

The legal basis for data processing is Art. 6 para.1 lit.b GDPR (processing for contractual purposes). WhatsApp, Facebook Messenger, Telegram, Threema, iMessage or Instagram Chats are always uploaded on a voluntary basis. This data will not be passed on to third parties without your express consent and will only be processed in the case of an order exclusively for the fulfilment and processing of the purchase contract.

c) When registering for our newsletter

If you have expressly consented according to Art. 6 para.1 lit.a GDPR, we will use your e-mail address to regularly send you our newsletter. To receive the newsletter, you only need to provide your name and e-mail address.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscription request at any time by e-mail to datenschutz@zapptales.com.

d) When using our contact options

If you have any questions, we offer you several ways to contact us. Depending on how you contact us, the following data will be collected:

a. By e-mail to info[at]zapptales.com or support[at]zapptales.com, or when using our contact form:

• Your name
• Your e-mail address
• Date and time of the contact request

b. By direct message on our Facebook page:

• The user name you entered on Facebook
• Date and time of the contact request

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 lit.a GDPR on the basis of your voluntary consent and will be used exclusively to guarantee smooth support.

c. Furthermore, we offer the possibility to contact us via live chat while using our website or software. In this case, the following data is recorded:

• Operating system, device and browser
• The visited page
• Your IP address
• Location (country and, if applicable, city)
• Date and time of the contact request

We base the use of the live chat tool on Art. 6 para. 1 letter f) GDPR: the processing takes place to ensure smooth support and is therefore necessary to protect our legitimate interests.

e) On completion of an order

If you place an order for printing a book or downloading a PDF of your chat data, the following data will be provided by you during the order process and stored by us for the fulfilment of the purchase contract:

• The date and time of the order
• Information about the ordered product
• First and last name
• E-mail address
• Delivery address
• DHL customer number (for delivery to a packing station)
• Billing address (if different)
• Payment method (e.g. PayPal, Visa, etc.)

The mentioned data are processed by us expressly for the fulfilment of the purchase contract (Art. 6 exp. 1 lit. b GDPR).

In addition, some of this data will be used in our legitimate interest to analyze and improve our services. The legal basis for data processing is Art. 6 para.1 lit.f GDPR. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We will only pass on your personal data to third parties if:

• You have given your express consent pursuant to Art. 6 para. 1 lit.a GDPR,
• The disclosure pursuant to Art. 6 para.1 lit.f GDPR is necessary and there is no reason to assume that you have a predominant interest worthy of protection in the non-disclosure of your data,
• In the event that a legal obligation exists for the transfer pursuant to Art. 6 para.1 lit.c GDPR, and
• This is legally permissible and required by Art. 6 para. 1 lit.b GDPR for the processing of contractual relationships with you.

We use so-called cookies in some areas of our website. Such file elements allow your computer to be recognized as a technical unit during your visit to this website in order to provide you with the information you need and to facilitate your use of our offer – also during repeat visits. As a rule, however, you have the option of setting your Internet browser so that you are informed of the occurrence of cookies so that you can accept or exclude them or delete existing cookies.

Please use the help function of your Internet browser to obtain information on how to change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.

Cookies do not allow a server to collect private data from your computer or from another server. They do no damage to your computer and contain no viruses.

We base the use of cookies on Art. 6 Para. 1 lit.f GDPR: processing is carried out to improve the quality of our website. It is therefore necessary to safeguard our legitimate interests.

In order to improve our website, we use cookies and comparable technologies (e.g. web beacons) for the statistical recording and analysis of general usage behaviour based on access data. We also use analysis services to evaluate the use of our various marketing channels.

The legal basis for the data processing described in the following section is Art. 6 Para. 1 S. 1 lit. f GDPR, based on our legitimate interest in the needs-based design and continuous optimisation of our website. In the following list of the technologies used by us, you will also find information on the possibilities of objection regarding our analysis measures by means of a so-called opt-out cookie.

Please note that after deleting all cookies in your browser or later use of another browser and/or profile, an opt-out cookie must be set again.

We use Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

We would also like to point out that the code “gat._anonymizeIp();” has been added to Google Analytics to ensure anonymous collection of IP addresses (so-called IP masking).

You may also prevent Google from registering the data generated by the cookie and the data relating your use of our website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en).

An opt-out cookie is then set to prevent further collection of your data when you visit this website.

This procedure is particularly recommended when accessing our site via mobile devices.

For more information on terms of use and data protection, please visit www.google.com/analytics/terms/en.html.

We base the use of the aforementioned analysis tool on Art. 6 para. 1 letter f) GDPR: the processing takes place for the analysis of the usage behavior and is therefore necessary to protect our legitimate interests.

We would like to present our users advertising tailored to their interests or special offers (“interest-based advertising”) and to limit the frequency of displaying certain advertising. To this end, we use the tools described below.

Responsibility for processing data in connection with the tools lies with the respective provider, unless we have indicated otherwise. For each tool you will find information on the provider and on how you can object to the collection of data using this tool. Please note that your objection will not switch off the advertising. Your objection only means that no interest-based advertising based on your usage behaviour can be shown to you.

The legal basis for the data processing described in the following section is Art.6Abs. 1 S. 1 lit. f GDPR based on our legitimate interest in the promotion of our products and services in personalized form.

a. Using the visitor action pixel from Facebook

We use the “visitor action pixel” offered by Facebook Inc, 1601 South California Ave, Palo Alto, CA 94304, USA (“Facebook”) within the web pages of this offer. This allows users’ behavior to be tracked after they have been redirected to the offer’s website by clicking on a Facebook ad. This process is designed to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help to optimize future advertising efforts. If you are a Facebook member and Facebook has allowed this through your account privacy settings, Facebook will also link the information we collect from your visit on our website to your member account and use it to target Facebook ads. A cookie may also be stored on your computer for these purposes. The data collected remains anonymous for zapptales GmbH, so it does not provide us with any information about the identity of the users. However, Facebook stores and processes the data so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (www.facebook.com/about/privacy). If you do not want data to be collected via the Facebook pixel, you can deactivate this here: www.facebook.com/settings?tab=ads (you must be logged in to Facebook). If you are not a Facebook member, you can prevent Facebook from processing your data by clicking the “Facebook” deactivation button on the YourOnlineChoices-website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/uk/your-ad-choices.

b. Facebook Custom Audiences

If you have consented to this on Facebook, we also use the Facebook Custom Audiences tool offered by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), which enables Facebook to target advertising to you on Facebook as part of retargeting on our behalf. To do this, we send your e-mail address, which you provided to us when you purchased a product from us, in encrypted form to Facebook. If you are a member of Facebook, it thus becomes known to Facebook when you make a purchase on zapptales.

We also use Facebook’s Look-A-Like Audiences feature, which allows Facebook to show ads to users who have similar profile characteristics to you on Facebook.

For details of Facebook’s data processing, please refer to the Terms of Use for Custom Audiences, available at https://www.facebook.com/ads/manage/customaudiences/tos.php .

For more information about Facebook’s collection and use of the data and your rights and choices about protecting your privacy, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/. Alternatively, you can deactivate the remarketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#_=_. You must be logged in to Facebook to do this.

c. Facebook-SDK (Software Development Kit)

Within our app we use the Software Development Kit (SDK) from Facebook. The Facebook SDK is published and administered by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The Facebook SDK allows for various evaluations of the app’s installation and the success of the advertising campaign.

In addition, individual activities (events) of the user within the app can also be analyzed, for example to define the target group for advertising campaigns more precisely and better (as explained in point 6 b) Facebook Custom Audiences). For this purpose, our app sends Facebook pseudonymous data and the information that the app has been launched. The Advertising ID provided by the operating system of the end device serves as the pseudonym (name may differ depending on the operating system).

Further information about the Facebook SDK under iOS can be found here: https://developers. facebook.com/docs/ios For Android here: https://developers.facebook.com/docs/android.

On our website we use social plugins of the social network Facebook on the basis of art. 6 para.1 lit.f GDPR.

The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider. The integration of these plugins by us takes place by means of the so-called two-click method to protect visitors to our website in the best possible way.

Our website uses social media plugins from Facebook to personalize its use. For this we use the “LIKE” or “SHARE”-button. This is an offer from Facebook.

If you access a page from our website which contains such a plugin, your browser builds a direct connection to Facebook’s servers. The content of the plugin is sent directly from Facebook to your browser and integrated into the website. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged on to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account.

If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and demand-oriented design of Facebook pages. To this end, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regards to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in the data protection information (https://www.facebook.com/about/privacy/) of Facebook.

Our websites use the “Ads Conversion Tracking” and “Ads Remarketing” services provided to users in the European Economic Area, Switzerland and Liechtenstein by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and to all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 (“Google”). “Ads Conversion Tracking” is used to record and analyse customer actions defined by us (such as clicks on an ad, page views, downloads). We use “Ads Remarketing” to display individualised advertising messages for our products on Google’s partner websites. Both services use cookies and similar technologies for this purpose. Google may transfer the data collected in this context to a server in the USA for analysis and store it there. In the event that personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield.

If you use a Google Account, Google may link your web and app browsing history to your Google Account and use information from your Google Account to personalize ads, depending on the settings on your Google Account. If you don’t want this association with your Google Account, you’ll need to sign out of Google before you visit our website.

You can configure your browser to reject cookies, as shown above. You can also disable the “Personalized Ads” button in Google’s advertising preferences. In this case, Google will only display general ads that are not selected based on information collected about you.

For more information, please see Google’s privacy policy and data usage guidelines.

The Trusted Shops trust badge is included on this website to display our Trusted Shops seal of approval and any collected evaluations as well as to offer Trusted Shops products to buyers after an order. This serves the protection of our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the trust badge is clicked, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.