Maximilian Gowarzewski, Alt-Moabit 138 10557 Berlin(“we”, “us”, or “our”) operates the website available at https://jonda.app and the associated sub-pages (hereinafter also referred to as the “website”).
With this privacy policy, we would like to inform you about how we process personal data when you visit our website. We hereby also fulfil our obligation to inform you in accordance with Art. 13 and Art. 14 General Data Protection Regulation (GDPR).
- Identity of the controller
The controller responsible for processing data on this website is:
Maximilian Gowarzewski
Flemingstr. 7
10557 Berlin
E‑Mail: max@jonda.app
- Purposes and legal bases as well as period for which the personal data will be stored
- General use of the website
The website provider automatically collects information about the visits on our website. Therefore, when you visit our website, certain technical data are automatically transmitted to us. This includes the following information:
- Your IP address;
We process your IP address only to allow your device to establish a connection to our webserver over the Internet as well as to help us identify, diagnose and fix security problems (such as DoS attacks). This processing is based on Art. 6 par. 1 lit. f) GDPR.
In order to maintain system security, our web host also creates log files to ensure the security and integrity of our IT systems. These purposes at the same time constitute our legitimate interest to process these data (Art. 6 para. 1 lit. f) GDPR).
We store these log files for a period of […30…] days and delete them after expiration of the retention period.
- Contact form
We offer you the opportunity to contact us, for example via our above-mentioned e-mail address or by filling out our contact form. In these cases, you can send us [your e-mail address and, if applicable, your name, a subject and the content of the message. The processing is based on our legitimate interest to respond to your request (Art. 6 para. 1 lit. f) GDPR).
We store your e-mail requests for a period of […12…] months and delete them after expiration of the retention period.
- Recipients of the data
In case we are not able to provide services ourselves, we use external service providers. These service providers are primarily providers of IT services, such as our web host, e-mail provider or telecommunications provider.
If not specifically mentioned elsewhere in this privacy policy, we do not transfer your data to third countries.
- Your rights as a data subject
If the respective requirements are met, the GDPR grants you certain rights as a data subject.
– Art. 15 GDPR – Right of access: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain information.
– Art. 16 GDPR – Right to rectification: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
– Art. 17 GDPR – Right to erasure: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay.
– Art. 18 GDPR – Right to restriction of processing: You shall have the right to obtain from us the restriction of processing.
– Art. 20 GDPR – Right to data portability: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you shall have the right to transmit those data to another controller without hindrance from us. You shall also have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
– Art. 21 GDPR – Right to object: You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate interests or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
In such case, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims.
– Art. 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
- Your obligation to provide us with personal data
You have no statutory or contractual obligation to provide us with any personal data. However, we may not be able to provide you with our services if you decide not to do so.
- Existence of automated decision-making, including profiling
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- Internet specific processing or use of personal data
- Cookies
For providing you the services of the website, we may use cookies. Cookies are small text files, which are transferred from the website and stored on your device. Cookies cannot execute programs or infect your device with computer viruses.
If you wish to prevent us from storing cookies on your device, your web browser or device may provide you with certain settings to do so. You may find an instruction on how to change your settings in the help section of your browser or device. The respective settings only apply to the device you are currently using. If you use another device, change your web browser or reinstall your browser you may have to change the respective settings again. Please, be aware that not accepting cookies may lead to you not being able to fully use the website.
- Facebook pixel
We use the “Facebook pixel” of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
By displaying this pixel as well as by storing cookies by Facebook or third parties in your browser, Facebook can then recognize whether a Facebook Ad was successful, e.g. whether it led to an online purchase. We only receive statistical data from Facebook without reference to a specific person. This enables us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. In addition, the data collected by the pixel are used in certain situations to play out target-group-specific advertising. In particular, if you are logged into you Facebook account, we refer you to their data protection information https://www.facebook.com/about/privacy/.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our purpose to evaluate the effectiveness of Facebook advertisements constitutes our legitimate interest.
If you wish to prevent the use of pixel data for target-group-specific advertising, you can do so by making the necessary settings at https://www.facebook.com/ads/settings.
Alternatively, you can disable the Facebook pixel on the Digital Advertising Alliance page at http://www.aboutads.info/choices/.
The cookies have a functional duration of […12…] months and will be deleted after expiration of this period.
- Facebook “Custom Audiences from your website”
We use the feature “Custom Audiences from your website” of the social network Facebook of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) within our website.
This feature allows Facebook to recognize that you have visited our website and display targeted advertisements to you. As mentioned above, the Facebook pixel is integrated on our pages. When you visit our pages, the pixel-code establishes a direct connection between your browser and the Facebook server. In addition to certain technical data, Facebook also receives information that our page has been accessed by your terminal device. If you are a Facebook user, Facebook can assign the visit to our pages to your user account. Please note that Facebook may be able to identify you across multiple websites. As the site provider, we have no knowledge of the content of the data transmitted and how the data are used by Facebook, so Facebook is responsible for the processing of your data. We can only choose to which segments of Facebook users (such as age, interests) our advertising should be displayed. In doing so, we use one of several Custom Audiences working methods in which, apart from the data collected by the pixel, no data records, in particular no e-mail addresses of our users – neither encrypted nor unencrypted – are transmitted to Facebook. You can find further information about data processing by Facebook in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Please click here if you do not want to receive target-group-specific advertising via custom audiences: https://www.facebook.com/ads/settings. Alternatively, you can deactivate the Facebook Pixel on the Digital Advertising Alliance website at http://www.aboutads.info/choices/
The legal basis for the use of this service is Art. 6 para. 1 lit. f) GDPR. Our purpose to evaluate the effectiveness of Facebook advertisements constitutes our legitimate interest.
- General opt-out regarding “Facebook Pixel” and Facebook “Custom Audiences from your website”
You can also prevent Facebook from processing the data described above as part of “Facebook Pixel” and Facebook “Custom Audiences from your website” by clicking on the following link:
https://www.facebook.com/full_data_use_policy
This causes a corresponding opt-out to set a cookie in your browser. Please note that this cookie is browser-related, so if you use more than one device and/or browser, you must also click the opt-out link there to set the cookie.
- Google Maps
We use the Google Maps API to display an interactive map provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
By using Google Maps, you transmit information (including your IP address) directly to a Google server. If you are logged into your Google Account, Google will also use cookies to provide you with personalised features. We have no control over such data processing. If you do not want Google to set cookies, please log out of your Google account before using it.
For more information about data processing by Google, please refer to Google’s privacy policy at www.google.com/privacypolicy.html.
The legal basis for providing this service is Art. 6 para. 1 lit. f) GDPR. The legitimate interest consists in the comfort we offer our users.
We do not store any personal data ourselves in this context.
- Changes to this privacy policy
We may modify this privacy policy from time to time. We will notify you of changes by posting changes here, or by other appropriate means.
Berlin, November 2019