Welcome to SaySay.Love / SaySay.Love Online Store,

a service of  ComCap Commerziale Unternehmensberatungs GmbH, Neue Kreisstraße 23, 
14109 Berlin, Germany (hereinafter “we,” “us” or “our”).

In this privacy policy, we provide you with an overview of how we process your personal data when you use our services, in accordance with our information requirements and in accordance with the General Data Protection Regulation, which will come into force on 25 May 2018. The privacy policy applies regardless of whether you are registered with us or not, or are using our website www.saysay.love and our online store store.saysay.love
By using our services, you consent to the processing of your data in accordance with this privacy policy.

IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, YOU SHOULD NOT USE OUR SERVICES.

1 Controller & data protection officer

The data controller responsible for the processing of your personal data when using our services within the meaning of Article 4 (7) of the General Data Protection Regulation is:

ComCap Commerziale Unternehmensberatungs GmbH, Neue Kreisstraße 23, 
14109 Berlin, Germany
General Inquiries: support@saysay.Love
Tel: +49 (0) 172 / 890 3115

Data protection officer: support@saysay.Love

2 What is personal data?

“Personal data” within the meaning of Article 4 (1) of the General Data Protection Regulation is:

“… any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.”

3 The purposes for which we process your personal data

We collect and process your personal data for the purpose of providing you with our services and their advanced features, continuously improving and developing them, ensuring their technical functionality and ensuring the security of our services.

4 What personal information we collect from you and how we use it

What personal information we collect from you and how we use it

Data you submit to us …

(a) … if you register as a buyer to purchase our products

If you would like to purchase products we need the following data from you to create your user account and to carry out transactions:

● Your real name (i.e. your legal name)
● Your address
● Your e-mail address
● The name of your company and the tax number or sales identification number if you act as a merchant or a company
● Your payment details such as credit card number, credit card holder, etc. This data is requested at the latest when you want to acquire a license to use content. However, we do not
store this data ourselves; it is sent by us directly to the payment service provider appointed by us and deleted after the transaction has been completed.

Providing this information about you is required. Otherwise, we cannot create a user account for you and cannot conduct transactions with you and therefore not grant you any licenses.

We use this data

● To create a user account and identify you.
● To handle transactions.
● To send you notifications concerning transactions made (i.e. license purchases and the related payment processing).

WITH YOUR CONSENT, we use your e-mail address to send you our newsletter.

Storage time:

We usually store this data in our active storage only until your user account is deleted and pending transactions are completed. Following this, we will archive the data for the duration of the statutory retention periods (tax-related, e.g. 10 years).

Legal basis:

The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR) or your consent (Art. 6 (1) lit.a GDPR) insofar as it is required and you have given it to us (e.g. for the newsletter).

(b) … if you provide additional, voluntary information in your profile

If you have a author account, you can voluntarily provide additional profile information in your profile to make it more meaningful. For example you can:

● Change the username automatically generated by us.
● Specify a name for your profile (this does not necessarily have to be your real name, i.e. your legal first and last name).
● Upload a picture of you for the profile picture.
● Provide further information about you for the profile text.

We use this data exclusively to make it visible in your profile to other users.

Storage time:

As a rule, we only save this data until your user account has been deleted and pending transactions have been completed.

Legal basis:

The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) lit.b GDPR).

(c) … if you contact our support

If you contact our support, we will save your e-mail address and any other information that you provide in the context of your request.

The data will be stored and used exclusively for the processing of your respective request and any subsequent correspondence.

Storage time:

The data is stored up to six (6) months after the completion of your request with us and then deleted as far as this concerns personal data.

Legal basis:

The legal basis for this processing of your personal data is the fulfillment or initiation of a contract between you and us (Art. 6 (1) (b) GDPR).

(d) … if you contact us for business purposes

If you send us inquiries via our contact form or by e-mail, we will save:

● Your e-mail address
● All other information provided by you.

We use this data to answer your inquiries and to contact you regarding possible cooperation.

Storage time:

We store this data until six (6) months after the completion of your inquiry with us and then delete it unless you expressly agree that we may keep it longer.

Legal basis:

The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR).

(e) … if you register for our newsletter

If you register for our newsletter on our site, we will save:

● The e-mail address you provided.

We use your e-mail address only to send you our newsletter and to verify your e-mail address beforehand, so that you do not receive the newsletter unintentionally, e.g. because an unauthorized third party entered your e-mail address (so-called double opt-in).

Storage time:

Your e-mail address will be deleted as soon as you unsubscribe from the newsletter.

Legal basis:

The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR) or your consent (Art. 6 (1) (a) GDPR), which you provide to us with your request to receive our newsletter.

4.2 Data that we automatically collect when you visit our website and our online store

(a) Cookies and similar technologies

For our service to work properly, we sometimes store small files – called cookies – on your device. This is common on most major websites.

(i) What are cookies?

A cookie is a small text file that leaves a web portal on your device (computer, tablet or smartphone) when you visit it. This allows the portal to “remember” certain inputs and settings (e.g., login, language, font size, and other display preferences) over a period of time, and you do not need to re-enter them each time you visit and navigate the portal.

(ii) How can you exercise control over cookies?

You can control and/or delete cookies at your convenience. You can find out how to do this in the help function of the browser you are using or, for example, here: aboutcookies.org. You can delete all cookies stored on your device and set most browsers to prevent the storage of cookies. But then you may be required to make some settings manually each time you visit a page and accept the impairment of some features.

(iii) SaySay.Love cookies

On our website we use cookies for storage:

of your session ID, so that our server can recognize you. This cookie is valid for one month and is automatically renewed afterwards. This is mandatory for the use of our service because features are otherwise impaired, and you e.g. cannot upload or download content for the purpose of licensing.

Your decision for (or against) the use of cookies. Cookies are valid for 6 months. They are not absolutely necessary for the use of our service. The information collected through cookies will not be used to identify you and the information will be completely under our control. Cookies are not used for purposes other than those mentioned here.

(iv) Cookies and similar third-party technologies

In addition to our own cookies, we also use third-party cookies and similar technologies (such as counting pixels) to provide our services, including troubleshooting, quality assurance, system-security monitoring, statistics and analytics, and a user-friendly design of our offerings (e.g. site-specific photo contests, etc.), to measure efficiency and for optimization of advertisements we provide with other providers. As the providers and other technologies used may change, you should periodically review our privacy policy for updates.

–> Provision of our services

– Google Analytics

On our website we use Google Analytics, a web analytics tool from Google Inc. (hereafter “Google”). Google Analytics uses cookies to analyze the use of the website by the user. The information generated by the cookies is regularly transmitted to a Google server in the US and stored there. However, since IP anonymization is enabled on our website, the IP address of the user will be abbreviated prior to transmission within the EU Member States or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and abbreviated there.

Google processes this information on our behalf to analyze the use of the website by the user, to provide reports on the activities on the website and to provide other services in connection with the use of the website for SaySay.Love. As part of the services provided by Google Analytics, the IP address transmitted by the user’s browser will not be merged with other data collected by Google.

You may prevent the collection of cookie-generated data about your use of the website (including IP address) and its processing by Google by downloading and installing the following browser plug-in via the link below:

http://tools.google.com/dlpage/gaoptout?hl=de

– Facebook Pixel

https://www.facebook.com/about/privacy/.

– LinkedIn

https://www.linkedin.com/psettings/advertising/actions-that-showed-interest

– Twitter

https://twitter.com/privacy?lang=de

4.3 Data that we receive from third parties

When you register with us through Facebook, Inc. or Google, Inc., we will receive the authentication information required for your registration, i.e.:

● Your first and last name
● Your e-mail address
● Your user ID, and
● All data that you have specified in your public profile.

We use all of this information only to the same extent as the data that you provide when registering through our app or website.

If you log in via the app, the data transmitted to us will also be used to help you find your Facebook / Google+ friends or be found by them, as long as they have also linked their account to the respective services.

5 Whom do we share your personal data with?

We only pass on your personal data to third parties (including processors, i.e. third parties who process data for us on our behalf), insofar as this is stated below or you have expressly consented to this.

If and insofar as your data is passed on to third parties whose registered office is not located in an EEA country, we ensure that the respective recipient has an adequate level of data protection, in the respective contracts there are sufficient confidentiality agreements (e.g. in the contracts with our sales partners), the standard contractual clauses of the European Commission for the transfer of personal data to processors are agreed, or we obtain your due and proper consent.

5.1 Other users

Other users of our services, whether registered or not, or those accessing the content uploaded to SaySay.Love through a so-called API (Application Programming Interface), may be shown any information displayed on your public SaySay.Love profile (not your e-mail address).

5.2 Distributors and licensees

We will pass your names stored in the metadata of your content, for the purpose of naming and knowing the author, to all who acquire use licenses for your content as well as our partners who market your content abroad. At the latest at their request, they also receive model releases and property releases for the purpose of proving the consent of the persons depicted or the persons entitled to the objects depicted. You agree with this transfer of data if you send us the respective model release or property release.

5.3 Service providers

We also share your information with companies whose services we use to provide our services and manage our business affairs – such as conducting payment transactions, sending push notifications and e-mail messages, fraud monitoring and prevention, marketing services, usage analysis, hosting services, technical services (such as quality assurance and performance analysis), CRM services, customer service management services, conversion of geodata into actual locations etc. These service providers receive personal data about you only as far as this is necessary for the fulfillment of their respective performance obligation towards us. They will not be granted any further rights to use your data.

5.4 Government agencies, authorities & courts, legal representatives
In some cases, we may pass on your personal data if:

• We are required to disclose information as a result of a subpoena, court order or other legal or regulatory requirement.
  ● We believe in good faith that the disclosure is required:

– To prevent fraud, or
– To respond to or defend our services against attacks, or
– To protect the property or security of SaySay.Love, our customers, users or the general public.

5.5 Legal successor

We may use your data as part of a sale, merger or change of control, or in preparation for any of these events. If we merge with another entity, or acquire another entity, or sell part of our business, or if all or a significant portion of our assets are acquired by another entity, it is likely that your data will be shared with our advisors and advisors of the potential buyer and that the data is one of the assets to be transferred. In the case of succession described above, the acquiring company has the right to use your data in accordance with this privacy policy or a later proper amendment.

6 Your control options & rights

In addition to the ability to exercise control over your personal information and other data by changing your information and settings in your user account and, if necessary, creating links to third-party applications such as Facebook or Google, allowing or blocking cookies, or making do-not-track settings in your browser, you have the following legally protected rights. We offer you communications and measures in this respect in principle free of charge. However, in the case of manifestly unfounded or excessive requests, especially in the case of frequent repetition, we may levy a fee or refuse to act.

6.1 Information, correction, deletion and/or restriction

You have the right at any time to request information about what personal data we process about you and to demand correction, deletion and/or restriction of your personal data stored by us. For your security, we will ask you to verify your details in the event of such a request or change. Please send us a message at: support@saysay.love

6.2 Revocation of your consent

If the data processing by us is based on your consent, you can revoke this consent at any time. To revoke your consent, please send us a message at: support@saysay.love

6.3 Right to data portability

You have the right to demand that we provide you with the personal data relating to you in a structured, common and machine-readable format, provided that the data processing is based on your consent or a contract between us and is done by automated means.

6.4 Right to lodge a complaint with the regulatory authority

You also have the right to lodge a complaint about us with our regulatory authority.

7 What do we do for the security of your data?

We have made technical and organizational arrangements to secure the website, mobile applications and other systems against loss, destruction, access, modification or disclosure of your personal data. Access to your profile is only possible after entering a password. You should always treat access information confidentially and close the browser window as soon as the connection with SaySay.Love is finished.

8 Changes & updates to our privacy policy

We occasionally change and update our privacy policy to adapt it to changing requirements. If we make any material changes, we will notify you in advance by e-mail and/or through our services so that you can review the changes before they come into force. In the event of other updates or changes, we will publish the amended privacy policy without a separate notice on our site. Accordingly, you should periodically visit our privacy policy to ensure that you know the current regulations. If you do not agree with the changes, you should not use our services and delete your account if you have one. If you use our services after the effective date of our amended or updated privacy policy, the processing of your personal data is automatically subject to our updated privacy policy.

24 May 2018