HOW WE USE YOUR DATA TO ENABLE OUR SERVICES
Welcome to SaySay.Love / SaySay.Love Online Store,
a service of ComCap Commerziale Unternehmensberatungs GmbH, Neue Kreisstraße 23,
14109 Berlin, Germany (hereinafter “we,” “us” or “our”).
1 Controller & data protection officer
The data controller responsible for the processing of your personal data when using our services within the meaning of Article 4 (7) of the General Data Protection Regulation is:
ComCap Commerziale Unternehmensberatungs GmbH, Neue Kreisstraße 23, 14109 Berlin, Germany
General Inquiries: support@saysay.Love
Tel: +49 (0) 172 / 890 3115
Data protection officer: support@saysay.Love
2 What is personal data?
“Personal data” within the meaning of Article 4 (1) of the General Data Protection Regulation is:
“… any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.”
3 The purposes for which we process your personal data
We collect and process your personal data for the purpose of providing you with our services and their advanced features, continuously improving and developing them, ensuring their technical functionality and ensuring the security of our services.
4 What personal information we collect from you and how we use it
What personal information we collect from you and how we use it
Data you submit to us …
(a) … if you register as a buyer to purchase our products
If you would like to purchase products we need the following data from you to create your user account and to carry out transactions:
● Your real name (i.e. your legal name)
● Your address
● Your e-mail address
● The name of your company and the tax number or sales identification number if you act as a merchant or a company
● Your payment details such as credit card number, credit card holder, etc. This data is requested at the latest when you want to acquire a license to use content. However, we do not
store this data ourselves; it is sent by us directly to the payment service provider appointed by us and deleted after the transaction has been completed.
Providing this information about you is required. Otherwise, we cannot create a user account for you and cannot conduct transactions with you and therefore not grant you any licenses.
We use this data
● To create a user account and identify you.
● To handle transactions.
● To send you notifications concerning transactions made (i.e. license purchases and the related payment processing).
WITH YOUR CONSENT, we use your e-mail address to send you our newsletter.
We usually store this data in our active storage only until your user account is deleted and pending transactions are completed. Following this, we will archive the data for the duration of the statutory retention periods (tax-related, e.g. 10 years).
The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR) or your consent (Art. 6 (1) lit.a GDPR) insofar as it is required and you have given it to us (e.g. for the newsletter).
(b) … if you provide additional, voluntary information in your profile
If you have a author account, you can voluntarily provide additional profile information in your profile to make it more meaningful. For example you can:
● Change the username automatically generated by us.
● Specify a name for your profile (this does not necessarily have to be your real name, i.e. your legal first and last name).
● Upload a picture of you for the profile picture.
● Provide further information about you for the profile text.
We use this data exclusively to make it visible in your profile to other users.
As a rule, we only save this data until your user account has been deleted and pending transactions have been completed.
The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) lit.b GDPR).
(c) … if you contact our support
If you contact our support, we will save your e-mail address and any other information that you provide in the context of your request.
The data will be stored and used exclusively for the processing of your respective request and any subsequent correspondence.
The data is stored up to six (6) months after the completion of your request with us and then deleted as far as this concerns personal data.
The legal basis for this processing of your personal data is the fulfillment or initiation of a contract between you and us (Art. 6 (1) (b) GDPR).
(d) … if you contact us for business purposes
If you send us inquiries via our contact form or by e-mail, we will save:
● Your e-mail address
● All other information provided by you.
We use this data to answer your inquiries and to contact you regarding possible cooperation.
We store this data until six (6) months after the completion of your inquiry with us and then delete it unless you expressly agree that we may keep it longer.
The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR).
(e) … if you register for our newsletter
If you register for our newsletter on our site, we will save:
● The e-mail address you provided.
We use your e-mail address only to send you our newsletter and to verify your e-mail address beforehand, so that you do not receive the newsletter unintentionally, e.g. because an unauthorized third party entered your e-mail address (so-called double opt-in).
Your e-mail address will be deleted as soon as you unsubscribe from the newsletter.
The legal basis for this processing of your personal data is the fulfillment of a contract between you and us (Art. 6 (1) (b) GDPR) or your consent (Art. 6 (1) (a) GDPR), which you provide to us with your request to receive our newsletter.
4.2 Data that we automatically collect when you visit our website and our online store
(a) Cookies and similar technologies
For our service to work properly, we sometimes store small files – called cookies – on your device. This is common on most major websites.
(i) What are cookies?
A cookie is a small text file that leaves a web portal on your device (computer, tablet or smartphone) when you visit it. This allows the portal to “remember” certain inputs and settings (e.g., login, language, font size, and other display preferences) over a period of time, and you do not need to re-enter them each time you visit and navigate the portal.
(ii) How can you exercise control over cookies?
You can control and/or delete cookies at your convenience. You can find out how to do this in the help function of the browser you are using or, for example, here: aboutcookies.org. You can delete all cookies stored on your device and set most browsers to prevent the storage of cookies. But then you may be required to make some settings manually each time you visit a page and accept the impairment of some features.
(iii) SaySay.Love cookies
of your session ID, so that our server can recognize you. This cookie is valid for one month and is automatically renewed afterwards. This is mandatory for the use of our service because features are otherwise impaired, and you e.g. cannot upload or download content for the purpose of licensing.
(iv) Cookies and similar third-party technologies
–> Provision of our services
– Google Analytics
Google processes this information on our behalf to analyze the use of the website by the user, to provide reports on the activities on the website and to provide other services in connection with the use of the website for SaySay.Love. As part of the services provided by Google Analytics, the IP address transmitted by the user’s browser will not be merged with other data collected by Google.
You may prevent the collection of cookie-generated data about your use of the website (including IP address) and its processing by Google by downloading and installing the following browser plug-in via the link below:
– Facebook Pixel
4.3 Data that we receive from third parties
When you register with us through Facebook, Inc. or Google, Inc., we will receive the authentication information required for your registration, i.e.:
● Your first and last name
● Your e-mail address
● Your user ID, and
● All data that you have specified in your public profile.
We use all of this information only to the same extent as the data that you provide when registering through our app or website.
If you log in via the app, the data transmitted to us will also be used to help you find your Facebook / Google+ friends or be found by them, as long as they have also linked their account to the respective services.
5 Whom do we share your personal data with?
We only pass on your personal data to third parties (including processors, i.e. third parties who process data for us on our behalf), insofar as this is stated below or you have expressly consented to this.
If and insofar as your data is passed on to third parties whose registered office is not located in an EEA country, we ensure that the respective recipient has an adequate level of data protection, in the respective contracts there are sufficient confidentiality agreements (e.g. in the contracts with our sales partners), the standard contractual clauses of the European Commission for the transfer of personal data to processors are agreed, or we obtain your due and proper consent.
5.1 Other users
Other users of our services, whether registered or not, or those accessing the content uploaded to SaySay.Love through a so-called API (Application Programming Interface), may be shown any information displayed on your public SaySay.Love profile (not your e-mail address).
5.2 Distributors and licensees
We will pass your names stored in the metadata of your content, for the purpose of naming and knowing the author, to all who acquire use licenses for your content as well as our partners who market your content abroad. At the latest at their request, they also receive model releases and property releases for the purpose of proving the consent of the persons depicted or the persons entitled to the objects depicted. You agree with this transfer of data if you send us the respective model release or property release.
5.3 Service providers
We also share your information with companies whose services we use to provide our services and manage our business affairs – such as conducting payment transactions, sending push notifications and e-mail messages, fraud monitoring and prevention, marketing services, usage analysis, hosting services, technical services (such as quality assurance and performance analysis), CRM services, customer service management services, conversion of geodata into actual locations etc. These service providers receive personal data about you only as far as this is necessary for the fulfillment of their respective performance obligation towards us. They will not be granted any further rights to use your data.
5.4 Government agencies, authorities & courts, legal representatives
In some cases, we may pass on your personal data if:
- We are required to disclose information as a result of a subpoena, court order or other legal or regulatory requirement.
● We believe in good faith that the disclosure is required:
– To prevent fraud, or
– To respond to or defend our services against attacks, or
– To protect the property or security of SaySay.Love, our customers, users or the general public.
5.5 Legal successor
6 Your control options & rights
In addition to the ability to exercise control over your personal information and other data by changing your information and settings in your user account and, if necessary, creating links to third-party applications such as Facebook or Google, allowing or blocking cookies, or making do-not-track settings in your browser, you have the following legally protected rights. We offer you communications and measures in this respect in principle free of charge. However, in the case of manifestly unfounded or excessive requests, especially in the case of frequent repetition, we may levy a fee or refuse to act.
6.1 Information, correction, deletion and/or restriction
You have the right at any time to request information about what personal data we process about you and to demand correction, deletion and/or restriction of your personal data stored by us. For your security, we will ask you to verify your details in the event of such a request or change. Please send us a message at: firstname.lastname@example.org
6.2 Revocation of your consent
If the data processing by us is based on your consent, you can revoke this consent at any time. To revoke your consent, please send us a message at: email@example.com
6.3 Right to data portability
You have the right to demand that we provide you with the personal data relating to you in a structured, common and machine-readable format, provided that the data processing is based on your consent or a contract between us and is done by automated means.
6.4 Right to lodge a complaint with the regulatory authority
You also have the right to lodge a complaint about us with our regulatory authority.
7 What do we do for the security of your data?
We have made technical and organizational arrangements to secure the website, mobile applications and other systems against loss, destruction, access, modification or disclosure of your personal data. Access to your profile is only possible after entering a password. You should always treat access information confidentially and close the browser window as soon as the connection with SaySay.Love is finished.
24 May 2018