Privacy Guidelines of Appventure GmbH

Operating the "Checkit: Connect & Check" Application ("App"), Appventure GmbH, associated with uhuhus KmG at Chamerstrasse 172, 6300 Zug, ("We" or "Appventure") is committed to safeguarding, processing, and utilizing your personal details in line with prevailing data protection norms. This document outlines the potential entitlements you might have regarding your data. Depending on the laws that apply to us, you might have more entitlements than those stated here, or some may not be available to you.

We kindly ask you to go through our App's General terms and conditions available at checkit.today/app-terms-and-conditions. This sets the terms for utilizing the App.

Upon using the App, we might handle personal information related to you. Should you opt to provide us with your data, we'll have the means to identify you, meaning we'll be processing your personal details. Here, 'personal data' pertains to any info connected to an identifiable or already identified individual.

Currently, our App is undergoing a beta test stage, with some features yet to be activated. Owing to the nature of such tests, there's a chance for personal data to be unintentionally disclosed, acquired, or administered during this period.

Our dedication to the security of data remains unwavering. We always put forth our best effort to guarantee apt safety measures. We adhere to the stipulations stated by the pertinent data protection laws.

Should you have queries about data safety, please connect with us for handling personal data at legal@checkit.today.

Data Management in Relation to Our App. Which details are recorded when you install and utilize our App?

Upon installing our App, specific technical details are autonomously recorded and retained by us until an automated removal, a standard practice during app installations and accesses:

The IP address of the device in use.
Your device's operating system version.
App configurations during our service utilization.
Designation of the IP address sector and the device's name.
The exact date and moment of your service engagement.
Any technical challenges faced while navigating the App.
Potentially, other statistical data.
The gathering and administration of this data aims to facilitate our App's functionality (initiating a link), ensuring enduring system reliability and sturdiness, flagging and examining glitches, refining our offerings, and for in-house statistical analyses. The processing of this data aligns with our legitimate interests.

Is personal data automatically collected through the App?

When using our App, we automatically collect certain data required to ensure the usability of the App. In particular:

- the internal ID of your device;

- the version of your operating system;

- the time of access.

The collection and processing of this data is carried out for the purpose of enabling the use of the App (establishing a connection), ensuring system security and stability over the long term and ensuring a customer friendly use of our App as well as internal statistical purposes. The processing of this personal data is within our legitimate interest.

The internal ID of your device may also be evaluated together with other data in the event of attacks on the network infrastructure or other unauthorised or abusive use of our website for the purpose of clarification and defence and, if necessary, used within the framework of criminal proceedings for identification and for civil and criminal action against the users concerned. The processing of this information is in our legitimate interest.

What data do we collect when you create an account with us?

To utilize the App during the beta stage, you'll need to provide the following information:

Phone number*
Email address*
Name*
Date of birth
Gender
Your location
Answers to questions about your preferences
Answers to polls (e.g. your preferred activities during different times of the day, your preferred food, your last visit to a dentist, your free-time activities, your work occupation)
Surveys about the App
Contact book
Identification Documents (by Yoti)

Fields marked with an asterisk (*) are mandatory during registration. If you don't provide these details, you won't be able to use the App. Fields without an asterisk are not mandatory, and you might not even be asked for them. By not providing non-mandatory information, you might not access the App's full functionalities.

We employ the mandatory details to verify your identity during log-ins. Processing this information is crucial for us to meet our pre-contractual and contractual commitments to you and aligns with our legitimate interests.

Do we employ tracking instruments and plugins in our App?

To enhance and tailor our App to your preferences, we might utilize tracking tools. Through this, we generate pseudonymized user profiles and utilize small text files saved on your device. The data arising from your App usage gets relayed to the servers of our service providers where it's stored and managed on our behalf. Beyond the information highlighted in the first section, we might gather details like:

The sequence of your navigation within the App
Duration of your engagement with the App
How you interact with specific offers and businesses
Geographical points of access, such as country, region, or city
Details about your device, including type, version, resolution, colour depth, and the dimensions of your browser window
Information on whether you're a first-time user or returning visitor

We utilize this information to analyze App usage, generate reports on App activities, and offer services connected to the App and online interactions for market research. This data aids us in tailoring the App based on user demands. Occasionally, legal obligations might compel us to share this data with third parties or, at times, they might process this data on our behalf.

Our objective in processing this data is to present the App in a user-friendly, customized manner and to innovate our services in alignment with user requirements.

For what duration is my data retained?

Your personal data remains with us only for the duration you have the App installed and are actively using it, as well as any additional time required in line with our legitimate interests. As mandated by legal regulations, certain contractual data, which might include contact details or scans of your passport or ID card's photo page, is retained by us for an extended period. Regulations from accounting, civil, and tax laws necessitate data retention, dictating that business interactions, finalized contracts, and accounting documents be preserved for durations extending up to 10 years. Once this data ceases to be crucial for delivering services to you, it's put under restrictions, implying its use is limited to fulfilling tax and accounting duties.

Is my data shared with external third parties?

Your personal data is only shared with external entities under specific conditions: if you've given explicit consent, if legal obligations necessitate such sharing, or if it's crucial for asserting our rights, notably those stemming from contractual agreements. Your data might also be shared with entities like our affiliate organizations, consultants, partners, or contributors when fulfilling our contractual commitments or for the furtherance and operation of the App.

Do we transfer personal data outside of the EEA?

Your personal information will be primarily processed within the EEA, as our data servers are located in Germany. However, under certain circumstances, we might process data outside of the EEA. For instance, even though our primary data storage is in Germany, in certain scenarios our third-party service providers could process personal data outside the EEA.

When personal data is processed outside the EEA by us or our service providers, we implement measures to ensure that your personal data receives an equivalent level of protection as it would within the EEA, in line with this Privacy Policy and applicable laws. These measures encompass:

· For transfers to the US, either engaging in European Commission approved standard contractual arrangements or ensuring the recipient is certified under the EU-US Privacy Shield (more details at https://www.privacyshield.gov/welcome);

· For service providers in countries outside of the EEA, either confirming they are located in nations recognized by the European Commission as providing adequate data protection or entering into European Commission approved standard contractual arrangements with them.

For more information regarding the measures we employ to safeguard your personal data in these contexts, please reach out to us via the e-mail address legal@checkit.today.

Is the same protection provided when data is transferred to the USA?

We wish to clarify for users located in Switzerland, the EU, or the EEA that our primary data servers are situated in Germany, within the EEA. However, there are instances where data could be processed outside the EEA, such as in the USA.

For those residing or domiciled in Switzerland, the EU or the EEA, it's important to note that in the USA, certain surveillance measures by US authorities might permit them to access personal data transferred from countries like Switzerland to the USA. This can happen without any limitation or specific criteria that would restrict this access solely to purposes that justify such interference. Moreover, for individuals from Switzerland, there might not be legal mechanisms in place in the USA to access, correct, or delete their personal data, or to effectively contest the broad access rights of US authorities.

Considering this, we emphasize to users in Switzerland, the EU, or the EEA that the USA might not offer a data protection standard on par with that in their respective countries, due to the challenges highlighted above. However, whenever there's a potential for data transfer to the USA, as outlined in this Privacy Policy, we commit to ensuring your data's protection either through specific contractual provisions with our service providers or by confirming that they are compliant with the EU or Swiss-US Privacy Shield.

Your Rights Regarding Your Personal Data

You are entitled to various rights concerning your personal data. This includes:

Access and Rectification: You can request information about the personal data we hold about you. If any of this data is incorrect, you can ask for corrections.
Deletion and Limitation: You can ask for your data to be deleted unless there's a legal obligation for its retention or a valid reason for its continued processing.
Data Portability: If you wish, we'll provide your data in a standard format or even transfer it directly to a third party of your choosing.

To exercise any of these rights, reach out to us at legal@checkit.today. For verification purposes, we might ask you to prove your identity. If you feel that your data isn't being handled correctly, many jurisdictions allow you to lodge a complaint with the relevant data protection authority. The scope of these rights might vary depending on local data protection laws.

Ensuring the Safety of Your Data

We prioritize the security of your data by:

Technological Safeguards: Utilizing state-of-the-art technical measures, like https encryption, to prevent unauthorized access, alterations, or loss of your data.
Confidentiality: You're expected to handle your access credentials with utmost confidentiality, especially when sharing devices. Failing to do so may lead to claims against you for potential damages due to breaches.
Internal Measures: Within our organization, data protection is paramount. Our staff and service providers are bound by contracts that mandate confidentiality and compliance with data protection regulations. Additionally, only a select few, adequately trained personnel can access your personal data.

Transfer and Change of Control

We retain the right to transfer or assign our rights and obligations under this Privacy Policy, whether through mergers, acquisitions, restructures, sale of assets, or by operation of law. Such transfers could mean your information is passed on to our affiliates, succeeding entities, or a new proprietor.

Jurisdiction and Applicable Law

The foundation for this privacy policy and any contracts created based on it, or related to it, is governed by Swiss law. Exceptions are only made if another country's law is obligatory. Legal proceedings will primarily take place in Zug, Switzerland, unless mandated to occur elsewhere.

As our App evolves and in light of potential legislative modifications, adjustments to this privacy policy might be required. The latest version of this policy can always be found at https://checkit.today/app-privacy-policy. Should any section of this policy be deemed invalid, the remainder remains unaffected. Any voided section will be replaced, aiming to closely match the original intent.

Contact and Policy Update Date

This policy was last updated on April 10, 2024. Should you have inquiries or remarks regarding our data protection or legal statements, please reach out to legal@checkit.today.