Privacy in the current Osake app
Updated: 28.10.2026. The controller is Osake GmbH, Tübinger Straße 46, 70178 Stuttgart, Germany. Contact for privacy questions and exercising your rights: info@osakeapp.com, +49 1573 4600615. The following information specifies processing in the app; booking and payment data and separately enabled session replay are explained further below.
Optional purposes and necessary functions
Processing necessary for sign-in, your account, requested functions, security, bookings and payments is separate from optional analytics and advertising purposes. Optional purposes are not preselected. You can decline them and continue using the core functions. Your choice, time and consent version are recorded. You can change your choices under Privacy & analytics; withdrawal stops further consent-dependent processing without affecting the lawfulness of previous processing.
Firebase Analytics is disabled on iOS and Android in this app version; Firebase Crashlytics and Performance Monitoring are not used there. Optional product analytics identifiers are not created merely by starting the app. Separately permitted payment diagnostics send Osake a booking reference and fixed technical step and error categories, without card details, receipt images or message content.
Advertising measurement with Meta and TikTok and promotional push notifications are different optional choices. After the relevant consent, Meta and TikTok receive selected interaction and confirmed purchase events and may process technical connection, device and advertising identifiers; our own event parameters contain no contact details, messages, receipt content or free text. Required ATT permission additionally applies on iOS. Promotional push notifications require their own consent; system notification permission or consent to advertising measurement does not replace it. Requested service and meetup notifications are handled separately. Consent is the legal basis for optional purposes; optional access to device information additionally requires the relevant consent under the TDDDG.
Profile, age and Osake Connect
A completed app profile requires a date of birth; general access is intended from age 16 and Connect from age 18. The age check uses your saved date of birth and is not an identity-document check. Connect processes your account, display name, profile photo, selected date, participation and invitation relationships. Depending on your choices, the private matching questionnaire contains languages, interests, intentions, life situation, age preferences, budget, alcohol preferences, gender, relationship status and dietary and accessibility needs. We use these details for organisation and group matching; authorised staff have access limited to their duties.
Group members can read the earlier chat of their unlocked group. Identities may remain hidden until the scheduled reveal. Authorised staff may view chats for support, safety and moderation. Leaving ends your access but does not immediately delete earlier messages. Account deletion removes or anonymises personal profile, chat and invitation data; required payment and evidence records are handled separately under applicable retention obligations. Connect has no live location sharing.
Receipt checks and retention
For a requested receipt check, we process the receipt image, OCR text where available and structured review results. Services include Gemini through Google Vertex AI at its global endpoint, with Google Cloud Vision and available on-device text recognition as fallbacks. Unclear or negative content assessments go to manual review. Security checks, promotion conditions and limits may automatically block a request. For questions about a decision or human review, contact us through the listed channels.
The technical deletion period for receipt images, image hashes and raw OCR text is 90 days. Structured review, redemption, prize, payment and security evidence is retained separately for as long as necessary for processing, abuse prevention and statutory evidence obligations. Account deletion also triggers removal of associated personal data. This does not promise deletion of every record after 90 days.
Infrastructure, maps and transfers
Google/Firebase provides services including authentication, Cloud Firestore, Cloud Functions, storage, push and hosting. Global networks and individual services, particularly Vertex AI, may involve processing outside the EU; processing exclusively in Europe is not promised. Maps and place search use Google Maps/Places; the precise device location is used only after the relevant system permission. Location permission is not consent to advertising measurement. The further sections on recipients, transfers and your rights remain applicable; you can request access, rectification, erasure, restriction, portability and object through the listed contact channels. You can complain to a data protection supervisory authority.
Mapbox for maps and routes
Mapbox is used for static map images and route calculation, including as a navigation fallback on iOS and Android. Direct requests may disclose your IP address, technical request data, selected place coordinates and map settings to Mapbox. Routing requests send the origin and destination, travel mode and language. With location permission, the origin may be your device position; coordinates you enter yourself may also be processed. Processing outside the EU is possible. Further information: Mapbox privacy information.
When you open an external map app for navigation, destination coordinates and the place name are passed to the selected or available map app. Further processing is governed by that app’s privacy information.
RevenueCat for Premium purchases
When you open the Premium area or request a purchase or restore, we use RevenueCat, Inc. for offers, purchase and subscription status and access entitlements. The service is not activated merely by starting the app. It processes your Osake account identifier or an SDK-generated identifier, purchase and subscription information, IP address and technical device, app, language and store data; on iOS this may include the identifier for vendors, IDFV. Purchase processing may involve Apple App Store or Google Play. This processing provides the purchase service you request and is separate from optional analytics and advertising. Processing outside the EU is possible. Further information: RevenueCat privacy information.
Algolia for venue search
When you run a venue search while selecting a location for an event, the search text you enter is sent directly to Algolia to find matching venues. IP address and technical request data may also be processed. The current search request sends no Osake account identifier or device position added by us. Processing outside the EU is possible. Further information: Algolia privacy information.
Optional session replay with Microsoft Clarity
Microsoft Clarity is optional in this app version. It starts only after your current explicit consent for the signed-in account and a saved date of birth confirming age 18 or over; iOS additionally requires the relevant system authorization. Earlier consents are not carried over automatically. You can turn recording off at any time under Privacy & analytics.
Purpose, adult eligibility and free choice
Session replay helps us identify loading problems, unclear controls and cumbersome steps in the Osake app. Osake is intended for adults aged 18 and over; general access from age 16 and participation in Osake Connect from age 18 remain separate. Before recording starts, we check the date of birth saved in the relevant signed-in account. This is not an identity or identity-document check. Recording is not enabled if the age is unknown, the person is under 18 or the account changes. Sessions are not buffered for later transmission before the age check. You can use Osake without giving this consent.
Scope and data
Only masked views and interactions in the native app's approved public Home, Discover and Awards areas are recorded. Private chats, profile and input areas, and booking and payment flows are excluded. Recording pauses during sensitive operations, data entry and while the app is in the background. Technical data may include device and app information, timestamps, interactions and pseudonymous session identifiers generated by the SDK; connection data such as the IP address also arises when the service is accessed. Masking does not mean complete anonymity. We do not transmit our own account identifiers as Clarity user identifiers or authorize advertising IDs.
Microsoft as an independent controller
The recipient is Microsoft. For customers in the European Economic Area, Microsoft identifies its contracting entity as Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Under the Clarity terms, section 4.4, Osake and Microsoft are independent controllers. The terms also provide for Microsoft Advertising and possible advertising profiles; non-personal data may be used for research and for AI training and evaluation. These potential Microsoft purposes must be distinguished from our usability analysis. Further information is available in the Microsoft Privacy Statement.
Consent, stopping recording and withdrawal
The legal basis for optional recording is your consent under Article 6(1)(a) GDPR and, where information on your device is accessed or stored, section 25(1) TDDDG. Session replay is a separate choice from other analytics or advertising decisions and is not preselected. You can withdraw it under “Privacy & analytics”. Withdrawal stops further recording; it does not affect the lawfulness of earlier processing. A previous general analytics consent does not authorize session replay. Earlier permission does not remain valid after sign-out or for a different account.
Transfer, storage and deletion
Microsoft also describes processing in the USA and other countries. Its stated safeguards include standard contractual clauses between its Irish and US entities and participation in the EU–US Data Privacy Framework. Storage exclusively in Europe is not promised. Under the published Clarity retention rules, replay data is generally retained for 30 days, while certain analytics data and selected or marked sessions are retained for up to 9 months. A maximum retention period of 30 days for all data is therefore not promised. These statements describe Microsoft's published retention periods; Osake does not routinely extend recording retention by favoriting or marking sessions.
Withdrawal or stopping recording does not automatically delete data already transmitted. The app does not offer automatic deletion of individual Clarity recordings. Statutory rights of access, erasure and other data protection rights remain in place; requests are handled separately from stopping recording, through the contact channels listed in this privacy policy. Microsoft documents complete project deletion by project administrators, but no individual deletion call in the Flutter SDK. We review necessary deletions separately and do not promise subsequent automatic deletion of individual recordings as a substitute for checking age and consent beforehand.
Osake Connect: Booking and payment data
For an electronic declaration of withdrawal, we also store the name provided, the associated order, the declaration and the server-recorded time of receipt in order to process the declaration and prove its receipt. You can save or share the unalterable acknowledgement of receipt.
Version of this addendum: 18 October 2026. The controller is Osake GmbH, Tübinger Straße 46, 70178 Stuttgart, Germany; Managing Director: Nahom Jonas Tesfay; Amtsgericht Stuttgart, HRB 798112; info@osakeapp.com.
For the offer, booking, group allocation, payment verification, cancellation, refund and payment confirmation, we process the association with your account, the selected meetup, date and city, service description, amount and currency, versions of the offer and terms, and order, payment, booking and refund status. This serves to initiate and perform the booking contract (Art. 6 paragraph 1 point b GDPR) and to fulfil statutory retention obligations (Art. 6 paragraph 1 point c GDPR), where these exist.
Payment takes place through Stripe in the app's native payment interface. Our server transmits the information required for payment, such as amount, currency, service description, date and city, together with an opaque order reference and version information. The card number and card verification code are processed by the payment provider and are not transmitted to Osake's own API. Osake receives payment references and status notifications to confirm the booking and process refunds.
Stripe additionally processes the payment data entered in the payment form and technical data required to operate the payment service. Information about Stripe, its processing activities, recipients and international data transfers can be found in Stripe's privacy policy. The other services and rights described in this policy remain unaffected.
Booking and payment data is retained only for as long as necessary for the stated purposes and applicable statutory obligations. When an account is deleted, records subject to statutory retention requirements may continue to be stored. The exported payment confirmation is provided through the download or sharing feature you choose; you determine the recipient yourself when sharing it. You can exercise your rights of access, rectification, erasure and other data protection rights via info@osakeapp.com.
This Application collects personal data from its Users.
This document contains a section dedicated to Users in the United States and their privacy rights.
This document contains a section dedicated to Users in Switzerland and their privacy rights.
This document includes a section on privacy rights intended for Users in Brazil.
This document can be printed for safekeeping using the “Print” command in the browser.
Owner and Data Controller
Osake GmbH
Tübinger Straße 46
70178 Stuttgart
Germany
Owner's email address: info@osakeapp.com
Types of data collected
The personal data processed by this Application, independently or through third parties, includes: email; username; password; profile picture; Trackers; Usage Data.
Complete details of each type of personal data processed are provided in the dedicated sections of this privacy policy or in specific explanatory notices displayed before data collection.
Personal data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically when this Application is used.
Unless otherwise stated, providing all data requested by this Application is mandatory. Refusal by the User to provide the data may mean that this Application cannot provide its services to the User. Where this Application expressly identifies the provision of personal data as optional, Users may choose not to provide that data without any consequences for the availability or functioning of the Service.
Users who are unsure which personal data is mandatory may contact the Owner.
Any use of Cookies or other tracking tools by this Application or by third-party service providers used by this Application serves to provide the Service requested by the User and all other purposes described in this document and the Cookie Policy.
Users are responsible for any third-party personal data obtained, published or shared through this Application.
Method and place of data processing
Processing methods
The Owner processes User data properly and takes appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data.
Data processing is carried out using computers or IT-based systems, following organisational procedures and practices specifically directed at the stated purposes. In addition to the Controller, other persons may operate this Application and thus have access to the data, either internally (human resources, sales, marketing, legal department, system administrators) or externally, and where necessary appointed by the Controller as processors (such as technical service providers, delivery companies, hosting providers, IT companies or communications agencies). An up-to-date list of these parties may be requested from the Owner at any time.
Place
Data is processed at the Owner's establishment and at all other locations where the parties involved in processing are located.
Depending on Users' location, data transfers may involve transferring the User's data to a country other than their own. To learn more about where transferred data is processed, Users may consult the section containing detailed information on the processing of personal data.
Retention period
Unless otherwise specified in this document, personal data is processed and stored for as long as required by the purpose for which it was collected, and may be retained longer where necessary to fulfil a legal obligation or on the basis of the User's consent.
Purposes of processing
Personal data concerning the User is collected so that the Owner can provide the Service, fulfil its legal obligations, respond to enforcement requests, protect its rights and interests or those of Users or third parties, and detect malicious or fraudulent activity. Data is also collected for the following purposes: registration and authentication, and analytics.
Users can find further detailed information about these processing purposes and the personal data used for each purpose in the “Detailed information on the processing of personal data” section of this document.
Detailed information on the processing of personal data
Personal data is collected for the following purposes using the following services:
Optional device access
Optional analytics, advertising services and session replay are subject to the separate consents described above. The app settings explain the available purposes and allow withdrawal. Technically necessary storage and security functions remain separate.
Further information for Users
Legal bases for processing
The Owner may process Users' personal data only if one of the following applies:
- Users have given their consent for one or more specific purposes.
- data collection is necessary for the performance of a contract with the User and/or related pre-contractual measures;
- processing is necessary to fulfil a legal obligation to which the Owner is subject;
- processing relates to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
- processing is necessary to safeguard the legitimate interests of the Owner or a third party.
In any event, the Owner will gladly provide information about the specific legal basis for processing, in particular whether providing personal data is a statutory or contractual obligation or a requirement for entering into a contract.
Further information on retention periods
Unless otherwise specified in this document, personal data is processed and stored for as long as required by the purpose for which it was collected, and may be retained longer where necessary to fulfil a legal obligation or on the basis of the User's consent.
Accordingly:
- Personal data collected for the purpose of performing a contract between the Owner and the User is retained until that contract has been fully performed.
- Personal data collected to safeguard the Owner's legitimate interests is retained for as long as necessary to fulfil those purposes. Users may obtain further information about the Owner's legitimate interests in the relevant sections of this document or by contacting the Owner.
The Owner may also retain personal data for a longer period if the User has consented to such processing, for as long as that consent is not withdrawn. The Owner may furthermore be required to retain personal data for a longer period where necessary to fulfil a legal obligation or on the order of an authority.
Personal data is deleted once the retention period expires. The rights of access, erasure, rectification and data portability therefore cannot be exercised after the retention period has expired.
Users' rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their data processed by the Owner.
In particular, to the extent permitted by law, Users have the right to:
- Withdraw consent at any time. If the User previously consented to the processing of personal data, they may withdraw that consent at any time.
- Object to the processing of their data. The User has the right to object to the processing of their data where processing is based on a legal basis other than consent.
- Access their data. The User has the right to learn whether the Owner processes their data, obtain information about individual aspects of the processing and receive a copy of the data.
- Have data verified and rectified. The User has the right to verify the accuracy of their data and request that it be updated or rectified.
- Request restriction of the processing of their data. Users have the right to restrict the processing of their data. In that case, the Owner will not process the data for any purpose other than storage.
- Request erasure or other removal of personal data. Users have the right to request that the Owner delete their data.
- Receive their data and have it transferred to another controller. The User has the right to receive their data in a structured, commonly used and machine-readable format and, where technically possible, to have it transferred to another controller without hindrance.
- Lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.
Users also have the right to be informed of the legal basis for transferring data abroad or to an international organisation governed by public international law or established by two or more countries, such as the UN, and of the security measures taken by the Owner to protect their data.
Details of the right to object to processing
Where personal data is processed in the public interest, in the exercise of official authority vested in the Owner or to safeguard the Owner's legitimate interests, the User may object to that processing by providing grounds relating to their particular situation.
Users are informed that they may object to the processing of personal data for direct marketing at any time, free of charge and without giving reasons. If a User objects to processing for direct marketing purposes, the personal data will no longer be processed for those purposes. Users can find out whether the Owner processes personal data for direct marketing in the relevant sections of this document.
How to exercise these rights
All requests to exercise User rights may be addressed to the Owner using the contact details in this document. These requests may be made free of charge and will be answered by the Owner as soon as possible, at the latest within one month, with Users receiving the information required by law. The Owner will communicate any rectification or erasure of personal data or restriction of processing to all recipients to whom personal data has been disclosed, if any, unless this proves impossible or involves disproportionate effort. The Owner will inform the User of these recipients if the User requests it.
Further information for Users in Switzerland
This section applies to Users in Switzerland and, for those Users, replaces all other potentially differing or conflicting information in the privacy policy.
Further details about the categories of data processed, the purposes of processing, the categories of recipients of personal data, if any, the retention period and other information about personal data can be found in the “Detailed information on the processing of personal data” section of this document.
Users' rights under the Swiss Federal Act on Data Protection
Within the limits of statutory provisions, Users may exercise certain rights regarding their data, including the following:
- the right of access to personal data;
- the right to object to the processing of their personal data, which also enables Users to request restriction of processing, erasure or destruction of personal data and a prohibition on disclosing certain personal data to third parties;
- the right to receive their personal data and transmit it to another controller (data portability);
- the right to request rectification of inaccurate personal data.
How to exercise these rights
All requests to exercise User rights may be addressed to the Owner using the contact details in this document. Such requests are free of charge and will be answered by the Owner as soon as possible, with Users receiving the information required by law.
Further information for Users in Brazil
This section supplements and completes the information contained in the remaining sections of the privacy policy and is provided by this Application or, where applicable, its parent or subsidiary company and/or affiliated companies, collectively referred to as “we”, “us” and “our” for the purposes of this section.
This section applies to all Users residing in Brazil, referred to below as “you” and “your”, under the Brazilian data protection law “Lei Geral de Proteção de Dados” (“LGPD”), and for those Users replaces all other potentially differing or conflicting provisions of the privacy policy.
Within this section of the document, the term “personal information” is used in accordance with the definition in the (LGPD).
Legal bases for processing your personal information
We may process your personal information only where there is a legal basis for doing so. The legal bases for processing are:
- your consent to the processing activities concerned
- fulfilment of a legal or regulatory obligation to which we are subject
- performance of public-law tasks arising from a law, regulation, contract, agreement or similar legal instrument
- studies by research institutions, preferably based on anonymised personal information
- performance of a contract and pre-contractual measures, provided you are a party to that contract
- exercise of our rights in judicial, administrative and arbitration proceedings
- protection of your physical safety or that of a third party
- protection of health in procedures conducted by healthcare professionals or institutions
- our legitimate interests, provided your fundamental rights and freedoms do not override them; and
- protection of claims.
For further information about legal bases, you may contact us at any time using the contact details in this document.
Categories of personal information processed
You can learn which categories of personal data are processed in the “Detailed information on the processing of personal data” section of this document.
Why we process personal information
You can learn why we process personal information in the “Detailed information on the processing of personal data” and “Purposes of processing” sections of this document.
Your privacy rights under Brazilian law, how to submit a request and how we respond
Your privacy rights under Brazilian law
You have the right to:
- obtain confirmation of whether your personal information is being processed;
- access your personal information;
- have incomplete, inaccurate or outdated personal information rectified;
- request the anonymisation, blocking or deletion of unnecessary or excessive personal information, and of personal information not processed in accordance with the LGPD;
- receive information about third parties with whom we share your personal information;
- upon your express request and subject to our business and trade secrets, have personal information, other than anonymised information, transferred to another service or product provider;
- request deletion of your personal information where processing was based on your consent, unless at least one of the exceptions under Art. 16 LGPD applies;
- withdraw your consent at any time;
- lodge a complaint concerning your personal information with the ANPD, the federal data protection authority, or a consumer protection body;
- object to the processing of personal information where it is unlawful;
- receive understandable and appropriate information about the criteria and procedures for automated decision-making; and
- request review of a decision based solely on automated processing of your personal information that affects your legitimate interests. This includes decisions about your personal or professional profile, your consumer profile or creditworthiness, and aspects of your personality.
You will neither be discriminated against nor otherwise disadvantaged for exercising your rights.
How to submit your request
You may submit your express request to exercise your rights at any time and free of charge using the contact details in this document or through our legal representative.
How we respond to your request
We strive to process your request promptly.
If we cannot do so, we will inform you of the factual or legal reasons why we cannot answer your request or cannot do so immediately. If we do not process your personal information, we will, where we are able to do so, refer you to the natural or legal person to whom you should submit your request.
If you submit a request for access to personal information or for confirmation of the processing of personal information, please specify whether your personal information should be provided electronically or on paper.
You must also tell us whether we should answer your request immediately, in which case we will respond in a simplified form, or whether you require a full response.
In the latter case, we will respond within 15 days of your request and, subject to our business and trade secrets, provide full information on the origin of your personal information, confirmation of whether records exist, and the criteria and purposes of processing.
If you submit a request for rectification, deletion, anonymisation or blocking of personal information , we will ensure that your request is promptly forwarded to the parties with whom we have shared your personal information so that they can fulfil it, unless such forwarding proves impossible or involves unreasonable effort on our part.
Lawful transfer of personal information outside Brazil
We may transfer your personal information outside Brazil in the following cases:
- The transfer is necessary for international cooperation between public security, investigation or law enforcement authorities, in accordance with lawful procedures under international law.
- The transfer is necessary to protect your life or physical safety or the life or physical safety of third parties.
- The transfer has been authorised by the ANPD.
- The transfer arises from an obligation under an international cooperation agreement.
- The transfer is necessary to perform a public-law task or a public task assigned by law.
- The transfer is necessary to fulfil a legal or regulatory obligation, perform a contract or pre-contractual measures relating to a contract, or regularly exercise rights in judicial, administrative or arbitration proceedings.
Further information for Users in the United States
This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the business running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The information contained in this section applies to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are residents in the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana.
For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term Personal Information (and Sensitive Personal Information).
Notice at collection
The following Notice at collection provides you with timely notice about the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.
While such categorization of Personal Information is mainly based on California privacy laws, it can also be helpful for anyone who is not a California resident to get a general idea of what types of Personal Information are collected.
ℹ️ You can read the definitions of these concepts inside the “Definitions and legal references section” of the privacy policy.
To know more about your rights in particular to opt out of certain processing activities and to limit the use of your sensitive personal information (“Limit the Use of My Sensitive Personal Information”) you can refer to the “Your privacy rights under US state laws” section of our privacy policy.
For more details on the collection of Personal Information, please read the section “Detailed information on the processing of Personal Data” of our privacy policy.
We won’t process your Information for unexpected purposes, or for purposes that are not reasonably necessary to and compatible with the purposes originally disclosed, without your consent.
What are the sources of the Personal Information we collect?
We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Application.
For example, you directly provide your Personal Information when you submit requests via any forms on this Application. You also provide Personal Information indirectly when you navigate this Application, as Personal Information about you is automatically observed and collected.
Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Application and features thereof.
Your privacy rights under US state laws
You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:
- the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
- the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
- the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
- the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible;
- the right to opt out from the Sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
- the right to non-discrimination.
Additional rights for Users residing in California
In addition to the rights listed above common to all Users in the United States, as a User residing in California, you have
- The right to opt out of the Sharing of your Personal Information for cross-context behavioral advertising;
- The right to request to limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as is reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as, when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.
Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon and Montana
In addition to the rights listed above common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas and Oregon, you have
- The right to opt out of the processing of your personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
- The right to freely give, deny or withdraw your consent for the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
Additional rights for users residing in Utah
In addition to the rights listed above common to all Users in the United States, as a User residing in Utah, you have
- The right to opt out of the processing of your Personal Information for Targeted Advertising;
- The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
How to exercise your privacy rights under US state laws
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and therefore confirm the Personal Information in our possession relates to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification and shall not further disclose the Personal Information, retain it longer than necessary for purposes of verification, or use it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How to exercise your rights to opt out
In addition to what is stated above, to exercise your right to opt-out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Application.
If you want to submit requests to opt out of Sale or Sharing and Targeted Advertising activities via a user-enabled global privacy control, such as for example the Global Privacy Control (“GPC”), you are free to do so and we will abide by such request in a frictionless manner.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. Should we need more time, we will explain to you the reasons why, and how much more time we need.
Should we deny your request, we will explain to you the reasons behind our denial (where envisaged by applicable law you may then contact the relevant authority to submit a complaint).
We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive and in all other cases where it is permitted by the applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our choices and explain the reasons behind them.
Further information about data collection and processing
Legal action
The User's personal data may be processed by the Owner for enforcement purposes during or in preparation for judicial proceedings arising from improper use of this Application or its related services.
The User declares that they are aware that the Owner may be required by public authorities to disclose personal data.
Further information about the User's personal data
In addition to the information set out in this privacy policy, this Application may, upon request, provide the User with further contextual information relating to specific services or to the collection and processing of personal data.
System logs and maintenance
For operation and maintenance purposes, this Application and third-party services may collect files recording interactions occurring through this Application (system logs), or use other personal data, such as an IP address, for this purpose.
Information not included in this privacy policy
Further information about the collection or processing of personal data may be requested from the Owner at any time using the contact details provided.
Changes to this privacy policy
The Owner reserves the right to change this privacy policy at any time by informing Users on this page and, where applicable, through this Application and/or, where technically and legally possible, by sending a notice using Users' contact details held by the Owner. Users are therefore encouraged to visit this page regularly and in particular check the date of the last change shown at the bottom of the page.
Where changes affect data use based on the User's consent, the Owner will obtain new consent where required.