Privacy Policy

Information about the processing of your data Pursuant to Art. 12 of the Basic Data Protection Ordinance (hereinafter referred to as DSGVO), we are obli- ged to inform you about the processing of your data when using our mobile app, which we provide in addi- tion to our online services. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data as well as about your legal rights in this regard. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the App Incide, the use of new technologies or changes to the legal basis or corresponding jurisdiction. We recommend that you read the Privacy Policy from time to time and include a hard copy or copy with your records.

Definitions

• "Mobile App" means in the following all functions of the responsible person of App Incide.

• "Personal data" means any information relating to an identified or identifiable natural person. An iden- tifiable person is one who can be identified, directly or indirectly, in particular by reference to an identi- fier such as a name, an identification number, location data, online identifier or one or more specific characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data is therefore, for example, the name, e-mail address and telephone number of a person, but may also include data on preferences, hobbies and mem- berships.

• "processing' means operations or series of operations relating to personal data, carried out with or without the aid of automated means, such as collection, recording, organisation, sorting, storage, ad- aptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison, integration, limitation, erasure or destruction.

• "pseudonymisation' means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provi- ded that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural per- son.

• "Consent" shall hereinafter mean any freely given, informed and unequivocal statement of intention in a particular case, in the form of a statement or other unambiguous confirmatory act, by which the data subject indicates that he or she consents to the processing of his or her personal data.

• "Google" means the Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; re- achable in the European Union under: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

• "Apple" means Apple Inc. 1 Infinite Loop, Cupertino, CA 95014, USA.

scope

This privacy statement applies to all App Incide features. It does not extend to any linked websites or In- ternet presences or apps from other providers. Responsible provider The processing of personal data within the scope of this data protection declaration is responsible: Incide UG (limited liability) Karlstrasse 47 74321 Bietigheim-Bissingen Germany (German) info@incideapp.com Questions about data protection

If you have any questions about data protection with regard to our company or our app, you can contact our data protection officer: Stephan Dreyer Bissingerstr. 17 71732 Tamm Safety and security We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external interference. To this end, we regularly review our se- curity measures and adapt them to the state of the art.


Your rights You have the following rights with regard to the personal data concerning you which you may assert against us:

• Right of access (Art. 15 DSGVO),

• Right to rectification (Art. 16 DSGVO) or cancellation (Art. 17 DSGVO),

• Right to limitation of processing (Art. 18 DSGVO),

• Right to object to the processing (Art. 21 DSGVO),

• Right to revoke your consent (Art. 7 para. 3 DSGVO),

• Right to receive the data in a structured, common, machine-readable format ("data transferability") and right to forward the data to another responsible party if the conditions of Art. 20 para. 1 lit. a, b DSGVO are met (Art. 20 DSGVO). You can assert your rights by notifying the contact data specified in the "Responsible provider" section or by contacting the data protection officer appointed by us. You also have the right to complain to a data protection supervisory authority about the processing of your personal data carried out by us (Art. 77 DSGVO). Download the mobile app When you download the mobile app, the necessary information is sent to the App Store you select (e.g. Google Play or Apple App Store), including your username, email address and account number, time of download, payment information, and the unique device identification number. We have no influence on this data collection and are not responsible for it. We process this data only to the extent necessary for down- loading the mobile app to your mobile device. Both Apple and Google are certified under the US-EU Priva- cy Shield and are committed to complying with European Union privacy standards. We have no knowledge of or influence over the storage period at Apple and Google. Use of the mobile app, access data As part of your use of the App, we automatically process certain data required for the use of the App, in particular to guarantee access to the Internet. In principle, you can use our app without disclosing your identity for purely informational purposes. This includes

• IP address,

• operating system used,

• Date and time of the request,

• Website or app from which the request comes,

• Content of the request (concrete page),

• Time zone difference to Greenwich Mean Time (GMT),

• Access status/HTTP status code,

• Amount of data transferred in each case,

• Language and version of the browser software, This data is automatically transmitted to us, but is not stored, in order to provide you with the service and the associated functions and to prevent and eliminate misuse and malfunctions. A processing of your IP address for the duration of the session is necessary. The legal basis for this processing is Art. 6 (1) sen- tence 1 lit. f) DSGVO. The access data will not be used to identify individual users and will not be merged with other data sour- ces. The access data shall be deleted when they are no longer necessary for the purpose of their proces- sing. In the case of collecting data to provide the app and Internet access, this is the case when you end the visit to the app.

IP addresses are stored in log files to ensure the functionality of the mobile app. In addition, the data is used to optimize the mobile app and to ensure the security of our information technology systems. An eva- luation of the data for marketing purposes does not take place in this context either. In principle, the data will be deleted after seven days at the latest, further processing is possible in individual cases. In this case, the IP address is deleted or alienated in such a way that it is no longer possible to assign the calling client.

The collection of the data for the provision of the app and the processing of the data in log files is manda- tory for the operation of the app. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). In the event of your justified objec- tion, we will examine the facts and either discontinue or adapt the data processing or point out our com- pelling reasons worthy of protection on the basis of which we will continue the processing.


Contact with our company

When contacting our company, e.g. by e-mail or via the contact form in the mobile app, the personal data provided by you will be processed by us in order to answer your enquiry. For the processing of enquiries via the contact form in the app, it is imperative that a name or pseudonym as well as a valid e-mail address be provided. At the time the message is sent to us, the following data will also be processed:

• IP address,

• Date/time of registration. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO or Art. 6 para. 1 sentence 1 lit. b) DSGVO if the purpose of the contact is to conclude a contract. The processing of the personal data from the input mask serves us exclusively for the processing of the establishment of contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data will not be passed on to third parties in this context. The data will be processed exclusively for the processing of the conversation. We delete the data arising in this context after processing is no longer necessary, or restrict processing to compliance with the existing legally mandatory storage obligations.

The collection of the data for the provision of the app and the processing of the data in log files is manda- tory for the operation of the app. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). In the event of your justified objec- tion, we will examine the facts and either discontinue or adapt the data processing or point out our com- pelling reasons worthy of protection on the basis of which we will continue the processing.

Registration/ password-protected area of the mobile app If you wish to use the password-protected area in our mobile app, you must register using the following details:

• E-mail address,

• Name,

• Username,

• password of your choice,

• Phone number,

• Date of birth. To verify the e-mail and phone number, a verification procedure is used that sends a code to the e-mail and phone number, which must be specified in the app. We will use Google's verification procedures for this purpose, about which we will provide detailed information elsewhere. There is no obligation to use a clear name, you are free to use a pseudonym. Furthermore, the following data will be processed at the time of registration:

• IP address,

• Date/time of registration. The data shall be deleted as soon as they are no longer necessary for the purpose of their processing. This is the case for the data collected during the registration process if the registration is cancelled or modified in the app. This area is used to create an individual profile that allows the user to share images, videos, text mes- sages, and their location, and to view these postings from other users (as long as their privacy settings allow it). The following functions are available in this area:

• Edit your profile

• Share pictures, videos, and text messages

• Parts of the site

• View postings from other users If you use the password-protected area of the app to, for example, edit your profile data, we also process the personal data required to initiate or fulfil the contract, in particular address data and payment details. The legal basis for the processing is Art. 6 (1) sentence 1 lit. b) DSGVO. The data are deleted as soon as


they are no longer required for the purpose of their processing or after expiry of the statutory retention ob- ligations (e.g. mandatory commercial and tax retention obligations). If you voluntarily provide further data (e.g. on interests, size, age, gender, children, preferences, memos), we process your data, which is not necessary for the initiation or performance of a contract, as long as you use the password-protected area and if you do not delete it yourself beforehand. Our aim is to optimize the use of the mobile app for you as a user. The legal basis is Art. 6 para. 1 sentence 1 lit. f) DSGVO. In addition to the data you have published, the following data will also be processed at the time a post is made:

• IP address,

• Date/time of the entry. When your post is published, only the name / pseudonym you provided and the place. Your mail will not be checked by us before publication. We reserve the right to remove amounts at any time if they are found to be illegal. We process your e-mail address and your name/pseudonym in order to be able to contact you if your contribution to the app is found to be unlawful against us and to be able to defend us against com- plaints or claims that may be brought to our attention on the basis of your entry. For this purpose we also process your IP address. The IP address will be deleted after 1 week. We process your e-mail address as long as the contribution on the app continues or we are involved with the entry in the context of a legal dispute. If you or we delete your contribution, we will process the e-mail address, the communicated name as well as further voluntary information until the statutory limitation periods expire for the reasons of prevention and defence mentioned above, but we will restrict the processing of this data after 6 months. We do not pass the data on to third parties, unless we are obliged to do so by law or due to official or judi- cial orders or the passing on is necessary for the enforcement of our legitimate interests. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. You may object to the processing of your voluntarily provided data. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves the pur- pose of asserting or defending us against legal claims (Art. 21 para. 1 DSGVO). You can manage, change or delete your voluntary information at any time in the password-protected area. You are free to take action according to the section "Your rights", whereby we ask you to contact our company in case of complaints in a first step.

Cache buffering

In order to improve the functionality and speed of the app, we store data in caches. This information inclu- des profile information provided by you, including but not limited to username, name, postings (images, videos and text), location of the posting, number of followers, "like me", gender, profile picture, email ad- dress and phone number. Storage in the cache only takes place until the app has been completely closed once. The purpose of caching is to avoid having to reload data that has already been loaded. This option enables us to make our app offering more attractive and optimize it for our users. The data will not be pas- sed on to third parties. The legal basis for this form of data processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO.

The processing of the data in caches is necessary for the operation of the app. You can object to the pro- cessing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and free- doms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). In the event of your justified objection, we will examine the facts and either discontinue or ad- apt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and insofar as this is necessary for the initiation, justification, execution and/or termination of a legal transaction with our company. The legal basis for this arises from Art. 6 (1) sentence 1 lit. b) DSGVO.

After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for fur- ther processing or deleted unless we are entitled to further storage and processing as required in the re- spective context on the basis of a consent given by you (e.g. consent to the processing of the e-mail ad- dress for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. autho- rization to send direct mail) or on the basis of legitimate interests (e.g. storage for the enforcement of claims). The passing on of your personal data takes place in this respect, if


• it is necessary for the establishment, execution or termination of legal transactions with our com- pany (e.g. the transfer of data to a payment service provider / a shipping company to process a contract with your person), (Art. 6 para. 1 sentence 1 lit. b) DSGVO), or

• a subcontractor or vicarious agent, whom we use exclusively in the context of providing the offers or services requested by you, requires this data (such auxiliary persons are only entitled to pro- cess the data to the extent necessary for the provision of the offer or service, unless you are ex- pressly informed otherwise), or

• there is an enforceable administrative order (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or

• there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or

• we are legally obliged to do so (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or

• the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) DSGVO), or

• we are authorised or even obliged to pursue overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f) DSGVO). Any further transfer of your personal data to other persons, companies or bodies will not take place unless you have given your effective consent to such a transfer. The legal basis for the processing is then Art. 6 (1) sentence 1 lit. a) DSGVO. Use your address book / your calendar / your photos / your memories When you start using our mobile app, we will ask you in a pop-up window for permission to use your ad- dress bush / calendar / photos / memories. If you do not grant permission, we will not use this data. Plea- se note that in this case you may not be able to use all functions of our app. You can grant permission at any time later in the settings of the app or operating system from your mobile device. In the event that you allow access, the mobile app will only access your data and transfer it to our server to the extent necessary to provide the functionality. Your data will be treated confidentially and deleted by us if you revoke your rights of use or are no longer required to provide the services and there are no legal sto- rage obligations. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. a) DSGVO.

You can revoke your consent to the processing of your above-mentioned data at any time, either by sen- ding us a message (see the contact data in the "Responsible provider" section) or by changing the settings in the app or operating system under the settings of your mobile device. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO).

We will delete your data after exercising your right of withdrawal, unless another legal basis for the proces- sing is relevant.

Hardware access, processing of location data In addition, the app requires the following authorizations to be created:

• Camera access,

• Microphone access,

• Location query. Camera access and access to the microphone is required to create images/videos with audio recordings that can be shared and stored in the app and on our servers. The processing and use of corresponding usage data takes place for the provision of the service. This data processing is justified by the fact that the processing is necessary for the fulfilment of the contract between you as the data subject and us pursuant to Art. 6 Para. 1 S. 1 lit. b) DSGVO for the use of the App. Your data will not be passed on to third parties. We will delete the data in connection with this if they are no longer required for processing. Our offer also includes so-called Location Based Services, with which we offer you special offers that are tailored to your respective location. You can only use these functions after you have agreed via a pop-up that we can collect your location data anonymously using GPS and your IP address for the purpose of providing the service. You can also grant permission at any time later in the settings of the app or opera- ting system from your mobile device. Your location will be transferred to us regularly after your confirmation, whereby we will only use your last notified location and delete the previous location notification. When location is active, your iPhone displays data processing via a compass icon or your Android smartphone displays GPS transmission in the upper bar. In addition, you can set, restrict, or revoke the settings at any time both in your privacy settings in the Inci- de App and in the settings of your mobile device via the location release. The legal basis for data proces- sing is Art. 6 Para. 1 S. 1 lit. a) DSGVO.


You can revoke your consent to the processing of your above-mentioned data at any time, either by sen- ding us a message (see the contact data in the "Responsible provider" section) or by changing the settings in the app or operating system under the settings of your mobile device. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO).

We will delete your data after exercising your right of withdrawal, unless another legal basis for the proces- sing is relevant.

For purposes of advertising, market research and demand-oriented design of the offer, we create user pro- files using pseudonyms. These data are not combined with other personal data. The legal basis for this data processing is Art. 6 Para. 1 S. 1 lit f) DSGVO. You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID. In ad- dition, you can contact the contact data listed under „Responsible".

Email marketing

Newsletter You have the opportunity to subscribe to our e-mail newsletter in the app, with which we will regularly in- form you about the following contents:

• Offers from our portfolio,

• new functions of the App,

• Events of our company,

• Offers (also events) of third parties, as far as you have given your consent,

• technical information,

• Special offers/ temporary offers.

In order to receive the newsletter, the following personal data must be provided.

• Recipient (name or pseudonym),

• valid e-mail address.

Registration for our e-mail newsletter is done using the double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you entered, in which we will ask you to confirm your subscription to the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation does not take place wit- hin 24 hours, we block the information transmitted to us and delete it automatically after one month at the latest. Furthermore, the following data will be processed at the time of the subscription:

• IP address,

• Date/time of subscription to the newsletter,

• Time of your confirmation of the confirm link. We process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and to prevent the misuse of your personal data. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. We process this data for a period of two years after termination of the contract. If the newsletter registration takes place outside a contract, we pro- cess these data up to the expiration of two years after termination of the use process. We delete this data when the newsletter subscription ends. After your confirmation, we process the e-mail address and name/pseudonym of the recipient concerned for the purpose of sending you our e-mail newsletter. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a) DSGVO. We delete this data when you cancel your newsletter subscription.

A revocation of your consent to the processing of your e-mail address for the receipt of the newsletter is possible at any time, either by sending us a message (see the contact data in the section "Responsible provider/representative of the provider in the European Union") or by directly clicking on the link contained


in the newsletter to unsubscribe. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO).

Hosting We use external hosting services to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance ser- vices. All data required for the operation and use of our mobile app is processed. We use external hosting services for the operation of this website. With the use of external hosting ser- vices we aim at an efficient and secure provision of our website. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO.

The collection of the data for the provision and use of the App and the processing of the data via external web hosts is mandatory for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the pro- cessing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the proces- sing.

Integration of third-party content The mobile app incorporates third-party content such as videos, maps, RSS feeds or graphics from other websites and apps. This integration always presupposes that the providers of this content ("third-party providers") perceive the IP addresses of the users. Without the IP address, they cannot send the content to the mobile app of the respective user. The IP address is therefore required for the presentation of these contents. We make every effort to use only content from third parties who process the IP address solely for the pur- pose of delivering the content. However, we have no influence on whether the third parties process the IP addresses for statistical purposes, for example. As far as this is known to us, we will inform you about it in the following. Some of the third party providers may process data outside the European Union. Advertising Identifier - Exercise of the right of objection

If you use our mobile app, we process so-called "Advertising Identifier" (IDFA from Apple and GAID from Google) for advertising purposes. These are unique, but non-personalized and non-permanent identificati- on numbers that are provided to certain operating systems by end devices (Apple's iOS or Google's An- droid). The data collected through the IDFA and GAID are not linked to any other device-related informati- on. We use the IDFA and GAID to provide you with personalized advertising and to evaluate your use. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. If you select "No Ad Tracking" in the iOS settings under "Privacy" - "Advertising" or "Disable Personalized Advertising" in the Android settings, we can only do the following: Measure your interaction with banners by counting the number of times a banner is displayed without clicking on it ("frequency capping"), click rate, unique user detection, security measures, fraud prevention and troubleshooting. Your data will also be processed on Apple and Google servers in the USA. Both Apple and Google are certified under the US- EU Privacy Shield and are committed to complying with European Union privacy standards. We have no knowledge of or influence over the storage period at Apple and Google.

You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

Verification procedure using Google Firebase This app uses Google Firebase. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, Cali- fornia 94043, USA, hereinafter referred to as "Google". Google Firebase is a platform for the development of mobile apps with a variety of features that are presented at www.firebase.google.com/prdoucts We use Google Firebase primarily to verify the email address and phone number you provide during registration. The code will be sent to the e-mail address and phone number specified, which must be entered in the app. The data processing thus serves the security of our login area of the app. When you register, Google will receive your contact information (email address and phone number) and information that you have accessed the mobile app in question. In addition, the data mentioned under the


section "Access data" will be transmitted. When you're logged in to Google, your information will be di- rectly associated with your account. If you do not want your profile to be associated with Google, you must log out. Google stores your data as user profiles and processes them for the purposes of advertising, market research and/or the needs-based design of apps. Such an evaluation is carried out in particular for the purpose of providing demand-oriented advertising and to inform other users of the social network about your activities on our app. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis is Art. 6 para. 1 sentence 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and have no in- fluence on it. Further information from Google about the handling of user data (privacy policy) can be found at: http://www.google.com/intl/de/policies/privacy.

The collection of the data for the provision of the app and the processing of the data in log files is manda- tory for the operation of the app. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can dele- te the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID. For the rest, reference is made to the comments under "Advertising Identifier - Exercise of the right to object" for the exercise of the right to object.

Login via Googleaccount

You can sign up for our service using your Google account. You can use your existing Google account or create a new account. If you choose to sign in using your Google Account, you will be directed to Google, where you will need to sign in or register. We do not receive any personal data - neither user name nor password.

Google will then link your profile on Google to the service you've signed up for. We will then generally re- ceive your public information from Google and any information that you make publicly available or share with the application. These are usually your name, your profile picture, your gender, your networks, your username/e-mail address and your user number. Our aim is to make our app faster and easier to use and for marketing purposes to inform the social network users about your activity on our app.

When you visit the app, Google also receives the information that you have called the mobile app in ques- tion. In addition, the data mentioned under the section "Access data" will be transmitted. This occurs re- gardless of whether Google provides a user account that you are logged in to or whether there is no user account. When you're logged in to Google, your information will be directly associated with your account. If you do not want your profile to be assigned to Incide, you must log out before activating the button. Google stores your data as user profiles and processes them for purposes of advertising, market research and/or demand-oriented design of its website/Apps. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the soci- al network about your activities on our app. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for the data processing is your consent in the sense of Art. 6 Para. 1 S. 1 lit. a) DSGVO. We have no knowledge of the storage period at Google and have no influence on it. Further information from Google about the handling of user data (privacy policy) can be found at: http://www.google.com/intl/de/ policies/privacy.

A revocation of your consent to the processing of your data about and from is possible at any time, either by message to us (see the contact data in the section "Responsible provider") or by registering with Google and make the necessary changes to your profile. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO). We will delete your data after exercising your right of withdrawal, unless another legal basis for the proces- sing is relevant.

Storage from Google Firebase We use Google Firebase storage to store data and content for the app. Google v uses programming inter- faces to compile information about the use of the app in order to evaluate the use of the app and to make it faster and more attractive to use. We also pursue this interest. For the exceptional cases in which perso- nal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.priva- cyshield.gov/EU-US-Framework. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DS- GVO. We have no knowledge of the storage period at Google and have no influence on it. You can find further information from the third-party provider Google at: http://www.google.com/analytics/terms/


de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/ privacy. You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

Real-time database from Google Firebase We also use the Google Firebase real-time database to store and share information between users. Google uses programming interfaces to process information about the use of the app to evaluate your use of the app and to make its operation faster and more attractive. We also pursue this interest. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and have no influence on it. You can find further information from the third-party provider Google at: http://www.google.com/ana- lytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/ intl/de/policies/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

MapBox This mobile app uses the service "MapBox" from Mapbox Inc., 740 15th Street NW, 5th Floor, Washington, District of Columbia, USA, to display maps or map sections and thus enables you to comfortably use the map function in the app.

When you visit the App, MapBox receives information about the use of our App, including your IP address, which may be collected through programming interfaces and forwarded to a MapBox server in the United States and stored. Mapbox has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/ EU-US-Framework. The transfer of data is governed by MapBox's Privacy Policy, which can be found at the following link: https://www.mapbox.com/privacy/. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. The purpose of the processing is to make our website more attractive and to offer you additional services. We have no knowledge of the storage time at MapBox and have no influence on it. You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. We would like to point out that you may not be able to use all functions of our app if you restrict the use of the IDFA/ GAID.

Statistical, analytical and marketing services Google Analytics In orderto tailor our app optimally to your interests, we use Google Analytics, a web analytics service from Google. Google Analytics uses programming interfaces that can access mobile devices and analyze how you use the app. The information generated about your use of this app is transferred to a Google server in the USA and processed there. If IP anonymization is enabled in this app, Google will previously truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened


there. On our behalf, Google will use this information to evaluate your use of the app, to compile reports on app activity for us and to provide us with other services relating to app usage and internet usage. The IP address transmitted by your app as part of Google Analytics is not merged with other data from Google. This mobile app uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately. We use Google Analytics to analyze and regularly improve the use of our app. The statistics allow us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which perso- nal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.priva- cyshield.gov/EU-US-Framework. The legal basis for the processing of Google Analytics is Art. 6 Para. 1 S. 1 lit. f) DSGVO. The Analytics usage data will be deleted after fourteen months at the latest. For more in- formation about Google, the third party provider, please see : http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/priva- cy.html, http://www.google.de/intl/de/policies/privacy. You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. We would like to point out that you may not be able to use all functions of our app ifyou restrict the use of the IDFA/ GAID.

Google Analytics features for display advertising

The Google Analytics tracking code implemented on this app supports display advertising. In the context of Google Analytics for display advertising, the remarketing function is used in this and other apps. The ads are displayed on third-party websites and apps, including Google. Third parties, including Google, use programming interfaces to collect information about the use of the app. The combined use of Google Ana- lytics and DoubleClick by Google allows targeted and optimized ad targeting and scattering based on pre- vious visits to this app. The following Google AdWords features are used in this app Remarketing

• interest categories

• Similar target groups

• Other types of interest-based advertising

We use these Google features to later target visitors to this app with ads that best match the specific inte- rests of the user based on their previous internet usage. We do not use remarketing lists or other anony- mous IDs to collect personal information from users. We also use the following Google Analytics features for display advertising:

• Reports about impressions in the Google Display Network,

• Integration of Double-Click Campaign Manager,

• Google Analytics reports on performance by demographics and interests.

These reporting functions enable us to use and evaluate the data obtained from Google in the context of interest-related advertising as well as the visitor data of third parties in Google Analytics. The data includes information such as age, gender and interests. Data processing is based on Art. 6 Para. 1 S. 1 lit. f) DSGVO, as we have a predominantly legitimate inte- rest in optimising our advertisements. The usage data will be deleted after fourteen months at the latest.

You can object to the processing. Your right to object exists for reasons arising from your particular situati- on, unless we can prove compelling grounds for processing worthy of protection which outweigh your inte- rests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android-based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.


You can also turn off Google Analytics for display advertising in the Google Ad Preferences Manager or customize ads on the Google Display Network at any time by going to Ad Preferences at https://ww- w.google.de/settings/ads

Google AdWords Conversion We use the Google Adwords offer from Google to draw attention to our attractive offers with the help of advertising material (so-called Google AdWords) on external websites/apps. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We pur- sue with it the interest to show you advertisement which is of interest for you, to make our app more inte- resting for you and to achieve a fair calculation of advertising costs. These advertising media are delivered by Google via so-called "Ad Servers". For this purpose we use ad servers, which can measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our app via a Google ad, Google records the advertising ID of your mobile device. For these identifiers, the unique ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values. This information enables Google to recognize your use of the app. If a user visits certain pages of an Ad- Words customer's website/app, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each AdWords customer is assigned a different ID. The information collec- ted cannot be tracked through AdWords customers' websites or apps. We ourselves do not process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media, in particular we cannot identify the users on the basis of this information. Due to the marketing tools used, the app automatically establishes a direct connection with the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our app or cli- cked on an ad from us. If you are registered with a Google service, Google can assign the visit to your ac- count. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and have no influence on it. You can find further information on data pro- tection at Google here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/ sitestats/de.html.

You have the right to object to the processing of your data. You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compel- ling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android- based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

Google remarketing Besides Adwords Conversion we use the Google Remarketing application from Google. This is a procedu- re with which we would like to address you again. This application allows you to display our advertise- ments after visiting our mobile app when you continue to use the Internet. Google uses programming inter- faces to access the advertising ID of your mobile device. The data mentioned in the section "Access data" will be transmitted and information about your usage behaviour when visiting various websites/apps will be collected and evaluated by Google. This allows Google to determine your previous visit to our app. Accor- ding to Google's own statements, the data collected within the scope of remarketing is not combined with your personal data, which may be processed by Google. In particular, according to Google, pseudonymi- sation is used for remarketing. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and have no influence on it. You have the right to object to the processing of your data. You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compel-


ling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android- based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

Google AdSense This app uses Google AdSense, Google's online advertising service, to deliver ads tailored to your inte- rests. We pursue the interest to show you advertisements that might be of interest to you in order to make our mobile app more interesting for you. For this purpose, statistical information about you is collected, which is processed by our advertising partners. These advertisements can be identified by the reference "Google advertisements" in the respective advertisement. When you visit the app, Google receives the information that you have called up our mobile app. Google uses programming interfaces to access the advertising ID of your mobile device. The data specified in the section "Access data" will be transmitted. We have no influence on the data collected, nor are we aware of the full extent of data processing and the storage period. Your data may be transferred to the USA and processed there. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU- US-Framework. If you are logged in with your Google account, your data can be directly assigned to it. If you don't want to be associated with your Google profile, you need to log out. It is possible that this data is passed on to Google's contractual partners, third parties and authorities. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Further information on the purpose and scope of the processing as well as further information on your rights in this regard and setting options to protect your privacy can be found at: http://www.google.de/intl/de/policies/technolo- gies/ads.

You have the right to object to the processing of your data. You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compel- ling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android- based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

iTunes Custom Audience Furthermore, this app uses the "Custom Audiences" function of iTunes. Provider is Apple Inc., One Apple Park Way, Cupertino, California 95014, USA; hereinafter referred to as "iTunes". Apple uses programming interfaces to access the advertising ID of your mobile device. This allows users of the App to be presented with interest-related advertisements ("iTunes Ads") when visiting the iTunes social network or other websites/apps that also use the process. We pursue with it the interest to show you advertisement which is of interest for you in order to make our App more interesting for you. Due to the marketing tools used, your app automatically establishes a direct connection with the iTunes server. We have no influence on the extent and further processing of the data collected by iTunes through the use of this tool and therefore inform you according to our state of knowledge: By integrating iTunes Custom Audiences, iTunes receives the information that you have called up our app or clicked on an ad- vertisement from us. If you are registered with an iTunes service, iTunes can assign the visit to your ac- count. Even if you are not registered with iTunes or have not logged in, the provider may collect and store your IP address and other identifiers. Your data may be transferred to the USA and processed there. Apple has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) DSGVO. In this case we do not store any personal data about you. We have no knowledge of the storage period on iTunes and have no influence on it. For more information about processing by iTunes, visit https://www.apple.com/legal/priva- cy/de-ww/.

You have the right to object to the processing of your data. You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compel- ling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android- based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new


randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

iTunes Analytics This app uses Apple's iTunes Analytics (vendor is Apple Inc., One Apple Park Way, Cupertino, California 95014, USA; hereinafter referred to as "iTunes") to track your user behavior. Apple uses programming inter- faces to access the advertising ID of your mobile device. The information obtained in this way serves us solely for statistical purposes, is transmitted to us anonymously by iTunes and does not provide any infor- mation about the person of the user. However, in accordance with iTunes' Privacy Policy, iTunes will con- nect you to your iTunes account, store and use you for its own promotional purposes in accordance with iTunes' Data Usage Policy, which may include transferring your information to iTunes' partners. Even if you are not registered with iTunes or have not logged in, the provider may collect and store your IP address and other identifiers. Your data may be transferred to the USA and processed there. Apple has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) DSGVO. By using iTunes Analy- tics, we are pursuing the interest of being able to better evaluate our website and improve our service offe- ring. In this case we do not store any personal data about you. We have no knowledge of the storage peri- od on iTunes and have no influence on it. For more information about iTunes' privacy policy, please see the related privacy policy at https://www.apple.com/legal/privacy/de-ww/. You have the right to object to the processing of your data. You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can prove compel- ling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can object to the processing by deleting the IDFA ("Reset Ad-ID") in Apple's Device Settings, and a new IDFA will be created that is not merged with the previously collected data. If you are using an Android- based mobile device, you can delete the GAID ("Reset advertising ID") in the device settings and a new randomly selected identification number will be assigned to you. Please note that you may not be able to use all features of our app if you restrict the use of the IDFA/GAID.

copyright © by Spirit Legal LLP