luca Locations Privacy Policy for Operators

The person responsible for processing personal data collected directly by us is:

‍

culture4life GmbH
Mörikestrasse 67
70199 Stuttgart
germany
info@culture4life.de

You can contact our data protection officer as follows:

‍

culture4life GmbH
data protection officer
Rotherstraße 20
10245 Berlin
germany
privacy@culture4life.de

To you at Luca Locations To register, it is necessary to provide information about your company and yourself.

1. Data categories

We process the following contact details, which are necessary to register for Luca Locations:

• First and last name of the managing director
• company name
• address
• phone number
• email address

For certain functionalities, you can store the contact details of your employees. For this purpose, the contact details of your employees are processed and stored.

2. Purpose of processing

We process this data so that you can register your business and thus use Luca Locations.

3. Legal basis of processing

The legal basis for data processing is in accordance with Art. 6 (1) 1 b) GDPR: Based on the terms of use applicable between you and us for luca Locations.

4. Recipients of personal data

In order to achieve the purposes described above in this privacy policy, we share your personal data with the following recipients, with the proviso that they may not use this data in any way other than to provide services to us (as so-called contract processors within the meaning of Art. 28 GDPR):

Service provided by providersProvidersProcessed data Software maintenance and software operating services neXenio GmbH, Charlottenstr. 59, 10117 Berlin Contact details IT infrastructure services (server) Telekom Deutschland GmbH, Landgrabenweg 151, 53227 Bonn Contact details

Server location: Germany, Hungary (Open Telekom Cloud)

Email delivery Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin E-mail address

Order processing contracts have been concluded with these recipients in accordance with Article 28 GDPR, so that they can only process your data for a specific purpose and on our instructions.

5. Storage period of the processed data

Within luca Locations, you can delete your account in the Account section. The account is initially archived for four weeks, after which your account is completely deleted.

The contact details required for registration will be processed by us as long as it is necessary to fulfill our contractual and legal obligations.

‍

1. Data categories

When using the luca Location website and the app, Temporary usage data collected: Data that may be generated when using Luca Locations, i.e.:

• IP address
• IP location
• Type and version of the terminal device used
• Information about the mobile network used, time zone settings, operating system and platform

We also use the open source software Matomo and Mixpanel to measure reach. In addition, the following Analytical data raised.

• Anonymized IP addresses
• Pseudo-anonymized location (based on the anonymized IP address)
• Pseudonymized visitor ID
• Date and time, time zone settings, and local time
• Accessed functions and elements of the app

• Files and links that were clicked on and downloaded
• External links that are used to open the app
• App charging time
• App settings (e.g. language settings, screen resolution)
• Converted destinations

2. Purposes and legal bases of processing

We will only process your personal data for a specific purpose in accordance with the listed legal bases. Processing operations are described below in relation to the respective purpose and the respective legal bases for processing your personal data are mentioned:

‍

‍

3. Recipients of personal data

In order to achieve the purposes described above in this privacy policy, we share your personal data with the following recipients, with the proviso that they may not use this data in any way other than to provide services to us (as so-called contract processors within the meaning of Art. 28 GDPR):

Order processing contracts have been concluded with these recipients in accordance with Article 28 GDPR, so that they can only process your data for a specific purpose and on our instructions.

4. Storage period of the processed data

Your personal data will be automatically deleted after the deadlines described below:

• Temporary usage data: Temporary usage data is processed in log files. These are stored by us for a maximum of 7 days and then automatically deleted. No further storage takes place.
• Analysis data: Analytical data can be stored for up to 14 months (Matomo) and up to 5 years (Mixpanel).

‍

1. Contacting Support

To easily contact us, we provide you with a chat with our luca support team. The chat function is provided by our contract processor HubSpot, Inc. 25 First Street, Cambridge, MA 02141 USA. The chat function is provided on the legal basis of Art. 6 para. 1 lit. b DSGVO (contract performance support).

You can find more information about Intercom's data protection over here

2. Push notifications

You also have the option to activate push notifications on your mobile device (mobile phone, tablet). A push notification is a message that appears on a mobile device as a result of a triggering event. These push notifications are sent via the “Firebase Cloud Messaging” service provided by Google, Inc. Mountain View, USA provided. In order to be able to use push notifications, you will be asked for permission to send such messages to your device when you first start the app. The so-called Firebase installation ID is created to determine which devices the messages should be sent to. Firebase keeps the Firebase installation ID until the Firebase recipient (you) unsubscribes/deactivates push notifications in the app/device settings. Once unsubscribed, your ID will be removed from Firebase service live and backup systems within 180 days. The push notification is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO) to the approval of your device settings. This can be revoked at any time in the device settings by deactivating it.

You can find more information about the provider's data protection here: https://firebase.google.com/support/privacy

3rd newsletter

We use the email address you provide to send you regular information about Luca.

In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6 para. 1 lit. f DSGVO. You can unsubscribe at any time. If you have initially objected to the use of your email address for this purpose, we will not send you an email. You are entitled to object to the use of your e-mail address for the above mentioned advertising purpose at any time with effect for the future by notifying us of your wish to unsubscribe at any time via the unsubscribe link within the newsletter or by sending an email to privacy@culture4life.de. After receipt of your objection, the use of your email address will be discontinued immediately. To receive the newsletter, it is sufficient to provide and confirm an email address.

We use HubSpot, Inc., 5 FirstStreet to send and manage our newsletter. Cambridge. MA 02141 USA He processes your personal data on our behalf.

With regard to the processing of your personal data, you have the following rights provided for in the GDPR, which you can assert against us for all processing:

• The right to request a statement as to whether your personal data is being processed and, where this is the case, the right to access this data. This information includes, among other things, the processing purposes, the categories of processed personal data and the recipients or categories of recipients to whom the personal data have been or are still being disclosed (Art. 15 GDPR).
• The right to request that your personal data be corrected if it is incorrect or incomplete (Article 16 GDPR).
• The right, under certain conditions, to request that your personal data be deleted immediately (so-called “right to be forgotten”) (Art. 17 GDPR). Your data can be deleted accordingly, unless there is a legitimate interest or legal retention periods to the contrary.

• The right to request that the processing of your personal data be restricted under certain conditions (Article 18 GDPR).
• The right to withdraw consent given to us with regard to the processing of your personal data at any time. Such a revocation is valid for the future and does not affect the lawfulness of the processing that took place up to your withdrawal.

To exercise these rights against us, you can also contact our data protection officer.

Notwithstanding the above rights, you have the right to lodge a complaint with a supervisory authority for data protection and freedom of information, such as the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, P.O. Box 10 29 32, 70025 Stuttgart.

Phone: 0711/615541-0
Fax: 0711/615541-15

poststelle@lfdi.bwl.de

This is the current version of our privacy policy (valid from 24.08.2023). We reserve the right to adapt this privacy policy (in particular in the event of changes in the legal situation or changes to our services). For this reason, it is recommended that you review this privacy policy at regular intervals.