The responsible person in terms of the basic data protection regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is: ScriblabProducts, Marius Herzog, Pirckheimerstr.40, 90408 Nürnberg, E-Mail: support (at) products.scriblab.de.

We have designed our data protection declaration according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of different terms, the corresponding definitions here can be viewed.

We process your personal data such as your name and first name, your e-mail address and IP address etc. only if there is a legal basis for this. According to the basic data protection regulation, the following regulations in particular come into consideration here:

• Art. 6 para. 1 sentence 1 lit. a DSGVO: The data subject has given his or her consent to the processing of personal data concerning him or her for one or more specific purposes.
• Art. 6 para. 1 sentence 1 lit. b DSGVO: The processing is necessary for the performance of a contract to which the data subject is party or in order to implement pre-contractual measures taken at the request of the data subject.
• Art. 6 para. 1 sentence 1 lit. c DSGVO: The processing is necessary to fulfil a legal obligation to which the controller is subject
• Art. 6 para. 1 sentence 1 lit. d DSGVO: The processing is necessary in order to protect the vital interests of the data subject or of another natural person
• Art. 6 para. 1 sentence 1 lit. e DSGVO: the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• Art. 6 para. 1 sentence 1 lit. f DSGVO: the processing is necessary to protect the legitimate interests of the controller or of a third party unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child

However, we would like to remind you at the respective points of this data protection declaration on which legal basis the processing of your personal data takes place.

The passing on of personal data is also processing in the sense of the preceding paragraph 3, but we would like to inform you here again separately about the subject of passing on personal data to third parties. The protection of your personal data is very important to us. For this reason we are particularly careful when it comes to passing on your data to third parties.

Data will therefore only be passed on to third parties if there is a legal basis for the processing. For example, we pass on personal data to persons or companies who work for us as contract processors in accordance with Art. 28 DSGVO. A processor is any person who processes personal data on our behalf, i.e. in particular in an instruction and control relationship with us.

In accordance with the provisions of the DSGVO, we conclude a contract with each of our contract processors in order to oblige them to comply with data protection regulations and thus provide comprehensive protection for your data.

Your personal data will be deleted by us insofar as they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

1. Downloading the app

   We have no influence on and are not responsible for the collection of data required to download the app from the Appstore, e.g. user name, e-mail address and customer number of your account, time of download, payment information and the individual device ID number.

2. Registration

   If you register in the app, you can do so using your real or even a fictitious name, as well as your e-mail address and a password of your choice.
   We collect this data out of legitimate interests for further identification and to provide our services in accordance with Art. 6 Para. 1 sentence 1 lit. b) and f) DSGVO. These data are stored in our backend.

3. Login

   When logging in to the mobile app, we collect the personal data described below to enable convenient use of the functions.

   • Primary language of the device
   • eMail at login
   • last login date

   No history is kept about the login, but only the database row of the user account is updated at a new login.

   The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. Our legitimate interest follows from the above listed purposes for data collection.

4. Error transmission form

   We provide you with a form in our app, so that you have the possibility to inform us about paint errors at any time. When using the form, your IP address, user ID, date and time of the request and your text/change suggestion will be sent to us so that we know who the request comes from and can process it.

   Your details from the form will be processed in accordance with Art. 6 Para. 1 S. 1 lit. b and f DSGVO in order to carry out pre-contractual measures taken at your request or to safeguard our legitimate interest, namely to carry out our business activities.

   The inquiries as well as the associated data will be deleted at the latest 3 months after receipt, unless they are required for a further contractual relationship.

5. Inquiry form paints

   If, as a registered user, you request missing paints in the database via the contact form or submit a complete paint for the database (barcode, RGB values, name, manufacturer, etc.), we will process the data you provide to answer your request on the basis of Art. 6 para. 1 lit. b) DSGVO.

   When we add a paint you submit to the online database, your username may be published with the paint. The legal basis for the publication is based on Art. 6 para. 1 lit. b) DSGVO (contract) or Art. 6 para. 1 lit. f) DSGVO (our legitimate interest).

6. Newsletter

   Content of the newsletter and registration data
   
   We will only send you a newsletter if you order it from us and have given your consent in accordance with Art. 6 para. p. 1 lit. a DSGVO. The contents of the newsletter are described in detail when you register for the newsletter. To register for the newsletter, it is sufficient to enter your e-mail address. If you provide further voluntary details such as your name and/or gender, these will be used exclusively for personalising the newsletter addressed to you.

   Revocation
   
   If you no longer wish to receive our newsletter, you can withdraw your consent at any time for the future. To do so, you can either set the switch to "No" or click on the unsubscribe link at the end of each newsletter or send us an e-mail to the following e-mail address: support@products.scriblab.de

   Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

7. Amazon Affiliate

   We participate in the partner advertising program of Amazon. As an Amazon partner we earn on qualified sales. As part of our app, we will mark the relevant ads. When you click on the appropriate ads, you will be redirected to Amazon. We have no control over what information Amazon collects and processes from you. You can find further information here.

You are entitled to the following rights:

1. Information

   In accordance with Art. 15 of the DSGVO, you have the right to request information about your personal data processed by us. This right of information includes information about

   • the processing purposes
   • the categories of personal data
   • the recipients or categories of recipients to whom your data has been or will be disclosed
   • the planned storage period or at least the criteria for determining the storage period
   • the existence of a right of rectification, erasure, restriction of processing or opposition
   • the existence of a right of appeal to a supervisory authority
   • the origin of your personal data, if it was not collected by us
   • the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details

2. Corrigendum

   In accordance with Art. 16 DSGVO, you are entitled to the immediate correction of incorrect or incomplete personal data stored by us.

3. Deletion

   According to Art. 17 DSGVO, you have the right to demand the immediate deletion of your personal data from us, unless further processing is necessary for one of the following reasons:

   • the personal data are still necessary for the purposes for which they were collected or otherwise processed
   • on the exercise of the right to freedom of expression and information
   • in order to comply with a legal obligation under European Union or national law to which the controller is subject or in the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
   • for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO
   • for archiving, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing
   • to assert, exercise or defend legal claims

4. Restriction of processing

   In accordance with Art. 18 DSGVO, you can request the restriction of the processing of your personal data for one of the following reasons:

   • You dispute the correctness of your personal data.
   • The processing is unlawful and you object to the deletion of your personal data.
   • We no longer need the personal data for the purposes of the processing, but you do need the data to assert, exercise or defend legal claims.
   • They lodge an objection to the processing pursuant to Art. 21 para. 1 DSGVO.

5. Information

   If you have requested the rectification or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 para. 1 and Art. 18 DSGVO, we will notify all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You can demand that we inform you of these recipients.

6. Transmission

   You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format.

   You also have the right to request that this data be communicated to a third party, provided that the processing was carried out with the aid of automated procedures and is based on a consent pursuant to Art. 6, para. 1, sentence 1, lit. a or Art. 9, paragraph 2, lit. a, or on a contract pursuant to Art. 6, para. 1, sentence 1, lit. b, DSGVO.

7. Revocation

   In accordance with Art. 7 para. 3 DSGVO, you have the right to revoke the consent you have given to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. In future, we may no longer continue the data processing that was based on your revoked consent.

8. Complaint

   Under Art. 77 DSGVO you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the DSGVO.

9. Opposition

   If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without indicating the specific situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to support@products.scriblab.de

10. Automated decision in individual cases including profiling

    You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effect on you or significantly affects you in a similar manner. This shall not apply if the decision

    1. is necessary for the conclusion or performance of a contract between you and us
    2. is permissible under the laws of the European Union or of the Member States to which we are subject and those laws contain appropriate measures to safeguard your rights and freedoms and your legitimate interests
    3. occurs with your express consent

    However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect rights and freedoms and your legitimate interests.

    With regard to the cases referred to in i) and iii), we shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of a person from our side, to express your point of view and to challenge the decision.

If we change the privacy policy, this will be indicated in the app.