1. Who we are
I. Data Controller
Tivola Publishing GmbH is the data controller within the meaning of the GDPR (General Data Protection Regulation). Our contact details are
Tivola Publishing GmbH
2. Data Protection Officer
Our data protection officer is:
Dr. Christian Rauda
GRAEF Rechtsanwälte Digital PartG mbB
If you send us support requests by e-mail, we collect and process the data from your request in order to respond to it. Further information
1. Legal basis
The legal basis for the processing of the data that you transmit to us by e-mail is Art. 6 Para. 1 Letter b) GDPR, if the conclusion of a contract is requested and in other cases Art. 6 Para. 1 Letter f) GDPR. We have a predominant interest in answering support requests in order to support our users and to evaluate these support requests also with regard to future optimization of the apps and support.
The processing of the personal data serves us to process the support request as well as for future optimization of the apps and support. The other personal data processed during the sending process serve to ensure the security of our information technology systems.
3. Duration of storage
The data will be deleted as soon as they are no longer required for the purpose of your collection. For the purposes of fraud prevention and support improvement, the data will be stored for six months.
III. Links to social media
We have set a link to the Facebook Inc. page operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are a resident of the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
VI. Link to the map display
We have added a map representation to our website. For this we used the Open Source map service Open Street Map (https://www.openstreetmap.de/).
OpenStreetMap is an open source mapping tool. Your IP address is forwarded to OpenStreetMap so that the map can be displayed. You can see how OpenStreetMap stores your data on the OpenStreetMap data protection page here https://wiki.osmfoundation.org/wiki/Privacy_Policy.
V. Your rights
1. Right of access Further information
You have the right to request information from us at any time about whether and which personal data we store about you. To do this, you can send us an application by e-mail to the above address. Further information
If data has been processed, you can request information from us about the following:
(1) the purposes for which the personal data will be processed;
(2) the categories of personal data that will be processed;
(3) the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed;
(4) the planned duration of the storage of the personal data relating to you or, if it is not possible to provide specific information in this regard, criteria for determining the duration of the storage;
(5) the existence of a right to rectify or delete personal data concerning you, a right to limit the processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the origin of the data, if the personal data are not collected from the data subject;
(8) You have the right to request information as to whether the personal data concerned will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. Right to rectification Further information
You have the right to demand that we immediately correct and/or complete any of your incorrect or incompletely processed personal data.
3. Right to limit the processing Further information
Wir sind unter bestimmten Voraussetzungen dazu verpflichtet, eine Einschränkung der Verarbeitung personenbezogener Daten vorzunehmen. Further information
You are entitled to demand a limitation of the processing of your personal data if you dispute the accuracy of the personal data concerning you, for a period of time that allows us to verify the accuracy of the personal data or if the processing is unlawful and you reject the deletion of the personal data and instead request the limitation on the use of the personal data or if we no longer need your personal data for processing purposes but you need it to assert, exercise or defend your own legal claims, or if you object to the processing in accordance with Art. 21 para. 1 GDPR, for as long as is not yet ascertained whether the justifiable grounds of the controller outweigh your grounds. We will inform you in advance should the restriction be revoked.
4. Right to deletion Further information
Under certain circumstances, we are obliged to delete your personal data once you have requested this.Further information
You are entitled to demand deletion of your personal data if one oft he following applies: The personal data is no longer required for the purposes for which it was collected or processed in some other way. You withdraw your consent that the processing was based on Art. 6 para. 1 a) or Art. 9 para. 2 a) of the GDPR , and there are currently no valid legal grounds for processing. You submit an objection to the processing of your data pursuant to Art. 21 para. 1 of the GDPR and there are no overriding justifiable grounds for the processing, or you submit an objection to the processing of your data pursuant to Art. 21 para. 2 of the GDPR . The personal data was processed unlawfully. The deletion of the personal data is required to fulfil a legal obligation in accordance with EU law or the law of individual member states, to which we are a member. Once you have made your request we are obliged to delete the data with immediate effect. The lawfulness of the data processing for the period between the consent and the withdrawal of this consent shall remain unaffected.
If we have made the personal data concerning you public and if we are obliged to delete them pursuant to Art. 17 para. 1 GDPR, we shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to this personal data or copies or replications of this personal data.
The right to deletion does not exist if the processing is necessary.
(1) to exercise the freedom of expression and information;
(2) to fulfil a legal obligation which makes processing necessary under the law of the European Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
(4) to assert, exercise or defend legal claims.
5. Recht auf Unterrichtung Further information
If you have exercised your right to correction, deletion or limitation of processing, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction, deletion or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. Right to object Further information
You have the right at any time to object to the processing of your personal data carried out pursuant to Art. 6 para. 1 lit. f) GDPR; this also applies to profiling based on these provisions. Further information
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out, among other things, on the basis of Art. 6 para. 1 lit. e or f GDPR, pursuant to Art. 21 GDPR. We will cease processing your personal data unless we can prove compelling reasons for processing, worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
If you object to the processing for purposes of direct marketing, the personal data will no longer be processed for these purposes.
You have the possibility to exercise your right of objection through automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.
7. Right to withdraw consent Further information
You have the right to revoke your data protection consent at any time. The revocation of your consent does not affect the legality of the processing that took place on the basis of your consent until you revoke your consent.
8. Right to data portability Further information
You are entitled to demand from us to transfer your data to third parties upon request. Further information
You have the right to receive personal data concerning you in a structured, common and machine-readable format and you have the right to transfer this data to another controller without our interference. The condition is that a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and b) the processing is carried out using automated procedures. When exercising your right to data transfer, you have the right to demand that we transfer your personal data directly to another controlling body, provided this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible.
9. Automated decision in individual cases including profiling Further information
You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you, or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is lawful under the laws of the Union or the Member States to which we are subject and those laws contain reasonable measures to protect your rights and freedoms and your legitimate interests; or
(3) with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR apply and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), we shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible person, to present your own position and to contest the decision.
10. Right of appeal Further information
You have the right to complain to a regulatory agency. Further information
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is in breach of the GDPR.
The responsible data protection authorities are both the data protection authority at the customer's place of residence and the data protection authority responsible for us.