Privacy information for using the Street Parade app

If you are a visitor or interested party and would like to receive up-to-date information about events, the app is available to you. The Street Parade app is available for download from the Google Play Store and the App Store (Apple).

As an app provider, we, the association, will inform you below about data processing when using the app.

1. Responsible person

This data protection information is provided to you by the association (“we” or “us”) as the person responsible within the meaning of the General Data Protection Regulation (GDPR). In accordance with Articles 13 and 14 of the General Data Protection Regulation (hereinafter “GDPR”), the Street Parade association provides information on the processing of personal data.

2. Purposes of processing

When using the Street Parade app, the VereinStreet Parade processes personal data for the following purposes:

• Needs-based information and warning for users, related to StreetParade events

• Ensuring the security and functionality of the StreetParade app

• Analysis of users' app activities for marketing purposes and optimization of the Street Parade app's range of services using GoogleAnalytics 4 for Firebase

If, in addition to the existing purposes, there are other purposes for data processing, we check whether these other purposes are still included within the scope of the original collection purposes and are compatible with them. If this is not the case, we will inform you of such a change of purpose. If there is no other legal basis for further data processing, we will not process the data without your consent.

3. Data categories

In particular, the Street Parade association processes the following categories of personal data:

• Usage data (e.g. IP address, date and time of access, device specification, browser, name and URL of the retrieved file)

• Identifiers to identify a device or service (e.g. Firebase Cloud Messaging Token)

• Security and troubleshooting information (e.g. crash stack traces, Firebase installation ID, Crashlytics installation UUID, server log files)

• If consented: Data to analyze user behavior using Google Analytics 4 (e.g. Google Analytics app instance ID, analysis of user and event data, app activity)

• Support requests and correspondence from users (email address, name and contact details, if applicable)

4. Legal bases


1. Ensuring the safety and functionality of the Street Parade app

Personal data is processed to ensure the functionality and system security and stability in the operation of the Street Parade app. Legal basis of data processing iStart. 6 para. 1 sentence 1 lit. f DSGVO (legitimate interest).

The legitimate interest is to prevent disruptions or illegal or deliberate interventions and to ensure the security of the functions and services offered or accessible via the Street Parade app. Google Firebase Crashlytics is used for this purpose. Firebase Crashlytics is a real-time crash reporting security tool that allows you to recognize, evaluate, prioritize, and fix the most common crashes. The operator of FirebaseCrashlytics is Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building GordonHouse, 4 Barrow St, Dublin, D04 E5W5, Ireland. With the use of FirebaseCrashlytics, anonymized real-time crash reports are automatically sent. The data transmitted in this way does not allow any conclusions to be drawn about a specific user. These are required for maintenance and troubleshooting in order to improve the app and to minimize future failures and malfunctions of the app. Firebase Crashlytics thus serves to maintain the security and stability of the app in order to be able to provide the service you require.

As part of processing activities, interested users are also protected. Only the absolutely necessary personal data from you will be processed for these purposes and will only be stored for as long as is necessary for the above-mentioned purposes and there is no other legal basis for processing.

With regard to processing in accordance with Article 6 (1) (FDSGVO), you have the right to object at any time. Please send an email to info@streetparade.ch.

2. Push notifications

You can activate the receipt of so-called push notifications in the Street Parade app. If you activate the sending of push notifications, you will regularly receive information about individual events, in particular security or warning messages and further information (including news, promotions, etc.). The legal basis for this processing is your consent in accordance with § 25 para. 1 TDDDG and Art. 6 para. 1S. 1 lit. a GDPR.

In order to sign up for push notifications, you must actively allow the receipt of push notifications in the push notification request (pop-up window) when you first start the Street Parade app. By confirming, you as a user consent to receive push notifications. We use Firebase Cloud Messaging (FCM) as a service for push notifications. The operator of Firebase Cloud Messaging is Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. During installation, the Firebase installation ID and Firebase Cloud Messaging Token are used to send targeted push notifications to the correct device. The token is different from the Firebase installation ID and rotates over time. Both are stored on the device (Street Parade app). The token is also transmitted to VereinStreet Parade and stored. This token does not contain any personal data or a unique device identifier, which can be linked together by the Street Parade association. All communication is encrypted. To do this, FCM uses the HTTPS protocol, which uses SSL/TLS (Secure Sockets Layer/Transport Layer Security) for the secure transmission of messages and tokens.

revocation

You can withdraw your consent to the storage and use of your personal data to receive our push notifications at any time with effect for the future. You can withdraw your consent in the settings of your device or in the app settings (notifications).

3. Consent for analysis of user data by Google (Google Analytics 4 for Firebase)

We process your data to analyze user data by Google (Google Analytics 4 for Firebase) on the basis of your consent in accordance with Section 25 (1) TDDDG for storing technical data on the device and accessing this information on the device and Art. 6 (1) (1) lit. ADSGVO for processing personal analysis data. This consent is voluntary and is given by you when you click on the relevant box in the consent banner of the Street Parade app.

Processing of your user data by Google (Google Analytics4 for Firebase)

Google Analytics 4 for Firebase is an analytics service. The operator of Google Analytics 4 for Firebase is Google LLC. The responsible body for users in the EU/EEA and Switzerland is GoogleIreland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google).

The analysis tool makes it possible to collect, analyze and aggregate data for statistical purposes when using the app. By using Google Analytics 4 for Firebase, for example, app calls or clicks can be analyzed and determined which functions within the app are used frequently or rarely. On behalf of the app provider, Google will use this information to evaluate the pseudonymous use of the Street Parade app (using the app instance ID) and to compile reports on app activity.

There is no need to mask IP addresses in Google Analytics 4 for Firebase, as IP addresses are neither logged nor stored. While using the Street Parade app, your user behavior is recorded in the form of “events.” Events can include:

• Start of use

• Click path (interactions within the Street Parade app, such as clicks on widgets, artists, sessions, etc.)

• Clicks on external links

• Language setting

• Firebase installation ID

• Device-specific data, such as operating system and device model

• Number of users

On behalf of the app provider, Google will use this information to evaluate your pseudonymous use of the Street Parade app (using the app instance ID) and to compile reports on app activity.

revocation

You can withdraw your consent at any time with effect for the future by going to the privacy settings of the Street Parade app and changing your selection there. The lawfulness of the processing carried out on the basis of consent until the withdrawal remains unaffected.

For more information about Google Analytics terms of use and privacy at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

5. Recipients of your data

We only transfer your personal data to third parties if you expressly agree to this in advance, if it serves to prepare or fulfill a contract that you have with the third party or us, or if we are required to do so by law.

In order to fulfill the purposes described in this data protection information, we transfer your data to the following recipients:

1. Service provider

As part of providing the Street Parade app, Verein Street Parade works with the service provider chaanz UG (haftungsbeschränkt) Bockenheimer Landstraße 133, 60325 Frankfurt am Main to provide the Street Parade app technically, which processes your personal data on behalf of [$COMPANY$] Art. 28 GDPR.

As part of the processing of your user data by the Google Analytics 4 services for Firebase, Firebase Crashlytics and FirebaseCloud Messaging, which are used as services by chaanz UG, are or may be recipients of the data:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor in accordance with Article 28 GDPR of chaanz UG)

• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, United States

• Alphabet Inc., 1600 Amphitheatre Parkway MountainView, CA 94043, United States

2. Authorities (e.g. law enforcement agencies), lawyers, auditors, courts, experts

In the event of violations or other legal obligations, we transfer your personal data to law enforcement agencies and lawyers, etc.

6. Transfer to third countries

If we transfer personal data to service providers outside the EU or the European Economic Area (EEA), your data will only be processed in third countries on the basis of the so-called standard contractual clauses of the EU Commission, insofar as certain measures ensure that there is an appropriate level of data protection (e.g. adequacy decision of the EU Commission or so-called appropriate guarantees, Art. 44 et seq. GDPR) and/or insofar as Your data is processed in the United States at Basis of the EU-U.S. Data Privacy Framework.

7. Storage period/deletion of your data

We delete your personal data when it is no longer required for the above-mentioned processing purposes and there are no statutory storage obligations precluding deletion.

• General usage data (e.g. IP address, date and time of access, device specification, browser, name and URL of the retrieved file) are only temporarily stored. Server log files (accesses, errors, etc.) are stored for 60 days.

• Identifiers to identify a device or service:

• Firebase Cloud Messaging Token: 270 days after inactivity (server side), immediately when deleting or resetting the Street Parade app (app side)

• Firebase installation ID: 270 days after inactivity (server side), immediately when deleting or resetting the Street Parade app (app side)

• App instance ID: 14 months together with analysis data after inactivity or deletion or revocation of consent (server side), immediately when uninstalling the Street Parade app (app side)

• The storage period of security and troubleshooting information (crash stack traces and extracted minidump data, including associated identifiers such as Crashlytics installation UUID and Firebase installation ID) is 90 days before the process of removal from live and backup systems begins.

• Data for analyzing user behavior using Google Analytics 4 for Firebase is automatically deleted after 14 months, provided the user consents.

• Support requests and correspondence from users (email address, name and contact details, if applicable) are stored for three years after completion (legal retention period).

8. Your data protection rights

If the respective legal requirement is met, you can exercise the following rights in connection with the processing of your personal data:

• Right to information about your personal data stored by us (Art. 15 GDPR). In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients and the planned storage period;

• Right to correct incorrect or incomplete data (Art. 16 GDPR);

• The right to delete your data stored by us (Art. 17 GDPR), provided that there are no legal or contractual retention periods or other legal obligations or rights to further storage;

• Right to restrict the processing of your data (Art. 18 GDPR);

• Right to data portability (Art. 20 GDPR);

• Right to withdraw your consent (Art. 7 GDPR), which you can declare at any time with effect for the future. If consent is given via privacy settings, you can explain your withdrawal about the privacy settings or cookie settings;

• The right to object to the processing of your personal data in accordance with Article 21 GDPR;

• Right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

Your data protection request to implement your rights can be made informally. Simply send an email to:

info@streetparade.ch

The data protection information only applies to the use of the Street Parade app and applies to all genders (f/m/d). However, only male, female or neutral personal names are used uniformly.

Status: June 2026

‍