Dataprotection information for the use of the SYD FOR SOLEN App

If youwould like to be informed about SYD FOR SOLEN events as a visitor or interestedparty, the SYD FOR SOLEN app is available to you. The SYD FOR SOLEN app isavailable for download in the Google Play Store as well as in the App Store(Apple).

As an appprovider, we, the Smash!Bang!Pow! ApS, inform you below about the dataprocessing in the context of the use of the SYD FOR SOLEN app.

1.    Person in charge

This Privacy Notice is providedto you by Smash!Bang!Pow! ApS ("we" or "us") as acontroller within the meaning of the General Data Protection Regulation (GDPR).In the following, Smash!Bang!Pow! ApS provides information on the processing ofpersonal data in accordance with Articles 13 and 14 of the General DataProtection Regulation (hereinafter referred to as the "GDPR").

2.    Purposes of processing

In the context of the use of theSYD FOR SOLEN App, Smash!Bang!Pow! ApS processes personal data for the following purposes:

•       Needs-based information and warning of users, relatedto SYD FOR SOLEN events

•       Ensuring the security and functionality of the SYD FORSOLEN app

•       Analysis of users' app activities for marketingpurposes and optimization of the SYD FOR SOLEN app's range of services usingGoogle Analytics 4 for Firebase

If other purposes for dataprocessing arise in addition to the already existing purposes, we will checkwhether these additional purposes are still covered within the scope of theoriginal purposes of collection and are compatible with them. If this is notthe case, we will inform you of such a change of purpose. If there is no otherlegal basis for further data processing, we will not process the data withoutyour consent.

3.    Categories

In particular, Smash!Bang!Pow!ApS processes the following categories of personal data:

•       Usage data (e.g. IP address, date and time of access,device specification, browser, name and URL of the file retrieved)

•       Identifiers used to identify a device or service (e.g.Firebase Cloud Messaging Token)

•       Information on ensuring security and troubleshooting(e.g. Crash stack traces, Firebase installation ID, Crashlytics installationUUID, log files server)

•       If consented: Data for the analysis of user behavior usingGoogle Analytics 4 (e.g. Google Analytics App Instance ID, User and Event DataAnalysis, App Activity)

•       Support requests and correspondence from users (e-mailaddress, name and contact details if applicable)

4.    Legal bases

1.      Ensuring the security andfunctionality of the SYD FOR SOLEN app

Personal data is processed toensure the functionality as well as system security and stability in theoperation of the SYD FOR SOLEN App. The legal basis for data processing is Art.6 para. 1 sentence 1 lit. f GDPR (legitimate interest).

The legitimate interest is toavert disruptions or unlawful or wilful interferences and to ensure thesecurity of the functions and services offered or accessible via the SYD FORSOLEN App. Google Firebase Crashlytics is used for this purpose. FirebaseCrashlytics is a real-time crash reporting tool that allows you to detect,evaluate, prioritize, and fix the most prevalent crashes. The operator ofFirebase Crashlytics is Google LLC. The responsible body for users in theEU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House,4 Barrow St, Dublin, D04 E5W5, Ireland. With the use of Firebase Crashlytics,anonymized real-time crash reports are automatically sent. The data transmittedin this process does not allow any conclusions to be drawn about a specificuser. These are required for maintenance and troubleshooting in order toimprove the app and minimize future failures and malfunctions of the app.Firebase Crashlytics thus serves to maintain the security and stability of theapp in order to be able to offer the service you request.

The interests of users are alsoprotected as part of the processing activities. Only the absolutely necessarypersonal data of yours will be processed for these purposes and will only bestored for as long as is necessary for the aforementioned purposes and no otherlegal basis for the processing.

With regard to processingpursuant to Art. 6 (1) sentence 1 (f) GDPR, you have the right to object at anytime. Todo so, please email gpdr@smashbangpow.dk.

2.     Push notifications

You can activate the receipt ofso-called push notifications in the SYD FOR SOLEN. If you activate the sendingof push notifications, you will receive regular information about the individualevents, in particular security or warning messages as well as other information(including news, promotions, etc.). The legal basis for this processing is yourconsent in accordance with Section 25 (1) TDDDG and Article 6 (1) sentence 1(a) GDPR.

To sign up for pushnotifications, you must actively allow the receipt of push notifications in thepush notification prompt (pop-up window) when you first start the SYD FOR SOLENapp. By confirming this, you as a user agree to receive push notifications. Weuse Firebase Cloud Messaging (FCM) as a service for the push notifications. Theoperator of Firebase Cloud Messaging is Google LLC. The responsible body forusers in the EU/EEA and Switzerland is Google Ireland Limited, Google BuildingGordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. During installation, theFirebase installation ID and the Firebase Cloud Messaging Token are used tosend push notifications to the correct device. The token is different from theFirebase installation ID and rotates over time. Both are stored in the device SYDFOR SOLEN app). The token is also transmitted to the Smash!Bang!Pow! ApS andstored. This token does not contain any personal data or unique deviceidentifier that can be linked together by the Smash!Bang!Pow! ApS. Allcommunication is encrypted. FCM uses the HTTPS protocol, which uses SSL/TLS(Secure Sockets Layer/Transport Layer Security) for the secure transmission ofmessages and tokens.

Revocation

You can revoke your consent tothe storage and use of your personal data to receive our push notifications atany time with effect for the future. You can revoke your consent in thesettings of your device or in the app settings (notifications).

3.      Consent for the analysis of userdata by Google (Google Analytics 4 for Firebase)

We process your data for theanalysis of user data by Google (Google Analytics 4 for Firebase) on the basisof your consent in accordance with Section 25 (1) TDDDG for the storage oftechnical data in the end device and access to this information in the enddevice as well as Article 6 (1) sentence 1 (a) GDPR for the processing ofpersonal analysis data. This consent is voluntary and is given by you when youclick the relevant box in the consent banner of the SYD FOR SOLEN app.

Data processing of your userdata by Google (Google Analytics 4 for Firebase)

Google Analytics 4 for Firebaseis an analytics service. The operator of Google Analytics 4 for Firebase isGoogle LLC. The controller for users in the EU/EEA and Switzerland is GoogleIreland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5,Ireland (Google).

The analysis tool makes itpossible to collect, analyze and aggregate data for statistical purposes whenusing the app. By using Google Analytics 4 for Firebase, for example, app viewsor clicks can be analyzed and it can be determined which functions within theapp are used frequently or rarely. On behalf of the App Provider, Google willuse this information to evaluate the pseudonymous use of the SYD FOR SOLEN App(using the App Instance ID) and to compile reports on App activity.

Google Analytics 4 for Firebasedoes not require IP address masking because IP addresses are neither logged norstored. During your use of the SYD FOR SOLEN App, your user behavior isrecorded in the form of "events". Events can include:

•      Start of use

•       Click path (interactions within the SYD FOR SOLEN app,such as clicks on widgets, artists, sessions, etc.)

•      Clicks on external links

•      Language

•      Firebase Installation ID

•       Device-specific data, such as operating system anddevice model

•      Number of users

On behalf of the App Provider,Google will use this information to evaluate your pseudonymous use of the SYDFOR SOLEN App (using the App Instance ID) and to compile reports on Appactivity.

Revocation

You can revoke your consent atany time with effect for the future by going to the privacy settings of the SYDFOR SOLEN app and changing your selection there. This does not affect thelawfulness of the processing carried out on the basis of consent before itsrevocation.

You can find more informationabout the terms of use of Google Analytics and data protection at Google under https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de.

5.     Recipients of your data

We will only transfer yourpersonal data to third parties if you expressly consent to this in advance, ifit serves the preparation or performance of a contract you have with the thirdparty or with us, or if we are legally obliged to do so.

In order to fulfil the purposesdescribed in this data protection information, we transmit your data to thefollowing recipients:

1.     Service provider

As part of the provision of the SYDFOR SOLEN app Smash!Bang!Pow! ApS cooperates with the service provider chaanzUG (haftungsbeschränkt) Bockenheimer Landstraße 133, 60325 Frankfurt am Mainfor the technical provision of the SYD FOR SOLEN app, which processes yourpersonal data in accordance with instructions and on behalf of Smash!Bang!Pow!ApS Art. 28 GDPR.

In the context of the dataprocessing of your user data by the services Google Analytics 4 for Firebase,Firebase Crashlytics and Firebase Cloud Messaging, which are used as servicesby chaanz UG, the recipients of the data are or may be:

•       Google Ireland Limited, Gordon House, Barrow Street,Dublin 4, Ireland (processor according to Art. 28 GDPR of chaanz UG)

•       Google LLC, 1600 Amphitheatre Parkway Mountain View,CA 94043, USA

•       Alphabet Inc., 1600 Amphitheatre Parkway MountainView, CA 94043, USA

2.      Authorities (e.g. lawenforcement authorities), lawyers, auditors, courts, experts

In the event of violations orother legal obligations, we will transfer your personal data to law enforcementauthorities as well as lawyers, etc.

6.     Transfer to thirdcountries

If we transfer personal data toservice providers outside the EU or the European Economic Area (EEA) who arebound by instructions, your data will only be processed in third countries onthe basis of so-called standard contractual clauses of the EU Commission,insofar as certain measures have been taken to ensure that an adequate level ofdata protection exists for this (e.g. adequacy decision of the EU Commission orso-called appropriate safeguards, Art. 44 et seq. GDPR) and/or,  insofar as your data is processed in theUnited States, on the basis of the EU-U.S. Data Privacy Framework.

7.      Storage period / deletion ofyour data

We will delete your personaldata if it is no longer required for the aforementioned processing purposes andthere are no statutory retention obligations to prevent it from being deleted.

•       General usage data (e.g. IP address, date and time ofaccess, device specification, browser, name and URL of the retrieved file) arestored only temporarily. Log files of the servers (accesses, errors, etc.) arestored for 60 days.

•       Identifiers used to identify a device or service:

•                        Firebase Cloud Messaging Token:270 days after inactivity (server-side), immediately upon deletion or reset ofthe SYD FOR SOLEN app (app-side)

•                        Firebase installation ID: 270days after inactivity (server-side), immediately upon deletion or reset of the SYDFOR SOLEN app (app-side)

•                        App instance ID: 14 monthstogether with analytics data after inactivity or deletion or withdrawal consent(server-side), immediately upon uninstallation of the SYD FOR SOLEN app(app-side)

•       The storage period of information to ensure securityand troubleshooting (crash stack traces and extracted minidump data includingassociated identifiers such as e.g. Crashlytics installation UUID and Firebaseinstallation ID) is 90 days before the process of removal from live and backupsystems begins.

•       Data for the analysis of user behavior using GoogleAnalytics 4 for Firebase is automatically deleted after 14 months, providedthat the user consents.

•       Support requests and correspondence from users (e-mailaddress, name and contact details if applicable) are stored for three yearsafter completion (statutory retention period).

8.     Your privacy rights

You can exercise the following rights inconnection with the processing of your personal data, subject to the respectivelegal requirements:

•       Right to information about your personal data storedby us (Art. 15 GDPR). In particular, you can request information about thepurposes of processing, the categories of personal data, the categories ofrecipients and the planned storage period;

•       Right to rectification of inaccurate or incompletedata (Art. 16 GDPR);

•       Right to erasure of your data stored by us (Art. 17GDPR), provided that there are no statutory or contractual retention periods orother legal obligations or rights to further storage;

•       Right to restriction of processing of your data (Art.18 GDPR);

•       Right to data portability (Art. 20 GDPR);

•       Right to withdraw your consent (Art. 7 GDPR), whichyou can declare at any time with effect for the future. If you give yourconsent via the privacy settings, you can declare your revocation via theprivacy settings or cookie settings;

•       Right to object to the processing of your personaldata in accordance with Art. 21 GDPR;

•       Right to lodge a complaint with a supervisoryauthority in accordance with Art. 77 GDPR.

Your data protection request for theimplementation of your rights can be made informally. Simply contact us by e-mail at:

[$SUPPORTEMAIL$]

All contents of the privacy policy for theuse of the [SYD FOR SOLEN app are addressed to and apply to all genders(f/m/d). Insofar as only male, female or neutral personal designations are useduniformly.

‍