Data privacy

At Aivy, we take the protection of your personal data very seriously and treat it confidentially and in accordance with the legal data protection regulations and this privacy policy. This privacy policy applies to our website.
‍
In this declaration, we explain the type, purpose and extent of data collection and data processing in the context of your use of our website. We encourage you to read our statement carefully so that you can make informed choices about the use of your information. We collect and process your personal data only with your approval.
‍
If anything is unclear to you, or you have any other questions about this privacy policy, please email us at privacy@aivy.app.

I. Which data we collect and why

When you use our website, we collect some personal data from you. The collection and processing of this personal data is necessary for us to provide you with the functionalities of the website. Specifically, we collect and process data that you either enter directly or indirectly through your use of the website. When you use our website, we collect the following data from you with your approval:

Metadata

When you visit our website, your browser automatically sends certain metadata to our website’s server. We store this metadata automatically, for example, to ensure error-free provision of the website. Additionally, we use this metadata to personalize your user experience, improve our offerings, or provide more specific assistance with your requests. For example, we collect the IP address, browser information, time of page view or operating system. Under no circumstances do we use this metadata to draw conclusions about your person.

Our website partly includes content, services and services from other providers (third-party providers), such as Google Maps, YouTube, Vimeo, Google fonts or graphics and images from other websites. In order for this content to be displayed in your browser, the transmission of your IP address to these third-party providers is mandatory. Although we strive to use only those third-party providers that require the IP address only to deliver content, we have no control over whether your IP address may be stored. This is used by the third-party providers for statistical evaluations, among other things. Insofar as we have knowledge of the storage of your IP address, we point this out to you.

Cookies

In some areas of our website, we use so-called cookies to make your visit to our website – including repeat visits – easier. Cookies are small text files that your browser stores. It is generally possible to set your browser to inform you about cookies and also to disable them. When disabling cookies, the functionality of our website may be limited.

Data processing of your user data by Google Analytics

If you have given your approval, Google Analytics, a web analysis service of Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Extent of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

We use the function ‘anonymizeIP’ (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

During your visit to the website, the following data is collected, among other things:

• The pages you have visited, your “click path”
• Achievement of “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases)
• Your user behavior (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in a short form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• The referrer URL (via which website/advertising medium you came to this website)

Processing purposes
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipient
Recipient of the data is

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

as a processor. For this purpose, we have concluded an order processing agreement with Google. Google LLC, headquartered in California, USA, and, if applicable, US authorities may access the data stored by Google.

Transfer to third countries
A transfer of data to the USA cannot be ruled out.

Duration of storage
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by using the following options
a. You do not give your consent to the setting of the cookie or
b. Download and install the browser add-on to disable Google Analytics HERE.

You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, you may experience limited functionality on this and other websites.

Legal basis and revocation option
For this data processing is your approval, Art.6 Para.1 P.1 lit. a DSGVO. You can revoke your approval at any time with effect for the future by calling up the cookie settings via the cookie button at the bottom left of the screen and changing your selection there.

For more information about Google Analytics’ terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

Clarity

We use the “Clarity” service of Microsoft Corporation, One Microsoft Way, Redmond, USA for statistical analysis on this website. Clarity uses, among other things, cookies that allow an analysis of the use of our website, as well as a so-called tracking code. The information collected is transmitted to Clarity and stored there. They are used to analyze data about the user’s navigation and behavior on the website – From them, statistical reports and heat maps are created for the website owner. According to Microsoft, these can also be used for advertising purposes, see https://privacy.microsoft.com/de-DE/privacystatement.

Duration of storage

The cookies and stored data are automatically deleted after one year. For more information on Clarity, visit https://docs.microsoft.com/de-de/clarity/faq.

HubSpot

For internal marketing and customer service purposes, we use HubSpot (HubSpot, Inc., HubSpot Ireland Limited). This tool uses cookies, which are small text files that are stored locally in the temporary memory of your web browser on your terminal device and enable an analysis of your use of the website by us. HubSpot evaluates the collected information (e.g. IP address, geographical location) on our behalf. Information collected by HubSpot is stored on servers of their service providers. Insofar as you give your approval for this in accordance with Art. 6 para. 1 lit. a DSGVO, the processing on this website, is carried out for the purpose of website analysis. HubSpot participates in and is certified for compliance with the EU-US Privacy Shield Agreement and the Swiss-U.S. Privacy Shield. You can find more information here. The data and cookies are automatically deleted by HubSpot after 13 months.

LinkedIn

Our website uses the conversion tool “LinkedIn Insight Tag” of LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser that allows the collection of, among other things, the following data: IP address, device and browser properties, and page events (e.g. page views). This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share personally identifiable information with Aivy, but provides anonymized reports on website audience and display performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. Aivy may use this data to display targeted advertisements on its website without identifying you as a website visitor. You can find more information about data protection at LinkedIn in the LinkedIn privacy policy.

LinkedIn’s members can control the use of their personal data for advertising purposes in their account settings. To disable the insight-tag on our website (“opt-out”) click here.

Communication with us

If you contact us (for example, via the contact form on our website, by e-mail, or telephone), your request and include all resulting personal data (such as name and request) will be stored and processed by us to process your request.

Newsletter (MailChimp)

If you want to subscribe to our newsletter optionally, your email address will be collected and processed. By subscribing to the newsletter, you agree to your email address being passed on to MailChimp (The Rocket Science Group LLC, USA). We rely on MailChimp for our newsletter delivery because it reliably sends the emails. In addition, MailChimp enables us to track the success of the newsletter delivery. In this way, it is recorded whether, how and when you open and use the newsletter. The appropriate level of data protection for the processing of data by MailChimp is ensured by their Privacy Shield certification as well as an order processing agreement between and MailChimp.

II. Your rights

You have certain rights when we process your personal data. We would like to inform you about your rights at this point. Please read this information carefully:

Your right to information, deletion and correction
You have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing, as well as a right to correct or delete this data. For this and other questions on the subject of personal data, you can contact us at any time by email.

Your right to withdraw approval to data processing
Many data processing operations are only possible with your approval. We will explicitly obtain this from you before starting data processing. You can withdraw this approval later at any time. For this purpose, an informal message by e-mail to us is required. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Your right to object to data processing
If the processing of your personal data is based on Art. 6 para. 1 lit. e or f DSGVO, you have the right to withdraw your consent at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions. Furthermore, you have the right to object at any time to the processing of your personal information for direct marketing. This also applies to profiling, insofar as it is associated with such direct advertising. To object, an informal message by e-mail to us is required.
‍
Your right to restrict data processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time by e-mail. If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Your right of data portability
You have the right to have data that we have process automatically based on your approval or in fulfillment of a contract transferred to yourself or a third party designated by you in a common, machine-readable format. If you request the direct transfer of your data to another controller, this will only be done insofar as this is technically feasible.
‍
Your right to complain to a supervisory authority
If you have the impression that we violate existing data protection laws, you have the right to complain to a supervisory authority. Your right of appeal is independent of any other administrative or judicial remedies.

III. General information

Responsible body
Responsible body for data processing within the framework of this website is:

Aivy UG (limited liability)
Altensteinstraße 40
14195 Berlin
‍
Phone: +49 (0)30 8145031-50
E-Mail: hi@aivy.app

“Responsible body” is the body that collects, processes or uses personal data (e.g. names, e-mail addresses, etc.).

Data Privacy Officer

We have appointed an external data privacy officer. You can reach him under:

Sebastian Moleski
BlueDatex GmbH
Friedrichstr. 68
10117 Berlin

Phone: +49 (0)30 62 93 98 90

E-Mail: anfragen@bluedatex.de

‍

Legal basis for data processing
The processing of your personal data is only permitted if there is an effective legal basis for it. If we process your data, this is done regularly

• on the basis of your express approval in accordance with Art. 6 Para. 1 lit. a DSGVO (e.g. if you voluntarily provide your data in the registration mask or in the context of mini-games),
• for the purpose of fulfilling the contract according to Art. 6 para. 1 lit. b DSGVO (e.g. when using in-app purchases or the use of other app functions),
• for the protection of public interests according to Art. 6 para. 1 lit. e DSGVO (e.g. in the context of scientific research projects of university institutions) or
• on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO, which are always weighed against your interests (e.g. for the needs-based design and further development of the app or in the context of advertising measures).

The relevant legal basis will be specified in a separate section of this privacy policy, if applicable.

No transfer of your data to third parties
Except as otherwise provided or specified in this Privacy Policy, we will not disclose your personal data to third parties unless you have given your express authorization to do so, we use service providers other than our hosting service provider, or we are required to disclose your personal data, for example, pursuant to a court or administrative order.
‍
We also transfer anonymous data, i.e. aggregated and generic information without personal reference, to our partners for scientific research as well as market research and advertising purposes.

Protection of your data
We have taken technical and organizational measures to ensure that the legal requirements are observed both by us and by external service providers working for us.
‍
We have taken technical and organizational measures to ensure that the legal requirements are observed both by us and by the external service providers working for us. With an order processing contract, we oblige these service providers to protect your data and not to pass it on to third parties.

Your data is stored on specially protected servers. Access to it is only possible for a few specially authorized persons. If we transmit your data, the transmission of your data always takes place via an encrypted connection (SSL or TLS encryption). Nevertheless, we expressly point out that data transmission on the Internet can have security gaps. Complete protection of the data against access by third parties is not possible.

General storage duration of your data
Unless otherwise stated or specified in this privacy policy, personal data collected by this app will be stored until you ask us to delete it, revoke your consent to store it, or the purpose for storing it no longer applies. If there is a legal obligation to store the data or another legally recognized reason for storing the data (e.g. legitimate interest), the personal data in question will not be deleted until the respective reason for storing the data no longer applies.

Change of this privacy policy
We reserve the right to change this privacy policy at any time in compliance with legal requirements. Of course, we will inform you about changes.

Status: May 2021