Privacy Policy
kurts app
The policy
This Privacy Policy is for the mobile application “kurts” (hereinafter also the “App”) offered by Kurt König Digital Services GmbH & Co. KG, Grimsehlstr. 25, 37574 Einbeck, Germany (hereinafter “kurts”, “we”, “us”). The purpose of this policy is to explain to you what information we collect when you use the App, why we collect it and how we store, process and use the information so collected. The protection of your personal data, which are collected and processed when you use the App, is for us the principal concern.
Data Controller
Under the EU General Data Protection Regulation (Regulation (EU) 2016/679) (hereinafter the “GDPR”) the data controller responsible for the collection and processing of your personal data is as follows:
Kurt König Digital Services GmbH & Co. KG
Grimsehlstr. 25
37574 Einbeck
E-mail: datenschutz@kurts.de
What personal data are and how they are used
This Privacy Policy concerns the collection, processing and storage of personal data in connection with the services offered by kurts via the App. Personal data include detailed information on personal or material circumstances of a specific or identifiable natural person. Data collected, stored, processed and used by us vary according to how you use the App.
Personal information given by you as the user
When you download the App from Apple App Store operated by Apple Inc., Infinite Loop, Cupertino, CA 95014, USA (“Apple”) and Google Play Store operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), your personal data required for the respective download, which are usually stored on your Apple or Google account, are transferred to Apple App Store or Google Play Store respectively. We have no influence on what information is so collected. For more information about what data are collected by Apple App Store, please see the privacy policy of Apple App Store at: https://www.apple.com/legal/privacy/de-ww/. For more information about what data are collected by Google App Store, please see the privacy policy of Google App Store at: https://www.google.com/intl/de/po-licies/privacy/.
To be able to use all the functionalities of the App, e.g. to book and rent individual devices, it is necessary to register, i.e. to create a customer account. Before you register, you have to provide a valid ID document. You must therefore verify your identity using the web-based IDNow photo identification process operated by IDnow GmbH, Auenstr. 100, 80469 München, Germany (“IDnow”) via an encrypted transmission path.
For this purpose kurts transmits your personal data (your first and last name, date of birth, address) to IDnow. IDnow assigns a process number to your data, which is communicated to you by kurts to enable you to start the photo identification process. During the photo identification process IDnow checks your identity using your ID document and your photo. To ensure that the photo identification process runs correctly, you must take a photo of yourself as well as photograph the front and back of your identity card or the front page of your passport. IDnow will store this information for further processing.
IDnow will ask for your explicit consent to the processing of your data at the beginning of the photo identification process. The data is transmitted to kurts by IDnow. When confirming your photo identity, IDnow must verify the authenticity of your identity card or passport. Please follow IDnow's instructions to place your ID card or passport in certain positions in front of the camera. Additionally, IDnow may ask you to provide additional information required for identification. If IDnow is not able to ensure verification in accordance with the regulations, e.g. due to poor image quality, we kindly ask for your understanding that IDnow must terminate the photo identification process. The process of verification by IDnow can take up to 24 hours.
After your identity has been established and confirmed, your data will be collected, processed and stored by kurts during the registration process to create a customer account.
Your personal data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy.
During the registration process the following data are collected and processed by kurts in the App:
– your identification data, including:
– your first and last name
– your address (street and house number, city, postcode)
– your date and place of birth
– your ID card / passport number
– the place and date of issue of the ID card / passport
– your nationality
– your e-mail address
– your username and password
– name of your company, if any
– the selected language
– server log files containing:
– your IP address
– the time, type and number of queries
– the name and URL of retrieved files
– the operating system of your mobile device
When you continue to use the App, the following data are collected and processed, which are necessary for us to enable you access to our services and to ensure secure and stable use of the App.
– your customer account details, including:
– your identification data
– your e-mail address
– the name of your company, if any
– your username
– your password
– the selected language
– server log files containing:
– your IP address
– the time, type and number of queries
– the name and URL of retrieved files
– the operating system of your mobile device
– your location
– additional booking information (date, booking station, booking period)
Your personal data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy.
To enable you to make the most of the App, we collect information about your individual user behaviour, so-called server log files (“Log Files”). We keep a track of all use of the App. Log Files are stored for internal system-related and statistical purposes, and to ensure security and continuous improvement of our system. The resulting Log Files contain your IP address. Information stored in Log Files is collected and used only for pseudoanonymous statistical evaluation (e.g. analysis of user behaviour) and to ensure continuous improvement of our services. You cannot be identified based on the information stored in the Log Files. We do not combine this information with any other data sources.
Your personal data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy.
Additionally, your location data are collected during the specific use of the App so that you can use functions and services customized to your location. However, these functions can only be offered in the app if you allow the collection of your location data. A pop-up window will appear on the screen of your mobile device immediately after you open the App for the first time. You can give or withdraw your consent to the collection of your location data at any time by adjusting your mobile device settings.
To collect and process your location data, the App uses positioning services which are available in the operating systems Apple iOS and Android. We collect and process your location data in accordance with this Privacy Policy. If your location data is transferred to third parties via iOS and Android, we have no influence on what information is so collected and how it is processed. After you give your consent to the collection of your location data while you use the App, we will use your location data only for providing you with the requested services. If you use functions for which your location data are required, your location will only be transmitted to us. If the process of collecting your location data is active, a specific icon is usually displayed on the screen of your mobile device. You can activate or deactivate this process at any time in the App or in your operating system. However, deactivation of the process may affect or prevent the use of some functionalities offered via the App.
Your location data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy.
If you need help while using the App, you can contact us using the button “support@kurts.de”. Click this button to open an e-mail programme. You can also contact us by calling our telephone number. Information which is collected, processed and stored in connection with your queries includes your name and/or your e-mail address. This information is collected, processed and stores only to the extent that it is necessary to process your queries.
Your personal data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy.
As soon as we receive an acknowledgement of your order, the tool requested by you will be available for collection at the pick-up station selected by you in your purchase order. For security reasons, in particular to prevent theft, vandalism and other incidents, our pick-up stations are provided with video surveillance systems. This also helps to ensure that our pick-up stations are ready for use at all times and that devices booked by users can be rented. Video surveillance data are only collected, processed and stored by us to the extent necessary for providing appropriate security control measures. Video surveillance data are stored for 48 hours, and then they are usually deleted.
Your location data are collected and processed in accordance with Article 6 (1) (f) of the GDPR. You can read more about your rights to protect your personal information at the end of this policy. Information on the collection of video surveillance data is also provided at all our pick-up stations.
Use of your personal data by third parties
To ensure safe and efficient processing of your personal information, we use the external service provider identified below.
To be able to use the paid services offered by us via the App, you have to provide your credit card details and your billing address. These payment details will be transmitted to servers operated by Stripe Inc., 3180 18th Street, San Francisco, CA 94110, USA (“Stripe”) to enable processing your payments. We do not store any payment details. Stripe is certified under the so-called “EU-US Privacy Shield” framework, which is intended to ensure that information is transmitted to the USA in compliance with the EU data protection regulations. For more information about the “EU-US Privacy Shield” framework, go to: https://www.privacy-shield.gov/welcome. For more information about the certificate held by Stripe, go to: https://stripe.com/privacy-shield-policy. The privacy policy of Stripe can be viewed at https://stripe.com/de/privacy#translation.
The IT service provider is Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98198, USA (“Amazon Web Services”). Data centres used by Amazon Web Services are located in Germany, in Amazon Web Services Region Frankfurt. However, if it is still necessary to transmit data to the USA, Amazon Web Services is certified under the so-called “EU-US Privacy Shield” framework, which is intended to ensure that information is transmitted to the USA in compliance with the EU data protection regulations. For more information about the certificate held by Amazon Web Services, go to: https://aws.amazon.com/de/compliance/eu-us-privacy-shield-faq/. The privacy policy of Amazon Web Services can be viewed at https://aws.amazon.com/de/privacy/.
When using our App with so-called mobile devices (smartphones, tablets, etc.), precise location data may be collected, used and transmitted via telecommunications service providers, including the geographical location of your mobile device. The data may also be collected and processed in accordance with the terms and conditions of your individual telecommunications service provider. We have no influence on what information is so collected and how it is processed.
Purposes of the collection, processing and storage of your personal data
Personal data provided by you during the registration process, i.e. while creating a customer account or using our services, are collected, processed and stored to the extent that it is technically necessary to provide such services and use the App. By collecting, processing and storing your personal data, we can guarantee the security of the App, and we can also ensure that our services can be offered to you in an efficient and convenient manner.
We collect, process and store your personal data to the extent that this is technically necessary for continuous improvement of the App. To enable adapting the App to the constantly changing technical environment and the constantly changing security situation, we also use your personal data to constantly improve our App.
How long personal data are stored and when they are deleted
Personal data collected and processed by us during the registration process, i.e. while creating a customer account, are stored for as long as they are necessary for providing our services, i.e. usually at least as long as you continue to have a customer account with kurts. If you make bookings using your customer account in the App, the related booking data are usually stored for as long as our contractual or legal storage obligations require to do so. The location data collected after receiving your consent are only processed to the extent that it is necessary to enable the specific use of the App. They are not stored, but used only for providing services and then they are deleted.
Personal information which is collected and processed via Log Files when you use the App is usually stored for 30 days. At the end of this period the information is made fully anonymous and used only for site-use statistics purposes. A reference to you as a single user is unacceptable.
Personal information which is collected and processed in connection with your queries related to technical support is usually stored as long as it is necessary for responding to your query.
How long your personal data are stored after they are collected and processed by us depends on whether they are required for providing you with our services, which you have chosen to use, as well as on regulatory, statutory, and contractual, if any, requirements concerning the data storage period. Data are stored in accordance with the contractual or statutory data retention requirements which are applicable at any given time. This may include specifically any billing information related to your individual bookings.
Your personal data will be deleted if you delete your customer account or if the data storage is not allowed for any other reason.
Your personal data will also be deleted if you withdraw your consent to the storage of such information.
This does not include any information which need to be corrected, stored or deleted in accordance with the regulatory, statutory or contractual retention periods, or any data which are necessary for establishing, structuring or amending a contractual relationship with us or must be stored for billing purposes.
Legal basis for processing of your personal data
Your personal data are collected, processed and stored in accordance with the GDPR and the relevant EU and national regulations.
Whenever data processing is necessary for performing a contract to which you are a party or for performing pre-contractual stipulations as requested by you, your personal data will be collected, processed and stored in accordance with Article 6 (1) (b) of the GDPR.
Whenever processing of personal data is necessary to perform a legal obligation under the EU or national regulations which are applicable to us, your personal data will be collected, processed and stored in accordance with Article 6 (1) (c) of the GDPR.
Whenever processing of personal data is necessary for the protection of legitimate interests of kurts or a third party, and your interests, fundamental rights and fundamental freedoms do not override such interests, data will be processed in accordance with Article 6 (1) (f) of the GDPR.
If none of these legal regulations applies, your personal data will only be collected, processed and stored after you give us your consent to do this. If necessary, you will be specifically requested to give such consent electronically while using the services offered by kurts in the App. If you provide us with your consent to the processing of your personal data, your personal information will be processed in accordance with Article 6 (1) (f) of the GDPR.
You can read more about your rights to protect your personal information at the end of this policy.
Your rights to protect your personal data
In accordance with the GDPR and the relevant EU and national regulations, your are as follows to the extent permitted by law:
The right to be informed
You can request kurts to provide you with information whether your personal data is collected, processed and stored by kurts. If yes, you can request us e.g. to provide you with information about why your personal data are processed and how long your personal data will be stored.
Please send your request for information to:
Kurt König Digital Services GmbH & Co. KG
Grimsehlstr. 25
37574 Einbeck
or by e-mail to datenschutz@kurts.de.
The right to rectification
If your personal data processed by us are inaccurate or incomplete, you have the right to request us to correct and/or complete your personal data.
The right to restrict processing
You have to right to request the restriction of your personal data processing.
The right to erasure
You can request us to immediately erase your personal data. Where necessary, we will be required to immediately delete your personal data if they are no longer necessary for the purposes for which they have been originally collected or otherwise processed or if you withdraw your consent to the processing of your data in accordance with Article 6 (1) (a) of the GDPR. The right to erasure does not apply e.g. to the extent that such data processing is necessary to ensure compliance with a legal obligation, which requires such data processing in accordance with the EU or national regulations applicable to kurts, and to the extent that such data processing is necessary to establish, exercise or defend legal claims.
The right to data portability
You have the right to obtain your personal data, which have been provided to us acting as the Data Controller for data collection purposes, in structured, commonly used and machine-readable format. You also have the right to allow transmitting of your personal data to another data controller without any restrictions from the Data Controller.
The right to object
You have the right to object at any time to the processing of your personal data in accordance with Article 6 (1) (f) of the GPDR for any reasons related to your individual situation.
The right to withdraw consent
If you have given us your consent to the collection of your personal data, you have the right to withdraw your consent at any time.
The right to complain to regulatory authorities
You have the right to complain to regulatory authorities, in particular in the Member State where you, your place of work or the place of alleged infringement is located if you feel that your personal data are not handled in accordance with the GDPR.
Other information
We continue to develop our services and to implement new technologies, and therefore we reserve the right to update this Privacy Policy from time to time. Please review this Privacy Policy on a regular basis.
Date revised: May 2018
