Our Privacy Policy - All Quiet Platform

Last updated: December 9, 2024

§ 1 Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our online platform All Quiet (hereinafter "Platform"). Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

All Quiet GmbH
Blumenstraße 45
10243 Berlin
Germany
support@allquiet.app

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

§ 2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

• Right to information,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to the processing,
• Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. To do so, you can contact the supervisory authority at our company headquarters. You can find the address under the following link on the Internet: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html.

§ 3 Collection of personal data when visiting our platform

(1) When using the platform for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our platform, we collect the following data, which is technically necessary for us to display our platform to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

• IP address,
• Date and time of the enquiry,
• URL of the request (specific page),
• Access status/HTTP status code,
• Amount of data transferred in each case.

This data is only stored for one week and then automatically deleted.

(2) Use of cookies

(a) We use cookies on our platform. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive by means of a characteristic character string and through which certain information flows to the location that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the website more user-friendly and effective overall, i.e. more pleasant for you.

(b) Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, see § 25 TDDDG. This applies in particular to the use of advertising, targeting or sharing cookies (called "Performance & Tracking Cookies" on our platform). In addition, we only pass on your personal data processed by cookies to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. However, we use technically necessary cookies on the basis of our legitimate interest in the proper display and use of our platform, Art. 6 para. 1 sentence 1 lit. f) GDPR. You can give / withdraw your consent at any time by activating / deactivating the use of “Performance & Tracking Cookies” in the "Cookie Settings".

§ 4 Registration for the platform

Before using extended, chargeable functions of the platform, you must legitimise yourself (as a service provider or customer) with your customer account. There is a work email required for authentication. If you do not yet have a customer account, you can register directly on the platform. We collect the following categories of personal data from you:

• User Name (based on the user’s work email address per default),
• IP address,
• User ID,
• Device type and device specific settings and apps settings as well as app properties,
• Date and time of the usage, the amount of data transferred and the message whether the data exchange was complete,
• App crash information,
• Time Zone,
• Browser Type and Operating System,
• Telephone number,
• On-Call times of users,
• In app communication,
• Email address,
• Company address (Billing address),
• Password,

To legitimise your person, we use the so-called double opt-in procedure, i.e. you will receive an e-mail in which you must confirm that you are the owner of the e-mail address provided. The data you provide as well as the time of your registration for the customer account and your IP address will be stored by us for as long as the user relationship (i.e. the customer account) exists. The above personal data will only be passed on to third parties (such as mobile phone providers) if this is necessary to fulfil the customer contract. The legal basis for the processing of the above data is Art. 6 para. 1 sentence 1 lit. b) GDPR, as this data is required to fulfil the user contract concluded with the registration.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

§ 6 Payment processing

We offer our users the option of paying for the services accessed directly on the platform. We only offer the payment method "credit card". Payment is processed via the external payment service provider Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (https://stripe.com/de/privacy). When processing via Stripe, your personal data is transmitted to Stripe and stored there. This is transaction data. This data includes the payment method, sort code, currency, amount and date of payment. During a transaction, your name, email address, billing or shipping address and sometimes your transaction history may also be transmitted. This data is required for authentication. Furthermore, Stripe may also collect technical data about your device (such as IP address), name, address, telephone number and your country for fraud prevention, financial reporting and to be able to offer its own services in full. Stripe also uses cookies to collect data, in particular to recognise the type of your device and to create a session ID for the purpose of processing the credit card payment and recognising the payment transaction through our platform.

Personal data is generally stored for the duration of platform use. This means that the data is stored until we terminate the cooperation with Stripe. However, in order to fulfil legal and regulatory obligations, Stripe may also store personal data for the duration of the service provision. As Stripe is a global company, data may also be stored in any country where Stripe provides services. This means that data may also be stored outside your country, for example in the USA.

The legal basis for processing your payment via Stripe is Article 6 paragraph 1 sentence 1 letter b) GDPR, as the above data is required to fulfil the existing user contract with you. Stripe has concluded a contract with us on the basis of the standard contractual clauses and undertakes to comply with the European level of data protection.

§ 7 Web analytics

1. Use of Google Analytics

(1) This website uses Google Analytics. Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is responsible for the operation of Google Analytics within the European Union (EU) and the European Economic Area (EEA). Google Analytics helps us to better understand how our website is used and to determine how we can improve it. Google Analytics records your user behaviour by means of so-called ‘events’ (such as page views, first visit to the website, start of session, your ‘click path’ or interaction with the website).

(2) In addition, Google Analytics records the following data:

• Your IP address (in abbreviated form, see below),
• Your approximate location (region),
• Internet service provider,
• (Technical) information about the end devices and browser used (e.g. language setting, screen resolution, device model),
• Website from which access is made (referrer URL),
• as well as identifiers for mobile devices (e.g. Android Advertising ID and Advertising Identifier for iOS).

(3) Google Analytics uses cookies and similar technologies. The information collected by means of cookies and similar technologies about your use of this website is usually transferred to a Google LLC server in the United States and stored there. However, IP address anonymisation is activated by default in Google Analytics. According to Google, this means that your IP address is truncated by Google within the EU or EEA. The subject of the aforementioned transmission to Google's servers in the United States is then regularly only the shortened IP address. In exceptional cases, Google Analytics transmits the unabridged IP address to the US and the abbreviation of the same only takes place there. According to information from Google, the transmitted IP address will not be merged with other Google data.

(4) Google Analytics processes this data to analyse your use of the website. To do this, Google Analytics generates reports for us about website activity. These help us to analyse website use and performance.

(5) The legal basis for the processing of personal data through the use of Google Analytics is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the use of “Performance & Tracking Cookies” in the ‘cookie settings’. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser add-on provided by Google to disable Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de

(6) Further information about Google's data protection regulations can be found here: https://policies.google.com/privacy

2. Use of Google Tag

(1) We use the Google Tag system (hereinafter referred to as ‘Google Tag) on our platform. For users from the European Economic Area, Switzerland and Liechtenstein, this service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For all other users, the service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Tag is a platform that refers to a universal tagging system provided by Google that simplifies tracking and data collection across Google platforms like Google Analytics, Google Ads, and other Google marketing tools. Your IP address is transmitted via Google Tag in the process. The service itself does not access data collected by the downloaded tools. If a deactivation has been made at domain or cookie level, it also remains effective for all tracking tags integrated via Google Tag.

(2) The basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the use of “Performance & Tracking Cookies” in the ‘cookie settings’, We have concluded a data processing contract with Google. In addition, Google is certified under the Data Privacy Framework and uses standard contractual clauses for the transfer of data to third countries.

(3) Further information about Google's data protection regulations can be found here: https://policies.google.com/privacy

3. Use of Google Ads

(1) This website uses Google Ads Conversion, an analytics service operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereafter referred to as “Google”). If you arrive at our website through a Google ad, a “Conversion Cookie” is automatically set by Google Ads, not by us. This cookie automatically expires after 30 days and does not serve to personally identify you. Each Ads customer (including us) receives a different, unique cookie from Google. As a result, cookies cannot be tracked across the websites of different Ads customers.

(2) By setting this “Conversion Cookie,” Google and the respective Ads customer (us), can recognize two things: first, that someone clicked on the respective ad and was subsequently redirected to a page tagged with a conversion tracking tag; and second, how many times they clicked on the same ad within 30 days. The information gathered via the “Conversion Cookie” is used by Google to generate conversion statistics.

(3) The basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the use of ““Performance & Tracking Cookies” in the ‘cookie settings’, We have concluded a data processing contract with Google. In addition, Google is certified under the Data Privacy Framework and uses standard contractual clauses for the transfer of data to third countries.

(4) Detailed information about Google’s data protection regulations & the collected data can be found here: https://policies.google.com/privacy

4. Use of Capterra

(1) We use the Gartner Digital Markets Conversion Tracking Pixel (hereinafter referred to as ‘Gartner Pixel‘) on our platform. This service is provided by one of Gartner Inc. subsidiary companies, Capterra Inc., 1201 Wilson Blvd, Arlington, VA 22209, USA (hereinafter referred to as ‘Capterra‘).
Capterra is an online platform that helps businesses find and compare software solutions. It serves as a marketplace where software vendors can showcase their products, and users can research, review, and evaluate software options based on their needs. It’s widely used by professionals across industries for software discovery and comparison. We use the Gartner Pixel to track registrations on our website for users that formerly clicked on our PPC Ads on Capterra. This cookie automatically expires after 30 days and does not serve to personally identify you.

(2) By setting this “Gartner Pixel,” Capterra and the respective Ads customer (us), can recognize two things: first, that someone clicked on the respective ad and was subsequently redirected to a page tagged with a conversion tracking tag; and second, how many times they converted after clicking on the same ad within 30 days (they will only count one conversion). The information gathered via the “Gartner Pixel” is used by Capterra to generate conversion statistics.

(3) The Gartner Pixel collects the following data:

• (HTTP Header Info) Timestamp,
• (HTTP Header Info) IP Address,
• (HTTP Header Info) Referring URL (the All Quiet website URL),
• (URL parameter) All Quiet’s PPC Campaign ID,
• (URL parameter) Verification Key to validate All Quiet’s PPC campaign ID that's passed in the call.

(4) The basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your consent at any time by deactivating the use of ““Performance & Tracking Cookies” in the ‘cookie settings’, We have concluded a data processing contract with Capterra. In addition, Capterra is certified under the Data Privacy Framework and uses standard contractual clauses for the transfer of data to third countries.

(5) Further information about Capterra’s data protection regulations can be found here: https://www.capterra.com/legal/privacy-policy/

§ 8 Storage period

We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - further processing is required for the following purposes:

• Fulfilment of retention obligations under commercial and tax law,
• German Commercial Code (HGB), German Fiscal Code (AO), German Money Laundering Act (GwG). The retention and documentation periods specified there are generally two to ten years,
• Preservation of evidence within the framework of the statutory limitation periods. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

§ 9 Data security

(1) We have taken technical and organisational security measures to prevent unauthorised access to your data. We have obliged our employees to handle personal data confidentially and carefully. In addition, all service providers have been checked by us.

(2) We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

• By email: support@allquiet.app