Data Protection declaration as relating to our ‘makeristAR’ app.
The text below informs you regarding the type, scope, & purpose of how we process your personal information in connection with our ‘makeristAR’ app. Personal data refers to all information related to an identified or identifiable person.
1. Responsibilities
The responsible party refers (within the legal definition of the EU General Data Protection Regulation (GDPR)) to the legal person or persons who decides the purpose and methods of processing personal data: makerist GmbH, Warschauer Platz 11-13, 10245 Berlin (referred to hereafter as ‘we’) is the responsible party when you visit our website.
2. Obtaining the app
You can only obtain the makeristAR app via the Apple App Store (Apple Inc., 1 Apple Park Way, Cupertino, CA95014, USA), or via the Google Play Store from Google (Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA). The contract and data protection conditions of Apple and Google apply to the purchase of our app via the Apple App Store or the Google Play Store. Neither Apple nor Google transmit personal data to us in connection with the purchase or use of the app.
3. Using the app
a) When you use our app, your device transmits the following information to our server: device identifier, operating system version, IP address, and time of app use. We collect and process this data in order to ensure the trouble-free operation of the app and to be able to recognize, ward off and track misuse of our services. Furthermore, we use the collected data for statistical purposes, i.e. to evaluate the end devices and operating systems with which the app is used in order to continuously adapt and improve our offerings to the needs of the users. This data processing is carried out on the basis of Article 6 Paragraph 1 Letter F GDPR. We delete all of the aforementioned personal data 14 days after their collection.
b) The app is utilized to use digital patterns which you have previously purchased from makerist. In order to compare which digital patterns are available to you, the app must establish a connection to your makerist customer account. To do this, you need to enter your user name and password (hereinafter 'login data') in the app, as you use them on makerist.com. Without this login data, you cannot use the app. The processing of the login data takes place within the framework of the proper fulfillment of the contracts you have concluded with us for the patterns you have purchased (Article 6 Paragraph 1 Sentence 1 Letter b GDPR). Your login data will remain in the app until you delete the app or enter other login data.
c) To use the app, your device must allow access to the following functions:
Internet access: Internet access is required so that the app can download the digital patterns from your customer account via our server using the Internet.
Device memory: Your device memory is only accessed within the app in order to save the digital cutting patterns loaded from your customer account so that the app can use them as intended. However, no data from your device memory is transmitted to us or third parties.
Camera: The app uses the camera on your device to combine the digital pattern with a real fabric sample. Camera images are neither saved nor transmitted to us or to third parties.
4. Operational Services
For the operation of our website and our app on the Internet, we use the services of Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855 Luxembourg as a processor in accordance with Article 28 GDPR.
5. Your Rights
With regards to the personal data we process about you, you have the following rights:
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data stored about you and the further information in accordance with Article 15 Paragraph 1 and 2 GDPR.
You have the right to have any incorrect personal data concerning you corrected immediately. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - including by means of a supplementary declaration.
You can request the immediate deletion of your personal data under the conditions of Article 17 Paragraph 1 GDPR, insofar as their processing is not required in accordance with Article 17 Paragraph 3 GDPR.
You can request that the processing of your data be restricted if one of the requirements of Article 18 (1) GDPR is met. In particular, you can request the restriction instead of a deletion.
We will notify any correction or deletion of your personal data and restriction of processing to all recipients to whom we have disclosed personal data concerning you, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request this.
You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, and you can request that we transmit this data to another person responsible without hindrance, as far as this is technically possible.
If data processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent does not affect the legality of the data processing that took place up to your withdrawal.
RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOUR PERSON; This right of objection exists in relation to data processing that takes place on the basis of Article 6 Paragraph 1 Letter f GDPR to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. If you exercise your right of objection, we will no longer process the data concerned, unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or that the processing of the assertion, exercise or Serves to defend legal claims.
IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING (E.G. NEWSLETTER), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA
If you are of the opinion that the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.