Bw bayern Bergwacht Hausham

Privacy Statement

This document was last updated on May 24th, 2018.

The Savvy7 GmbH adheres strictly to data protection regulations and the careful handling of personal data are important concerns for us. With this privacy policy, we would like to inform you about the processing of your personal data and your rights when using our platform RESQ:BOARD.

Who is responsible for the processing of personal data and how do you reach us?

Responsible within the meaning of Art. 4 Nr.7 General Data Protection Regulation (GDPR) for data processing is:

Savvy7 GmbH
Münchner Strasse 72
D-85774 Unterföhring
Germany

Represented by the managing directors Frank Penning and Jan Ulbrich.

You can reach us at the above address or at the e-mail address privacy@savvy7.com.

On what basis do we collect personal information?

Our privacy policy is based on the General Data Protection Regulation (GDPR). We use your personal data in order to provide you with the services of the RESQ:BOARD software.

Personal data means any information relating to an identified or identifiable natural person ('the data subject'); a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4 (1) GDPR).

Processing means any process or series of operations performed with or without the aid of automated processes, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, the disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, limitation, erasure or destruction (Article 4 (2) GDPR).

What information is required for registration?

The use of RESQ:BOARD requires that we process certain personal data.

For registration, these are:

  • e-mail address
  • password

We also use your e-mail address for the delivery of notifications about new or revised articles, events and rescue operations.

Further details can be entered by you or the administrators of your RESQ:BOARD instance. This information is visible only within that instance and will not be evaluated by us. These details include:

  • address
  • surname
  • first given name
  • gender
  • date of birth
  • image
  • telephone number
  • mobile phone number

You will be displayed as the author of all of your articles, events and rescue operations.

Your mobile phone number will be used for SMS alerting if this module has been activated for you.

If you are the billing account of a RESQ:BOARD instance, we will separately collect your e-mail address, telephone number and address as contact details and billing address.

What is the purpose of processing personal data?

A RESQ:BOARD instance was created for your rescue organization and access to this instance must be limited to the members of this organization. The processing of your personal data is necessary to fulfill this obligation (Art. 6 (1) c GDPR).

The collection of these data takes place

  • to authorize access;
  • for information via e-mail about new articles, events and rescue operations;
  • to alert by SMS (if enabled);
  • for billing (if you have a billing account).

In the case of billing, we must collect and process your personal information in order to fulfill the legal obligations to which we are subject. This includes, for example, the fulfillment of tax control and reporting obligations.

Based on your consent (see below), we process your data for the purposes specified there.

Are cookies used to store user data?

RESQ:BOARD uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our pages more effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Session cookies are automatically deleted after the end of your visit and they are used to authorize access. Other cookies remain stored on your device until you delete them. For example, these cookies store recent search filter settings or sort order on specific pages.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases. If cookies are completely deactivated, the operation of RESQ:BOARD will no longer work due to lack of authorization. Such cookies, which are required to provide the functions you desire, are processed on the basis of Art. 6 para. 1 lit. f GDPR saved.

Cookies for analyzing your browsing behavior (e.g., Google Analytics) are not used on RESQ:BOARD.

Are data shared with third parties?

The following authorities / companies may receive personal data for the purposes set out above in the course of their duties: police and investigative authorities (with legal basis), banks / payment service providers, (IT) service providers.

We may provide this information as necessary within our organization. Only internal staff will have access to your information needed to fulfill our legal and contractual obligations. Among other things, your data may be transmitted to other third parties for other purposes that are permitted under the General Data Protection Regulation, such as to legal or tax service providers or supervisory authorities.

We use the following IT service providers:

  • Hosting: netcup GmbH
    Daimlerstrasse 25, 76185 Karlsruhe, Germany
  • Telephone connection: BroadSoft Germany GmbH
    Lothringer Straße 56, 50677 Cologne, Germany
  • E-Mail-Dispatch: domainfactory GmbH
    Oskar-Messter-Str. 33, 85737 Ismaning, Germany
  • SMS shipping: Twilio Inc.
    375 Beale Street, Suite 300, San Francisco, CA 94105, United States

Is my data transmitted to a third country?

Your data is stored in Germany on cloud servers of the company netcup GmbH. The data transmission is encrypted.

The sending of e-mails takes place on cloud servers of the company domainfactory GmbH which may reside outside of Germany.

The sending of SMS (if activated) takes place on cloud servers of the company Twilio Inc. outside of Germany.

Over what period of time does the storage of the data take place?

We process the personal data only as long as necessary for the fulfillment of our contractual and legal obligations.

The length of the storage differs between a simple member of an RESQ:BOARD instance and the contracting party on whose behalf the instance was created. With a simple member the deletion takes place immediately. However, articles, events and rescue operations etc. remain in the interest of the other members and may need to be deleted manually.

Among other things, the processing of data by contracting parties is necessary for the performance and execution of the contract, including the defense and enforcement of civil claims within the relevant limitation periods. The limitation periods can be up to thirty years due to §§ 195 ff. Civil Code; the regular limitation period is three years. In addition, the tax, commercial, tax and other statutory retention requirements are observed. The stipulated periods for storage and documentation are six to ten years plus the limitation period of four years. In order not to violate legal regulations or to lose the opportunity to enforce a claim or to defend ourselves against such, we reserve the right to delete the data only after the last deadline, which legitimates the data storage.

What are the rights as an user?

You have the right

  • to request information as to whether and, if so, which of your personal data are being processed (Art. 15 GDPR);
  • to demand the correction of incorrect or the completion of incomplete personal data (Art. 16 GDPR);
  • to demand the deletion of your personal data, provided that the conditions specified in Art. 17 GDPR are met;
  • to demand the restriction of the processing of personal data, as provided for by Art. 18 GDPR;
  • to receive your personal data in a format that meets the requirements of Art. 20 (1) GDPR;
  • data portability under the conditions set out in Article 20 (1) (a), (b) of the GDPR.

How to object against the processing of personal data?

We process your data in order to safeguard legitimate interests, but you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal information unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims. In these cases, your RESQ:BOARD account will be no longer usable.

Where can complaints be submitted?

If you believe that we process your personal data unlawfully or that we violate the data protection law, you can complain to the supervisory authority responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht
in der Regierung von Mittelfranken
Promenade 27 (Schloss)
D-91522 Ansbach
Germany

+49 981 53-1301
datenschutz@reg-mfr.bayern.de

Has personal information to be provided?

Under the terms of use, you must provide all personal information necessary to establish and perform contractual obligations and what is required to collect by law. Without this data we will not be able to fulfill a contract. We expressly point out that RESQ:BOARD can only be used if consent is granted for the collection, processing, use and transmission of personal data.

You can revoke your consent at any time by deleting your account and if necessary your RESQ:BOARD instance. This is done online via your settings. In these cases, your RESQ:BOARD instance is no longer usable.

Consent

I revocably agree that Savvy7 GmbH grants me access to one or more RESQ:BOARD instances by entering my e-mail address and a password. Same goes for informing me via e-mail and SMS (as configuered) about articles, events or rescue operations.

If I act as a contract partner for one or more RESQ:BOARD instances, then I additionally revocably agree that Savvy7 GmbH processes personal contact data for the billing.

I can revoke my consent at any time and without giving reasons with effect for the future by deleting my account and, if necessary, my RESQ:BOARD instance. This is done online via my settings. In this case, RESQ:BOARD is no longer usable for me.