This privacy statement applies to the mobile app Jodel (the “App”) and Jodel websites that can be visited through the App (the “Website”). Both together are referred to as “Services”.
With regard to the Services, Jodel is the data controller in terms of the General Data Protection Regulation (“GDPR”).
The Jodel Venture GmbH
Wilhelmstraße 118
10963 Berlin Germany
Phone: (+49) 017646648921
This privacy statement provides information about how we collect and process personal data in connection with our Services.
By using our app, access to information (e.g. IP address) or storage of information (e.g. cookies) in your terminal equipment may occur. This access or storage may involve further processing of personal data pursuant to the GDPR.
In cases where such access to information or such storage of information is strictly necessary for the technically error-free delivery of our services, this is done on the basis of § 25 para. 1 s. 1, para. 2 no. 2 TTDSG.
In cases where such a process serves other purposes (e.g. the needs-based design of our app), this will only be carried out on the basis of § 25 para. 1 TTDSG with your consent pursuant to Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time with effect for the future.
For more information on the processing of your personal data and the relevant legal basis in this context, please refer to the following sections on the specific processing activities on our website.
a. If you register or login to Jodel you need to sign in with your Google account or mail. We use your access data (e-mail address) to create and let you manage your account on Jodel.
We use the data to authenticate you during the login process. The data you provide during a registration or login are used and managed by us to (1) to verify your right to use your Jodel account, (2) to realize the terms of use of the app with all connected rights and responsibilities and (3) to be able to get in touch with you to provide technical or legal notes, updates, security messages or other messages regarding the management of your Jodel account.
b.Your data from the login is getting processed through Google Firebase (or HiAnalytics). We assign a random user number to your account and transfer it to Jodel to be able to identify you. This random user number enables us to assign the Jodel activities (posts, replies, karma, etc.) initiated by this device to an account. The user number does not allow for any conclusion to be drawn about your identity or other personal data. The processed data will be only used in case of legal necessity (e.g. Criminal prosecution). More information about the use of Google Firebase can be found further down.
d.We also process data on the frequency of use and user behaviour in the App for the purpose of operating the App as well as statistical evaluation and improvement of the App.
a.Except in the cases mentioned below, we will only disclose personal data if and to the extent that we are required to do so by law or by court or administrative order. The legal basis for this is Art. 6 (1) lit. c GDPR (legal obligation).
a. We use the IDFA (for iOS devices) and AAID (for Android devices) advertising identifiers (collectively the “Advertising Identifiers”). These Advertising Identifiers are non-personal, non-permanent identifiers on the mobile device. The Advertising Identifiers collect the user number and enable us to obtain information about which route you used to connect with Jodel.We may share such data with so-called advertising networks in order to provide you with advertising in the App that is more relevant / specific to you.
You can disable access to the Advertising Identifiers in your device’s settings by turning off ad tracking on iOS (under “Settings/Privacy/Advertising”) or resetting the AAID to Android (under “Settings/Advertising”). You can also disable the above tracking features in the “My Profile” section of the App.
The legal basis for the use of Advertising Identifiers is Art. 6 (1) lit. f GDPR (legitimate interests; the legitimate interests to Use such data is that we can only offer the App to users for free if we are in a position to efficiently display relevant advertisements in the app).
Within our app, you may be redirected to our website. In this case we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help analyze how you use the Website. The information generated by the cookie about your use of the Website will normally be transmitted to and stored by Google on servers in the United States. Google will use this information on behalf of the operator of the Website for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services for the Website operator relating to Website activity and internet usage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use all functions of the Website. You can also opt-out from the storage by Google of the data that is created by the cookie and is related to the use of the Website (including your IP address) and the processing of such data by Google by downloading and installing the Google Analytics opt-out Browser add-on available under https://tools.google.com/dlpage/gaoptout?hl=en. For further information on Google Analytics please refer to: http://www.google.com/analytics/terms/gb.html, https://support.google.com/analytics/answer/6004245?hl=en,http://www.google.de/intl/en-GB/policies/privacy/.Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
We use the tool branch.io of Branch Metrics, Inc. 1400 Seaport Blvd, Building B, 2nd Floor, Redwood City, CA 94063, USA (“Branch Metrics”) with regard to the App. branch.io is a real-time database, which we are using for real-time data exchange and data storage. branch.io also allows for analyzing anonymized behavioral data, in particular the analyzing of active users and activity events (e.g. posts, replies, votes). We also use branch.io to analyse more complex use cases of the app which we otherwise would not be able to understand (connection between sharing content and engagement, what is the source of users registering into the app) so that we can further optimise the app and identify real users and bots. Certain (anonymized) user data might be sent to Branch Metrics. For further information regarding branch.io please refer to https://branch.io/policies/#privacy.Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
We use the “Google Marketing Platform” (and services such as “Google Ad Manager”) to place ads with us. The Google Marketing Platform is characterised by the fact that ads are displayed in real time based on the presumed interests of users. This allows us to better target ads for and within our online offerings in order to show users only ads that potentially match their interests. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is called “remarketing”. For this purpose, so-called user profiles are created, by means of which the user information relevant to the display of the aforementioned content is stored. This information may include, for example, the content viewed, websites visited, online networks used, but also communication partners and technical details such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, this data may also be processed.The IP addresses of users are also stored. However, we use available IP masking procedures (i.e., anonymization by shortening the IP address) to protect the users.
Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
We use the Google Firebase developer platform and related features and services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).Google Firebase is a platform for developers of applications (“Apps”) for mobile devices and websites. Google Firebase offers a variety of features, which are described on the following overview page: https://firebase.google.com/products/.
These features include, but are not limited to, the storage of Apps, including personal information about the users of the Apps, such as content created by them or information regarding their interaction with the Apps (so-called “cloud computing”). Google Firebase also offers interfaces that allow interaction between users of the App and other services, e.g. authentication via services such as Facebook, Twitter or via an email/password combination.
The evaluation of user interactions and the performance of the App is carried out with the help of the analysis services “Crashlytics” and “Google Analytics”. Google Firebase is designed to record how users interact with an App. This involves recording events such as opening the App for the first time, uninstalling, updating, crashing or the frequency of use of the App. The events can also be used to record other user interests, e.g. for certain functions of the applications or certain topics. In this way, user profiles can also be created, which can be used, for example, as a basis for the presentation of advertising messages tailored to users.
Google Firebase and the users’ personal data processed by Google Firebase may also be used together with other Google services, such as Google marketing services (in which case device-related information such as “Android Advertising ID” and “Advertising Identifier for iOS” are also processed to identify users’ mobile devices).
We use Google Firebase for:
Providing and managing your user account on Jodel, analysis, optimization, security and economic operation of our application. This is also our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
In case you gave your consent pursuant to Art. 6 para. 1 lit. a GDPR data on this website is processed for the purpose of website analysis.
Since a transfer of personal data to the U.S. takes place, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To guarantee this, we have concluded standard contractual clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe. In cases in which this cannot be guaranteed even by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the U.S.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.
Further information on the use of data for marketing purposes by Google can be found on the overview page: https://www.google.com/policies/technologies/ads, Google’s data protection declaration is available at https://www.google.com/policies/privacy.
If users wish to opt-out of interest-based advertising through Google’s marketing services, they may do so by using the opt-out and opt-in facilities provided by Google: http://www.google.com/ads/preferences.
For more information about Google Firebase, please visit: https://firebase.google.com/ https://www.firebase.com/terms/privacy-policy.html. A detailed overview of the data collected by Google Firebase can be found at https://support.google.com/firebase/answer/6318039?hl=de.
Right to information
You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR.
Right to rectification
The right to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR.
Right to have data erased
You have the right to have your personal data erased in according with Art. 17 GDPR. According to this provision, your right to have your data erased may be excluded due to a conflicting interest.
Right to restriction
You have the right to have the processing of personal data concerning you limited in accordance with Art. 18 GDPR.
Right to withdraw the given consent
You have the right to withdraw your given consent to the processing of your personal data at any time according to Art. 7 para. 3 GDPR.
Right to data portability
The right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible in accordance with Art. 20 GDPR.
Right to complain to a data protection regulatory authority
The right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we have our registered office or, if applicable, that of your usual place of work or usual residence.
Right to object
Right of objection If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons resulting from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to indicate a special situation.
You can contact us via the contact form in the App or on our website.
For all questions regarding data protection at Jodel you can contact Jodel’s data protection officer directly. The contact details of the data protection officer are as follows:
We attach great importance to the protection of all personal data related to the App or its use. We have security measures in place for protection against the loss, misuse and alteration of the data we store. Our security measures and privacy statement are regularly reviewed and, where appropriate, updated and improved. Only authorised employees have access to personal data.
We have taken additional, extensive precautions regarding the App and its use. Regardless of these precautions, the user should be aware that, regardless of any security measures, the exchange of information via the Internet can never be completely secure. We cannot guarantee the security of data transmitted via the App while it is being transmitted over the Internet.