Status February 2023

1. Preamble

 1.1. This privacy policy describes how KOQOON GmbH & Co. KG ("KOQOON", „we“, „us“), HRA 739466, Dieselstraße 4, 73278 Schlierbach, Germany, processes the personal data collected from you when using the KOQOON App.

1.2. KOQOON treats your data confidentially and handles it responsibly. We comply with the applicable legal provisions on the protection, lawful handling and confidentiality of personal data, as well as on data security, in particular the General Data Protection Regulation (DSGVO), the German Data Protection Law (BDSG) and the Telecommunications Act (TKG).

1.3. Personal data is any information relating to an identified or identifiable individual. This includes, for example, your name, your e-mail address, and your IP address or device number.

2. Use of the app

2.1. We process the following data for the initiation and processing of business transactions relating to the services offered in the app:

• First and Second Name
• E-mail address

2.1.1. The processing of the data provided is carried out for the fulfilment of the contract with you (Art 6 para 1 lit b DSGVO) - without the use of this data we cannot provide the services selected by you.

2.1.2. The personal data will be stored until the expiry of the guarantee, warranty, limitation and statutory retention periods applicable to us (usually 7 years, maximum 30 years) or beyond this until the end of any legal disputes in which the data is required as evidence.

2.2. We process the following data for accounting purposes relating to the services offered in the app:

• First and last name
• E-mail address

2.2.1. The processing of the data provided is therefore also carried out for the fulfilment of your contract (Art 6 para 1 lit b DSGVO) as well as for the compliance with legal obligations (Art 6 para 1 lit c DSGVO).

2.2.2. The personal data shall be stored until the termination of the business relationship with the customer or until the expiry of the warranty, guarantee, limitation and statutory retention periods applicable to us (generally 7 years, maximum 30 years) or, in addition, until the termination of any legal disputes in which the data are required as evidence.

3. Other processing purposes

3.1. For the improvement of the KOQOON App we process the following data:

• Information about user behaviour in the app (number of visits, duration of visit and path of the user during visit incl. clicks).

3.1.1. The processing of the data provided is based on the following legitimate interests (Art 6 para 1 lit f DSGVO): Further development and improvement of the user-friendliness of the KOQOON App and the KOQOON products (usability), ensuring the stability, security and availability of the KOQOON App and KOQOON products.

3.1.2. The personal data shall be stored for three years for these purposes.

3.2. For direct marketing purposes (in particular e-mail newsletters and telephone calls) we process the following data:

• First and last name
• E-mail address

3.3.1. The processing of the data provided takes place exclusively on the basis of your voluntary consent (Art 6 para 1 lit a DSGVO).

3.3.2. The personal data will be deleted for this purpose after any revocation of consent or after three years of inactivity in the KOQOON App.

4. Transmission of your personal data

4.1. We provide your personal data to the extent necessary to the following external service providers (processors) who assist us in providing our services. All our processors process your data only on our behalf and on the basis of our instructions so that we can provide you with our services. These are the following service providers:

• IT service providers and/or providers of data hosting solutions or similar services; and
• other service providers, tool providers and software solution providers who also assist us in the provision of our services and act on our behalf (including marketing tool providers, communication service providers).

4.2. In addition, we transmit your personal data to the following recipients (responsible parties) to the extent necessary:

• Legal representatives in case of cause, courts as well as collection agencies and credit protection association (our legitimate interests)
• Auditors, authorities, courts and other public bodies to the extent required by law (e.g. financial or data protection authorities).

4.3. Personal data will only be transferred to recipients in third countries outside the EEA area if an adequacy decision has been issued by the European Commission for these countries, we have provided suitable guarantees for the protection of personal data by concluding a legally binding document or you have explicitly given your consent for individual cases as defined in Art 49 (1) lit a DSGVO.

5. Data security

5.1. The personal data will be protected by KOQOON as best as possible against unauthorised access, unauthorised use or publication by third parties.

5.2. The personal data collected is stored on a server of Microsoft Ireland Operations Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland as a processor in the European Union. In this context, KOQOON refers to the Terms and Certifications of Microsoft in the currently valid version, available at https://azure.microsoft.com/de-de/support/legal/.

6. Your data protection rights

6.1. You have the right to receive information in a clear, transparent and easily understandable way about how we process personal data and about your rights as a data subject (Art. 12 et seq. GDPR):

6.2. You therefore have a right to information about the personal data we process about you. In addition, you have the right to have incorrect data corrected and your personal data deleted (right to be forgotten). Furthermore, you can revoke any consent you may have given at any time with effect for the future without giving reasons. You also have the right to restrict processing, to receive the data you have provided in a structured, common and machine-readable format (data portability) and the right to object.

6.3. In order for us to be able to process your request regarding your above-mentioned rights, please send the request directly to us, e.g. by post or via e-mail:

KOQOON GmbH & Co. KG
Dieselstraße 4
73278 Schlierbach
Germany
E-mail: privacy@koqoon.com

6.4. You also have the right to complain to the competent supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information, Graurheindorfer Str. 153, 53117 Bonn, Germany.