Privacy Policy Funds App

Version: August 2021

Thank you for your interest in our aconium Funds app. Below we inform you which data we collect and process and for which purposes when you use our app.

The aconium Funds app informs you about funding programmes and calls for funding applications to be submitted at EU, federal and state level as well as news and events.

1. Contact

The contact person and controller within the meaning of the EU General Data Protection Regulation (GDPR), for the collection, processing and usage of personal data of the user (hereinafter: “It”) is

aconium GmbH
Invalidenstrasse 91
10115 Berlin, Germany

Phone: +49 (0)30 22183-0

Please do not hesitate to contact us if you have any questions or suggestions on the topic of data protection. You are also welcome to send any data protection issues you might have to our data protection officer by emailing datenschutz@aconium.eu.

2. Data processing when using our app

Certain information is processed automatically as soon as you use the app. Below we provide details of the precise personal data that is processed:

2.1. Downloading the app

• When you download the app, certain required information is transmitted to your selected app store (e.g. Google Play or Apple App Store). In specific terms, the user name, email address, customer number of your account, the time of the download, payment information and the individual device identification number could be processed. Such data is processed exclusively by the respective app store and is outside of our control.
• Using the app. We do not collect any personal data in the course of you using the app
  The app requires the following permissions:
  • Internet access: this is required in order to retrieve the articles from the back end via an HTTPS GET request.
  • Receipt of push notifications: this is required in order to receive the push messages you want.

  Usage data is processed and used in order to provide the service. Such data processing is justified by the fact that it is necessary for the performance of the contract – between you as the data subject and us – for use of the app according to Art. 6 (1) (b) GDPR.

2.2. Push messages

You can find out about the latest news. The aconium Funds app uses Firebase Cloud Messaging (FCM). In order to receive the push message, a token is generated on your smartphone after you download the app. This token is then transmitted to FCM. The following information is transmitted to FCM together with the token:

• Language selection (German/English) so that you receive the articles you want;
• Details of your selection regarding the information you wish to receive (e.g. news or events)
• The messages are sent to you using the token.
  Push messages are sent on the basis of your consent according to Art. 6 (1) (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating the push notification function in the settings of the aconium Funds app or by deactivating the receipt of push messages in the settings of the operating system.

2.3. Use of the contact form

• We give you the option of obtaining further information directly, e.g. regarding a funding programme. You must provide an email address that we can contact you on when doing so. We also ask for your name so that we can address you. The mandatory fields are marked as such. You can also provide further information voluntarily. We process the data that you provide in the contact form to answer your enquiry. To be able to process your enquiry properly, we may disclose the data provided in the contact form to the relevant specialist department within our company. This is done so that the team responsible for your region can properly answer your enquiry. The legal basis for the data processing activities described is Art. 6 (1) (1) (b) of the GDPR. The data collected when the contact form is used will be deleted once processing of your enquiry has concluded.

2.4. Support request and feedback emails

• We give you the option of sending support requests and feedback emails. We process the data that you provide in order to respond to your enquiry. To be able to process your support request or feedback properly, we may disclose the data you have provided to the relevant specialist department within our company. This is done so that the relevant team can respond to your enquiry or feedback in the proper manner. The legal basis for the data processing activities described is Art. 6 (1) (1) (b) of the GDPR. The data you provide will be deleted once processing has concluded.

3. Disclosure and transmission of data

In addition to the cases explicitly stated in this privacy policy, your personal data will only be disclosed without your express prior consent insofar as such disclosure is permitted or required by law. This may be the case, inter alia, where processing is necessary to protect the vital interests of the user or those of another natural person.
3.1. Generally speaking, the data we collect will only be disclosed if:

• you have given your express consent to this effect according to Art. 6 (1) (1) (a) of the GDPR;
• disclosure according to Art. 6 (1) (1) (f) of the GDPR is necessary to establish, exercise or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
• we are legally obligated to disclose the information according to Art. 6 (1) (1) (c) of the GDPR; or
• doing so is legally permissible and – according to Art. 6 (1) (1) (b) of the GDPR – is required for the handling of contractual relationships with you or for the implementation of pre-contractual measures that are carried out at your request.

Some of the data processing activities described in this privacy policy may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may specifically include data centres that store our website and databases, IT service providers that maintain our systems, and consulting firms. If we disclose data to our service providers, they may only use the same to complete their tasks. All service providers were carefully selected and engaged by us. They are contractually bound to our instructions, have suitable technical and organisational measures to protect data subjects’ rights, guarantee an appropriate level of data protection and are carefully monitored by us.
In addition, information may be disclosed in connection with governmental requests, court orders and legal proceedings if doing so is necessary for prosecution or enforcement purposes.

4. Change of purpose

Processing of your personal data for purposes other than those described only takes place insofar as a legal provision permits such processing or you have consented to the changed purpose of data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will notify you of these other purposes prior to further processing and provide you with all other relevant information in this regard.

5. Links to other websites and online offers

If applicable, this app may link websites and online offers of other parties, which are not affiliated with us. If you click on these links, we no longer have any influence over what data is collected by the providers in question and what data is recorded by them. You will find detailed information about data collection and use in the relevant provider’s privacy policy. Since we do not have any control over the way in which third parties collect and process data, we cannot accept any responsibility in this regard.

6. Data storage period

We will delete or anonymise your personal data as soon as such data is no longer necessary for the purposes for which we collected or used it in accordance with the above paragraphs. As a general rule, we will store your personal data for the duration of the usage/contractual relationship via the app plus a period of 7 days, during which time we will keep backup copies after deletion. This applies unless the data in question is required for longer for criminal prosecution purposes or to secure, assert or enforce legal claims.
Specific statements in this privacy policy or legal requirements regarding the retention and deletion of personal data, in particular data we must retain for tax law reasons, remain unaffected.

7. Your rights

You have the right to request information about whether we process your personal data at any time. In the context of granting you access, we will explain the data processing activities to you and provide you with an overview of the data stored about you.
If the data we have stored is incorrect or out-of-date, you have the right to have this information rectified.
You can also request that your data be erased. If, in exceptional cases, erasure is not possible due to other legal provisions, the data is blocked so that it is only available for this legal purpose.
You can also have the processing of your data restricted if, for example, you believe that the data we have stored is incorrect. You also have the right to data portability. In other words, on request we will forward you a digital copy of the personal data you provided.
You can contact us using the contact details provided in (1) above at any time to exercise your rights described here. This also applies if you wish to receive copies of guarantees to demonstrate that our level of data protection is adequate.
You also have the right to object to the data processing, which is based on Art. 6 (1) (1) (f) GDPR, or serves direct advertising. Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can exercise this right before a supervisory authority in the member state that you are resident in, that you work in or that the suspected violation occurred in. In Berlin, the competent supervisory authority is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.