Data protection

1 Use and disclosure of personal data

We collect and use the following personal data:

• Location of the smartphone (when using the app)

We only use this data to make the Nebolus app work and to provide the functions for users, as well as for the evaluation and further development of the app (this only includes the project team at Fulda University of Applied Sciences). Would you like to know more?

Very important: We do not pass on your data to anyone who has not been directly commissioned by us. And we only commission others when we need them directly. This includes developing the app and hosting the website. We have signed contracts with both contractors based in Germany that prohibit them from passing on data.

Moreover, we also use the collected anonymous statistical data for our research and the operation and further development of Nebolus. Any other, in particular commercial, use of the collected data is excluded.

2 Consent

In the app, permission to transfer your personal data is granted by clicking the button at the end of this text labelled “PERMIT”. You cannot use the app without permission.

You can revoke this permission at any time in accordance with paragraph 2, no. 4 TMG by deleting the app – in this case no more data will be collected. You cannot use the app without permission.

3 Under 16 years old

Under-16 year olds must ask their parents or a legal guardian for permission to use the Nebolus app.

4 Rights of data subjects

Articles 15 to 20 GDPR on the rights of data subjects, i.e. the right to information, rectification, completion, deletion, restriction, notification and portability apply here because of Art. 11, para. 2 GDPR and Recital 64 GDPR do not apply because we cannot identify users. The personal data that we collect when you use the app is your location. Without further information – which we do not have – we cannot draw any conclusions about a specific person. Therefore, we cannot identify any specific individuals and therefore cannot offer any possibility of asserting data subject rights. You can still contact us if you have any questions, see below.

5 Cookies

When you visit the website www.nebolus.net, we temporarily store a cookie, i.e. a text file, on your computer. Cookies are necessary to enable users to use the website comfortably for the duration of use. Moreover, cookies are necessary for statistical analysis, see next point. Cookies cannot cause any manipulation of the end device and can be deleted manually at any time – most easily in the browser. The handling of cookies can be individually set in the Internet browser so that cookies are rejected or only accepted after confirmation.

6 Statistical data

We analyze several statistical data anonymously using the Matomo tool. The IP address is recorded incompletely, which means that we cannot draw conclusions about individual subjects from this data.

On the basis of Art. 6 (1a) and (1e) of the GDPR, we collect the following statistical data, which is automatically stored in the log files for a reasonable period of time, at the latest until the purpose no longer applies:

Website:

• Access to the website (date, time and frequency)
• Amount of data sent
• Browser and browser version
• Operating system used
• Telecommunications provider used
• The incomplete, anonymized IP address that your telecommunications provider assigns to your end device when you connect to the Internet

App:

• Date of use (to the day)
• Total duration: From the start to the completion of the scavenger hunt (app interaction time)
• Total duration: From the start to the end of the scavenger hunt (real time)
• Average duration: From entering the radius of a station to scanning the QR code
• Average duration: Elapsed time between two stations
• Number of times to listen to voice messages in the message menu
• Number of times links are called up in the station description
• Number of completed hidden stations
• Number of completed main stations
• Problem tracking (e.g. app crashes)

7 Survey data

We have included the option of a survey in the app, which we may ask you to participate. Participation is voluntary and there are no disadvantages for non-participation. We cannot identify individual suabjects from the data collected. Anonymity is therefore guaranteed.

8 Newsletter

Our newsletter keeps you up to date with the latest news about Nebolus. We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to verify your registration and, if necessary, to be able to clarify any possible misuse of your personal data. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on the data. The data will be used exclusively for delivering the newsletter. You can cancel your subscription to the newsletter at any time. Consent to the storage of personal data can also be revoked at any time. For this purpose, you will find a corresponding link in every newsletter.

The legal basis for this data processing is Art. 6, para. 1 a) GDPR.

9 Changes to the privacy policy

We always keep this privacy policy up to date. We therefore reserve the right to change them from time to time and to make changes to the collection, processing or use of your data. The current version of the privacy policy is always available under “Data protection” within the app.