In case you have any questions, please do not hesitate to contact us.
The data controller is the Plaifit UG (haftungsbeschränkt) (“we”, “our”, “us”).
Our contact details are:
Plaifit UG (haftungsbeschränkt)
You can reach our data protection officer under the following email: firstname.lastname@example.org
What Personal Data we use and to what purpose
“Personal data” is defined by the European General Data Protection Regulation (EU GDPR) as any information that is related to you.
What personal data we process is explained in the following.
We need to collect some personal data to provide the functions of the App.
To use the App, you must create a user account.
When you register your user account, the personal data that you provide to us includes:
The fitness games that you play in the App are based on live video, through the camera on your device, of you moving and performing fitness exercises. With the following exceptions, these videos will not be saved anywhere and will only be processed on your device:
When you choose to record a video alone, the video will be saved on your device. The video will only be processed on your device.
When you choose to record a video with another user, the recording will be uploaded to our servers, where it will be edited. After the edited video is sent back to you we will delete it from our servers. We do not permanently store your video recordings after they have been sent to you.
When you use the App we use your personal data to:
Provide the functionality of the App. The personal data that we use in this case includes the data you generate when you use the App (for example your progress, the list of users you have added as friends, your customised workouts and your activity).
Verify your identity when you login into your user account
Prevent fraud, unauthorised or illegal activity and
The legal basis for these data processing steps is Art. 6 (1) (b) EU GDPR, as this data is necessary for us to provide you with the functionality of the App.
We are always working on improving the App. For this purpose, we collect personal data:
On how you use the App. We use this for example to create usage statistics to determine the popularity of features and games.
On whether the App is working properly (for example when the App crashes, we receive a crash report).
To test new features and games
To provide a customised user experience
The legal basis for these data processing steps is our legitimate interest to improve the App according to Art. 6 (1) (f) EU GDPR.
We may also use your personal data to notify you about service updates through the App if you have given your consent to this.
This will be the legal basis for processing the data according to Art. 6 (1) (a) EU GDPR.
When you use the App, including when you register your user account, some personal data is collected automatically by the App, including:
Information about the device you are using, information about which pages or services you access, your location, mobile network information, information included in standard communication protocols (such as your IP-Address), standard logging information for internet requests
Any other Personal Information that you submit to us voluntarily.
We use that information to identify you, customise the displayed content and provide the full functionality of our app.
The legal basis for this is your consent according to Art. 6 (1) (a) EU GDPR.
We may process your personal data to defend against legal claims by you, or assert, exercise or defend any legal claims by us.
The legal basis in this case is our legitimate interest according to Art. 6 (1) (f) EU GDPR.
We may process your personal data to comply with our legal obligations to investigate any unlawful activity.
In that case we may also share the relevant personal data (in particular with an authority) if we are required to so by law.
The legal basis for this is the requirement to comply with legal obligation according to Art. 6 (1) (c) EU GDPR.
You can register a Plaicise user account with your Apple account. This service is provided by Apple, Inc. One Apple Park Way, Cupertino, CA 95014, USA (from now on referred to as “Apple”)
When you choose that option you will be forwarded to an Apple login page. After you login with your Apple ID you can choose what personal data we receive. You can also choose that we only receive an anonymous identifier.
You can find more information on Apple login here: https://support.apple.com/en-us/HT210318
You can register a Plaicise account with your Google account. This service is provided by Google Inc., 1600 Amphitheater Pkwy., Mountain View, CA 94043, U.S.A, (from now on referred to as “Google”).
When you choose that option you will be forwarded to a Google login page where you can login to you Google account. Your Plaicise account will then be linked to your Google email address, which will be used to identify you.
We will be notified that you have used your Google account to register and likewise Google will be notified that you have registered a user account with us.
The personal data that we receive from Google about you are:
Your email address connected with the Google Account
Your display name from Google
A Photo url for the display photo of your Google Account
The ID of the Google Account
These will be stored as long as you have a Plaicise account and as long as we are legally required to retain them after you delete your account.
We do not receive your login data data for your Google account, nor will we share information with Google without your consent.
The legal basis for processing your personal data when you choose to register with the services provided by Apple or Google is your consent according to Art. 6 (1) (a) EU GDPR..
We use a number of services provided by Firebase, a subsidiary company of Google headquartered in San Francisco (CA), USA in our App. Some services are required for the App to function, others are used to collect data to analyse how the App is used, test new features, generate cause analysis for errors and to improve the App.
It also enables basic functionality of the App, such as storing the information about which users you have added as friends and storing your activity.
To that end, Firebase employs technologies similar to cookies, which are mentioned below.
By using the App you give your consent to the collection of such data.
The firebase services that we use and what we use them for are:
Google Analytics for Firebase: Provides aggregated App analytics to help us understand how the App is used. Exactly what personal data is collected depends on the device you are using. You can find a more exhaustive description here: https://support.google.com/firebase/answer/6318039.
Firebase Authentication: Authenticate accounts e.g. email and password or social authentication methods.
Firebase Core: Core API used to connect to the Firebase App.
Crashlytics: App crash and exception monitoring.
Firebase Cloud Functions: Computer processing to support App functions, e.g. processing Push Notifications.
Firebase Cloud Messaging: Send messages to users including push notifications. You can
Dynamic Links: Creates unique links e.g. for device verification.
Firebase Cloud Store: Database for hosting and backup app and user data.
Firebase AdMob: Platform for Digital App Marketing and corresponding analytics.
The legal basis for this is our legitimate interest in providing the services of the App, and to improve the user experience and evaluate the Apps performance according to Art. 6 (1) (f) EU GDPR.
Cookies are text files that are placed on your computer or device through your web browser.
In most cases they will be deleted after some time.
You can manage cookies in your browser. This allows you, for example, to block cookies from our website or delete them at any time. If you choose to block cookies for our website, it will still be displayed, but its functionality may be impaired.
Personal Data transmitted or disclosed to third parties
We use the listed Google services for the described data processing steps. Google is certified under the EU-US Privacy Shield, which ensures compliance with European privacy legislation.
Personal data that is generated through tools provided by Google (including Firebase) will be transmitted to and stored on Google servers.
If possible, we use Google servers that are located in the EU.
Where we disclose or transmit personal data to third parties or otherwise give them access to personal data, this will be based on:
Your consent (for example when you register through your Google or Apple account)
Legal consent (for example where it is required to transfer user data for contract performance according to Art. 6 (1) (b) EU GDPR
Our legitimate interest (for example where we use web hosters, or analytics providers)
A legal obligation
Where we instruct a third party to process your data on the basis of a “processing contract”, it will be based on Art. 28 GDPR.
We do not sell your personal data.
We work hard to ensure the security of your personal data.
When we rely on cloud platforms, such as Firebase, we rely on them to provide security to your data.
However, no method of electronic storage or transmission over the internet is completely secure. While we aim to minimise the risk of third party access to your personal data, we cannot guarantee complete security.
We will retain your personal data until we no longer
Need it to provide the App or the website
Have a legitimate interest in storing it
Have a legal obligation to store it
Have your consent to store it
Otherwise, we will delete your personal data.
You can contact us through our email address email@example.com or by sending us feedback with the tool provided in the App.
The personal information that we receive depends on how you contact us.
When you send us an email, we will receive your email address.
When you provide feedback through the App, we will receive data on
whether your device uses Android or iOS
For Android devices: the Android version, brand, device, display, model
For iOS devices: the system name, system version, model
and you may optionally provide your email address.
All other information that you include in your message is provided by you voluntarily.
Where we receive your email address when you contact us, you give your consent that we may contact you to answer you or obtain further information.
You can withdraw your consent at any time by contacting us.
Any personal data you transmit to us will only be used for the purpose for which you provide it to us.
The legal basis for this processing of your personal data is our legitimate interest according to Art. 6 (1) (f) EU GDPR.
You as a data subject have the following rights:
of access according to Article 15 EU GDPR
to rectification according to Art. 16 EU GDPR
to erasure according to Art. 17 EU GDPR
the right to restriction of processing according to Art. 18 EU GDPR
The right to object according to Art. 21 EU GDPR
The right to data portability according to Art. 20 EU GDPR
The right of access and the right to erasure are limited by the restrictions according to Arts. 34 and 35 BDSG.
You have the right to lodge a complaint with the competent supervisory authority according to Art. 77 EU GDPR.
You have the right to withdraw your consent to our processing of your personal data at any time where we process your data based on your consent.
Please note that the withdrawal of consent will only be effective for data processing in the future.
We do not use any automated decision-making according to Art. 22 EU GDPR.
Where we process your personal data based on Art. 6 (1) (e) EU GDPR or Art. 6 (1) (f) EU GDPR, you have the right to object to our processing of your personal data for reasons that arise from your particular situation at any time. This includes any profiling based on these provisions.
If you exercise this right, we will no longer process the concerned personal data, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms.
You have the right to object to our processing of your personal data at any time where we process your data for direct marketing purposes according to Art. 21 (2) EU GDPR. This includes profiling in so far as it is connected to such direct marketing.
In case you object to processing for direct marketing purposes, we will no longer process your personal data for this purpose.
Please note that your objections will only be effective for data processing in the future.
California Consumer Privacy Act Consumer Rights
If you a resident of California, you have the following rights under the California Consumer Privacy Act in addition to the rights mentioned above:
you have the right not to be discriminated against for exercising your California Consumer Privacy Act rights
We do not sell the personal data that we collect and we will not sell your personal data without giving you the right to opt-out if you are 16 years old or older, or the right to opt-in if you are between 13 to 16 years old.
To exercise these rights, you can contact us at
Plaifit UG (haftungsbeschränkt)
We will notify you about any changes before they are applied.
Effective Date: 23.04.2021