Privacy

Privacy and Data protection IndieCATR

Responsible for data processing , unless otherwise stated in this privacy policy, is IndieCATR LLC 3833 Powerline Road Fort Lauderdale 33309 USA.

mail(@)indiecatr.com

If you want to have your data or Account deleted, please use the form to send the request. https://indiecatr.com/contact-us/ After closing your User Account all data will be automatically deleted.

(hereinafter also referred to as “we” or “us”).This data protection declaration applies to the processing of your data, namely your personal data, on the website with all side and sub-pages, as well as the IndieCATR app. The complete contact details can be found in the imprint of the operator. The operator takes the protection of your data seriously and adheres to the laws on data protection. These laws serve to protect natural persons when processing personal data.

Personal data is any information relating to an identified or identifiable natural person. Such data is only processed to the extent that is necessary for the execution of a contract or for the provision and improvement of the platform. The processing for the execution of the contract only takes place if you initiate or conclude a contract with the operator; in this respect, reference is also made to the contract of use. The processing for the provision and improvement only takes place insofar as this is shown below or in a separate consent, ordered by the authorities or a court or otherwise provided for by law. The User herby agrees, that his personal data, can be stored outside his home country and outside the European Union.

Data processing

Your data will be processed form-dependent and form-independent. Depending on the form, this is the data that you enter in a form on the platform. Regardless of the form, this is the data that you leave on the operator’s servers without specifying it in a form. You can also leave data on the operator’s servers, regardless of the form, if you use an app or the website of one of the operator’s customers. However, this data is only processed by the operator on behalf of the customer who is responsible for data processing and whose data protection declaration can be found on the respective app or website.

Form-dependent processing

The data that you enter in a form on the platform will be processed when you use the form, specifically after submitting the form. This is data for contacting you and, if you are a customer of the operator, data for your customer account. Personal data that you send using a form provided for this purpose is generally transmitted in encrypted form to the operator’s server

a) contact form If you contact the operator via a form, the data you provide in the contact form will be sent to the operator via the server in encrypted form by e-mail. Any further automated processing of your personal data does not take place in this respect. The data transmitted about you will only be used to process your request. If it is a request in connection with data processing that the operator carries out on behalf of a customer, the operator forwards your request in encrypted form to the respective customer. An answer is always given by email, which is also transmitted in encrypted form, provided your mail service provider supports this. After the request has been finally processed, your personal data that you provided in the contact form or in a response from the operator will be deleted again. This does not apply if the data is still required for contract processing or if there are statutory retention requirements; in this respect, however, the processing of your data will be restricted.

b) Customer Account As a customer of the operator, a customer account may be set up for you. In this respect, the data specified in the user contract and, if necessary, later via the forms in the customer account, in particular your contact and campaign data, are stored on the operator’s servers. You can view the stored data at any time via the customer account and correct or complete them using the forms in the settings. Of course, you can also contact the operator personally, for example by e-mail to the address given at the beginning. The same applies to a deletion of the customer account. However, your data can only be deleted when they are no longer required for contract processing and there are no legal storage requirements to the contrary; until then, however, the processing of your data will be restricted, in particular the customer account will be blocked.

Form-independent processing

The data that the operator needs either to provide or to improve the platform is processed independently of the form. This can in particular be browser cookies, mobile identifiers and access logs, whereby the data is always transmitted in encrypted form. a) Browser cookies These are small text files or simple entries in a database that your browser stores. The data in the cookies can only be read out again by the platform that saved them. On the one hand, the platform uses cookies when you log into your customer account. These cookies ensure that only you can access the data stored in your customer account after logging in. After logging out, the cookie with the ID is deleted again. On the other hand, cookies are used when you visit a website that uses the platform. That is, when you visit a page that delivers advertising via the platform or is preparing to deliver advertising. These cookies are used to design the advertising delivery according to target groups and interests. For this purpose, a so-called advertising ID is stored in the cookie (e.g. so that you are not repeatedly shown the same advertisement). The ID can also be assigned to advertising categories (e.g. age between 18 and 35 years / interest in cars). However, these categories always apply to a larger group of people, both individually and together. This means that the operator cannot identify you as a person either via the advertising ID as such or via the categories assigned to the ID. The cookies with the advertising ID can also be used by customers for whom the operator processes data on behalf of advertising delivery via the platform. The operator’s customers can assign the advertising ID to their own ID with advertising categories. In this respect, however, the respective customer to whom the data protection declaration on the website you are visiting applies is responsible for data processing. The cookies used by the platform do not cause any damage to your end device (e.g. computer / tablet), and in particular they do not contain any viruses. You can prevent the storage of cookies by making the appropriate settings in your browser; in this case you may no longer be able to use all functions of the platform or the website visited. The same applies to deleting stored cookies. b) mobile identifier Advertising can also be delivered to mobile applications (apps) via the platform. For this purpose, the apps can use a so-called mobile identifier, which is provided by the operating system of your end device (Apple iOS or Google Android). This identifier ultimately corresponds to the advertising ID from a cookie. This means that the identifier can be assigned to advertising categories in order to tailor the advertising in the apps to the target group and interests. However, the categories always apply to a larger group of people. The operator can therefore identify you as a person neither via the identifier as such nor via the assigned categories. The identifiers can also be used by the customers for whom the operator delivers the advertising and assigned their own ID with advertising categories. In this respect, however, the respective customer is responsible for data processing. The operator cannot read, change or delete the identifier himself. However, you can prevent the identifier from being used by making a corresponding setting in the app or in your operating system; in this case you may no longer be able to use all the functions of the app or the system. The same applies, depending on the app and the operating system, to changing or deleting the identifier. For the details, reference is made to the data protection declaration of the respective app and your system.

c) Social Networks

The platform links social networks operated by third parties. For example, to share the platform or posts on it in the respective network (e.g. “Share”) or to like (e.g. “I like”). However, a connection to such a network will only be established after you have clicked on the button (link) for the respective network on the platform. Due to the processing of personal data by the social networks, over which the operator has no influence, reference is made to the data

LinkedIn (LinkedIn Ireland U.C.): https://www.linkedin.com/legal/privacy-policy

Google+ (Google LLC): https://policies.google.com/privacy?hl=de

Facebook (Facebook Ireland Ltd.): https://www.facebook.com/privacy/explanation

Twitter (Twitter International Company): https://twitter.com/de/privacy

e) Embedded Content The platform may embed content from Google Maps (interactive maps) on its subpages. This content is therefore not delivered via the operator’s servers, but via the servers of Google Inc. (Google). When viewing and using the embedded content, your IP address will be transmitted to the Google servers. Because without the transmission of your IP address, the embedded content cannot be accessed by your browser. In addition, your browser may transmit additional data to the Google servers (e.g. your location if you use the corresponding function), over which the operator has no influence. In this respect, you can also call up the data protection declaration for Google Maps at: https://www.google.com/intl/de/policies/privacy/

Your rights If you are affected by the processing of your personal data, you have rights under the data protection regulations vis-à-vis the person responsible for data processing. You can contact the operator at any time to assert these rights, for example by email. When contacting us in a different context, you should also provide information that enables assignment in the respective context (e.g. as a customer, your customer number).

1. Right of Withdrawal You have the right to revoke any consent to data processing at any time. The revocation of a consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of revocation. Please get in touch via the Contact Form or directly mail(@)indiecatr.com
2. Right to Object a) General You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is necessary to perform a task in the public interest or to protect the legitimate interests of the operator. The operator then no longer processes the personal data unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. b) advertising If your data is processed in order to operate direct advertising, you have the right to object at any time to the data processing for the purpose of such advertising. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes. You can object to the processing of cookies for advertising purposes via the following link: opt out This sets a so-called opt-out cookie. This cookie prevents a cookie with an advertising ID from being stored in your browser or from being otherwise assigned to advertising categories. An already existing ID of the operator will be deleted. As a result, the operator’s customers can no longer assign you their own ID or advertising categories. Of course, the opt-out cookie requires that you do not prevent the storage of cookies or delete the cookie with the appropriate setting in your browser. After deleting the opt-out cookie, you would have to repeat the objection. If an opt-out cookie is set in your browser, you can also undo this.
3. Right to Complain You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the statutory provisions.
4. Right to information You have the right to request confirmation from the operator as to whether personal data relating to you is being processed; if this is the case, you have a right to information about this data and the following information: (a) the processing purposes; (b) the categories of personal data being processed; (c) the recipients or categories of recipients to whom the data has been or will be disclosed; (d) the planned duration for which the data will be stored or, if this is not possible, the criteria used to determine that duration; (e) your rights under data protection legislation; (f) if the data is not collected from you, all available information about the origin of the data; (g) the existence of automated decision-making including profiling and meaningful information about it. Most of the information can already be found in this declaration. In addition, you can of course contact the operator at any time, for example by e-mail to the address given at the beginning. Upon request, the operator will provide you with a copy of the personal data that is the subject of processing. However, this only insofar as this does not impair the rights and freedoms of other persons. If you submit the application electronically, the information will be made available to you in a common electronic format, unless you specify otherwise.
5. Right to Rectification You have the right to request the operator to correct incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
6. Right to erasure You have the right to request that the operator delete personal data concerning you immediately, and the operator is obliged to delete this data immediately if one of the following reasons applies: (a) the data is necessary for the purposes for which they were collected or processed in any other way are no longer necessary; (b) you withdraw your consent on which the processing is based and there is no other legal basis for the processing; (c) you object to the processing and there are no overriding legitimate grounds for the processing or your objection relates to direct marketing; (d) your personal data has been unlawfully processed; (e) the erasure is necessary for compliance with a legal obligation to which the operator is subject; or (f) the data was collected in an offer of information society services made directly to a child, on the basis of the child’s consent. However, the right to erasure does not apply to the extent that the processing is necessary: ​​(a) to exercise the right to freedom of expression and information; (b) to comply with a legal obligation; (c) to perform a task that is in the public interest or (d) to assert, exercise or defend legal claims. In this respect, you can request a blocking if necessary.
7. Right to Block You have the right to request the operator to restrict (block) the processing if one of the following conditions is met: (a) you contest the accuracy of your personal data for a period of time that allows the operator to do so to verify the accuracy of this data; (b) the processing is unlawful and you refuse to have your data erased and instead request that the use of the data be restricted; (c) the operator no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims or (d) you have lodged an objection to the processing as long as it is not yet clear whether the legitimate reasons of the operator prevail over yours; there is no need to weigh legitimate reasons in the event of an objection to processing for direct marketing purposes. If processing has been restricted, apart from storage, your personal data may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another person or for reasons of important public interest. If you have obtained a restriction of processing, you will be informed by the operator before the restriction is lifted. 8. Right to data portability You have the right to receive your personal data that you have provided to the operator in a structured, common and machine-readable format, and you have the right to transfer this data to another person responsible without hindrance by the operator, provided that the processing is based on Your consent or on a contract between you and the operator and the processing is carried out using automated procedures. In this respect, you have the right to have your personal data transmitted directly from the operator to another person responsible, insofar as this is technically feasible and the rights and freedoms of other persons are not impaired. Your right to erasure remains unaffected. This right does not apply to processing that is necessary for the performance of a task that is in the public interest. 9. Miscellaneous The operator will notify all recipients to whom your data has been disclosed of any correction or deletion of your personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort. The operator will inform you about such recipients if you request it. If the operator has made the personal data public and is obliged to delete them, he will take appropriate measures, taking into account the available technology and the implementation costs, to inform third parties who process your personal data that you want to delete all links to have requested this data or copies of the data.

Legal bases

If you have given your express consent to the processing of your data, this is also the legal basis for data processing for the purposes to which you have consented. These are usage contracts that are concluded between you and the operator or initiated at your request. Otherwise, the legal basis for data processing is the protection of the legitimate interests of the operator. This is the economic interest in operating the platform. 2. Safeguards Taking into account the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risks for your rights and freedoms, the operator uses suitable technical and organizational measures to ensure that the data processing is in accordance with the statutory provisions he follows. The measures are taken taking into account the state of the art and include in particular an encryption of your data. The facilities and systems on which the data are processed are protected against unauthorized access, both physically and digitally. In particular, the operator’s servers are password-protected. By regularly testing and updating the software used, the operator prevents security gaps that could allow your data to be misused. Only the persons subordinate to the operator (employees) who need this to fulfill their tasks have access to personal data, namely only to the extent required. The operator’s employees are instructed in data processing in advance and are sworn to secrecy. Regular security copies (backups) protect the data from loss and can be restored at any time. The presetting of the systems ensures that only personal data whose processing is necessary for the respective processing purpose is processed. This implements data protection principles such as data minimization. In addition, the operator ensures the confidentiality, integrity, availability and resilience of the systems through technical and organizational measures. Compliance with data protection regulations is checked regularly and the measures updated if necessary.

Notes on data processing in connection with Google Analytics This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the person responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”. Google Analytics uses so-called “cookies”, text files which are stored on the computer of the site visitor, and which enable an analysis of the use of the website by the site visitor. The information generated by the cookie about the use of this website by the site visitor (including the shortened IP address) is usually transmitted to a Google server and stored there. Google Analytics is only used with the extension “_anonymizeIp()” on this website. This extension ensures anonymization of the IP address by shortening it and excludes direct personal reference. As a result of the extension, Google’s IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by the relevant browser as part of Google Analytics will not be merged with other Google data. On behalf of the site operator, Google will use the information obtained to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet use to the site operator (Art. 6 Para. 1 lit. f GDPR). The legitimate interest in data processing lies in optimizing this website, analyzing how the website is used and adapting the content. The interests of the users are adequately safeguarded by the pseudonymization. Google LLC. offers a guarantee based on the standard contractual clauses to comply with an appropriate level of data protection. The data sent and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 50 months. Data that has reached the end of its retention period is automatically deleted once a month. Further information on the use of data by Google, setting and objection options can be found in Google’s data protection declaration (https://policies.google.com/privacy) and in the settings for the display of advertising by Google (https://adssettings. google.com/authenticated). reCAPTCHA To protect your inquiries via the Internet form, we use the reCAPTCHA service from Google LLC (Google). The query serves to distinguish whether the input is made by a human or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input will be transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection regulations of the company Google apply to this data. You can find more information about Google’s data protection guidelines at: https://policies.google.com/privacy?hl=de

for any questions or remakrs about privacy and your rights please contact us mail(@)indiecatr.com