Privacy Policy
We appreciate your interest in using our services. The protection of your personal data is very important to us. Below you will find all the important information regarding the collection, processing, and use of personal data, which we only process in accordance with the provisions of data protection law. Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
The legal basis of data protection can be found, among others, in the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Responsible Body (Controller)
The controller within the meaning of the GDPR, national data protection laws, and other data protection regulations is:
InternetQ GmbH
Gutenbergring 67 B
22848 Norderstedt
Germany
Managing Directors:
Marco Priewe (Chairman), Christoph Küppers
Phone: (040) 413300-180
help@kanzaroo.com
Data Protection Officer
The Data Protection Officer is:
MediaXS Ges. f. Medienrechte mbH
Datenschutzbeauftragte
Hohenstaufenring 55
50674 Cologne
datenschutzbeauftragte@datxs.de
1. Data Sources and Categories of Data
We process personal data that we receive from you in connection with your use of our services and/or the use of functions of our platform (in particular the kanzaroo platform) and the services provided by us.
Depending on the use, the relevant personal data may involve the following categories of data:
Name, first name
Contact details (e.g. address, email)
Subscriber number, destination number
Transaction data (regarding orders and service utilization)
System information (e.g. IP address)
2. Purposes of Processing
InternetQ is a provider of telecommunications-based services and web-based payment services. We process personal data to provide and fulfill the services offered to you and to process the transactions you request.
3. Legal Bases
Insofar as you give us your consent to the processing of your personal data, this serves as the legal basis pursuant to Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR).
When processing personal data required for the performance of a contract or user relationship, the contract or user relationship serves as the legal basis pursuant to Art. 6 (1) (b) GDPR. This also applies to processing operations required for the implementation of pre-contractual measures. Where necessary, we process your data on the basis of Art. 6 (1) (f) GDPR beyond the actual performance of the contract to protect the legitimate interests of ourselves or a third party.
Insofar as processing of personal data is necessary to fulfill a legal obligation (e.g. §§ 111 et seq. TKG), the statutory or regulatory obligation serves as the legal basis pursuant to Art. 6 (1) (c) GDPR.
If the data processing is carried out due to requirements to protect vital interests, the legal basis arises from Art. 6 (1) (d) GDPR.
To safeguard the legitimate interests of our company or a third party, data processing may also take place beyond the actual performance of the contract on the basis of Art. 6 (1) (f) GDPR, provided that it is necessary and the interests, fundamental rights, and fundamental freedoms of the data subject do not override them.
4. Data Transmission / Disclosure to Third Parties
Personal data processed during the use of our services is forwarded by us to the service provider selected by you, depending on the offer you requested, for the purpose of contract fulfillment and is processed there. In addition, data is forwarded to your subscriber network operator. In this case, the disclosure is carried out for the purpose of service provision and contract fulfillment pursuant to Art. 6 (1) (b) GDPR as well as on the basis of your consent.
Furthermore, in the event of illegal use of services, your personal data will be forwarded to law enforcement authorities (cf. §§ 111 et seq. TKG) and/or, where applicable, injured third parties for prosecution purposes in accordance with statutory provisions. Disclosure may also take place within the framework of statutory or official information obligations, in particular towards regulatory supervisory authorities. In these cases, disclosure is based on the safeguarding of interests pursuant to Art. 6 (1) (f) GDPR and on the basis of the legal obligation pursuant to Art. 6 (1) (c) GDPR.
Otherwise, your data will generally not be passed on to third parties unless you have given your explicit consent to do so. In particular, data is not transmitted to entities outside the EU.
Within our company, only those departments and employees who require access to your data for the purpose of fulfilling our service offerings, technical tasks, and legal duties will receive access. Service providers and processors engaged by us may also receive data for these purposes if they observe our instructions under data protection law and commit to maintaining data confidentiality.
5. Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected and no statutory retention periods (e.g. §§ 111 et seq., 113b TKG) conflict with this. If the processing purpose ceases to apply or a statutory retention period expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.
In the case of data stored in log files, this occurs after seven days at the latest. Storage beyond this is possible. In this case, the identification data (e.g. IP addresses) of the users are deleted or anonymized so that assignment of the calling client is no longer possible. In the case of collecting data to provide the services, this occurs when the respective session is ended.
6. Your Rights as a Data Subject
As a data subject, you have the right to request information about or rectification of the stored personal data at any time, or to revoke consent. You also have the right to erasure or restriction of processing or to object to processing. Reference is also made to the right to data portability and the possibility of lodging a complaint with a supervisory authority.
Please send corresponding requests by email to us or our data protection officer using the contact details provided above.
Below we explain your rights in detail:
a) Right of Withdrawal, Right to Object
You have the right to withdraw your declaration of consent at any time. The withdrawal can be made by email to help@kanzaroo.com. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
b) Right of Access
You may request confirmation as to whether personal data concerning you is being processed by us. If personal data concerning you is processed, you may in particular request information regarding the categories of data, the origin of the data, the purposes of processing, the recipients, any third country transfers (including safeguards under Art. 46 GDPR), the planned duration or criteria for the duration of the processing, and the existence of automated decision-making. The same applies to profiling pursuant to Art. 22 (1), (4) GDPR (including information about the logic involved as well as the significance and envisaged consequences).
c) Right to Rectification
You have the right to obtain rectification and/or completion if the processed personal data concerning you is inaccurate or incomplete.
d) Right to Erasure
You have the right to obtain the erasure of personal data concerning you, in particular if such data is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent and there is no other legal basis, or if you have objected to processing and there are no overriding legitimate grounds for the processing pursuant to Art. 21 (2) GDPR, or the data has been unlawfully processed, or the erasure of data is required to comply with a legal obligation under Union or national law, or the data was collected in relation to offered information society services pursuant to Art. 8 (1) GDPR.
Rights to erasure may not exist, among other things, if and to the extent that processing is necessary to fulfill a legal obligation, to perform tasks in the public interest, or for the establishment, exercise, or defense of legal claims.
e) Right to Restriction of Processing
You may request the restriction of the processing of personal data concerning you, among other things, if the processing is unlawful, you contest the accuracy, you have lodged an objection, the controller no longer needs the data for the processing purposes but you need them for asserting legal claims, or if in the case of unlawful processing you request restriction instead of erasure.
f) Right to Data Portability
You have, among other things, the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller, provided that the processing is based on consent or on a contract and the processing is carried out by automated means. In doing so, you have the right to have the data transmitted directly from one controller to another, where technically feasible and if this does not adversely affect the rights of others. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
g) Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
7. Cookies
Our platform uses so-called cookies to recognize repeated use of our offering by the same user/connection holder. Cookies are small text files that your browser places and stores on your computer. They serve to simplify the use of websites for users and optimize our internet presence and offerings. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The recognition is based on the IP address stored in the cookies.
The legal basis for processing personal data using technically necessary cookies is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. The legal basis for processing personal data using cookies for analysis purposes is the required consent of the user pursuant to Art. 6 (1) (a) GDPR.
8. Server Data
For technical operations, data transmitted via your internet browser is collected (so-called server log files). These include: browser type and version, operating system used, website from which you visit us (referrer URL), platform that you visit, date and time of your access, your Internet Protocol (IP) address.
Storage in log files is carried out to ensure the functionality of the website. In addition, the data serves to assign your transactions and ensure the security of our information technology systems.
This also gives rise to our legitimate interest in data processing as a legal basis pursuant to Art. 6 (1) (f) GDPR.
9. Information Provided Within the Scope of Using Our Services
When using our services, data may be processed that you enter on our platform or generate through the applications. The categories of data arise from the accessed offer windows. These primarily include the products/services to which your transaction relates and the billing amounts.
10. Contact Option
We offer you the opportunity to contact us by email on our site.
In this case, the user's personal data transmitted with the email will be stored.
The legal basis for the processing is Art. 6 (1) (f) GDPR. If the email contact aims at the conclusion of a contract, the legal basis arises from Art. 6 (1) (b) GDPR.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective communication with the user has ended.
11. Use of Google Analytics with Anonymization Function
We use the Google Analytics component (with anonymization function) on our platform. Google Analytics is a web analytics service. Web analysis is the collection, gathering, and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about which website a data subject came to a website from (so-called referrers), which subpages of the website were accessed, or how often and for what dwell time a subpage was viewed. Web analysis is primarily used to optimize a website and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We use the extension "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this extension, the IP address of the data subject's internet connection is shortened and anonymized by Google if access to our websites is made from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information collected, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our websites, and to provide other services relating to the use of our website.
The legal basis for the data processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Google Analytics places a cookie on the data subject's information technology system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website operated by the controller is called up and on which a Google Analytics component has been integrated, the internet browser on the data subject's information technology system is automatically prompted by the respective Google Analytics component to submit data to Google for the purpose of online analysis. As part of this technical procedure, Google gains knowledge of personal data, such as the IP address of the data subject, which serves Google, among other things, to understand the origin of visitors and clicks and subsequently enable commission settlements.
By means of the cookie, personal information, such as access time, the location from which access was made, and the frequency of visits to our website, is stored. Each time our websites are visited, this personal data, including the IP address of the internet connection used, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data collected via the technical procedure on to third parties.
You can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the data subject's information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information regarding visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is evaluated by Google as an objection. If the data subject's information technology system is deleted, formatted, or reinstalled at a later date, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person attributable to their sphere of influence, there is the option of reinstalling or reactivating the browser add-on.
Further information and the applicable Google data protection provisions can be accessed at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.