Data Controller is awaris GmbH, Genter Str. 8, 50672 Cologne, Germany.
2. Information we may collect from you
We may collect and process the following data about you:
a. Submitted information: Registration information and any other information that you provide to us, including following information on:
(i) Frequency of exercises performed
(ii) the number of minutes you used the app for meditation
(iii) completed tasks
(iv) Peer group: to which you belong and, if applicable, which ones you have created
b. Additional information:
(i) creation date of your account
(ii) your chosen language
(iii) the answer to your security question
(iv) The organization code to which your individual personal code (see 6.) is assigned
We may collect and process details of your use of the Service including, but not limited to, activity relating to your usage (such as time/frequency of log-ins).
3. Where we store your personal data
4. Data security
Data stored for the operation of the Service are linked to a specific app installation only via an arbitrary identifier. The Service will not send directly-identifying data such as your mobile number, Apple ID, IMEI, device UDID and/or MAC address to us or any third parties. Data are encrypted in transmission and at rest on the database server. Administrative access to our servers is authenticated and restricted to key personnel.
5. Uses made of the information
We use information submitted by you: (i) to provide you with personalised feedback via your device (statistics); (ii) on an anonymised and aggregated basis for the purposes of research and development (including academic research), including to help us make the Service more relevant and useful; (iii) on an anonymised and aggregated basis in our marketing materials; (iv) to troubleshoot the Service and fix any bugs or errors. We will retain your data for no longer than is necessary for these purposes.
6. Disclosure of your information
We will not disclose any personally identifiable information in relation to you to any third parties (including to your employer), unless we are under a duty to do so in order to comply with a legal obligation.
7. Access to information
The GDPR (General Data Protection Regulation) of April 2016 gives you the right to access information held about you. Your right of access can be exercised in accordance with that Act.