privacy policy of the Elma App
Data protection information of the publisher of the Elma app "ZI"
Our company takes the protection of your personal data seriously and would like to take this opportunity to inform you about data protection in our company. As part of our responsibility under data protection law, obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR") in order to ensure the protection of personal data of the person affected by processing (we also refer to you as the data subject as "customer", "user", "you", "you" or "data subject"). When using our app, you will receive the following services from us: [information on the effects of addiction on parenting; skills training to improve your abstinence and parenting skills]. Insofar as we decide on the purposes and means of data processing either alone or jointly with others, this includes above all the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing (cf. Art. 12, Art. 13 and Art. 14 GDPR). With this declaration, we inform you about how your personal data is processed by us and what rights you have.
1. person responsible for data processing
We provide you with a mobile app that you can download to your mobile device. In the following, we provide information about the collection of personal data when you use our mobile app. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
Central Institute for Mental Health
J5
68159 Mannheim
Phone 0621 1703 - 0
(See also our imprint).
2. contact details for data protection issues
You can reach our data protection officer at datenschutzbeauftragter@zi-mannheim.de or at our postal address. When using our postal address, please use the addition "Data Protection Officer" in the address field so that the mail we receive is treated confidentially in our central mail acceptance department. If you have any questions or comments regarding the processing of your personal data, our data protection officer is our most competent contact person. In accordance with the legal requirements, his direct duties include advising you on all issues relating to the processing of your personal data and the exercise of your rights. In accordance with the provisions of the GDPR, a data protection officer is also bound to maintain secrecy or confidentiality in the performance of his or her duties. Please contact our data protection officer if you wish to assert the rights to which you are entitled, which are described in the following section, against us. Only in this case is the fastest possible and appropriate processing of your request, which is possible for us, guaranteed.
3. your rights ("data subject rights")
You have the following rights vis-à-vis us with regard to your personal data:
Right to information: You have the right to receive information from us at any time upon request about the personal data processed by us concerning you within the scope of Art. 15 GDPR. To do so, you can submit a request by post or email, ideally addressed to our data protection officer.
Right to rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. To do so, please contact our data protection officer by post or e-mail.
Right to erasure: You have the right to request the erasure of data in certain cases within the scope of Art. 17 GDPR, in particular if the data is no longer required for the intended purpose or is being processed unlawfully, or if you have withdrawn your consent or declared an objection. With regard to the period of data storage, we refer in particular to section 10 of this data protection notice. To assert your right to erasure, please contact our data protection officer by post or email.
Right to restriction of processing: Under certain circumstances, you have the right to obtain from us restriction of processing (Art. 18 GDPR). This right exists in particular if
the accuracy of the personal data is disputed between the user and us, for the period required to verify the accuracy.
as well as in the event that the user requests restricted processing instead of deletion in the case of an existing right to deletion.
also in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims.
and if the successful exercise of an objection is still disputed between us and the user. To assert your right to restriction of processing, please contact our data protection officer by post or email.
Right to data portability: You have the right to receive from us the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. To assert your right to data portability, please contact our data protection officer by post or email.
Right to object to processing: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based, inter alia, on point (e) or (f) of Article 6(1) of the GDPR, pursuant to Article 21 of the GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims. To assert your right to object to processing, please contact our data protection officer by post or email.
Right to withdraw consent: You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with a supervisory authority.
4. no obligation on your part to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer and user of our app, you are under no legal or contractual obligation to provide us with your personal data. However, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. In particular, our app can only provide certain functions and deliver corresponding results to you if the app is provided with the relevant information.
5. processing of personal data when using our mobile app
5.1 Data collection when making contact
When you contact us by e-mail or via a contact form, your name and e-mail address and, if you have provided them, your telephone number will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary or - in the case of statutory retention obligations - restrict processing.
5.2 Download the app
When you download the mobile app, the required information is transmitted to the App Store, in particular your user name, email address and customer number of your account, the time of download and the individual device code. We have no influence on this data collection and are not responsible for it; the responsibility for this lies solely with the App Store. We process the data only to the extent necessary for downloading the mobile app to your mobile device.
5.3 Data processing when using the app
The mobile app only uses publicly accessible information from the Internet and does not send any personal data to an external server outside your mobile device. During use, the data collected is stored exclusively in the app on your end device and is not transferred to an external server via the Internet.
5.4 Access to interfaces/functions of your end device
Camera access: This is required if you want to take photos and save them in the app. - Saved documents: This is required to access documents you have created and display them in the app. -
This processing and use of data takes place exclusively for the provision of the service. If you do not grant permission, we will not use this data and you will not be able to use all the functions of our app. You can later revoke your permission in the settings of the app or the operating system or, if you revoke your permission, grant the app the rights again. If you allow access to this data, the mobile app will only access your data and transfer the data to our server to the extent necessary to provide the functionality of the app. We will treat your data confidentially and delete it if you revoke your right to use it or if this data is no longer required to provide the services and there are no legal obligations to retain it. The legal basis is Art. 9 para. 2 lit. a GDPR.
5.5 Creation of a user account (registration)
It is not necessary to create a user account for registration and login in order to use the Elma app.
We use voluntary information to display it in the app in accordance with the settings you have made (e.g. a photo of your name). This information is stored exclusively on your mobile device (legal basis is Art. 9 para. 2 lit. a GDPR).
6. amendment of the data protection information
As part of the further development of data protection law and technological or organizational changes, our data protection information is regularly reviewed to determine whether it needs to be adapted or supplemented. You will be informed of any changes. This data protection notice is valid as of 01.01.2024