Privacy policy

1) Information about the Collection of Personal Data and Contact Details of the Controller 1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data includes all data that can personally identify you. 1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is CLIMBALL OHG, Reineggweg 3, 39058 Sarnthein, Italy, Tel .: (+39) 3493777653, Email: service@boulderball.it. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

2) Data Collection When Visiting Our Website When you visit our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you came to the page
  • Used browser
  • Operating system used
  • IP address used (if applicable, in anonymized form) Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

Hosting by Shopify This website uses the Shopify International Limited shopping system, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify"), for hosting and displaying the online shop. The data collected on this website is processed on Shopify's servers, with Shopify also processing data on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. as part of these services. There is an adequacy decision of the European Commission for data transfer to Canada. For more information and details on Shopify's privacy policy, please visit the following website: https://www.shopify.de/legal/datenschutz

3) Cookies To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are deleted after you close your browser, so-called session cookies. Other cookies remain on your end device and allow us or our partner companies to recognize your browser on your next visit, so-called persistent cookies. You can find the storage duration of the cookies in your browser's cookie settings. If personal data is also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the execution of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

4) Contacting Us 4.1 When contacting us (e.g., via contact form or email), personal data is collected and processed only to the extent necessary to respond to your inquiry and in compliance with Art. 6(1)(f) GDPR. If the contact aims at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that your inquiry has been resolved and provided that there are no legal obligations to retain data.

5) Data Processing When Opening a Customer Account In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed further if you provide it to us for the purpose of opening a customer account. The data required for account opening can be seen from the input mask used for this purpose on our website. Your customer account can be deleted at any time and can be done either by a message to the contact option described above or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, provided that there are no legal obligations to retain data and no legitimate interests on our part in retaining the data.

6) Data Processing for Order Handling 6.1 To fulfill and process your orders, we disclose your data to the shipping company responsible for delivery and, if applicable, to the bank entrusted with processing the payment. If necessary for the processing of contracts, we also use other service providers. The legal basis for the transfer of data is Art. 6(1)(b) GDPR. 6.2 Disclosure of Personal Data to Shipping Service Providers

  • BRT: If the goods are delivered by BRT (BRT S.p.A., Piazza Diaz 7 - 20123 Milano/Italy), we will provide your email address prior to delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery to BRT, if you have given your express consent for this in the ordering process. Otherwise, we will only provide the recipient's name and delivery address to BRT for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with BRT or delivery announcement is not possible. The consent can be revoked at any time with effect for the future, either with the controller named above or with BRT.
  • GLS: If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will provide your email address prior to delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery to GLS, if you have given your express consent for this in the ordering process. Otherwise, we will only provide the recipient's name and delivery address to GLS for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with GLS or the provision of status information about the shipment delivery is not possible. The consent can be revoked at any time with effect for the future, either with the controller named above or with GLS.
  • SDA: If the goods are delivered by SDA (SDA EXPRESS COURIER S.P.A., Viale Europa, 175 – 00144 – Roma/Italy), we will provide your email address prior to delivery of the goods for the purpose of coordinating a delivery date or to announce the delivery to SDA, if you have given your express consent for this in the ordering process. Otherwise, we will only provide the recipient's name and delivery address to SDA for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with SDA or delivery announcement is not possible. The consent can be revoked at any time with effect for the future, either with the controller named above or with SDA. 6.3 Use of Payment Service Providers (Payment Services)
  • Shopify Payments, PayPal, Meta Pay, Amazon Pay, and Apple Pay: If you choose a payment method offered by the payment service provider Shopify Payments, PayPal, Meta Pay, Amazon Pay, or Apple Pay, the payment processing is carried out via the respective payment service provider, to whom we provide the information provided during the ordering process together with the information about your order (name, address, IBAN, BIC, invoice amount, currency, and transaction number) in accordance with Art. 6(1)(b) GDPR. The data is disclosed exclusively for the purpose of processing payments with the payment service provider.

    7) Online Marketing

    7.1 Facebook Pixel for Custom Audiences Creation (with Cookie Consent Tool)

    Within our online offerings, we use the so-called "Facebook Pixel" of the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"). When a user clicks on one of our ads displayed on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. If our page allows data sharing with Facebook through Pixel, this URL parameter is written into the user's browser via a cookie set by our linked page. Facebook Pixel reads this cookie, enabling the data to be forwarded to Facebook.

    With the Facebook Pixel, Facebook can determine our online offering visitors as a target audience for displaying ads (so-called "Facebook Ads"). We use Facebook Pixel to show our Facebook Ads only to Facebook users who have shown interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited web pages), which we transmit to Facebook (so-called "Custom Audiences"). We use Facebook Pixel to ensure that our Facebook Ads correspond to users' potential interests and do not appear intrusive. This allows us to evaluate the effectiveness of Facebook Ads for statistical and market research purposes, tracking whether users were redirected to our website after clicking a Facebook ad (so-called "Conversion").

    The data collected is anonymous to us and does not allow us to draw conclusions about the users' identities. However, Facebook stores and processes the data, making it possible to link it to the respective user profile and use it for its advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to display ads on and off Facebook.

    The data processing associated with Facebook Pixel occurs only with your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

    **7.2 - Google Ads Conversion Tracking**

    This website uses the online advertising program "Google Ads," and within Google Ads, the Conversion Tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine the effectiveness of individual advertising measures concerning the data of the advertising campaigns. Our aim is to display advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs incurred.

    The conversion tracking cookie is set when a user clicks on a Google-served Ads ad. These cookies are small text files that are stored on your device. Usually, these cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be traced through the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. As part of Google Ads' use, personal data may also be transmitted to Google LLC servers in the USA.

    Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites

    All the above-mentioned processing, especially the setting of cookies to read information on the used device, is carried out only if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

    Additionally, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en

    Please note that certain functions of this website may not or only partially be used if you have disabled the use of cookies.

    Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

    **7.3 TikTok**

    This website uses the TikTok Pixel (hereinafter TTP). This is an advertiser tool offered by the providers TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (together "TikTok").

    The TTP is a JavaScript code snippet that allows understanding and tracking the activities of visitors on this website.

    The TTP collects and processes information about the visitors of this website or their devices used. The data collected via the TTP is used for targeting our ads and improving ad delivery and personalized advertising. The data collected on our website via the TTP is transmitted to TikTok, some of which may be information stored on your used device.

    In addition, cookies are also used via the TTP to store information on your used device. Such storage of information by the TikTok Pixel or access to information already stored on your device only occurs with your consent.

    For further information on the processing of personal data by TikTok, including the legal basis on which TikTok relies, and options for exercising your rights towards TikTok, please refer to TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=en-GB

    **8) Web Analytics Services**

    **8.1 Google (Universal) Analytics**

    This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies," which are text files placed on your computer, to help analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address, which is anonymized using the "_anonymizeIp()" extension, before being stored on Google's servers) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Your IP address will not be associated with any other data held by Google.

    You can prevent Google's collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en. 

    **8.2 Google Analytics 4**

    This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), to

     analyze user behavior on our website. Google Analytics 4 uses cookies that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website (including your IP address) is usually transmitted to a Google server in the USA and stored there. We use Google Analytics 4 with activated IP anonymization. This means that within member states of the European Union or in other states that are party to the Agreement on the European Economic Area, your IP address will be shortened by Google before being transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activities, and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data.

    The processing of data by Google Analytics 4 occurs only with your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating the cookie settings in the "Cookie Consent Tool" provided on the website.

    **8.3 Google Analytics Remarketing**

    Our websites use the functions of Google Analytics Remarketing in combination with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

    This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).

    If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. This way, the same personalized advertising messages can be displayed on any device you use to sign in with your Google account.

    To support this feature, Google Analytics collects Google-authenticated IDs of users who are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

    You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

    The aggregation of the data collected in your Google account is based solely on your consent, which you can give to Google or revoke (Art. 6(1)(a) GDPR). In the case of data collection processes that are not merged into your Google account (for example, because you do not have a Google account or have objected to the merging), the collection of data is based on Art. 6(1)(f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.

    More information and the data protection regulations can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=en.

    **9) Social Media Plugins**

    **9.1 Facebook Plugins**

    We use social plugins from Facebook on our website to make its use more personal. To do this, we use the "LIKE" or "SHARE" button. This is an offer from Facebook.

    If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website.

    By integrating the plugins, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

    If you are logged in to Facebook, Facebook can immediately associate your visit to our website with your Facebook account. If you interact with the plugins, for example, press the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and shown to your Facebook friends.

    Facebook may use this information for purposes of advertising, market research, and personalized content. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website concerning the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services associated with the use of Facebook.

    If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

    The purpose and scope of the data collection, the further processing and use of the data by Facebook, and your rights and settings options for protecting your privacy in this regard can be found in Facebook's privacy policy (https://www.facebook.com/about/privacy/).

    **9.2 Twitter Plugin**

    Our website integrates features of the Twitter service. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" feature, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter.

    We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or how it is used by Twitter. For more information, please refer to Twitter's privacy policy at: https://twitter.com/en/privacy.

    **9.3 Instagram Plugin**

    Our website contains functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by Instagram.

    For more information, please refer to Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

    **9.4 LinkedIn Plugin**

    Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our pages that contains LinkedIn features, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on LinkedIn's "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

    For more information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

    **9.5 Pinterest Plugin**

    Our website uses social plugins from the Pinterest social network operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA ("Pinterest"). When you

     access a page that contains such a plugin, your browser connects directly to Pinterest's servers. The plugin transmits protocol data to Pinterest's server in the USA. This log data may include your IP address, the address of the websites visited, which also includes Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

    For more information about Pinterest's privacy policy, please visit the following link: https://policy.pinterest.com/en/privacy-policy.

    **10) Newsletter**

    **10IP Address

    Our website and newsletter use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). The purpose of reCAPTCHA is to determine whether data entered on our website (such as information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the visitor enters the site. For this analysis, reCAPTCHA evaluates various pieces of information (such as IP address, how long the visitor has been on the site, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

    The reCAPTCHA analyses take place entirely in the background. Website visitors are not advised that such an analysis is taking place.

    The data is processed based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.

    For more information about Google reCAPTCHA and to read the privacy policy of Google, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

    **11) Rights of Data Subjects**

    We would like to inform you of your rights regarding your data:

    Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

    Right to Rectification (Art. 16 GDPR): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

    Right to Erasure (Art. 17 GDPR): You have the right to obtain the erasure of personal data concerning you without undue delay if one of the grounds specified in Art. 17 GDPR applies, e.g., if your data is no longer necessary for the purposes for which it was collected.

    Right to Restriction of Processing (Art. 18 GDPR): You have the right to obtain restriction of processing if one of the conditions specified in Art. 18 GDPR applies, e.g., if you have objected to the processing.

    Right to Data Portability (Art. 20 GDPR): In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or demand a transmission of the data to another third party.

    Right to Object (Art. 21 GDPR): If data is collected based on Art. 6(1)(f) GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for processing which override the interests, rights, and freedoms of the data subject, or the processing serves the purpose of the establishment, exercise, or defense of legal claims.

    Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

    If you have questions about the collection, processing, or use of your personal data, if you want to assert any of your rights, or if you wish to revoke your consent, please contact the controller using the contact data provided in our site notice.

    **12) Duration of Storage of Personal Data**

    The duration of the storage of personal data is determined by the respective statutory retention period (e.g., retention periods under commercial and tax law). After the expiry of this period, the corresponding data is routinely deleted if it is no longer necessary for the fulfillment of the contract or the initiation of a contract and/or if the data subject has no legitimate interest in further storage.

    ---

    **Privacy Policy for Mobile Applications**

    **1. Data Controller**

    The data controller of this mobile application ("App") is [Your Company Name], [Your Address], [Your Email Address], [Your Phone Number] (hereinafter referred to as "we", "us", or "our").

    **2. Data We Collect**

    **2.1. Information You Provide Us**

    The App may collect and process the following data that you provide voluntarily:

    - **User Account Information:** When you create an account in the App, we may collect your username, email address, and password.

    - **Profile Information:** You may have the option to provide additional information for your user profile, such as your name, profile picture, and other personal details.

    - **Content:** We collect the content you submit to the App, such as posts, comments, messages, and other types of interactions.

    - **Communications:** If you contact us directly, we may receive additional information about you. For example, when you send us an email, we will collect your email address and the content of your message.

    **2.2. Information We Collect Automatically**

    When you use the App, certain information is collected automatically, including:

    - **Usage Information:** We collect information about your interactions with the App, such as the features you use, the actions you take, and the time, frequency, and duration of your activities.

    - **Device Information:** We collect information about the device you use to access the App, including the device model, operating system, IP address, and unique device identifiers.

    - **Location Information:** With your consent, we may collect information about your precise or approximate location. You can control this through your device settings or by withdrawing your consent.

    - **Cookies and Similar Technologies:** We use cookies and similar technologies to collect data about your use of the App. You can manage your cookie preferences through your browser or device settings.

    **3. How We Use Your Data**

    We process your data for the following purposes:

    - **Providing the App:** We use your data to provide, maintain, and improve the features and functionality of the App.

    - **User Support:** We use your data to respond to your requests for assistance, resolve technical issues, and provide customer support.

    - **Communications:** We may send you service-related communications, such as account verification, updates, or notifications.

    - **Personalization:** We may personalize the content and features of the App based on your interactions and preferences.

    - **Analytics:** We use analytics tools to understand how users interact with the App, analyze trends, and improve our services.

    - **Legal Compliance:** We may process your data to comply with applicable laws, regulations,

     or legal obligations.

    **4. Legal Basis for Processing**

    We process your data based on the following legal grounds:

    - **Contract Performance:** The processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into a contract.

    - **Consent:** You have given your consent for the processing of your data for specific purposes. You have the right to withdraw your consent at any time.

    - **Legitimate Interests:** The processing is necessary for our legitimate interests or the legitimate interests of third parties, except where your interests or fundamental rights and freedoms that require data protection override those interests.

    - **Legal Obligations:** The processing is necessary for compliance with a legal obligation to which we are subject.

    **5. Sharing Your Data**

    We may share your data with third parties in the following situations:

    - **Service Providers:** We may share your data with third-party service providers who perform services on our behalf, such as hosting, analytics, customer support, and advertising.

    - **Legal Compliance:** We may disclose your data if required to do so by law or in response to a valid legal request, such as a court order or a government agency's request.

    - **Protection of Rights:** We may disclose your data when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving threats to our property or the physical safety of any person, or as evidence in litigation in which we are involved.

    - **With Your Consent:** We may share your data with your consent or at your direction.

    **6. Data Security**

    We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

    **7. Data Retention**

    We retain your data for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

    **8. Your Rights**

    You have the following rights concerning your data:

    - **Access:** You can request access to your personal data and receive a copy of it.

    - **Rectification:** You can request to correct or update your personal data if it is inaccurate or incomplete.

    - **Erasure:** You can request the deletion of your personal data under certain circumstances.

    - **Restriction:** You can request the restriction of the processing of your personal data under certain circumstances.

    - **Portability:** You can request a copy of your data in a machine-readable format and have the right to transmit those data to another controller.

    - **Objection:** You can object to the processing of your data under certain circumstances.

    - **Withdrawal of Consent:** If we rely on your consent to process your data, you have the right to withdraw your consent at any time.

    To exercise your rights, please contact us using the contact information provided in the App or in this Privacy Policy. We may request additional information from you to verify your identity before responding to your requests.

    **9. Updates to this Privacy Policy**

    We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated Privacy Policy will be effective when posted, and your continued use of the App after the posting will signify your acceptance of the updated Privacy Policy.

    **10. Contact Us**

    If you have any questions about this Privacy Policy or our data practices, please contact us at [Your Email Address] or [Your Phone Number].

    ---

    Please make sure to adapt the privacy policy according to your specific needs and consult with legal counsel to ensure it complies with the relevant laws and regulations in your jurisdiction.