DRAFT PRIVACY POLICY

We process your data when you log in to our website, and when we send emails to
you, either scheduled bin reminders, password reset emails, or security alert
notifications (if we think somebody is trying to hack your account, for example).

In this privacy policy we want to provide you with information about the nature,
scope and purposes of the data collection and use, giving you insights into the
processing of your personal data.

WHICH DATA WE COLLECT AND PROCESS

You have to provide us with certain information in order to register with us:
Mandatory Information:
Your chosen username and password

Optional Information: Certain information is optional during registration and 
can also be added or deleted later on by you, such as:
Your name
Your email address
Your postcode
Where necessary to determine your exact bin collection schedule, we will also
store which subset of a postcode you are in. For example, if one
side of your street is on one schedule, and the other side has a different
schedule, we will group these into "Group 1" and "Group 2". We do not ever
store your full address.
If your collection schedule is unique to you, that could be considered to
identify you personally.
We may add the ability to add your phone number for SMS message alerts at a future
date; this policy will be updated, and you will be notified,
if and when that happens.

Optional additional information you may provide to us:
None, at this time.

Google Analytics

This Website uses Google Analytics, a web analysis service of Google. Google
Analytics uses cookies. See our Cookie Policy for more information on cookies and
how to opt-out of them. We use Google Analytics to analyze and constantly improve
the use of our Products. The Products use Google Analytics in conjunction with the
option “_anonymizeIP()”. This means, IP addresses are processed in a shortened form
in order to prevent transmission of any personal data. The basis for the processing
of Data are our legitimate interests.


When you visit or leave our Products, we receive

the URL of both the site you came from and the one you go to next, as well as date
and time stamp and time zone;
IP address, access status/HTTP status code;
transmitted data volume;
proxy server, operating system, web browser (including language and version of the
browser software) and add-ons;


WHY WE PROCESS DATA
Operating the Products. We process your Data to be able to provide you with a
seamless user experience when using the Products.

Providing Services. To operate the Products and provide the services, including to
authenticate your access to an account;
show your bin collection schedule

Customer Support. To investigate, respond to your requests, and resolve complaints
and service issues, e.g. to contact you about a question you submitted to our
customer service team.

Compliance and Enforcement.

Compliance. We process your Data to comply with our obligations and in compliance
with all applicable laws and regulations.

Enforcement. We process your Data, if we think it’s necessary for security purposes
or to investigate possible fraud or other violations of our Terms & Conditions
or this Privacy Policy and/or attempts to harm our members or visitors.


We share Data with third parties

if this is necessary, for the Purposes,
due to a request from a national authority,
due to a court ruling,
if required by law,
if necessary to investigate and defend ourselves against any third-party claims or
allegations,
to exercise or protect the rights and safety of Runtastic, our members, personnel,
or if you have (explicitly) consented beforehand.
We attempt to notify you about legal demands for your Data when we think it is
appropriate,
unless prohibited by law or court order, or when the request is an emergency. We
may dispute such demands when we believe that the requests are overbroad, vague or
lack proper authority.


HOW LONG WE STORE DATA
Storage Period. We store your Data as long as you are a registered user of the
Products. Beyond that, we only store Data, if it is legally necessary (because of
warranty, limitation or retention periods) or otherwise required.

Account Deletion. If you decide to delete your account, all Data we have about you
will be deleted,


WHICH RIGHTS YOU HAVE
Exercise your Rights. To exercise your rights defined in sections 7.2 to 7.8,
please send a request via email to the Email Address or via mail to our postal
address.

Revocation of Consent. You can revoke your consent – in those cases where consent
for processing is necessary – for future data processing at any time. However, this
does not affect the lawfulness of Data processing based on the consent before the
revocation.
In certain cases, we may continue to process your information after you have
withdrawn consent, if we have another legal basis to do so or if your withdrawal
of consent was limited to certain processing activities.

Right of Access. You have the right to obtain (i) confirmation as to whether or
not your Data is being processed by us and, if so, (ii) more specific information
on the Data. The more specific information concerns, among other things, processing
purposes, categories of Data, potential recipients, or the duration of storage.

Right to Rectification. You have the right to obtain the rectification of
inaccurate Data concerning you from us. In case the Data processed by us
is not correct, we will rectify these without undue delay and inform you
of this rectification. Please note that (i) you can rectify much of your
information in the settings and (ii) it is not technically possible for
us to rectify all kinds of data in our Product.

Right to Erasure. You have the right to delete Data we store about you. Should you
decide to do so, please go to your account settings on the Website and delete your
account there. If you are unable to do this, please contact us via the Email
Address. As a safety measure, we will send you an email in order for you to
confirm this deletion. We will delete your Data after this confirmation.
Please note that your phone may still have Data stored on it after deletion of
your account.

Right to Restriction of Processing. You have the right to obtain a restriction of
processing of your Data from us in the following cases:

you make an inquiry pursuant para. 7.4, if you so request;
you are of the opinion that the processing of your Data is unlawful, but are
opposed to an erasure of Data;
you still require the Data for the establishment, exercise or defense of legal
claims; or
you have objected to the processing pursuant para. 7.8.
Right to Data Portability. You have the right to (i) receive a copy of your Data
in a structured, commonly used and machine-readable format and (ii)
transmit those Data to another controller without hindrance from us.

Right to Object. You have the right to object at any time to the processing of Data
for which our legitimate interests are the legal basis, including profiling based
on those provisions. You also have the right to object to processing of Data
for direct marketing purposes.

Right to File a Complaint. You have the right to file a complaint with your
local supervisory authority, if you think that the processing of Data
infringes applicable law.


FURTHER IMPORTANT INFORMATION
Legal Bases. Data protection laws regulate that we are only allowed to collect
and process your Data, if we have lawful bases for processing. The lawfulness of
processing of Data stems from:

your (explicit) consent in cases where you have given (explicit) consent
to the processing;
the necessity for the performance of your user contract, e.g. where
Data is needed for a satisfactory use of the Product; or
legitimate interests pursued by us or a third party, e.g. our use of cookies,
plug-ins, or targeted advertising.

Our legitimate interests include protecting you, us, or others from security
threats or fraud, complying with all applicable laws, managing and improving
our business (e.g. customer service, reporting) including possible corporate
transactions (e.g. M&A).
Security Measures. We are committed to protecting your Data and implement
appropriate technical and organizational security measures to protect it against
any unauthorized or unlawful processing and against any accidental loss,
destruction, or damage. Those security measures are constantly revised to comply
with the latest technological developments.

CHANGES TO THE PRIVACY POLICY
If we make material changes to it, we will provide notice directly in our
Products, or by other means (e.g. via email), to offer you the opportunity
to review the changes before they become effective. Material changes could,
for example, include further tracking, profiling, and analytics services.
Should your consent be necessary, we will ask for it before the changes become
effective. If you object to any changes, you may need to close your account as
it might not function properly.