Owner and Data Controller

Florian Holtorf
Maybachstraße 15
22177 Hamburg
Germany
Email: contact@share-a-wish.com

Types of Data Collected

Share a Wish collects various types of Personal Data, including but not limited to user email addresses, device IDs, passwords, created wish lists, and created links. The Data is either freely provided by the User or collected automatically when using this Application.

Data Collection Includes:

• User Data: Email addresses, passwords, device IDs, and personal wish lists.
• Created Links: Links added by users to their wish lists, which may include affiliate links.
• Usage Data: Data collected automatically through the Application, such as IP addresses, browser types, and interaction logs.

Note: Affiliate links may be created from the links added by users. This practice complies with GDPR requirements as it does not involve additional personal data processing but is disclosed here for transparency.

Shared Public Links: Any shared public wish list link can be viewed and edited by anyone with the link.

Methods and Place of Data Processing

Methods of Processing

The Owner employs appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Processing is conducted using IT-enabled tools following organizational procedures strictly related to the purposes indicated.

Place of Processing

Data is processed at the Owner's operating offices and any other places where the parties involved in the processing are located. Data transfers may involve transferring User Data to a country other than the User’s own.

Retention Time

Personal Data is processed and stored for as long as required by the purpose they have been collected for. Users can find specific information regarding the retention period in the dedicated sections of this document or by contacting the Owner.

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes.
• Provision of Data is necessary for the performance of an agreement with the User.
• Processing is necessary for compliance with a legal obligation to which the Owner is subject.
• Processing is related to a task carried out in the public interest.
• Processing is necessary for the purposes of the legitimate interests pursued by the Owner or a third party.

User Rights

Users may exercise certain rights regarding their Data processed by the Owner. These rights include:

• Withdraw consent: Users can withdraw their consent at any time.
• Object to processing: Users can object to the processing of their Data if it is carried out on a legal basis other than consent.
• Access Data: Users have the right to learn if Data is being processed, obtain disclosure, and obtain a copy of the Data.
• Verify and seek rectification: Users can verify the accuracy of their Data and request updates or corrections.
• Restrict processing: Users can restrict the processing of their Data, in which case the Owner will not process their Data for any purpose other than storing it.
• Delete Data: Users can have their Data deleted or otherwise removed.
• Receive and transfer Data: Users can receive their Data in a structured format and have it transferred to another controller.
• Lodge a complaint: Users can bring a claim before their competent data protection authority.

How to Exercise These Rights

Requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month.

Additional Information about Data Collection and Processing

Legal Action

User Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or related Services.

System Logs and Maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Changes to this Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Contact Information

For any questions or requests regarding User rights and data processing, Users can contact the Owner at the provided email address.

Definitions and Legal References

Personal Data (or Data): Any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.

Usage Data: Information collected automatically through this Application.

User: The individual using this Application.

Data Subject: The natural person to whom the Personal Data refers.

Data Processor (or Processor): The natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller.

Data Controller (or Owner): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.

This Application: The means by which the Personal Data of the User is collected and processed.

Service: The service provided by this Application as described in the relative terms.

European Union (or EU): All references within this document to the European Union include all current member states to the European Union and the European Economic Area.

Latest update: June 11, 2024