This is a courtesy translation. Only the German version is legally binding.
We, Connact GmbH, Neißer Str. 10, 36100 Petersberg, Germany, represented by our managing director Jonathan Hildebrand, take the protection and confidentiality of personal data very seriously. We collect and use personal data exclusively within the scope of the statutory provisions, i.e. primarily the German and European telemedia and data protection laws (in particular the DDG (Digitale-Dienste-Gesetz, German Digital Services Act), the TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, German Telecommunications and Digital Services Data Protection Act) and the BDSG (Bundesdatenschutzgesetz, German Federal Data Protection Act)).
In applying these provisions in practice, we follow the “Orientierungshilfe zu den Datenschutzanforderungen an App-Entwickler und App-Anbieter” (guidance on data protection requirements for app developers and app providers) issued by the Düsseldorfer Kreis on 16 June 2014, which sets out the data protection and technical requirements for the development and use of mobile applications in the non-public sector.
This privacy policy explains which personal data we collect via the “App” platform, the purposes for which we will use those data, and the choices that users of the platform (hereinafter referred to as “users”) have with regard to their personal data. Users can open and save this privacy policy before using the platform, for example in the App Store (iOS) or the Google Play Store (Android). After downloading the app, users can open and read the privacy policy on the registration screen and can access it again at any time after registering.
We have taken organisational, contractual and technical security measures to ensure that the provisions of the telemedia and data protection laws are complied with and to prevent accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Data are transmitted to our server back end using secure SHA256 RSA encryption via the HTTPS protocol, which ensures transport encryption. The server on which user data are stored and on which the app is operated is located in a data centre in Germany. Only we have access rights. Strong cryptographic encryption of the data makes it virtually impossible for unauthorised persons to access user data. The keys for decrypting the data are managed by our chief technology officer (CTO) in a software vault and will under no circumstances be disclosed to unauthorised persons.
The app is a service for the professional and private networking of members. The app provides a closed social network (hereinafter referred to as the “network”). In particular, the app offers a range of features that enable users to network and communicate with one another. Users can, in particular, register and create and maintain their own profiles. Users can also “connect” with other users, communicate with them directly or share content (e.g. messages, photos) with many users at the same time, join various groups (known as “circles”) and communicate with other users within those groups, and use a comprehensive search function to find other users according to various criteria.
The app is available exclusively to members.
We store and use personal data only where this is permitted by law or where the user consents to the use of the data. The use of personal data is permitted in particular where it is necessary for the purpose of using or further developing the app or where it improves the user experience. All data that we collect and process represent the minimum required to ensure the functionality of the app.
Personal data are therefore stored on the device and on our server only to the extent necessary to provide the app’s features. As a matter of principle, personal data are not disclosed to third parties. Where we use external service providers for individual features, the app transmits data only in anonymised form, so that no conclusions can be drawn about a specific individual (see section 6). The app does not at any time access personal data on the device beyond the scope set out in section 5 of this privacy policy. In particular, there is no access to address books, call logs, e-mails, etc.
If the user uninstalls the app, all data are deleted from the device. Only on Android devices may personal data remain on the device after the app has been uninstalled, if they were saved to the device’s external storage.
The app does not collect or process any data requiring a heightened level of protection (e.g. health data or credit card data).
The data we collect are treated confidentially, transmitted in encrypted form and not disclosed to third parties. User data are not processed for the advertising purposes of third parties.
In this context, we distinguish between data that are automatically transmitted to us when users use the app (access data) and data that users expressly and knowingly provide to us (master data).
When the app is used, technical data are automatically transmitted to us; once the session has ended, these are stored in anonymised form in log files.
In particular, we store the following data: IP address, temporary unique device identifiers (e.g. IDFA and Android ID), random device identification numbers (client IDs) and user identification numbers (user IDs), random unique identification numbers, request (name of the requested file), app version, operating system and version used, language settings, date and time.
When users register for a user account or contact us, for example via the “Contact” function, we collect all data that the user provides to us in doing so (e.g. data the user enters into a form). We store these data in order to be able to respond to any questions users may have.
On initial registration, we collect the following data: e-mail address, first name and surname, academic titles, fraternity affiliation (parent federation), date of birth, postcode, place of residence, country. These data are necessary to enable the user to use the app.
After registering, users may voluntarily add further personal data to their profiles in order to improve their experience of the app. These voluntary details include, in particular, further information about their respective federation membership, their occupation and their studies.
So that our users can make the best possible use of the app and are always informed about new features, we send system information or announcements by e-mail or push notification at irregular intervals. The app asks the user for separate permission for push notifications.
E-mail notifications are only sent in relation to content from the app. Users may object to receiving these e-mail notifications at any time. An option to object is also included in every notification, among other places. Users can also deactivate e-mail notifications in the app’s settings.
Depending on the operating system of the device, the app requires various permissions in order to function fully. All permissions requested by the app and the data collected as a result serve the purpose of providing a specific feature within the app or improving the user experience.
The app requires the following permissions on mobile devices:
Our users expect their location to be determined as accurately as possible. The location is therefore determined to an accuracy of up to 8 metres using the GPS function of the respective device.
We use the tools “Firebase Realtime Database” and “Firebase Cloud Messaging” to send push notifications and to operate the chat (“Private messages” function). Firebase is a Google subsidiary based in San Francisco (CA), USA. Google Firebase is a development platform for mobile and web applications that we use to implement features such as hosting, database services, usage analytics, user registration and other back-end services.
The following Firebase components are used in our app:
When these services are used, usage data, device information, IP addresses and interaction behaviour, among other things, are processed in order to optimise app features, compile statistics and continuously improve usability.
Data processing and transfers to third countries
Firebase predominantly uses servers within the European Union. In certain cases, however, personal data may be transferred to third countries, in particular to the USA. This concerns data such as IP addresses, device identifiers or usage statistics.
The transfer is based on an adequacy decision of the European Commission pursuant to Art. 45 GDPR, as Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), the parent company of Google Ireland Limited, is certified under the EU-U.S. Data Privacy Framework (DPF). The certification can be viewed at https://www.dataprivacyframework.gov.
Where no adequacy decision exists in an individual case, the data transfer is based on the EU standard contractual clauses pursuant to Art. 46 GDPR, supplemented by appropriate technical and organisational safeguards.
Further information on data processing by Google Firebase is available at:
https://firebase.google.com/support/privacy
We also use ChatGPT from OpenAI (OpenAI, L.L.C., 3180 18th St, San Francisco, CA 94110) to provide users with assistance through artificial intelligence (e.g. generating meaningful summaries of posts in the app). This feature is, however, optional: when writing a post, users can decide for themselves whether to use it. We would like to point out once again that by using this feature, the user agrees to OpenAI’s terms of use.
For the uniform display of fonts, this site uses Google Fonts provided by Google. The Google Fonts are installed locally. No connection to Google’s servers is established in the process. Further information on Google Fonts is available at
https://developers.google.com/fonts/faq and in Google’s privacy policy:
https://policies.google.com/privacy?hl=de.
8.4 Google Analytics
This website uses functions of the web analytics service Google Analytics, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses “cookies”. These are text files that are stored on your device and enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. We have activated IP anonymisation on this website, so that your IP address is first truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet use.
Google Analytics cookies are stored on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie banner.
Further information on how Google uses data can be found in Google’s privacy policy:
https://policies.google.com/privacy
and in the Google Analytics terms of use:
https://marketingplatform.google.com/about/analytics/terms/de/
The service provider responsible (controller) for the collection, processing and use of personal data by means of this app is:
Connact GmbH
Neißer Str. 10
36100 Petersberg
Register court: Amtsgericht Fulda (Fulda Local Court), HRB 8096
Connact GmbH is represented by its managing director Jonathan Hildebrand.
If users have any questions or suggestions regarding data protection, they can contact us at any time by e-mail at the following address: info@connact.app
Users can find our legal notice, with all the key details and ways to contact us, both within the app and on our page in the respective app store.
Personal data are deleted once we no longer need them, unless we are required to retain them due to legal obligations.
The user has the right at any time to request, free of charge and verbally or in writing, information about the origin of their personal data and about the nature and scope of the storage and use of these data. The app user may request the rectification and – if the storage is not permitted – the erasure of their data.
Please note that the right to erasure may be restricted by statutory retention obligations that we are required to observe. In addition, courts, law enforcement authorities or other authorities designated by law may retrieve data or request information on a legal basis.
For requests for access, rectification or erasure, the user can contact us, stating their name, e-mail address and username.
Many data processing operations are only possible with your express consent. You can withdraw any consent you have already given at any time. The withdrawal does not affect the lawfulness of the data processing carried out before the withdrawal.
Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21(1) GDPR). Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Personal data are deleted once we no longer need them, unless we are required to retain them due to legal obligations. Within the scope of the applicable statutory provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, their origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of these data.
Please note that the right to erasure may be restricted by statutory retention obligations that we are required to observe. In addition, courts, law enforcement authorities or other authorities designated by law may retrieve data or request information on a legal basis. For requests for access, rectification or erasure, the user can contact us, stating their name, e-mail address and username.
You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time. The right to restriction of processing applies in the following cases: