Privacy Policy for the use of the app

This Privacy Statement is provided in English for your convenience. Please note that in case of a dispute or discrepancy between the German Data Privacy Statement and the English translation, the German version shall prevail.

As of: April 09, 2026

1. Data Controller (hereinafter: "we")

PlaceAlive GmbH
Igelgrund 6
30419 Hanover

represented by the managing director:
Mr. Maximilian Schubert, contact details as above

Contact:

Phone: +49 175 94 95 288
Email: info@placealive.com

Further details about us can be found in our legal notice.

2. Personal data, purposes of processing, and legal basis

You can generally use our app without having to provide any personal data. The provision of personal data is voluntary.

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is considered identifiable if they can be identified, directly or indirectly, inparticular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The purpose of data processing is to operate this app with information about our range of services and contact options.

Personal data is only collected on our website if this is necessary

  • for the use of the app (legal basis: Art. 6 para. 1 sentence 1 lit. a) and/or Art. 6 para. 1 sentence 1 lit. b) of the General Data Protection Regulation (GDPR),
  • to protect our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6 para. 1 sentence 1 lit. f) GDPR),
  • for the use of the services offered in the app and for pre-contractual measures, in particular for form entries (legal basis: Art. 6 para. 1 sentence 1 lit. a) and/or Art. 6 para. 1 sentence 1 lit. b) GDPR) or
  • for the conclusionand performance of a contract (legal basis: Art. 6 (1) (a) and (b) GDPR).

Further details on data processing can be found below under the relevant headings:

3. Access data/server log files

The app automatically stores server log files. The information includes:

  • IP address (pseudonymized)
  • Device ID (this is created once for each user when they register to use the app via their smartphone)
  • Time of registration in the app
  • Time of access to content in the app
  • Statuses, whether permissions have been granted for using the camera, querying the location, and sending notifications in the app
  • The operating system of the end device
  • The time zone set on the end device
  • The language set on the end device

This data is not merged with other data sources. The information is used in accordance with Art. 6 para. 1 sentence 1 lit. f ) GDPR exclusively for the analysis and maintenance of the technical operation of the servers and the network.

4. Contact via email/contact form

If you send us inquiries by email or contact form, your details there, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR. We will never pass on this data without your consent.

5. Registration/customer account

You need a customer account to use some app services, such as community features. The information required for this (mandatory information) will be provided during the registration process. This information is required so that we can set up your customer account. Data processing is based on the requirement to perform the contract in accordance with Art. 6 (1) (b) GDPR.

6. Collection of location data

In order to be able to show you, as a user of PlaceAlive, location-based offers from places in your vicinity, we collect information about your current location when you use our app. The location is determined via the location sharing function of your device and is used exclusively for the purpose of providing you with relevant content (e.g., offers and events) in your vicinity and, if you use our community features, to display you as a visitor to locations with your user profile in the app.

Location data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. We have a legitimate interest in providing our services in the most and targeted manner possible. If consent has been requested, the collection and processing of data is carried out exclusively on the basis of Art. 6 para. 1 sentence 1 lit. a) GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at anytime.

7. Recipients of personal data

Notwithstanding the above paragraphs, personal data will only be disclosed to the following categories of recipients:  

To our employees and to the host of our app. The host is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement (DPA) with our host. Google processes personal data (e.g., IP addresses, access data) for the purpose of providing hosting services. It cannot be ruled out that the data may also be transferred to Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google LLC is certified under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection regulations.

Furthermore, your personal data will not be passed onto third parties without your express consent, unless we are legally obliged to do so in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR or the data transfer is absolutely necessary for the performance of a contractual relationship in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) maybe subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

8. Duration of storage

We delete your personal data immediately after the purpose for which it was collected has been fulfilled. We store your data from your emails until your request has been fully processed and completed. After that, the information is usually deleted. Location data of end users is not stored.

In addition, we review on an annual basis whether the data stored about you can be deleted.

Session cookies are automatically deleted by us after your visit to the app. Access data and server log files are deleted after one week.

Please note that certain data is subject to commercial and tax law retention obligations of at least six (§ 257 HGB) or ten (§ 147 AO) years.

9. Rights of data subjects

You are not legally obliged to provide your personal data. However, the provision of such data may be necessary for the conclusion of a contract or for functions of the app. If you do not provide this data, a contract or a function in the app may not be offered.

There is no automated decision-making in the app, and no profiling takes place.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the GDPR and from Sections 32 to 37 of the new Federal Data Protection Act (BDSG).

With regard to your personal data, you have the following rights vis-à-vis us

  • Information, Art. 15 GDPR
  • Correction, Art. 16 GDPR
  • Deletion, Art. 17 GDPR
  • Restriction of processing, Art. 18 GDPR
  • Portability, Art. 20 GDPR.

If you have given your consent to the processing of personal data, you have the right to

  • Withdrawal, Art. 7 GDPR – with effect for the future.

You also have the right to

  • object to the processing of personal data, Art.21 GDPR

1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (1) (f) GDPR (data processing based on a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

2. In individual cases, we process personal data for direct marketing purposes. If this applies to you, you have the right to object at any time to the processing of data concerning you for such marketing purposes.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should be addressed to us as specified above under 1.

If you believe that the processing of your personal data violates data protection law, you always have the

  • right to lodge a complaint

to the competent supervisory authority, see Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge acomplaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, churches, in Europe and other countries, as well as the Virtual Data Protection Office can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover.