This privacy policy has been drawn up in accordance with EU Regulation No. 679/2016 (General Data Protection Regulation), hereinafter referred to as "GDPR" or "Regulation" for convenience, showing you how your data is processed at loc.all. The data provided will be processed in accordance with the aforementioned Regulation and treated with the necessary confidentiality.
1. Data Controller
2. Purpose of data processing
3. Nature of data processed
4. Special categories of personal data
5. Information collected, when you use our service
6. Categories of affected persons
7. Relevant legal bases
8. Data processing by the notified municipalities
9. Security measures
10. Your rights
11. Right of withdrawal
12. Right to object
13. Deletion of data
14. Minors
15. Privacy Policies changes
16. Cookies
17. Contact details
1. Data Controller
The data controller pursuant to Art. 37 GDPR in connection with the Loc.all app is the company Trojer Rosa Maria with registered office in 39040 Cortaccia (BZ), Maria Hilf 14/A. For information in connection with the processing of personal data, write to the e-mail address lokalvernetzt@gmail.com.
2. Purpose of data processing
The Loc.all app helps citizens and communities (towns) to connect with each other in an uncomplicated way and thus to work together in the spirit of sustainability. This is done by providing a community noticeboard for communicating actions, surveys, etc., a help portal for offering services and other things, and a marketplace for the sale of second-hand products between private individuals.
Users can communicate with each other through an in-app chat and tell the others how they would like to be contacted.
To ensure this, it is necessary for us to process personal data that you provide to us when you create your user account.
In addition, this enables us to provide the contractual services (terms of use), as well as to comply with security measures and to respond to contact requests, as well as to communicate with users.
First and foremost, we use your data to create and manage your account and to be able to contact you in this regard if necessary. In addition, this enables users to display their name, surname and, if available, their profile picture when communicating with each other.
By viewing the profiles, you can interact with other users on the above-mentioned platforms, offer products or services yourself, as well as make use of those offered by third parties.
We also use the data to improve our services and add new developments.
3. Nature of data processed
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or a specific characteristic which reflects the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
When you visit our app, inventory data (name, surname, tax number), contact data (e-mail, telephone number), content data (photographs, video, text), contract data (subject matter of contract), usage data (interest in content, resulted conclusions, minutes of the chats), and meta/communication data (IP addresses) are recorded.
When using our service, you provide us with certain data as follows:
- When creating an account, you enter at least your first and last name, your tax number, your e-mail address, and your location (municipality), as well as optionally your telephone number and a profile picture. The first name and surname as well as the contact option (in-app chat, e-mail and/or telephone) to be defined in the post itself are bindingly visible to other users.
- In order to be able to add certain content such as photos and/or videos, you allow us to access to your camera and photo album. This may also involve providing specific data as described in point 4. By choosing to provide the information, you consent to the processing of the data by us.
- If you contact our customer service, we collect the data you provide during the interactions. These interactions may also be saved to provide our services in the best possible way.
4. Special categories of personal data
If you use our service and voluntarily provide us with your personal data, you may transfer data that fall into the special categories of personal data as defined in Article 9 of the GDPR, namely "[...] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, [...] genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation". We ask you not to publish this data. In addition, we would like to point out that the data controller cannot be held responsible for the data processing in case of publication, as the processing in this case can be carried out based on Art. 9, para. 2 e), as the person has made the personal data public.
5. Information collected when you use our service
- Application information: We collect information about your activities on our service (e.g. date and time of use, features used, etc.) and interaction with other users (e.g. users you contact, etc.)
- Device information: As hardware and software information, we store the device ID and the device type.
- Other information with your consent: If you allow us to, we may collect your exact geolocation depending on the services and devices you use. We may also collect published videos and photos.
6. Categories of affected persons
Visitors and users of our app, natural and legal persons, as well as public institutions (municipalities) are affected by the processing of data.
7. Relevant legal bases
The legal basis for our data processing is communicated in accordance with Art. 13 of the GDPR, whereby these result from Art. 6, Para. 1, lit. a)- for obtaining consent, lit. b)- for processing for the fulfilment of our services and implementation of contractual measures as well as answering questions, lit. c)- for processing for the fulfilment of legal obligations, lit. d)- if vital interests of the data subject or another person make the processing of the personal data necessary and lit. f)- for the protection of our legitimate interests, of the Regulation.
In particular, the following legal bases are of special importance:
- Service delivery: To ensure the services of the App loc.all, and to be able to maintain your account, as well as your profile and make it visible to others, processing of your data is unavoidable.
- Legitimate interests: We are permitted to process your data wherever we have a legitimate interest to do so, for example for the continuous improvement of our service.
- Consent: We may, if necessary, ask you from time to time to give us consent to process your data. You can withdraw your consent at any time by writing to the address shown at the end of this Privacy Policy.
8. Data processing by the notified municipalities
The municipalities present in the network have the possibility to retrieve the user data (first name, last name, e-mail address, if indicated the telephone number, role, tax number, registration date, if indicated the profile picture, as well as any messages in the reporting system).
In this regard, reference is also made to the data protection regulations of the respective municipality on its intranet page.
A QR code is also integrated into the user's profile picture, which can be read by event organisers, for example.
By accepting these data protection provisions, the user expressly agrees to the processing of his/her data as described above.
9. Security measures
In accordance with the requirements of Article 32 of the GDPR, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
This includes, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input of, transfer of, and ensuring the availability of the data and its separation.
Furthermore, we already take the protection of personal data into account in the development and selection of hardware, software and procedures that comply with the principle of data protection through technology design and through data protection-friendly default settings according to Article 25 of the GDPR.
10. Your rights
Pursuant to Art. 15 et seq. of the Regulation, you have the right to ask the controller at any time for access to your personal data, to request it to be rectified, completed, erased or to oppose the processing. You have the right to request the restrictions on processing in the cases provided for in Art. 18 of the Regulation, as well as to receive the data concerning you in a structured, commonly used and machine-readable format in the cases provided for in Art. 20 of the Regulation.
Any request must be made in writing to the data controller at the following address: lokalvernetzt@gmail.com
You have the right to submit a complaint with the competent supervisory authority (personal data protection guarantor) in accordance with Art. 77 of the Regulation if you consider that the processing of your personal data infringes applicable law.
11. Right of withdrawal
You have the right to revoke given consent in accordance with Art. 7, Para. 3 GDPR with effect for the future.
12. Right to object
You may object to the future processing of data relating to you in accordance with Article 21 of the Regulation at any time. The objection can be made in particular against processing for direct marketing purposes.
13. Deletion of data
The data we process will be deleted or its processing restricted in accordance with articles 17 and 18 of the Regulation.
For this purpose, we will retain your personal information only for as long as we need it for legitimate business purposes and as permitted by applicable law, and for the reasons set out in art. 17, para. 3, letters a-e of the Regulation.
Unless the data is deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
It is the responsibility of the users to save their data when their account is deleted. We are entitled to irretrievably delete all user data saved during the term of the contract.
14. Minors
Loc.all can be used by underage users who are at least 16 years old (EU countries except Italy) or 14 years old (Italy). In this case, parents are liable for their children. They are also advised to take the necessary measures to protect the personal data of their children.
15. Privacy Policies Changes
To ensure development in the legal and social area with regard to data protection regulations, there may be changes to this data protection policy in the future. In the event of any material changes, we will inform you in advance, so that you can review them.
16. Cookies
Cookies are small files that are saved on the user's device. Various data is stored within the cookies. A cookie is primarily used to save a user's details during (“temporary cookies”) or after (“permanent cookies”) the use of the online offer. In the case of a permanent cookie, the interests of the user can be saved and used for marketing purposes. “Third-party cookies" are cookies that are offered by providers other than the person responsible for the online service or app. Otherwise, they are first-party cookies.
To ensure complete and trouble-free use of this website, you should set your browser to accept these cookies. The cookies do not pose any risk to your computer, tablet or smartphone. The cookies generated by the loc.all app do not contain any personal data that can be used to identify the user, only encrypted data.
17. Contact informations
All objections, complaints, notifications, etc. in connection with this privacy policy can be sent to the following address:
Rosa Maria Trojer, via Maria Hilf 14/A, 39040 Cortaccia, South Tyrol
E-Mail: lokalvernetzt@gmail.com
Part. IVA: IT03151970211
.png)