General information

The application "Kitchen Stories" (hereinafter "App") and the “Kitchen Stories” Web Services (hereinafter “Services”) is provided by AJNS New Media GmbH, Storkower Str. 115, 10407 Berlin (hereinafter "We" or "Us"). Every time this App and/or Services are used, data about your mobile end device are automatically collected, processed, and used. Protection of your privacy when you use the App and/or Services is important to us. Therefore, we would like to inform you below which of your personal data will be collected when you use the App and/or Services and how these data are handled.

You can view this Data Privacy Declaration at any time on our website at https://www.kitchenstories.com/en/privacy

This website uses SSL or TLS encryption for security reasons during the transmission of your personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

Your personal data will only be transmitted encrypted. In order to protect your personal data from unauthorized access, modification or distribution of data by unauthorized persons, we have also taken technical and organizational security measures according to the state of the art. We regularly review these security measures and, if necessary, adapt them to technological progress.

Logfiles

We process so-called access data (in particular your IP address) for statistical evaluations for the purpose of the operation, security and technical optimizations on our website. This enables us to present our content more effectively, and to detect potential errors. We collect access data when you call up our website and save it in a log file (so-called log file):

• the operating system
• the amount of data sent to us
• the amount of data transmitted

• Date and time of access to the app

  We can not identify you based on those informations. Log data is regularly deleted (after 90 days at the latest). The legal basis for this data processing can be found in our legitimate interest, within the meaning of Art. 6 para. 1 lit. f) GDPR.

Application improvement

3.1 Crashlytics (Firebase)

In order to understand technical problems related to our mobile apps, we use Crashlytics. Crashlytics is an analytics service provided by Google, Inc. Crashlytics collects technical information about your device (such as operating system and model) and gives us immediate insight into which versions of our apps are being used. You can find more information in Crashlytics' terms of use: https://firebase.google.com/terms/crashlytics

Crashlytics provides us with detailed technical information about crashes and other errors in our app. No personal data is transmitted. Only real-time crash reports are sent with exact details about code-fragments and device information, which should simplify maintenance and improve the resulting stability of the app. The legal basis for this data processing is your consent given to us (Art. 6 para. 1 lit. a) GDPR).

For more information, please refer to the Crashlytics data processing and security terms: https://firebase.google.com/terms/crashlytics-app-distribution-data-processing-terms/

3.2 Firebase

To enable an analysis of our Android app, e.g. for performance monitoring and error logs, we use the service provider Firebase. Firebase is a Google subsidiary and is based in San Francisco (CA), USA. The purpose of using Firebase is to detect technical crashes and other errors in our app and to reduce the error rate. For this purpose, the user data is transferred to Firebase in an anonymous form.

The legal basis for this data processing is your consent given to us (Art. 6 para. 1 lit. a) GDPR).

Google is certified according to the EU-U.S. Privacy Shield and guarantees an adequate level of data protection in terms of the GDPR: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can find the corresponding data protection declaration at https://policies.google.com/privacy?hl=de

3.3 Sentry

We use the Sentry service of Functional Software Inc. 132 Hawthorne Street, San Francisco, California 94107 to improve the technical stability of our service by monitoring system stability and detecting code errors. Sentry serves these purposes alone and does not evaluate data for promotional purposes. User data, such as information about the device or time of error, is collected anonymously and is not used in a personalized manner.

The legal basis for this data processing is your consent given to us (Art. 6 para. 1 lit. a) GDPR).

Functional Software Inc is certified according to the EU-U.S. Privacy Shield and guarantees an adequate level of data protection in the sense of the GDPR: https://www.privacyshield.gov/participant?id=a2zt0000000TNDzAAO&status=Active

You can find the corresponding data protection declaration at: https://policies.google.com/privacy?hl=de

Registration

You have to register in order to use all the benefits of the App and/or the Service. To do so, you have to set up a user account with us and use it to log in. For this purpose, you have to enter your user name and e-mail address, as well as a password. These data are needed to set up a user account for you and to manage it, and also so that you can use the full version of the Application. We need these and potentially other data also to be able to respond to your wishes, questions, and complaints as well as to send you, after registration via email basic user account functions, our offers, and new content.

4.1 Facebook-Connect

Alternatively you can log in using your Facebook account. Your Facebook user account will then be linked to a new record in our user database. If you log in using Facebook Connect, we receive information about the basic user data saved in your Facebook user account. These are data that are publicly visible in the social network www.facebook.com. We only use your e-mail address, user name, and profile picture to set up a user account for you. In the settings of our applications you can delete your profile picture again which has been imported from Facebook. In addition to this, you can configure within your Facebook settings, which data shall be transferred to us.

In the case of Facebook Connect, data could be transferred from our services to your Facebook profile as well. The transferred data are stored and processed by us for registration on our service. If you register using Facebook Connect, you agree to the transfer of the basic user data in your Facebook profile to us and, vice versa, the transfer of data for use from the App to Facebook.

For more information about Facebook Connect and its privacy settings, please have look at its data privacy declaration https://www.facebook.com/privacy/explanation as well as its terms of service https://www.facebook.com/policies.

4.2 Google Sign-in

In our Android application and on our website you also have the possibility to sign in via your Google account. Doing so will link your Google account to a new record in our user database.

If you log in using Google Sign-In, we receive information about the basic user data saved in your Google user account. We only use your e-mail address, user name, and profile picture to set up a user account for you. In the settings of our applications you can delete your profile picture again which has been imported from Google. In addition to this, you can configure within your Google account settings, which data shall be transferred to us.

In the case of Google Sign-In, data could be transferred from our services to your Google profile as well. The transferred data are stored and processed by us for registration on our service. If you register using Google Sign-In, you agree to the transfer of the basic user data in your Google profile to us and, vice versa, the transfer of data for from us to Google.

For more information about Google Sign-In and its privacy settings, please have look at its data privacy declaration https://policies.google.com/privacy?hl=en-GB as well as its terms of service https://policies.google.com/terms?hl=en-GB.

4.3 Personalizing your profile

In addition, the App gives you the option to personalize your profile. You can set information such a user name and a profile picture. The usage of a profile picture is optional and not needed to register for our services.

4.4 Interaktive Bereiche

The App has interactive areas where you publish pictures and comments. If you publish such information, you have to be aware that these areas are accessible by all users of our services. Your profile picture and user name will also be always be shown next to your submitted content. We cannot control how other users of the App use this information.

The content provided in the interactive areas could be saved for an unlimited time. If you would like to remove this content at any time, send us an e-mail to [email protected].

4.5 Authorizations to access functions and data when using the services

Rights of access to functions and data on the mobile device In order for you to be able to use all the functions of the App, the Services, and the community you may have to grant the App the rights of access to the functions and data of your mobile device. In detail, access to the camera and the gallery is needed to upload profile pictures and pictures of dishes.

Even if your device does not give you the option of actively setting or rejecting these rights, you can prevent the access to some data by not using the corresponding functions of the App. We will use the granted rights exclusively for the purposes specified above, even if a granted right (e.g. for technical reasons) theoretically opens up other possibilities of use.

You can revoke a granted right at any time in the settings of your device (but this depends on your device and operating system, which we have no control over). Naturally, it is up to you to decide which data you would like to provide to us. In addition, we are bound by the principles of data minimization. If you do not provide certain information to us, this may result in that you are unable to use the full App and Services.

Cookies

We use so-called "cookies" on our website, wich are small text files used to simplify and accelerate the control of your visit, or might be necessary to enable you to use and access the secure areas of our website.

Depending on where a cookie comes from, so-called first-party cookies and third-party cookies can be distinguished:

Depending on the duration of the cookies, a distinction can be made between short-time and persistent cookies:

Depending on their nature and purpose, the use of certain cookies may require the user's consent. Therefore, cookies can be differentiated as to whether the user's consent is mandatory for their use:

As far as a consent of the user is necessary, we use these cookies only if you have given your consent in advance. When you call up our website, we display a so-called "cookie banner" in which you can give your consent to the use of cookies on the website by clicking a button.

Unconditionally required cookies cannot be deactivated via the cookie banner of this website. However, you can manage and deactivate these cookies in your browser at any time.

This site uses different types of cookies:

Technically necessary cookies

These cookies are set automatically when the website or a specific function is called up, unless you have prevented cookies from being set using the settings in your browser.

We process the data collected through the use of these cookies on the basis of Article 6 paragraph 1 letter f) of the GDPR. Any additional cookies which are not absolutely necessary for the actual functions of the website and which may link or share data with other services require your informed consent.

Statistical cookies

These cookies enable website operators to track how visitors interact with websites by bundling and reporting data anonymously

Marketing-cookies

Cookies that are used to follow visitors to websites. The idea is to display ads that are important and appealing to the individual user and therefore more important to publishers and third party advertisers.

Not classified

Unclassified cookies are cookies that we are currently trying to classify, along with providers of individual cookies.

Statistical analysis - Tracking

We use tracking technologies on our website to measure, evaluate and optimise our content. We can also identify security risks in order to protect our users and partners from fraud. The legal basis for this data processing is the consent you have given us (Art. 6 para. 1 lit. a) GDPR). For this purpose we use the following products, which are made available to us via external service providers:

6.1 Amplitude

We use Amplitude, an analysis service provided by Amplitude Inc, 501 2nd Street, Suite 100 San Francisco, CA 94107, USA, to better understand and optimize the behavior of our services.

Amplitude collects technical information such as the type of device (e.g. iPhone 6), the operating system used (e.g. iOS 8.4), the name of the provider (e.g. Vodafone), as well as events that occur in the app, for example the use of individual functions such as our cookbook, the calling up of recipes, or the usage time.

Amplitude enables us to analyse the usage of the app by its users. The information generated by Amplitude is transmitted to a server of Amplitude Inc. in the USA and stored there. Amplitude Inc. is certified under the US-EU Privacy Shield Agreement. For more information about Amplitude's data processing, please visit https://amplitude.com/privacy.

The storage of cookies is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent under the following link:

6.2 Facebook Analytics

We use Facebook Analytics, this is an offer from Facebook Ireland Ltd ("Facebook"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In addition to technical information about your device, Facebook Analytics primarily collects information that is generated in the course of your use of Facebook. This concerns your own activities as well as those of people in your network. Facebook Analytics provides us with this data in aggregated form, enabling us to draw conclusions about the demographic characteristics of our users (such as age, gender and place of residence).

The storage of cookies is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent under the following link:

You can find more information on data processing by Facebook here: https://www.facebook.com/privacy/explanation.

Information about how to contact Facebook, how to set up advertisements and the data use policy is available at http://de-de.facebook.com/about/privacy.

6.3 Facebook Lookalike Audiences

As part of usage-based or targeted online advertising, the product Facebook Lookalike Audiences (Facebook Inc. 1601 WILLOW ROAD MENLO PARK, CA 94025, USA) is also used on the website.

By using Facebook Lookalike Audience, the existing customer base can be expanded and the target group extended to all Facebook users who have similar characteristics to the user. The data will be processed in the USA. Facebook Inc. will be certified according to the EU-US Privacy Shield regulation. A Facebook cookie is also set by Facebook Lookalike Audience. We use Facebook Pixel to collect information about your activities on the website and behavioral data.

As a legal basis for processing, we refer to the consent you have given us for the use and disclosure of data to Facebook, according to Art. 6 para. 1 sentence 1 lit. a GDPR.

Further information about the purpose and scope of data collection, further processing and use of the data, and privacy settings can be found in the Facebook privacy policy.

6.4 Google Analytics

We use Google Analytics, a web analysis service by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4 Ireland ("Google").

The protection of your data is important to us, therefore we have configured it to use the configuration parameter "anonymizeIp".https://support.google.com/analytics/answer/2763052 to shorten your IP address and process your personal usage data anonymously. All other data will only be processed pseudonymised. It is not possible for us to draw any conclusions about your identity.

Your data will furthermore be processed pseudonymously, as explained below. It is not possible for us to draw conclusions about your person. Google will use this information to evaluate your use of our online offer, to compile reports on the activities within this offer and to provide us with further services associated with this online offer and internet use. The processed data can be used to create pseudonymous user profiles of the users.

The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by adjusting their browser software accordingly; or prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

The information generated by the cookie about your use of the website is usually transferred and stored to a Google server in the USA. Google is certified under the Privacy Shield Agreement and thus offers guarantees complying with the European data protection laws: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The storage of cookies is based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time using the following link:

Further information on the use of your data and objection options can be found in Google‘s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated)

Further information on the terms of use of Google Analytics and the data protection regulations can be found at: http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/

6.5 Google AdSense

We use Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google AdSense uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons information such as visitor traffic on these pages can be evaluated. This allows us to display individualized advertising.

The information generated by cookies and web beacons about the use of this website (including your IP address) and the delivery of advertising formats is transferred to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

The storage of cookies is based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent under the following link:

Further information on data use by Google, setting and objection options, you can find out in the privacy policy of Google (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).

6.6 Google Ad Manager

We use the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This technology enables us to reach users who have already visited our website by targeted advertising on the pages of the Google Partner Network. The display of the advertising is achieved through the use of cookies. Cookies can be used to analyze user behavior when visiting the website, targeted product recommendations, and interest-based advertising. These cookies are not used for personal identification and lose their validity after 30 days.

The legal basis for the use of the service is Art. 6 I f GDPR - legitimate interest. Our legitimate interest in the use of this service is to optimize the operation of our website and to increase your user experience and the general increase in sales of our service. Google is EU-US Privacy Shield, as well as Swiss-US Privacy Shield certified, which protects data transfer outside the European Economic Area.

You can find further information on Google's privacy policy at: https://www.google.de/policies/privacy/

If you want to stop this tracking, you can use the following link: https://adssettings.google.com/authenticated#display_optout

We use present on social medias in order to communicate with our users and to provide informations about our services. By visiting our site, however, no direct connection is made between your browser and the servers of the respective social networks. The data will only be forwarded if you have choosen and agreed to the data transfer within the privacy settings. An automatic transmission of user data to the operators of these platforms does not take place.

For a detailed informations on the respective forms of processing and the possibilities of objection, we refer to the data protection declarations and information of the operators of the respective networks.

7.1 LinkedIn

We use the "share function" of the LinkedIn network (provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). By clicking on the LinkedIn "button", you will be redirected to your user account in a separate browser window - provided you are logged in to xing in your user account. The plug-in establishes a direct connection between your browser and the LinkedIn server. LinkedIn thereby receives information on your visit and your IP address. LinkedIn might track your visit to our website and link it to your account. We have no knowledge of the content of the (personal) data transmitted or used by LinkedIn. For more information, please see the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy.

7.2 Xing

We use the "share function" of the network Xing (provided by Xing AG, Dammtorstraße 29-32, 20354 Hamburg, Germany). By clicking on the Xing "button", you will be redirected to your user account in a separate browser window, provided you are logged in to your user account at xing. The plug-in establishes a direct connection between your browser and the Xing server, sending information on your visit of our website and your IP address. We would like to point out that we have no knowledge of the content or use of the transmitted (personal) data by XING. For further information, please refer to the Xing privacy policy at: https://www.xing.com/app/share?op=data_protection.

7.3 Facebook (Fanpage)

We operate a so-called "fanpage" on Facebook (provided by from Facebook Ireland Ltd ("Facebook"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to provide information on topics relating to everyday work, employees and career opportunities at KitcheStories. We have agreed to the conditions for the commercial use of Facebook. When you visit our site, no Facebook data is initially requested for the display of Facebook teasers and no cookies are set.

The Facebook teasers are teasers with an image, text and external link to Facebook. This data is entered into the content management system in a separate automatic process (x times a day), so that no user interaction takes place at that moment. Your data can therefore not be stored by Facebook.

However, if you give your consent, Facebook uses a fan page cookie on your end device and collects so-called "insight data" about the use of our fan page:

• Information about your visit to our Facebook fan page (your IP address, last visited website, file name, URL)
• Information about your Facebook interactions regarding our content ("likes")

• If necessary, your comments will be saved, including a timestamp

  These cookies from Facebook each have a unique cookie ID. On the basis of the data processing carried out by Facebook, we receive anonymised statistical data of fan page visitors from Facebook in accordance with our joint responsibility as controllers pursuant to Art. 26 GDPR. At no time during your visit to our fanpage, the Insights function and the statistics provided by these will allow us to identify your person.

  The legal basis for the collection and processing of your personal data carried out by Facebook for us for the aforementioned statistical purposes is Art. 6 para. 1 sentence 1 lit. a) GDPR.

  When and in what form Facebook corrects, ports, saves or deletes your personal data is known only to Facebook. We have no influence on this. Since Facebook, as the provider of the fan page and the Facebook Insights Tool, carries out the surveys and evaluations of personal data required for our statistics, it also has the possibility to establish a personal reference using this data or transfer it to the USA. However, Facebook has submitted to the EU-US Privacy Shield.

  Further information can be found at https://www.privacyshield.gov/EU-US-Framework.

  7.4 YouTube

  We also use the video portal of YouTube LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter only referred to as "YouTube".

  YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter only referred to as "Google". Through certification under the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google, and thus its subsidiary YouTube, guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.

  We use YouTube in conjunction with the Advanced Privacy Mode feature to show you videos. The legal basis is Art. 6 para. 1 lit. a) GDPR.

  According to YouTube, the function "Extended Privacy Mode" has the effect that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.

  Without this "Extended Privacy Mode", a connection to the YouTube server in the USA is established when you visit one of our Internet pages on which a YouTube video is embedded. This connection is required in order to display the besaid video via your internet browser. YouTube will at least record and process your IP address, the date and time, and the website you visited in this process.

  For the purpose of functionality as well as for the analysis of usage behaviour, YouTube permanently stores cookies via your internet browser on your device. If you do not agree with this processing, you have the possibility to prevent its storage within your browser settings.

  You will find more informations above under "Cookies". Google provides further information about the collection and use of data as well as your rights and protection options at https://policies.google.com/privacy.

  7.5 Vimeo

  We use plugins from the video portal Vimeo, provided by Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. When you visit our website, a connection to the Vimeo servers is established.

  This page uses the two-click solution for this, ensuring a direct contact between Vimeos Servers in the US and our users only when you actually start a video. This tool prevents an automatical transfer of your data to this platform.

  Without this "two-click solution", a connection to Vimeo's server in the USA is established as soon as you visit one of our Internet sites where a Vimeo video is embedded. This connection is required to view the video on our site using your internet browser. In the course of this process, Vimeo will record and process at least your IP address, the date and time, and the internet page you visited.

  If you are logged in to your Vimeo account, you allow Vimeo to assign data on your visit directly to your personal profile. You can prevent this by logging out of your Vimeo account. For more information about how Vimeo handles user data, please see the Vimeo privacy policy at https://vimeo.com/privacy.

Newsletter

On our website you can subscribe to our newsletter to receive information. We will only process the information you provide voluntarily for the purpose of sending you the newsletter. Our legal basis for the processing is your consent according to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

8.1 Mailchimp

The newsletters are sent via "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The e-mail addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf.

Furthermore MailChimp may use this data according to its own information to optimize or improve its own services, e.g. for technical optimization of sending and presentation of the newsletters or for economic purposes to determine from which countries the recipients come.

However, MailChimp does not use the data to write to them itself or pass them on to third parties. We trust in the reliability and the IT and data security of MailChimp.

MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and is committed to comply with the EU data protection regulations: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG Furthermore, we have concluded a "data processing agreement" with MailChimp. This is a contract, in which MailChimp commits itself to protect the data of our users, to process it according to its data protection regulations on our behalf and especially not to pass it on to third parties. The privacy policy of MailChimp can be viewed here.

Further information about the handling of user data can be found in the privacy policy of Mailchimp at: https://mailchimp.com/legal/

Your rights as a data subject

With regard to the data processing listed here, you are entitled to various data subject rights which are regulated in the GDPR.

9.1 Right of access

First of all, you have the right to obtain information about the data that you have transmitted to us and that we have processed (Art. 15 GDPR).

9.2 Right of rectification, erasure and limitation

You can also request the correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction (Art. 18 GDPR) of your data.

9.3 Right to data portability and right to object

You also have a right to data portability (Art. 20 GDPR) and a right of objection (Art. 21 GDPR).

9.4 Right to lodge a compliant with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you also have the right to complain to a data protection supervisory authority. You may contact the data protection authority at your usual place of residence or our registered office. The address of the supervisory authority responsible for us is

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Telefon: 030 13889-0
E-Mail: [email protected]

Information about the controller / data protection officer

If you have any further questions, e.g. about data that we have stored about you, please do not hesitate to contact us

AJNS New Media GmbH
Storkower Str. 115
10407 Berlin
Phone:

AJNS New Media GmbH is the responsible party in terms of data protection regulations. Contact requests can be made via e-mail to [email protected].

Our data protection officer is Mr Ali Tschakari, LL.M. Bitkom Servicegesellschaft mbH, Albrechtstraße 10, 10117 Berlin. You can contact him directly via e-mail at [email protected].

Concluding provisions

AJNS New Media GmbH has the right to amend this Privacy Policy at any time to ensure its compliance with current legal requirements, or to implement changes to the services in the Privacy Policy, for example, when new services are introduced or changes are made to the website. The new Privacy Policy will then apply when you return to this website.