Privacy Policy
1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are using our application (hereinafter “app”). Below, we inform you about the handling of your personal data when using our app. Personal data is any information that can identify you personally.
1.2 Responsible for data processing in relation to this app under the General Data Protection Regulation (GDPR) is Jerome Landauer, Berliner Str 74 A, 13189 Berlin, Germany, Tel.: +49 1573 4105589, email: masteryourhabits@pandahabits.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Contact
When contacting us (e.g. via contact form or email), personal data is collected. The data collected via the contact form can be seen in the respective contact form in the app. This data is stored and used solely for the purpose of answering your request or contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed, provided that there are no legal storage obligations to the contrary.
3) Data processing for contract processing
3.1 For the processing of contracts concluded via the app, we collaborate with the following service providers who support us in part or entirely in the implementation of concluded contracts. Certain personal data will be passed on to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract, if necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution as part of the payment process, provided this is necessary for the payment process. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Article 6 (1) (b) GDPR.
3.2 – RevenueCat
In the case of in-app payments, payments are processed via RevenueCat Inc., 300 Euclid Avenue, San Francisco, CA 94118, USA. We pass on the information you provided during the ordering process, together with the details of your order. Your data is passed on in accordance with Article 6 (1) (b) GDPR exclusively for payment processing and only to the extent necessary for this. We have concluded a data processing agreement with RevenueCat Inc., obligating the provider to protect the data of app users and not to disclose it to third parties.
Further information on data protection by RevenueCat can be found here: RevenueCat Privacy Policy
Data transfer to third countries
Since RevenueCat Inc. is headquartered in the USA, personal data may be transferred to a third country outside the European Union. For the USA, there is currently no adequacy decision by the European Commission. The transfer therefore takes place on the basis of standard contractual clauses (SCCs) issued by the European Commission in accordance with Art. 46 (2) (c) GDPR, which ensure that your data is subject to an appropriate level of protection. A copy of these clauses can be requested directly from RevenueCat Inc. or from us.
4) Rights of the Data Subject
4.1 The applicable data protection law grants you comprehensive data subject rights (right to information and intervention) in relation to the person responsible for the processing of your personal data, as described below:
- Right to information according to Art. 15 GDPR
- Right to rectification according to Art. 16 GDPR
- Right to deletion according to Art. 17 GDPR
- Right to restriction of processing according to Art. 18 GDPR
- Right to information according to Art. 19 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to revoke granted consent according to Art. 7 Para. 3 GDPR
- Right to lodge a complaint pursuant to Art. 77 GDPR
4.2 Right to Object
If we process your personal data based on a balancing of interests, you have the right to object at any time to such processing for reasons arising from your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the involved data unless we can demonstrate compelling legitimate reasons for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right to object to the processing of your personal data for such purposes at any time.
5. Apple / Google
– Apple App Store / Google Play
If you make in-app purchases via our app, the payment process is carried out directly through the respective app store provider. For iOS devices, this is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. For Android devices, this is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We do not collect or store any payment information (such as credit card numbers) ourselves. Payment data is processed exclusively by the respective provider. The processing is carried out in accordance with Art. 6 (1) (b) GDPR for the fulfillment of a contract.
Further information on data protection can be found in the providers’ privacy policies: