Name and contact data of the data controller:

The person responsible for the website www.liteupmedia.com and the Liteup services within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states as well as other data protection regulations is:

Liteup Media UG

Address: Willy-Brandt-Straße 23, 20457 Hamburg, Germany

Email:  info@liteupmedia.com

Phone: +4915226205656

1. Introduction

Liteup Media UG (“Liteup” or “we”) collects personal data of its customers, users and visitors whilst providing its services. The Liteup service (hereinafter “Liteup”) connects video content creators with mobile apps developers for the marketing of apps and games.

To use Liteup, you are required to register by providing your Google account, real name or alias and your email address. Some functions and sub-services may require more information to be provided, but this will be clearly stated and you will be requested to provide the extra information before you can use these certain services and functions.

This Privacy Policy explains what data we process, how we do that and how you may use your rights as a data subject.

2. Information on data processing

We only process the personal data of our users as this is necessary to provide a functional website and the content and services of Liteup. The processing of the personal data of our users takes place only with the consent of the user or if the processing is permitted by legal regulations.

As we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation serves as the legal basis. When processing personal data that is required to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. When processing personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

3. Log data

Every time you use our Services, we automatically record log data created by your use of the Services. The following data may be collected: information about the browser type and version used, operating system, Internet service provider, IP address, the date and time of access, websites that are accessed, and other such information regarding how you interact with our Services.

The legal basis for the temporary storage of the data and the log files in the case of informational use is Art. 6 Paragraph 1 lit. f GDPR. As a (potential) user of Liteup, the legal basis may be Article 6 (1) (b) GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that they can no longer be assigned to the accessing client.

4. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages. Our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR lies in these purposes. The user data collected by technically necessary cookies are not used to create user profiles.

Cookies are stored on your computer and transmitted to our site from there. As a user, you therefore have full control over the use of cookies. You can see the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Browsers differ in the way they manage cookie settings. The help menu of your browser describes how you can change your cookie settings.

5. Registration

Users who want to use Liteup must register for this. As mandatory information for registration, we collect the email address and age as well as the full name and password of the user.

Users also have the option to register and log in to Liteup with their Google account. These so-called single sign-on procedures ("SSO procedures") allow you to register for various services without having to use your own login data. Instead, you log in via the account with the respective provider of the SSO procedure, e.g. Google. If users use the SSO procedure, their data will be processed by the respective provider. We will then receive the email address stored and the user only has to enter his age.

If the user makes use of the registration function, creates and uses the account, we process the user’s IP address and the time of the user action. The purpose of processing the IP address and the times of user actions is to protect against misuse and unauthorized use.

The legal basis for processing the mandatory registration information is Article 6 (1) (b) GDPR. The legal basis for storing the IP address and the times at which the user acts is Article 6 (1) (f) GDPR.

The mandatory information for the login is used for the purpose of providing the user account. The age must be indicated, since registration for the platform is only permitted for adults and, if necessary, measures to check the age or the consent according to Art. 8 Para. 2 GDPR may be required.

You may also ask us to delete your personal data from our systems. We will comply with such requests unless we have a legitimate ground to not delete the data. After the data has been deleted, we may not immediately be able to delete all residual copies from our active servers and backup systems.

The login data is stored for as long as the user account exists. If users have canceled their user account, their data will be deleted, subject to a statutory retention period. It is up to the users to save their data in the event of termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract. The user’s IP address is anonymized or deleted after seven days at the latest.

6. Use of Liteup services

In connection with the use of the Services, we process the data of Liteup users. Depending on the individual case, this applies to personal data (e.g. name, address etc.), login and contact data (e.g. email addresses, telephone numbers etc.) as well as contract data (e.g. completed campaigns, advertising space used, performance data, credit, transaction history, etc.) and payment data (such as the email address of the PayPal account, bank details, etc.). The specific data processed by us, their type and scope as well as the purpose and necessity of their processing are determined in each individual case according to the campaigns in which the respective user participates.

The legal basis for processing the data of our contractual partners is Article 6 (1) lit. b. GDPR.

This data is deleted when it is no longer required to fulfill our contractual or legal obligations. In any case, the statutory retention requirements apply.

We do not pass your data on to third parties unless this is necessary to process the contractual relationship. To process payments to the user, the required payment data will be passed on to the credit institution or payment service provider specified by the user.

7. Contacting us

All users can contact us via the email addresses given on our website. In this case, the user’s email address and the personal data transmitted by the user in the email will be processed by us. This data is not passed on to third parties.

In addition, all users can contact us via social media. We maintain appearances on the online services Twitter, Instagram and LinkedIn. If you contact us about this, the terms and conditions and data protection declarations of the respective providers apply. Further information on this can be found under Section 8. We also offer our registered users a live chat in their Liteup account, which they can use to ask us questions about our Services.

The legal basis for the processing of the data that is transmitted in the course of establishing contact and communication is Article 6 Paragraph 1 lit.f GDPR. If such contact is aimed at concluding a contract or if it takes place via the contact form for registered users, the additional legal basis for processing is Article 6 (1) (b) GDPR.

The processing of the relevant personal data serves us only to process the contact and to further communication in this regard. Our necessary legitimate interest in the processing of the data also lies in this processing. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

8. Newsletter

Users can subscribe to the free Liteup newsletter. When users subscribe to our newsletter, they agree to the receipt and the methods of our dispatch and evaluation described below. As part of the registration process, we refer to this data protection declaration.

When registering for the newsletter, the email address given by the user iis sent to us. In addition, the date and time of registration are collected. Via our newsletter, users receive information on current topics and events in the field of online marketing as well as on our services and offers.

The legal basis for processing the data relating to the registration of the user for the newsletter with his consent is Article 6 (1) (a) GDPR.

The logging of the registration process is based on our legitimate interests in accordance with Article 6 (1) (f) GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and also allows us to prove consent.

The collection of the user’s email address is used to deliver the newsletter. The collection of the date and time of registration is used to record the consent you have given and to prevent misuse of the services or the email address used.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user’s email address is therefore stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

Users can cancel the subscription to the newsletter at any time. There is a corresponding link in each of our newsletters for this purpose. At the same time, this enables the consent to the storage of the personal data collected during the registration process to be withdrawn. Users can also request the deletion of the data of their recorded consent at any time if you request this individually and confirm the previous existence of your consent.

9. Rights of data

Our users have the right:

• According to Art. 7 Para. 3 GDPR, to revoke their consent given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future;

• To request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;

• In accordance with Art. 16 GDPR, to immediately request the correction of incorrect personal data or the completion of your personal data stored by us;

• To request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims if required;

• To request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data;

• To receive your personal data that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 GDPR or to request that it is transmitted to another person responsible;

10. Data security

We put in place appropriate administrative, technical, and physical security controls to protect your personal information. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TLS) over HTTPS. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

11. Changes to the data protection declaration

We reserve the right to change this data protection declaration from time to time, especially if we develop our website and change our Services or if this becomes necessary due to legal changes or official requirements. Our users can always access the current data protection declaration on our website. If we make major changes in the way we collect or use information, we will notify you by posting an announcement on the Website or sending you an email.

October 1st, 2021.