Privacy Policy
Checkyn Mobile App

1 - About Checkyn

Checkyn transforms physical locations into digital communities. Using the mobile application, users can discover and checkin at location in order to connect and chat with other visitors. On the other hand, users can create own communities themselves in order to share them with friends and other users.

(Subsequently referred to as “Services” or “App”).

​

2 - Our contact

Social Quest GmbH

Schottenfeldgasse 85, 1070 Vienna, Austria

office@social.quest

Please direct any inquiries concerning data protection to support@social.quest
 

​

3 - Applicability of this Privacy Policy

This Privacy Policy applies to the processing of personal data (hereinafter also referred to as “data”) in the context of the use of the App and the provision of the Services. For data processing in the context of our website, please visit the Privacy Policy available there. Please also see our Terms of Service.

​

Our Service is aimed exclusively at persons who are at least 16 (sixteen) years old. Therefore, in principle, no data of persons under 16 (sixteen) years of age will be processed. If you suspect that data of persons under 16 years of age is being processed, please inform us.

​

4 - Data subject to processing

We process the following data from you: 

• Each time you use the App, we process certain automatically generated technical data (“Device Data“) to maintain the functionality of the App and to prevent and defend against targeted attacks. This includes, for example, software and hardware details as well as the IP address of your device, the time and duration of use. 
   

• Your username is processed to facilitate personal contact with other users. This data is collected as part of the registration process and used to create your profile.
  This data is visible to other users. 
   

• Your email address will be processed for registration or user identification during registration and then used to contact you. The e-mail address is collected during the registration process and is not visible to other users. 
   

• If you add a profile picture*, it will be used to present your profile and to facilitate personal contact with other users. This data is visible to other users. 
   

• You can create communities* on our Services, participate in other users’ communities and chats through our Services, write messages* and visit certain locations. We process which communities have been created by you, which you have checked in and messages you are writing/receiving to enable and organize these communities and chats, and so that you and other users can see who has participated in which communities, visited which places and wrote which messages. Your communities, chats and messages are visible to other users, who have also checked into communities you have checked in. This data can be used to make suggestions about people you may know or communities that may be of interest to you.
   

• If you allow access to the current location* of your device, this will be used to show community suggestions in your area. However, your location is only processed once each time you start the App and for location-based searches. No movement tracking profile will be generated.
   

• If you allow access to certain device data, such as file library and camera, photos* and videos* can be uploaded. Your shared photos and videos are visible to other users. You can manage access to these device data at any time in the settings of your device operating system. 
   

• If you want to receive notifications* from the App on your device, device tokens are created for your device and processed. These device tokens and the message content are transmitted to your respective operating system to enable these notifications.  

​

5 - Purpose and legal basis of processing

The data categories marked with “*” under Section 4. are voluntary information or data that is generated depending on your freely using the App and is generally not absolutely necessary for the general use of the App. All other data not marked with “*” is absolutely necessary, as we cannot provide our (basic) Services to you without it.
 

Absolutely necessary information will be processed to facilitate and to provide our Services and thus for the fulfillment of the contract with you pursuant to Art 6 (1) (b) GDPR. By accepting this Privacy Policy, you in addition expressly consent to the described data processing pursuant to Art 6 (1) (a) GDPR.
 

Voluntary information is processed for the purpose of providing the respective intended functions on the basis of your consent pursuant to Art 6 (1) (a) GDPR, which you grant by providing the respective data. You can revoke your consent at any time by sending an e-mail to support@social.quest with effect for the future. If data provided by you in addition to the absolutely necessary information is absolutely necessary for providing additional features, your data will also be processed to facilitate this feature and therefore for the fulfillment of the contract pursuant to Art 6 (1) (b) GDPR.
 

The processing of the Device Data is based on our legitimate interest pursuant to Art 6 (1) (f) GDPR, namely, to optimize and improve the App and the Services, to increase the usability, to provide useful information about the use of our Services as well as to ensure and increase the security and stability of the App and to be able to detect and track attacks and misuse.

​

6 -  Messages / Notifications

To notify you about communities and new messages within the App, we send you push notifications within the App when you enable this feature. You can set, manage, and disable subscription to these notifications at any time in your operating system settings. In case of disablement, you will no longer be able to receive notifications from us. 
 

If you check in at a community and earn an Reward, we process your email address to send you the respective Reward. By registering, you consent to the processing of your contact data for this purpose and to receive marketing communications. Your data will be processed until you withdraw your consent. 
 

If the legal requirements are met, we also process your contact data on the basis of our legitimate interest, namely, to stay in touch with you and maintain contact. In any case, you can refuse further mailings by sending an e-mail to support@social.quest. 
 

In order to fulfill the contract, we will also send you messages necessary for this purpose, such as confirming your registration or for resetting your password.

​

7 - Place of processing and general data recipients

We host your data within the European Union at Amazon Web Services (AWS) servers based in Frankfurt, Germany. This hosting service provider processes your data only in accordance with our instructions.

The data you provide within the App will be displayed to others as described in Section 4 of this agreement. This is carried as a necessary provision of our Services for the fulfillment of the contract pursuant to Art 6 (1) (b) GDPR and is based on your consent pursuant to Art 6 (1) (a) GDPR.
You can change or withdraw the data others can see within the App, by simply changing or deleting the respective data.
 

When participating in a community of an third-party organization, the data provided by you or further required by you will be transferred to the respective Organization for this purpose. This transfer is carried out for the fulfillment of thecontract pursuant to Art 6 (1) (b) GDPR and is based on your consent pursuant to Art 6 (1) (a) GDPR. We have no control over the further processing by the Organization; hence, please also consider the Organization’s conditions and statements regarding the processing of your data.

​

8 - Transfer to third countries general

We store your personal data only on servers within the European Union. Only if it is technically unavoidable, the data that is absolutely necessary for this purpose is transmitted to third countries. 
 

This applies, for instance, to the transfer of Device Tokens when sending notifications to your device, provided these are activated. When using an iOS device, such a Device Token is transferred to Apple or, when using an Android device, to Google. You can disable the notification and thus the transfer of the Device Token at any time in your operating system settings. This transfer is based on your consent pursuant to Art 6 (1) (a) GDPR. 
 

If we further transfer data to third parties (e.g., Organizations, Google), we oblige them to transfer personal data to third countries only if an adequate level of data protection is guaranteed there, standard contractual clauses have been concluded, binding internal data protection regulations exist or other adequate guarantees exist, or if you have consented to this transfer. 

​

9 - Privacy

We do not process your data for automated decision-making, including profiling in accordance with Art 22 (1) and (4) GDPR, which leads to decisions that have legal effects on you or significantly affect you in a similar way.
 

However, we use the data provided by you as well as location, usage, and activity data to provide contact and community suggestions. Depending on the voluntary information you provide, which can be edited at any time (see point 4.), no information or only certain information from you will be used to provide personalized suggestions.
 

You can set and disable location usage by the App via your operating system settings. In case of deactivation, location-based services or suggestions can no longer be provided by us.  
 

By specifying the individual settings or providing your information, you expressly consent to the respective processing and transfer and can withdraw or adjust this consent at any time with effect for the future by adapting these settings or deleting individual information.

​

10 - Storage period and account deletion

Generally, your data is stored for the existence of your account.
 

You can delete your account in its entirety at any time in the App settings. We consider the deletion of your account as a withdrawal of your consent to the entire data processing, as a cancellation of all communities created by you, and as a request for deletion pursuant to Art 17 GDPR. After notifying other participants of the cancellation of your communities/messages, your data will be deleted. Please note, however, that deletion may not be immediately possible for technical reasons, which is why we reserve the right to a reasonable period of time to delete the content. 
 

Even after deletion of the account, however, it may be necessary for us to continue to store certain data internally (not visible to other users), in particular if this is necessary due to legal obligations (such as accounting data in accordance with corporate and tax regulations) or an order of a court or an administrative authority, if this data must be stored further for the defense or assertion of legal claims, or if there is a legitimate interest of third parties or a legitimate interest on our part in their continued storage.

Such a legitimate interest of a third party is, for example, the further display of the chat history with you in the chat partner’s account or including your name in notifications to other users to indicate that you, by deleting your profile, have deleted one of the communities that they are also taking part in. This data will be deleted as soon as the respective reason for storage no longer exists.  

​

11 - Security

Social Quest always takes appropriate and state-of-the-art technical and organizational measures to protect your data in the best possible way. This currently includes, for example, the encryption of the password and the transmissions to our server as well as technically up-to-date measures against unauthorized access to our infrastructure.  

​

12 - Your rights

You have the right to access your stored personal data, information about their origin and recipients and the purpose of data processing at any time and, if the legal requirements are met, the right to rectification, data portability, restriction of processing and blocking or deletion of incorrect or inadmissibly processed data.  

You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future. 
 

You also have the right to object to the processing of your personal data on the basis of our legitimate interests if grounds for doing so arise from your particular situation. You may object to the processing of your data for direct marketing purposes at any time without giving reasons. 
 

To exercise your above-mentioned rights, please contact us by e-mail at support@social.quest or by postal mail at the address given under Section 2. However, you can also exercise some of your rights yourself quite simply, for example by making the appropriate settings as described above and by deleting individual details. 
 

If you are of the opinion that the processing of your personal data by us violates applicable law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the data protection authority. However, in order to avoid proceedings, we kindly ask you to contact us in advance in all cases. 

​

Version: 9th August 2022