Below you will find all the information about the processing of your personal data by Bulletpoint (hereinafter "Bulletpoint") and the rights to which you are entitled under data protection law.

What should you know in advance?

The protection of your personal data is very important to us. That is why we want to offer you comprehensive transparency regarding the processing of your data in the context of the app. The following information is intended to inform you about what we use your personal data for, what data is involved and what rights you have in relation to data processing.

Personal data within the meaning of Art. 4 No. 1 GDPR (hereinafter referred to as "data") is all information that at least indirectly allows the identification of a person or relates to an already identified person.

You can access this privacy policy at any time under the "Settings" menu item within the app.

Who is responsible for processing my data?

The controller within the meaning of the General Data Protection Regulation is

Linda Büscher

Walderseestraße 7

30163 Hanover

Hereinafter also referred to as "controller" or "we".

What personal data is collected and processed through my use?

We have listed exactly which personal data is processed for you below:

Information collected during download.

Informationen, die beim Download erhoben werden.When you download the app, certain required information is transmitted to the app store you have selected (e.g. Google Play or Apple App Store), in particular the user name, email address, the customer number of your account, the time of the download, payment information and the individual device identification number may be processed.

This data is processed exclusively by the respective app store and is beyond our control.

Use of the app

You can enter, manage and edit various information, tasks and activities in the app. This information includes, in particular, data about the texts that you upload and edit in the app. The texts and bullet points are stored in a database on your end device until you delete them.

Usage data is processed and used to provide the service. This data processing is justified by the fact that the processing is necessary for the performance of the contract between you as the data subject and us pursuant to Art. 6 para. 1 lit. b GDPR for the use of the app.

You can use our feedback form on the website to contact us with questions or comments. The data you provide will be processed (e-mail address, name and request). This data is processed for the purpose of responding to your feedback. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if consent has been given. The processing is also based on the legal basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, because we have a legitimate interest in clarifying your request and your questions.

Will my data be passed on to third parties?

Your personal data will only be passed on without your express prior consent in addition to the cases explicitly mentioned in this privacy policy if it is legally permissible or necessary.

If it is necessary to investigate unlawful or improper use of the app or for legal prosecution, personal data will be forwarded to law enforcement authorities or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or abusive behavior. Disclosure may also take place if this serves to enforce terms of use or other legal claims. We are also legally obliged to provide information to certain public authorities on request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines and the tax authorities.

Any disclosure of personal data is justified by the fact that (1) the processing is necessary to fulfill a legal obligation to which we are subject pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with. national legal requirements for the disclosure of data to law enforcement authorities, or (2) we have a legitimate interest in disclosing the data to the aforementioned third parties if there are indications of abusive behavior or to enforce our terms of use, other conditions or legal claims and your rights and interests in the protection of your personal data within the meaning of Art. 6 para. 1 lit. f GDPR do not prevail.

We do not rely on any third-party companies or external service providers to provide our services.

As part of the further development of our business, the structure of our company may change by changing its legal form or by founding, buying or selling subsidiaries, parts of the company or components. In such transactions, customer information may be passed on together with the part of the company to be transferred. Whenever personal data is passed on to third parties to the extent described above, we ensure that this is done in accordance with this data protection declaration and the applicable data protection law. Any disclosure of personal data is justified by the fact that we have a legitimate interest in

legitimate interest in adapting our corporate form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data within the meaning of Art. 6 para. 1 lit. f GDPR do not outweigh this.

How long do we store your data?

We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. Unless otherwise stated, we store your personal data for the duration of the usage or contractual relationship via the app plus a period of [7] days, during which we keep backup copies after deletion, unless this data is required for longer for criminal prosecution or to secure, assert or enforce legal claims.

Specific information in this privacy policy or legal requirements for the retention and deletion of personal data, in particular those that we must retain for tax law reasons, remain unaffected.

What rights do I have as a data subject?

Right to information

You have the right to request information from us at any time about the personal data processed by us concerning you within the scope of Art. 15 GDPR. You can submit a request by post or email to the address below.

Right to rectification of incorrect data

You have the right to demand that we correct your personal data immediately if it is incorrect. To do so, please contact us at the address below.

Right to erasure

You have the right to demand that we erase the personal data concerning you under the conditions described in Art. 17 GDPR. In particular, these conditions provide for a right to erasure if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject. To assert your right to erasure, please contact us at the address below.

Right to restriction of processing

You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period required to verify the accuracy and in the event that the user requests restricted processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer required for the purposes pursued by us, but the user requires it for the establishment, exercise or defense of legal claims and

purposes, but the user needs it for the establishment, exercise or defense of legal claims, and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restriction of processing, please contact us at the address below.

Right to data portability

You have the right to receive from us the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. To assert your right to data portability, please contact us at the address below. To assert your rights as a data subject, simply send an email to info@bulletpoint.app .

Can I withdraw my consent?

If your personal data is processed on the basis of consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you have the right to withdraw your consent at any time without giving reasons. As a result, we may no longer continue the data processing that was based on this consent in the future. However, the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

Can I object to the processing of my personal data?

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based, inter alia, on point (e) or (f) of Article 6(1) GDPR pursuant to Article 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.

Can I contact a supervisory authority if I have a complaint?

You also have the right to contact a supervisory authority if you have a complaint.

The competent authority is:

The State Commissioner for Data Protection of Lower Saxony

Prinzenstraße 5

30159 Hanover

Telephone: +49 (0511) 120 45 00

Fax: +49 (0511) 120 45 99

E-mail: poststelle@lfd.niedersachsen.de

When was the privacy policy last updated?

This privacy policy was last updated in October 2023.

Due to the further development of our app and offers or due to changed legal or official requirements, it may become necessary to change this privacy policy.

You can access the current privacy policy at any time within the Bulletpoint app under "Settings" or via our website under the

you can access this link.