Privacy policy

1. general information

1.1 Introduction

We are pleased that you are interested in how we, JF//digital GmbH, handle your data! Therefore, we explain below how we handle your data when you visit our website or use our chunkx apps. To group both apps and website together, we refer to them as chunkx services below. All chunkx services are the responsibility of the company JF//digital GmbH. Therefore, when we talk about we or us, we always mean the JF/digital as the operator.

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the legal data protection regulations as described/explained in this privacy policy.
When you use chunkx services, various personal information is collected. Personal data is data with which you can be identified, for example your name but also your telephone number or IP address. Our privacy policy explains what data we collect, what we use it for and for what purpose.

1.2 Who is responsible for data collection and processing?

JF//digital GmbH, located at Flinger Broich 18 in 40235 Düsseldorf, Germany, is responsible for data processing. You can find more information about this in the imprint. For questions about privacy, you can write to us at the following address: privacy@chunkx.net.

1.3 Revoking consent to data processing

Our data processing operations are only possible with your explicit consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal message by e-mail, preferably to privacy@chunkx.net.

The legality of the data processing carried out until the revocation remains unaffected by the revocation.

1.4 Right to complain to the competent supervisory authority

In the event of a data protection breach, you have the right to lodge a complaint with the competent supervisory authority if you believe that we are not processing your personal data in accordance with applicable data protection law. You can find a list of supervisory authorities and their contact details here.

1.5 Your rights

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data and a right to rectification, restriction of processing, deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time: privacy@chunkx.net.

1.6 Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you wish the data to be transferred directly to another controller, this will only be done insofar as it is technically feasible.

1.7 SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us, our chunkx services use an SSL or SSL protocol. TLS encryption. You can recognize our encrypted connection by the fact that the address line of the browser has “https://” in front and by the lock symbol in the browser line. If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.

1.8 Contradiction

You can object to the processing of your data by us in accordance with Art. 21 DSGVO at any time by sending an email to privacy@chunkx.net .

2. data processing of the chunkx services

2.1 What data is collected?

Our chunkx services collect information from you for the following purposes:

  1. Website
  • The provider of our website is 1&1 IONOS SE. So-called server log files are written when a visitor comes to our website or uses our chunkx services (see below). No personal data is stored so that no conclusions can be drawn about individual visitors. The data is collected for legitimate interest to ensure the security and stability of the offer and to provide the website visitors with the highest level of quality. In 1&1 WebAnalytics, data is collected exclusively for statistical evaluation and technical optimization of the web offering. No data will be passed on to third parties. The data is determined either by a pixel or by a log file. To protect personal data, WebAnalytics does not use cookies. The following data is collected:

– Referrer (previously visited website)
– Requested web page or file
– Browser type and version
– Operating system used
– Device type used
– Time of access
– IP address in anonymized form (used only to determine the location of access).

  • Google Analytics:
    For our website chunkx.net we use due to our legitimate interest to optimize and analyze our online offer in terms of Art. 6 para. 1 lit. f. DSGVO the service “Google Analytics”, which is provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The service (Google Analytics) uses “cookies”, which are text files that are stored on your device. The cookies collect information that is usually sent to a Google server in the USA and stored there.

    We use IP anonymization when collecting visitor data. The IP addresses of visitors are truncated within the member states of the EU and the European Economic Area and in the other states party to the Agreement. Only in individual cases is the IP address initially transmitted unabbreviated to a Google server in the USA and shortened there. This shortening eliminates the personal reference of the IP address. A user’s IP address transmitted by the browser is not combined with other data stored by Google.

    As part of the order data agreement, which we the JF//digital GmbH as website operator with Google Inc. The information collected is used to analyze website usage and activity and to provide services related to internet usage.

    The data collected by Google on our behalf is used to evaluate the use of our online offering by individual users, e.g. to create reports on website activity and to improve our online offering.

    How can you escape the storage of your data via Google Analytics?
    You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. Unfortunately, we can then only not guarantee that you can access all functions of our website without restrictions if your browser does not allow cookies.

    In addition, when you visit our site, a banner appears at the bottom that allows you to object or agree to the storage of cookies. If you object, your data will not be transferred to Google Inc. passed on. Please also see our Cookie Policy. Here you will also find a button below to revoke an already granted cookie consent.

    In addition, you can use a browser plugin to prevent the information collected by cookies (including the IP address) to Google Inc. and sent by Google Inc. be used. The following link will lead you to the plugin: https://tools.google.com/dlpage/gaoptout?hl=de

    Here you can find more information about data usage by Google Inc:

  • Adobe Fonts
    For our website chunkx.net we integrate fonts “Adobe Fonts” of the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. In the course of providing the Adobe Fonts service, Adobe does not place or use cookies on websites to provide its fonts.

Click here for more information about Adobe Systems Software Ireland Limited’s use of data:

https://www.adobe.com/de/privacy/policy.html

  • Google reCAPTCHA:

    On our website chunkx.net we use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is mainly used to distinguish whether an input is made by a real, natural person or abusively by bots or machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in establishing individual ownership on the Internet and preventing abuse and spam. In the context of the use of Google reCAPTCHA, personal data may be transmitted to the servers of Google LLC. come in the USA. More information about Google reCAPTCHA as well as Google’s privacy policy can be found here: https: //www.google.com/intl/de/policies/privacy/

  • YouTube:

    This website contains at least one plugin from YouTube, belonging to Google Inc. based in San Bruno/California, USA.
    We use the YouTube function No-Cookies, i.e. we have activated Enhanced Privacy, videos are not accessed via youtube.com, but via youtube-nocookie.com. YouTube provides this itself and thus ensures that YouTube does not initially store any cookies on your device. However, when the relevant pages are called up, the IP address, among other things, is transmitted.
    Once you start playback of an embedded video by clicking on it, YouTube’s enhanced privacy mode only stores cookies on your device that do not contain any personally identifiable information unless you are currently logged into a Google service. These cookies can be prevented by appropriate browser settings and extensions.
    Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – For more information on data protection at “YouTube”, please see the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
    Cookies
    This website uses the Youtube embedding function to display and play videos from Youtube. We use the extended data protection mode, which, according to the provider, only initiates the storage of user information when the video is played. At the moment when the playback of the embedded video is started, the Youtube uses cookies to collect information about the user behavior.
    According to information from Youtube, these are used, among other things, to collect video statistics, improve the user experience and prevent abusive behavior. Independently of a playback of the embedded videos, a connection to the Google network “DoubleClick” is established each time this website is called up, which may trigger further data processing operations without our influence.
    For more information on data protection at YouTube, please see the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

  1. chunkx services: chunkx app and chunkx creator

To use the chunkx app (iOS, Android and desktop.chunkx.de) and the chunkx creator (creator.chunkx.de), registration is required. The collection of your personal data is indispensable for the registration and for our fulfillment of our services. The following data is collected. The legal basis for the data processing mentioned here is Art. 6 para. 1 p. 1 lit. b GDPR.

  • Password
    The password is stored in encrypted form and will never be passed on or requested by employees of JF//digital GmbH or partner companies.
  • E-mail address
    Your email address is used for unique identification and as a contact channel between chunkx and you. Your e-mail address will be checked as part of a double opt-in. Only when the confirmation link is clicked, the process continues. Your email address is visible to admins and authors of the channels and academies whose offerings you use in chunkx.
  • Voluntary: Username / Nickname
    Your username or nickname is an imaginary name that you may choose yourself and that can only be assigned once in chunkx. This can be used by chunkx to publish information about rankings. It is also visible to admins and authors of the channels and academies whose offerings you use in chunkx.
    Users of the chunkx creator must assign a username, as this is the author name visible to other users.
  • First name
    The first name is recorded for correct and polite addressing, user identification, and for issuing learning certificates.
  • Last name
    The last name is recorded for correct and polite addressing as well as for user identification and for issuing learning certificates.
  • Work Environment:
    In order to provide recommendations for learning content that are as precise as possible, users are asked in which field they work.
  • Voluntary: Date of birth
    The terms of use of chunkx require an age of at least 16 years. The date of birth can be used to check the age on a random basis or as required. In addition, the date of birth is recorded for statistical evaluation of our user distribution.
When you register and use the chunkx app or chunkx creator, you will receive email notifications that support the user experience and provide you with important information. You can turn this off in the profile settings if you wish. To send you the notifications, we pass your email address plus the necessary information to be shared with you to our email delivery service, mailjet. The data we hand over is designed to be as minimal as possible. You can find more about mailjet below.
“Academies” or “academies” in chunkx:
chunkx offers learning opportunities from third parties not only as individual topic channels but also as so-called academies. Providers of an academy in chunkx have the option to collect additional personal data to the above in order to meet the specific needs of their target groups. For example, a sports provider might ask about the user’s sport while a vocational provider might ask about the user’s current occupation. Additional data collected from an academy is only collected in the form of a digital form when the user actively opts in to the offer. Users can cancel the process if they do not wish to answer the questions posed by the Academy. The entered data together with your e-mail address, your username and your first and last name are then visible for the admins of the academy.
JF//digital GmbH has no influence on the selection of questions. Complaints about potentially inappropriate questions may be directed to privacy@chunkx.net at any time.
Each Academy has the option and is encouraged to link to its respective privacy policy when completing the digital form.
  1. User evaluation in the chunkx app

In order for you to use the functionalities of chunkx, various data are collected, processed and stored:

  • Your subscribed channels
  • Your processed tasks
  • With what result you worked on them. Evaluation results can be summarized by chunkx in anonymous or pseudonymous form and processed and passed on for statistical purposes, quality improvements and marketing. We also use the data for research and development purposes to develop new products, services and offerings.
  • Only you have access to your personal evaluation. This does not necessarily apply if your chunkx user is associated with a company, club, or organization that provides continuing education in chunkx. In this case, it depends on the particular company, club or organization how much the authors of the channels and administrators of the particular company, club or organization can see.
    Please ask your respective company, academy, club or organization which of your profile and evaluation data can be viewed by them.
  • Learning goals are another feature where not only you have access to your personal evaluation. Learning objectives can be conditions of certificates issued by academies in chunkx or authors. For this, it is necessary to show them how advanced you are with the learning goal. In other words, as soon as a channel has a learning objective and you access the content, the author or admin of the channel and, if applicable, the academy will see how far along you are with the learning objective. But again, no other data of yours will be visible, e.g. how well or poorly you did on certain learning tasks.
  1. chunkx creator

To use the authoring tool for the chunkx app called “chunkx creator”, registration via the chunkx app or the chunkx creator is mandatory. To publish channels in chunkx, an author name and author description must be created and will be publicly visible.

Payment transactions and invoicing are carried out by connecting the services of Stripe (stripe.com). Users of the chunkx creator are stored in Stripe with the following data when they select a package: first and last name, address, email address, IP address, credit card number, sales, invoices. The data will be processed acc. § 14 b para. 1 sentence 1 UStG is stored for 10 years.

  1. Contact form

You can fill out contact forms on our website www.chunkx.net to reach us. Here your email address is the only mandatory field. But beyond that, you can give us more details as well as write an individual message with more information. The data you provide will be forwarded to us by e-mail and stored on the e-mail server.

  1. Newsletter

You can subscribe to our newsletter via other forms. As soon as you register for the newsletter, your e-mail address (mandatory) and, depending on the form, any other optional data you may have filled in will be passed on to the service provider ActiveCampaign. In addition, log data (e.g. log info, activation information) is stored for logging the consent process. The registration must be confirmed by you via a confirmation link in an e-mail that you receive from us. If the confirmation does not take place, the transmitted data will be deleted after one month. If confirmed, you will be added to our newsletter list and receive updates on our chunkx product. If you no longer wish to receive them, you can use the “Unsubscribe” link in any newsletter email or revoke your consent at any time by emailing “info@chunkx.net”. Your data will be deleted within 6 months after you have stopped receiving the newsletter, unless there is a legal obligation to retain the data. By sending the data you have entered, you consent to the data processing and confirm our privacy policy.

2.2 Storage duration

In principle, we store personal data only as long as necessary to fulfill contractual or legal obligations for which we have collected the data. Thereafter, we will delete the data immediately or within the period specified above for each service, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for claims under civil law or due to statutory retention obligations.

3. disclosure of data

3.1 When does chunkx share data?

A passing on of the data collected by us takes place in principle only if:

  • You can use your personal data according to Art. 6 para. 1 lit. a DSGVO you have given your express consent to this,
  • the disclosure according to Art. 6 para. 1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to believe that you have an overriding legitimate interest in not having your data disclosed,
  • we according to Art. 6 para. 1 lit. c DSGVO are legally obliged to disclose or
  • this is legally permissible and in accordance with Art. 6 para. 1 lit. b DSGVO is necessary for the processing of contractual relationships with you or for the implementation of pre-contractual measures, which are carried out at your request.
  • You register, in this context according to Art. 6 para. 1 lit. a DSGVO you give your express consent to the data processing. Then you will receive email notifications from us as part of your usage activities, but you can turn off these notifications in your profile. For these notifications, we share your email address and, if applicable, your first and last name with the email service Mailjet SAS. The data is stored in Europe. More details below.
  • You enable push notifications. Then reminders can be sent to you, which you can set yourself. Also, you can then be alerted to updates of content that you follow. For this purpose, we use Firebase Cloud Messaging from Google Inc. In the process, the user’s mobile device is
    is assigned a pseudonymized push reference that serves as the target for the push messages.
  • Your user is assigned to a company, club or organization. In this case, it depends on the respective contract which data exactly are transferred. If you have any questions, please contact your respective company, club or organization to find out exactly what data is transferred.
  • You subscribe to a channel in chunkx. Your first name, last name, nickname can then be seen by the author and, if the channel belongs to an academy, by the admin of the academy.
  • You subscribe to a channel with a learning objective in chunkx. Your first name, last name, nickname can then be seen by the author and, if the channel belongs to an academy, by the admin of the academy. In addition, your progress towards the learning goal can also be viewed by these people.
  • You sign up for the newsletter / our updates. You can find a description of how the data is passed on above under the description “Newsletter” in the chunkx services.

In addition, disclosure may occur in connection with government inquiries, court orders and legal proceedings when necessary for law enforcement or prosecution.

3.2 Who does chunkx share data with?

A transfer of data takes place to the following service providers who support us in the provision of our services:

  • Amazon Web Services, Inc.(P.O. Box 81226, Seattle, WA 98108-1226, USA).
    Purpose of processing:
    JF//digital GmbH uses the Amazon Web Services (“AWS”) service to host the database and web content for the chunkx app and the chunkx creator. Provision of the “chunkx services” by hosting the user databases for our app chunkx as well as the authoring tool chunkx creator and storage of all user-related data generated from them. The data is stored exclusively in data centers in the eu-central-1 region (Frankfurt/Main), which are certified according to ISO 27001, 27017 and 2018 as well as PCI DSS Level 1. For more information about AWS and privacy, please visithttps://aws.amazon.com/de/compliance/eu-data-protection/ andhttps://aws.amazon.com/de/privacy/.
    Categories of personal data:
    Logins to the app, Channels subscribed, Feed usage data, Learning task and session completion results, Results on learning goals started and achieved, Profile data, Channels and content created as author, Images uploaded.
    Affected persons:
    Users of the chunkx app and the chunkx creator
    Legal basis:
    Execution of the contract, Art. 6 para. 1 lit. b, DSGVO
  • 1&1 IONOS SE
    Purpose of processing:
    Storage of server log files to ensure the security and stability of the offer and to provide the website visitors with the highest level of quality.
    Categories of personal data:
    Referrer (previously visited website), Requested website or file, Browser type and version, Operating system used, Device type used, Time of access, IP address in anonymized form (used only to determine the location of access).
    Data subjects:
    Visitors to the website
    Legal basis:
    Execution of the contract, Art. 6 para. 1 lit. f, DSGVO
    Further links:
    Technical and organizational measures according to Art. 32 DSGVO of 1&1 IONOS SE
  • Mailjet SAS
    Purpose of the processing:
    Providing the Mailjet software for sending e-mails. Storage and transmission of recipient data for the purpose of sending/evaluating e-mails.
    Categories of personal data:
    First name (optional), last name (optional), e-mail address (mandatory), log data (e.g. log info, activation information)
    Data subjects:
    Users of the chunkx app and users invited to chunkx by authors.
    Legal basis:
    Contract execution, Art. 6 para. 1 lit. b, DSGVO
    Related links:
    Security and privacy at mailjet
  • Google Firebase services from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA

    Firebase Cloud Messaging
    Purpose of processing:
    Sending push notifications.
    Categories of personal data:
    Pseudonymized
    push reference for the user’s device.
    Data subjects:

    Users of the chunkx app who have activated push messages.
    Legal basis:
    Contract execution, Art. 6 para. 1 lit. b, DSGVO

    Firebase Crashlytics:
    Purpose of processing:
    We collect data about this specific event in the event of a technical error or crash of the chunkx app (e.g., which function of the app, which operating system version, and which type of device the user is using in the
    used at the time of occurrence of the error). The data collected in this context helps us to improve the app
    or minimize future failures and disruptions of the app.
    Affected persons:
    Users of the chunkx app.
    Legal Basis:
    Execution of the contract, Art. 6 para. 1, lit. f, DSGVO
    Related links:
    Security and privacy at Google Firebase.

  • Google Analytics by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA
    Purpose of processing:
    Use of Google Analytics to optimize the web offer. Data from visitors to the chunkx.net website is stored and passed on to Google. See above for more detailed description.
    Categories of personal data:
    Visitor data under IP anonymization.
    Data subjects:

    Visitors to the chunkx.net website who agree to cookie storage or fill out contact forms or sign up for our newsletter.
    Legal basis:
    Contract execution, Art. 6 para. 1 lit. f, DSGVO
  • Stripe: Stripe Payments Europe Ltd
    Block 4, Harcourt Centre
    Harcourt Road
    Dublin 2
    Purpose of processing:
    payment and invoicing.
    Categories of personal data:
    Form data, e.g. e-mail address. Log data (e.g. log info, activation information)
    Affected Persons:
    chunkx creator services customers.
    Legal basis:
    The transfer of your data to Stripe is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations. All data required for the payment processing will be used exclusively for the execution of the payments and for the provision of the invoices and will be transmitted via the “SSL” procedure. Stripe is certified according to PCI DSS. Stripe may transfer, process and store personal data outside the EU. In doing so, Stripe is subject to the Safe Harbour Agreement. Information on Stripe’s privacy policy is available here: https://stripe.com/de/privacy