Privacy policy

Last updated: 3 July 2024

1. Controller

Mobile Software Solutions Knoll GmbH
Stelzhamerstraße 6, A-4311 Schwertberg, Austria
Email: datenschutz@mss-knoll.at
Phone: +43 7262 20404

2. Data collected

When you use the Pocketshop app and related services, we collect and process the following personal data:

Registration and account data

• First and last name, email address, phone number, gender
• Date of birth and home address (for payment processing)
• Payment data (encrypted via our payment partners)
• Profile picture (if uploaded)

Usage data

• IP address, device name, manufacturer, operating system, language
• Pages visited, time spent, click paths
• Location data (only with explicit consent, for personalised content)

Camera access

The app may access your camera to scan receipts for the loyalty programme. All image processing is done locally on the device; no images are transmitted to our servers.

User-generated content

Reviews and comments that users publish in the app are visible to other app users.

3. Purposes of processing

• Providing and operating the Pocketshop app and backend dashboard
• Managing loyalty programmes, coupons, and orders
• Sending push notifications, newsletters, and SMS (with consent only)
• Personalised product recommendations and marketing campaigns
• Fraud prevention and security
• Compliance with statutory retention obligations

4. Legal bases (Art. 6 GDPR)

• Contract performance (Art. 6(1)(b)): Registration, orders, loyalty programme
• Consent (Art. 6(1)(a)): Newsletters, push notifications, marketing emails
• Legitimate interest (Art. 6(1)(f)): Analytics to improve the service, fraud protection
• Legal obligation (Art. 6(1)(c)): Retention of business records

5. Third-party recipients

Data is shared only to the extent necessary to deliver our service:

Google Analytics & Google Cloud

We use Google Analytics to analyse user behaviour and Google Cloud for data storage. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the USA (Standard Contractual Clauses). Privacy policy: policies.google.com/privacy

Brevo (formerly Sendinblue)

We use Brevo (SAS, 106 boulevard Haussmann, 75008 Paris, France) to send newsletters and marketing emails. Email address, name, and campaign interactions are transmitted.

Hubsell

Hubsell processes usage activity (pages visited, time spent, IP address) to optimise marketing processes.

6. Cookies & tracking

Our website uses technically necessary cookies for operation, as well as optional analytics cookies (Google Analytics). On your first visit you will be asked for your consent. You can disable cookies at any time in your browser settings.

7. Data retention

Personal data is retained for as long as your account is active, and beyond that only where statutory retention periods apply (e.g. 7 years under Austrian UGB). Data is deleted once retention periods expire.

8. Your rights (Art. 15–22 GDPR)

• Access (Art. 15): What data we hold about you
• Rectification (Art. 16): Correction of inaccurate data
• Erasure (Art. 17): "Right to be forgotten"
• Restriction (Art. 18): Restricting processing
• Data portability (Art. 20): Export of your data in machine-readable format
• Objection (Art. 21): Against direct marketing or legitimate interests
• Withdrawal of consent (Art. 7(3)): At any time, without giving reasons

To exercise your rights, please contact: datenschutz@mss-knoll.at

9. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

10. Changes

We reserve the right to update this privacy policy at any time. The latest version is always published on this page. We recommend checking it periodically.

Last updated: 3 July 2024 · Mobile Software Solutions Knoll GmbH