This privacy notice for Jan Hamsch und Kai Hamsch GbR ("we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:
- Download and use our mobile application (FindMyCigs), or any other application of ours that links to this privacy notice.
- Engage with us in other related ways, including any sales, marketing, or events.
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@fade.de.
SUMMARY OF KEY POINTS
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use (e.g., GPS location, account details).
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we receive any information from third parties? We do not receive any information from third parties.
How do we process your information? We process your information to provide our mapping Services, allow you to add locations, verify spots, process payments, and for security (e.g., banning trolls).
How do we keep your information safe? We have organizational and technical processes in place, but no electronic transmission over the internet can be guaranteed to be 100% secure.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way to exercise your rights is by contacting us at hello@fade.de.
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us, or when you participate in activities on the Services (like adding a spot to the map). The personal information we collect may include:
- Account information (name, email address)
- Location data you submit (names of spots, categories, opening hours)
- Reports you submit regarding fake or missing spots
- Subscription status (Free or Premium)
Payment Data. We may collect data necessary to process your payment if you purchase a Premium subscription. All payment data is processed and stored by the respective platform:
- Apple App Store: Their privacy policy is available at https://www.apple.com/legal/applepayments/privacy-notice/
- Google Play Store: Their privacy policy is available at https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=privacynotice
Application Data. If you use our application, we also collect the following information if you choose to provide us with access or permission:
- Geolocation Information: We may request access to track your mobile device's precise location (GPS). This is essential to show nearby spots and to verify that Free-Users are actually standing at the spot they are trying to add.
- Push Notifications: We may request to send you push notifications regarding your submitted spots or account status.
All personal information that you provide to us must be true, complete, and accurate.
Information automatically collected
In Short: Some information - such as your IP address, device characteristics, and unique identifiers - is collected automatically when you visit our Services.
We automatically collect certain information when you visit or use the Services. This information does not reveal your specific identity but may include:
- Log and Usage Data: IP address, device information, browser type, and information about your activity in the App.
- Device IDs: Unique device identifiers. This is specifically used to enforce our community guidelines (e.g., issuing a "device ban" against users who repeatedly create fake locations or troll the community map).
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide our mapping functionality, maintain community integrity, manage your subscription, and ensure security.
We process your personal information for a variety of reasons, including:
- To create and manage your user account.
- To display your uploaded locations and opening hours on the public community map.
- To utilize your GPS data to show relevant nearby spots and to restrict spot creation for Free-Users to their physical location.
- To process reports of fake spots and maintain the integrity of the map (anti-troll system).
- To enable sign-in using your Google or Apple account.
- To process payments for Premium subscriptions.
- To detect, investigate, and prevent fraudulent or unauthorized use of the app (including enforcing device bans).
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we have a valid legal reason under applicable law.
If you are located in the European Union (EU) or United Kingdom (UK), we rely on the following legal bases:
- Consent: We process your precise GPS location based on your explicit consent granted through your device settings.
- Performance of a Contract: To provide the FindMyCigs app features (map services, account creation) and Premium subscription benefits.
- Legitimate Interests: To improve our services, secure our app, ban malicious users (trolls), and maintain the accuracy of the community map.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We share information with third-party services necessary to operate the map and the app infrastructure.
We may share your data with third-party vendors who perform services for us. They are obligated to protect your data. Categories of third parties include:
- Mapping Services (e.g., OpenStreetMap): To render the map interface (note: we do not send your account data to map providers, only coordinate requests).
- Cloud Infrastructure Providers (e.g., Firebase): For secure data hosting of user accounts and location data.
- Authentication Services: To allow sign-in via Google or Apple.
- Payment Processors: Apple or Google, to manage in-app purchases.
- Publicly Shared Information: When you add a spot (vending machine, store, etc.) to the map, the location coordinates, the name, the category, and the opening hours become part of the public map and are visible to all users of FindMyCigs.
5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
In Short: We are not responsible for the safety of any data you share with third-party services linked within the app.
The App may contain links to third-party services (e.g., payment portals). We do not endorse or take responsibility for their privacy practices. We strongly recommend reviewing their individual privacy policies.
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your personal information in countries other than your own.
Our cloud infrastructure providers (e.g., Firebase/Google) may store data on servers located outside your country (e.g., in the United States or Ireland). If you are in the EEA, UK, or Switzerland, we ensure adequate protection of your information through mechanisms like the European Commission's Standard Contractual Clauses (SCCs).
7. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We retain your data as long as necessary to fulfill the purposes described in this policy.
Your account data will be stored as long as your account is active.
Important Note on Map Data: Since FindMyCigs is a community map, the spots and coordinates you have added to the public map may remain visible even after you delete your account, as they become part of the collective community database. Your personal association (e.g., your name/email) with those spots will be anonymized upon account deletion.
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We protect your data using technical and organizational security measures.
We implement secure communication protocols (HTTPS) and use trusted cloud infrastructure. However, no electronic transmission is 100% secure. You are responsible for keeping your login credentials safe.
9. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from individuals under 18 years of age.
FindMyCigs is intended for adults (or those of legal age to purchase tobacco in their jurisdiction). We do not knowingly collect personal data from users under 18. If we learn we have collected such data, we will delete the account. Contact us at hello@fade.de if you believe a minor is using the app.
10. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You have the right to access, correct, delete, or restrict the processing of your data.
If you are in the EEA, UK, or Switzerland, you have the right to:
- Request access to your personal data.
- Request rectification of inaccurate data.
- Request erasure of your account data.
- Withdraw your consent (e.g., turn off GPS tracking in your device settings).
To exercise these rights, contact us at hello@fade.de.
11. CONTROLS FOR DO-NOT-TRACK FEATURES
Currently, FindMyCigs does not respond to DNT browser signals, as no uniform technology standard has been finalized.
14. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary.
We may update this privacy notice from time to time. The updated version will be effective as soon as it is accessible.
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may email us at hello@fade.de or contact us by post at:
Jan Hamsch und Kai Hamsch GbR
Schutternstr. 23a
77974 Kuerzell
Germany
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To submit such a request, please send an email to hello@fade.de with a clear description of your request.