Privacy policy

home Privacy policy

Dear Stitchies user,

the protection of your privacy is very important to us. We only collect and store data within the scope of legal regulations and assure you that we do not pass on any personal data to third parties. Word of honor.

However, the Stitchies app is an interactive community application that allows its users to exchange ideas, inspire each other, and make new contacts with other sewing enthusiasts. In order to provide this level of functionality, it is necessary to collect some personal data from our users.
By registering with Stitchies, you consent to the collection, processing, use and storage of your personal data in accordance with the terms and conditions set forth below:

 

Privacy notice for the Stitchies app

This privacy policy applies to the “Stitchies” app published and operated by okua GmbH, Potschappler Str. 4, 01189 Dresden, in the following also referred to as “us”, “we” or “Stitchies”. To contact us, the contact form can be used, further contact options are listed in here.

Stitchies collects, stores and processes personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR) No. 2016/679 and other applicable legal provisions. The data will not be passed on to third parties unless we are legally obliged to do so, it is necessary for the provision of our services or the user has expressly consented to the transfer of his data.

However, the services we offer via the “Stitchies” app can only function if we can collect, transmit, store, process, delete and/or use certain personal data relating to the user (definitions of “process” and “processing” can be found in Article 4 of the GDPR).

1 Relevant legal bases
In accordance with Article 13 of the GDPR, we inform you of the legal basis for our data processing. If the legal basis is not explicitly stated below, the following applies: The legal basis for obtaining consent are Article 6(1)(a) and Article 7 GDPR, the legal basis for processing data to fulfill our services and implement contractual measures as well as to respond to inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Article 6(1)(d) GDPR is the legal basis.

2 Definitions

2.1 Personal data

Privacy is about the protection of personal data. Personal data is information that can be used to identify a specific person. This includes, for example, the person’s name or e-mail address.

2.2 IP address

An IP address is assigned to an Internet connection by the Internet service provider when it is connected to the Internet (dynamic IP address). The owner of the Internet connection can only be determined with the help of the provider, who only releases the data on the basis of court orders. According to data protection experts, this is sufficient to establish a reference to a person (so-called “absolute reference to a person”). It is also possible for IP addresses to remain unchanged, in which case they are referred to as “statistical IP addresses”.

3 Scope of application

This Privacy Policy describes the collection, processing, use and storage of personal data when using the Stitchies App.

For certain services and functions, supplementary privacy policies may apply, which are displayed to the user before the first use of the respective service or function and which the user must accept and confirm.

4 Collection and storage of personal data

4.1 Use of the Stitchies App without registration

If a user installs the Stitchies App and uses it without logging in or registering, no personal data is collected by us. Personal data is only transmitted to us when a user submits the registration or login form.

4.2 Member registration

If a user registers with Stitchies, we collect personal data, which is processed, used and electronically stored by us. This data is kept confidential and is always protected from unauthorized access, unless the user agrees to make it public.

The type and amount of data collected during registration depends on the type of registration. Users can register directly with Stitchies (see 4.2.1) or log in to the app using their Facebook account (see 4.2.2), if they have one.

To identify members, each Stitchies user has a unique pseudonym, which is referred to as a “username”. The username is freely chosen by the user during direct registration in the Stitchies app or automatically generated during registration via Facebook login. The username can be changed later via the settings menu of the Stitchies app.

All data is collected on the basis of Article 6(1)(f) GDPR and is required to ensure the functionality of the app and the delivery of content in the app. If IP addresses are stored, they are deleted or anonymized within 7 days. The data will not be passed on to third parties, unless it is necessary for the pursuit of our claims or if there is a legal obligation to do so according to Article 6(1)(c) GDPR.

4.2.1 Direct member registration

When you register as a Stitchies user, the following information is collected:

  • unique username (freely selectable pseudonym; visible to other Stitchies members)
  • name to be displayed, also called “shown name” (freely chooseable; visible for other Stitchies members; if no name to be displayed is chosen, the username will be used as shown name)
  • e-mail address (will not be published)
  • date of birth (will not be published, but the user can decide if his age should be shown on his profile page)
  • date and time of registration
  • device type, operating system version and device identification number
  • IP address

4.2.2 Registration via Facebook login

If an unregistered user logs in with his Facebook account, a Stitchies account is automatically created for the user when he logs in for the first time. Via the login dialog displayed by Facebook on the device, the user confirms the data protection agreement of Facebook, the transmission of data in accordance with Article 6(1)(a) GDPR and that Stitchies may query the following information from Facebook and subsequently process, use and electronically store it:

  • full name
  • date of birth
  • profile photo

The following information is collected by us during the automatic registration process using the Facebook login:

  • unique username (visible to other Stitchies members; automatically generated based on the name requested by Facebook according to the following pattern: First name, period, first letter of last name, one or more digits if required).
  • name to be displayed, also called “shown name” (visible to other Stitchies members; it will be taken from the name provided by Facebook)
  • e-mail address (will not be published; the e-mail address provided by Facebook will be used)
  • date of birth (will be taken from Facebook; will not be published, but the user can decide whether his age should be displayed on his profile page)
  • profile picture (the profile picture used by Facebook is adopted)
  • Facebook user identification number
  • date and time of registration
  • device type, operating system version and device identification number
  • IP address

The login via Facebook takes place via a procedure provided by Facebook, which is called “Single Sign On” and serves to enable Facebook users to use their Facebook account to log in on other websites or in apps. In addition to the information already mentioned here, the regulations mentioned under 10. apply to this type of registration. These inform about which data is transmitted to Facebook.

4.3 User profile

Each Stitchies user has an individually configurable user profile that serves to present him or herself within the community. The user profile always displays the user name as well as the time of the user’s registration at Stitchies.

By means of the edit function, the user can enter further information into his user profile, which will subsequently be visible on the profile and collected by Stitchies:

  • name to be displayed, also called “shown name” (freely selectable; visible on the profile page and in places where the user publishes content; if no name to be displayed is specified, the user name is used as the name to be displayed)
  • profile photo
  • choice of whether the user’s age should be displayed on his or her profile
  • optional contact information:
    • website of the user
    • link to the user’s Instagram profile
    • link to the user’s Facebook profile
    • link to the user’s Twitter profile
    • reference to the YouTube profile of the user
    • WhatsApp phone number of the user
    • Signal phone number of the user
    • Telegram username of the user
    • Threema ID of the user
    • information about the user’s sewing preferences

4.4 Publication of content by users

Stitchies users can publish their own content in the Stitchies app, which is subsequently visible to other users. These can be, for example, texts (e.g. comments and chat messages), photos, videos and ratings. The content is collected by Stitchies and is visible to other Stitchies users and is also partially cached on the end devices of other users (see 4.5).

4.5 Caching of content on end devices

Many functions of the Stitchies app can also be used offline. For this purpose, but also to enable smooth app use without long loading times, some content is temporarily stored on users’ devices. If the content is updated or deleted in the meantime, it will be updated on the respective end devices at the next time the app is run with an existing Internet connection. Until this time, they may still be displayed to the respective user in the version that was temporarily stored by his app. The following information is cached by the Stitchies app:

  • user names
  • times at which users have registered with Stitchies
  • the names set up by users to be displayed
  • the content published by users as mentioned under 4.3 and 4.4
  • chat history of the logged in user

5 Use of personal data

5.1 General information

Stitchies uses personal data in accordance with Article 6(1)(f) GDPR:

  • to enable communication among members or with Stitchies Support,
  • to inform members about news and events,
  • to personalize and provide the services and features used by the user, including location services,
  • to troubleshoot technical problems,
  • to resolve problems and disputes,
  • for statistical purposes and to improve the App,
  • to investigate and prevent unauthorized and illegal activities and violations of the Terms of Use.

5.2 Location-based content and services

Some of the services and features offered through the Stitchies app require the request of the device location. Location data is used by Stitchies to provide these features, but may also be used for statistical purposes and to troubleshoot technical issues.
Location data is not obtained without the prior consent of the user. This is requested by the Stitchies app through a dialog that appears as soon as a user calls up a function or service that attempts to access location data.
Stitchies does not store location data permanently, but only insofar as and as long as this is necessary for the location-based services and functions.

5.3 Notifications and newsletters

Stitchies uses the e-mail address collected during registration, that may have been subsequently changed by the user, and stored in his user account to verify the user’s identity by means of confirmation links, to inform him about important information regarding his Stitchies user account, and to send him the Stitchies newsletter if the user has indicated that he would like to receive it. The User may activate or deactivate the receipt of newsletters at any time in the settings menu of the Stitchies App.

5.4 Personalized advertising

Depending on the installed app variant and the settings made by the user, personalized advertising can be displayed in the Stitchies app. This means that the app can display ads that are customised to the user’s interests, approximate location and age. The advertising is provided by Stitchies itself; personal data is not passed on to third parties.

6 Data security

Each Stitchies user account is protected by a password. The respective user is responsible for using a password that is as secure as possible and to which no one else has access.

In accordance with Article 32 GDPR, Stitchies takes all necessary organizational and technical security measures to protect the personal data of Stitchies users against unauthorized access, unauthorized modification, disclosure or destruction. Access to personal data is generally limited to the organs and employees of Stitchies as well as to commissioned data processors used by Stitchies, who are obliged to comply with data protection laws. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 GDPR).

7 Commissioned data processing

Stitchies may use external commissioned data processors to provide services, who perform certain data processing operations on our behalf and at our instruction. Commissioned data processors are selected by us with particular care in accordance with the statutory regulations. We comply with the requirements of Article 28 GDPR when commissioning and when defining contracts with the commissioned data processors.

Stitchies commissions data processors, for example, to provide the technical infrastructure as well as storage space.

The commissioned data processors may have access to personal data under certain circumstances, but may only use this data to fulfill the data processing assigned to them and for no other purpose. Commissioned data processors are obligated under the terms of the contract to likewise ensure the level of data protection guaranteed by us. The data processed under contract is subject to the control of Stitchies. Continuous checks are carried out to monitor the level of data protection, compliance with instructions and contractual agreements.

8 Disclosure of personal data and usage data

We are legally obliged to hand over personal data as well as other usage data to supervisory authorities, law enforcement agencies and investigating authorities if and to the extent that this is necessary for the clarification and/or prosecution of criminal offenses or to avert threats to public safety.

Apart from this, no personal data will be passed on to third parties unless the user has consented to this.

9 Retrieve, modify and delete personal data

Stitchies users can check and update their stored profile information at any time via the settings menu or via the edit function of the profile page.

Stitchies users are obligated to update their personal and address data in their Stitchies account immediately upon occurrence of any changes.

Users can delete their user account at any time via the settings menu. Stitchies will then block all personal data so that it can no longer be viewed by other Stitchies members. Personal data is stored for a short period of time (up to six months) in order to fulfill legal requirements (e.g. preventing fraud, settling disputes, supporting investigations). After that, the personal data will be deleted.

Content published by the user (see 4.4) remains stored and may under certain circumstances continue to be visible to other users. However, in these cases the specific personal reference is removed so that the content can no longer be associated with the deleted user.

For profile information of deleted users cached on end devices, the conditions stated in 4.5 apply.

10 Use of Facebook Single Sign On
As described in 4.2.2, it is possible to log in to the Stitchies app using a Facebook login. The software component used for this purpose is provided and operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). The corresponding registration form is called up from the login dialog of the Stitchies app by tapping or clicking on the “f” icon, which has the notice text “Or sign in with your Facebook account:” above it. We have no influence on the content of the dialogs provided by the software component. By calling up the software component, Facebook receives the information that the user is using the Stitchies app as well as the user’s current IP address. In addition, the login data entered by the user, if any, is transmitted to Facebook. These data processing operations are carried out in accordance with Article 6 (1)(f) GDPR on the basis of Facebook’s legitimate interest in displaying personalized advertising. Facebook Inc., based in the USA, is certified for the us-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Facebook provides information on the purpose and scope of the data collection as well as on the further processing and use of the data by Facebook and the rights and settings options of the user for the protection of privacy under the following link: http://www.facebook.com/policy.php

11 Use of Google AdMob

Depending on the installed app version and the settings made by the user, the Stitchies app may display advertisements that are delivered via the Google service AdMob. Stitchies has no influence on the content of the advertisements; they are placed automatically by the AdMob software component. Stitchies does not transmit any personal data to Google AdMob. However, the AdMob software component may transmit the device identifier to AdMob in order to provide personalized ads and to collect personal data itself.  By using the app, the user agrees to these terms. In addition, Google’s privacy policy and terms of use apply.

Google is based in the USA and is certified for the us-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

12 Automated translations

In order to make content that users from other countries have posted accessible and understandable to users, this content is automatically translated into other languages in some cases. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. This only affects those contents that the authors have published in the Stitchies app. The translations are done using the services Google Translate (provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and DeepL (provider: DeepL SE, Maarweg 165, 50825 Cologne, Germany). The texts to be translated are transmitted to the providers. Other user information is not transmitted to the providers. More information can be found in the privacy policy of Google and the privacy policy of DeepL.

13 Subject to change

The Stitchies App as well as the services offered by Stitchies are constantly being further developed by us. For this reason, we reserve the right to change this privacy policy at any time in compliance with the applicable legal provisions. Changes will be made in a timely manner. If this is necessary, the user will be asked for renewed consent. Stitchies users are independently encouraged to check this page regularly for changes in order to always be informed about the current status of the privacy policy.

14 Right to information about personal data

Every Stitchies user has the right to receive information from us about which of his or her personal data has been stored (Article 15 GDPR). For this purpose, a request for information must be sent to us via the contact form or by e-mail. In doing so, the type of personal data about which information is to be provided must be specified.

Users have

  • according to Article 16 of the GDPR, the right to request the completion of data concerning them or the correction of inaccurate data concerning them
  • according to Article 17 of the GDPR, the right to request that data concerning them be deleted without undue delay or, alternatively, to request restriction of the processing of the data in accordance with Article 18 of the GDPR
  • the right to request that the data concerning them, which they have provided to us, be received in accordance with Art. 20 GDPR and to request that it be transferred to other responsible parties
  • the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR

15 Right of withdrawal

The consent given to this privacy policy, which also includes consent to the collection, processing, use and storage of the user’s personal data, can be revoked by the user at any time for the future in accordance with Article 7(3) GDPR. The corresponding notification can be sent to us via the contact form or by e-mail.
However, for technical and legal reasons, the Stitchies App cannot be used without full consent to the aforementioned points.