Data protection information »LifeBonus Care Pro«

LifeBonus Gesundheitsmanagement GmbH provides you with the "LifeBonus Care Pro" app for caregivers, which you can download and use on your mobile device. In the following we inform you about the processing of personal data when using our mobile app.

Personal data is all data that can be related to you personally. These are e.g. B. Name, job and information about your user behavior. The assigned IP address or the device identifier are also considered personal data.

Responsible

The person responsible for data processing is:

LifeBonus Gesundheitsmanagement GmbH,

Flughafenstr. 1-3,

Airport Plaza (Building C, Level 3),

22335 Hamburg

Phone: +49 40 5075 3733

Email: datenschutz@lifebonus.health

Downloading the app from the App Store

The app must be downloaded via the service provider Google Play Store or the App Store (Apple). As a precaution, we would like to point out that when you download the app from the app or play store, data can be transmitted to the store operators. This can be found in the terms of use of the respective operator. We have no influence on this data collection and are not responsible for it. There is no exchange of data between LifeBonus and the operators.

Storage period

Unless otherwise stated in the following information, we only store data processed via the app for carers for as long as is necessary to achieve the processing purpose pursued or to fulfill our contractual or legal obligations. The processed data will then be deleted by us. We are obliged to delete data in accordance with Article 17 (1) (a) GDPR. It is therefore based on the legal basis of Article 6 (1) (c) GDPR.

Statutory retention requirements can result in particular from commercial or tax regulations. We will retain such personal information contained in our accounting records for ten years from the end of the calendar year in which the information was collected and retain personal information contained in commercial letters and contracts for six years. In this case, the legal basis for storage is Article 6 Para. 1 Letter c) in conjunction with the statutory retention obligation.

In addition, we will store data in connection with consents that require proof as well as with complaints and claims for the duration of the statutory limitation periods. In this case, the legal basis for storage is Article 6 (1) (f) GDPR. The storage of this data serves our legitimate interest in the assertion, exercise or defense of civil claims.

Categories of recipients of the data

We use contract processors to process your data. The processing operations carried out by such processors include, for example, the hosting of the app or the maintenance and support of the IT systems used.

The data is processed on the German servers of our technical service provider Amazon Web Services Inc., who works for us as a processor. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Contract processors do not use the data for their own purposes, but carry out the data processing exclusively for the person responsible and are contractually obliged to ensure suitable technical and organizational measures for data protection.

Health data processing

The app for carers offers you an individual program, which consists of exercises and movement training to reduce and/or prevent the health-damaging stresses of everyday work. The use of the app for carers can therefore also be associated with the processing of health data.

Health data is personal data relating to your physical or mental health, including the provision of health care services, and which reveals information about your state of health.

Health data will only be processed via the app for caregivers if you have expressly consented to this. You can revoke this consent at any time with effect for the future. However, we would like to point out that without your consent to the processing of health data, you may not be able to use the full range of functions of the app for caregivers.

The legal basis for the processing of health data via the app for carers is Art. 9 Para. 2 Letter a) GDPR in conjunction with Art. 6 Para. 1 Letter a) GDPR.

Technical service provider

The data is processed on the German servers of our technical service provider, Amazon Web Services, Inc., which we have commissioned to do this. The service provider only processes the data following express instructions and is contractually obliged to ensure adequate technical and organizational data protection measures.

Data processing when using the app

When you use our mobile app, we process, among other things, the following data that is technically necessary for us to offer you the functions of our mobile app, to display the content that is suitable for you, and to ensure the stability and security of the app:

Anonymized IP address
Operating system
Browser User Agent
Country/state
E-mail-address
Device ID
User ID
Language
Time zone
Connection speed
Log files
Registration date

Stored data will be kept until you delete your account. Log files are overwritten.

The user ID is linked to your specified health status so that you can be shown the appropriate content for you via the app. The processing of information about your health status is done with your consent. The legal basis is Art. 9 (2) a) DSGVO in conjunction with Art. 6 Para. 1 Letter a) GDPR.

Furthermore, the processing of the data is carried out in order to protect our interests named above. The legal basis for this processing is Art. 6 Para. 1 Letter f) GDPR.

Processing of data in the content management system

If you use functions of our app, data about this use will be stored in the content management system of the app. LifeBonus employees have access to the data stored on the German servers. This data can be viewed via the content management system. The data processing takes place exclusively in this way. Whether and to what extent data is processed when using a function can be found below in the respective note on the function. This processing serves the purpose of obtaining information about the activities of the users of our app, which is necessary for the use of the app. The legal basis for processing is Art. 6 Para. 1 Letter b) GDPR.

Mobile marketing tool

When you use functions of our app, data about your usage behavior is stored in the mobile marketing tool. This data is used to generate and send personalized content and messages. We only use this data ourselves and only pass it on to a service provider that provides the marketing tool and acts as a processor for us.
We use functions of the web analysis service Amazon Pinpoint for this purpose.

The provider
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
L-1855, Luxembourg

The legal basis for processing is Art. 6 (1) (b) GDPR. The data is only stored and processed on European servers.

Analytics Tool

In order to enable statistical processing of the data collected when using the app (such as the number of all people active in the app), the data is processed with analytics software. No data is read from the device memory of the end device used for the analysis. The processing takes place exclusively on LifeBonus GmbH's own servers and thus within the EU. There is no data transfer to a third country. We process both personal data (user ID) and data about usage behavior within the app.

The processing of personal data when using these functions is based on the legal basis of Art. 6 Para. 1 Letter f) GDPR. This processing serves our legitimate interest in obtaining information about the use of our app and making adjustments to our app or our offer on this basis. You can object to this processing at any time by informing LifeBonus GmbH of your objection using the contact details given above.

Registration and user account

In order to use the functions of the app, you must log in to the app. To log into the app, you need a user account. If you already have a user account, you can log in with your access data.

You specify the login data for your user account when you log in for the first time. These initially contain your name and your e-mail address.

The processing of personal data in the context of registration, logging in and using the functions takes place to carry out our service offered via the app for carers and is therefore based on the legal basis of Art. 6 Para. 1 Letter b) DSGVO.

You can manage your personal data via the profile area in the app, the password of the user account can be changed. The data of the employer and the profession cannot be changed.

If you are logged in, the following functions are available to you:

Health issues

In order to determine whether a user is physically able to use the app, a health questionnaire must be completed before the app can be used to its full extent. In this, personal data such as name and gender as well as medical data such as weight, height, illnesses, complaints, pregnancy, painkiller consumption and pain intensity are requested. The data collected is also used to create an exercise program individually tailored to the users.

The processing of personal data when using these functions is based on the legal basis of Art. 6 Para. 1 Letter b) GDPR. If health data is processed as part of the use of this function, this processing is based on the legal basis of Article 9 Para. 2 Letter a) GDPR in conjunction with Article 6 Para. 1 Letter a) GDPR.

Movement

This area includes movement training. These are conveyed via videos. Data about your usage behavior (frequency of training, progress, aborts and interruptions) is collected here. Data on the feedback you have given is also recorded. This may also be medical data if you indicated pain during the test.

The processing of personal data when using these functions is based on the legal basis of Art. 6 Para. 1 Letter b) GDPR.

Motion analysis based on own video recordings

Video recordings made independently can be uploaded to perform a movement analysis. With the help of the movement analysis, it can be assessed whether the newly learned movement is performed correctly and thus with low stress. The videos are stored for this purpose and evaluated and assessed by the employees of LifeBonus Gesundheitsmanagement GmbH.

The processing of personal data in the context of the use of these functions is based on the legal basis of Art. 6 (1) b) GDPR.

Use of self-created video recordings after movement analysis or after closing the app

After deleting a user account, the videos created by the users themselves are deleted.

In the Mind section, exercises are performed to reduce stress. These can be used via videos or audio files. Here, data about your usage behavior (frequency of training, cancellations and interruptions) is collected.

The processing of personal data in the context of the use of these functions is based on the legal basis of Art. 6 (1) b) GDPR.

Messenger function

You can use the Messenger feature to contact LifeBonus staff and submit support requests. There is no exchange between users via the messenger.

The messages and data processed via the messenger are stored and processed on servers in the EU. This is done by the provider Intercom R&D Unlimited Company, based in Ireland, commissioned by us.

When using the app and the messenger, location data is recorded in order to offer better product support if necessary. We only use this data ourselves and only pass it on to vicarious agents (in this case the messenger service Intercom).

The processing of personal data when using the Messenger functions is based on the legal basis of Art. 6 Para. 1 Letter b) GDPR.

Push notifications

Push notifications can be allowed. You will then receive messages reminding you of your training program at specific events and times that you specify. The notification also reaches you when you have closed the app.

The processing of personal data in the context of sending push notifications takes place with your consent and is based on the legal basis of Article 6 Para. 1 Letter a) GDPR.

Reminders

You can set reminders in the "Profile" area, which will be shown to you at the time specified there. These are sent in the form of a push notification. The reminder is only saved on the local device.

The processing of personal data in the context of sending push notifications takes place with your consent and is based on the legal basis of Article 6 Para. 1 Letter a) GDPR.

Processing when exercising your rights in accordance with Articles 12 to 22 GDPR

According to Art. 15 to 22 GDPR, you have the right to information and access, deletion, restriction of processing and objection to your personal data. If you exercise these rights, we process the transmitted personal data for the purpose of implementing these rights and to be able to provide evidence of this.

We then process the stored data exclusively for the purpose of providing information and its preparation, as well as for data protection control purposes.

This processing is based on the legal basis of Article 6 Para. 1 Letter c) GDPR in conjunction with Articles 15 to 22 GDPR and Section 34 Para. 2 BDSG.

Your rights

As a data subject, you can assert your data subject rights against us. In doing so, you have the following rights:

In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether and, if so, to what extent we process personal data about you or not.
The right, in accordance with Art. 16 GDPR, to request us to correct your data if it is incorrect.
The right to demand that we delete your personal data in accordance with Art. 17 GDPR and Section 35 BDSG. You can delete your account yourself at any time or instruct LifeBonus to delete individual or all data. If the account is deleted independently, all personal data on our servers will be deleted immediately.
The right to have the processing of your personal data restricted in accordance with Art. 18 GDPR. To do this, you can deactivate or not use the functions of the app.
The right, in accordance with Art. 20 GDPR, to receive the personal data that you have provided to us in a structured, common and machine-readable format and to transmit this data to another person responsible.

Right to object

In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6 Para. 1 Letter e) or f) GDPR. To do this, contact the data protection officer at LifeBonus Gesundheitsmanagement GmbH. You can reach this at:

data protection officer@lifebonus.health

Complaint to a supervisory authority

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

To complain, contact:

Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str. 22, 7th floor

20459 Hamburg

Phone: (040) 428 54 - 4040

Email: mailbox@datenschutz.hamburg.de

Status: September 2023