EU-GDPR.

1. Overall Statement

​

The zipstrr GmbH acts in accordance with the applicable data protection law. This includes the new General Data Protection Regulation (GDPR). Customer data – e. g. companies trusting us (excerpt): Daimler AG, TAG Heuer, Zurich Insurances, DKB AG – collected by zipstrr will be stored, processed and transmitted in accordance with GDPR. This includes the following general aspects:

 

I.     Ensuring Data Protection and Information Security

II.     Privacy and Information Security Concept

III.     Arrangements with Subcontractors within the meaning of the GDPR 

 

The responsible within the meaning of the General Data Protection Regulation and other National Data Protection Laws of the member states as well as other data protection regulations is:

 

zipstrr GmbH

Rheinstraße 59                    

12159 Berlin                        

Germany

E-Mail: privacy@zipstrr.com

 

The Data Protection Officer (DPO) of the responsible is:

 

DataCo GmbH                    

Robert Mäckle                        

Dachauer Straße 65

80335 Munich

Germany

E-Mail: rmaeckle@consulting.dataguard.de

​

2. Further Arrangements

​

Within the platform zipstrr beyond the "Standard Consent Declaration" for users of the platform  & services are specific, personalized & legally agreed consent as well as "copyright / personality rights transfer” and confidentiality rules (active consent) for Corporate Clients / Partners of zipstrr GmbH and their projects.

 

I. Privacy Principles

​

. Legality

. Transparency

. Prohibition with Permission Reservation

. Earmarking

. Data Minimization

. Integrity and Confidentiality

 

The zipstrr GmbH emphasises particular importance to the regular legal examination for the complexes / areas when using their platform / services:

 

. Minor / Underagers

. Special Sensitive Data

. Employee Privacy

. Email Marketing

. Change of Purpose

. Automated Decisions

. Privacy by Design

. Privacy by Default

 

 

II. Developed & Legally Checked

​

. Consent Processes

. Principles of Contract Fulfillment, Legal Obligations, Protection of Vital Interests of People, Legitimate Interests

. Data Processing Processes – Personal Data

. List of Processing Activities

. General Technical and Organizational Measures (TOMs)

. Regulation Data Transfer to Third Parties including Order Processing Contracts

. Security Concept

. Data Transfer Processes

. Complaint Management Process

. Privacy Policy

. Staff Training & Confidentiality Agreements

. Privacy Impact Assessment

. Further