Social Quest GmbH
VAT Number: ATU76610614
Company registration: FN 552134m
Court of Jurisdiction: Vienna
Member of the Austrian Chamber of Commerce
1 - About Social Quest
Social Quest transforms leisure time into appealing and creative experiences ("Quests"). Using the mobile application, users can complete activities by proving the execution with a photo or video. On the other hand, users can create activities themselves in order to share them with friends and other users.
Quests combine several activities to guide users to a goal within an area of interest. Each Quest has a reward that is paid to a respective user upon completion, depending on the Quest goal. Organizations publish these missions to map customer and brand journeys and guide users through activities.
(Subsequently referred to as “Services” or “App”).
2 - Our contact
Social Quest GmbH
Schottenfeldgasse 85, 1070 Vienna, Austria
Please direct any inquiries concerning data protection to email@example.com
Our Service is aimed exclusively at persons who are at least 16 (sixteen) years old. Therefore, in principle, no data of persons under 16 (sixteen) years of age will be processed. If you suspect that data of persons under 16 years of age is being processed, please inform us.
4 - Data subject to processing
We process the following data from you:
Each time you use the App, we process certain automatically generated technical data (“Device Data“) to maintain the functionality of the App and to prevent and defend against targeted attacks. This includes, for example, software and hardware details as well as the IP address of your device, the time and duration of use.
Your username is processed to facilitate personal contact with other users. This data is collected as part of the registration process and used to create your profile.
This data is visible to other users.
Your email address will be processed for registration or user identification during registration and then used to contact you. The e-mail address is collected during the registration process and is not visible to other users.
If you add a profile picture*, it will be used to present your profile and to facilitate personal contact with other users. This data is visible to other users.
You can create activities* on our Services, participate in other users’ activities and Quests through our Services, and visit certain locations. We process which activities have been created by you and which you have accepted or participated in to enable and organize these activities, and so that you and other users can see who has participated in which activity and visited which places. Your acceptances and participations are visible to other users. This data can be used to make suggestions about people you may know or activities that may be of interest to you.
If you allow access to the current location* of your device, this will be used to show Quest and activity suggestions in your area. However, your location is only processed once each time you start the App and for location-based searches. No movement tracking profile will be generated.
If you allow access to certain device data, such as file library and camera, photos and videos* can be uploaded. Your shared photos and videos are visible to other users. You can manage access to these device data at any time in the settings of your device operating system.
If you have completed a Quest, we save this so-called Achievement*, in order to be able to send you the respect reward as a document to your Email address.
If you want to receive notifications* from the App on your device, device tokens are created for your device and processed. These device tokens and the message content are transmitted to your respective operating system to enable these notifications.
5 - Purpose and legal basis of processing
The data categories marked with “*” under Section 4. are voluntary information or data that is generated depending on your freely using the App and is generally not absolutely necessary for the general use of the App. All other data not marked with “*” is absolutely necessary, as we cannot provide our (basic) Services to you without it.
Voluntary information is processed for the purpose of providing the respective intended functions on the basis of your consent pursuant to Art 6 (1) (a) GDPR, which you grant by providing the respective data. You can revoke your consent at any time by sending an e-mail to firstname.lastname@example.org with effect for the future. If data provided by you in addition to the absolutely necessary information is absolutely necessary for providing additional features, your data will also be processed to facilitate this feature and therefore for the fulfillment of the contract pursuant to Art 6 (1) (b) GDPR.
The processing of the Device Data is based on our legitimate interest pursuant to Art 6 (1) (f) GDPR, namely, to optimize and improve the App and the Services, to increase the usability, to provide useful information about the use of our Services as well as to ensure and increase the security and stability of the App and to be able to detect and track attacks and misuse.
6 - Messages / Notifications
To notify you about Quests within the App (such as suggestions or alerts), we send you push notifications within the App when you enable this feature. You can set, manage, and disable subscription to these notifications at any time in your operating system settings. In case of disablement, you will no longer be able to receive notifications from us.
If you complete a Quest and earn an Achievement, we process your email address to send you the respective Reward. By registering, you consent to the processing of your contact data for this purpose and to receive marketing communications. Your data will be processed until you withdraw your consent.
If the legal requirements are met, we also process your contact data on the basis of our legitimate interest, namely, to stay in touch with you and maintain contact. In any case, you can refuse further mailings by sending an e-mail to email@example.com.
In order to fulfill the contract, we will also send you messages necessary for this purpose, such as confirming your registration or for resetting your password.
7 - Place of processing and general data recipients
We host your data within the European Union at Amazon Web Services (AWS) servers based in Frankfurt, Germany. This hosting service provider processes your data only in accordance with our instructions.
The data you provide within the App will be displayed to others as described in Section 4 of this agreement. This is carried as a necessary provision of our Services for the fulfillment of the contract pursuant to Art 6 (1) (b) GDPR and is based on your consent pursuant to Art 6 (1) (a) GDPR.
You can change or withdraw the data others can see within the App, by simply changing or deleting the respective data.
When participating in a Mission, the data provided by you or further required by you will be transferred to the respective Organization for this purpose. This transfer is carried out for the fulfillment of thecontract pursuant to Art 6 (1) (b) GDPR and is based on your consent pursuant to Art 6 (1) (a) GDPR. We have no control over the further processing by the Organization; hence, please also consider the Organization’s conditions and statements regarding the processing of your data.
8 - Transfer to third countries general
We store your personal data only on servers within the European Union. Only if it is technically unavoidable, the data that is absolutely necessary for this purpose is transmitted to third countries.
This applies, for instance, to the transfer of Device Tokens when sending notifications to your device, provided these are activated. When using an iOS device, such a Device Token is transferred to Apple or, when using an Android device, to Google. You can disable the notification and thus the transfer of the Device Token at any time in your operating system settings. This transfer is based on your consent pursuant to Art 6 (1) (a) GDPR.
If we further transfer data to third parties (e.g., Organizations, Google), we oblige them to transfer personal data to third countries only if an adequate level of data protection is guaranteed there, standard contractual clauses have been concluded, binding internal data protection regulations exist or other adequate guarantees exist, or if you have consented to this transfer.
9 - Privacy
We do not process your data for automated decision-making, including profiling in accordance with Art 22 (1) and (4) GDPR, which leads to decisions that have legal effects on you or significantly affect you in a similar way.
However, we use the data provided by you as well as location, usage, and activity data to provide contact and activity suggestions. Depending on the voluntary information you provide, which can be edited at any time (see point 4.), no information or only certain information from you will be used to provide personalized suggestions.
You can set and disable location usage by the App via your operating system settings. In case of deactivation, location-based services or suggestions can no longer be provided by us.
By specifying the individual settings or providing your information, you expressly consent to the respective processing and transfer and can withdraw or adjust this consent at any time with effect for the future by adapting these settings or deleting individual information.
10 - Storage period and account deletion
Generally, your data is stored for the existence of your account.
You can delete your account in its entirety at any time in the App settings. We consider the deletion of your account as a withdrawal of your consent to the entire data processing, as a cancellation of all Quests created by you, and as a request for deletion pursuant to Art 17 GDPR. After notifying other participants of the cancellation of your Quests/activities, your data will be deleted. Please note, however, that deletion may not be immediately possible for technical reasons, which is why we reserve the right to a reasonable period of time to delete the content.
Even after deletion of the account, however, it may be necessary for us to continue to store certain data internally (not visible to other users), in particular if this is necessary due to legal obligations (such as accounting data in accordance with corporate and tax regulations) or an order of a court or an administrative authority, if this data must be stored further for the defense or assertion of legal claims, or if there is a legitimate interest of third parties or a legitimate interest on our part in their continued storage.
Such a legitimate interest of a third party is, for example, the further display of the chat history with you in the chat partner’s account or including your name in notifications to other users to indicate that you, by deleting your profile, have deleted one of the activities that they are also taking part in. This data will be deleted as soon as the respective reason for storage no longer exists.
11 - Security
Social Quest always takes appropriate and state-of-the-art technical and organizational measures to protect your data in the best possible way. This currently includes, for example, the encryption of the password and the transmissions to our server as well as technically up-to-date measures against unauthorized access to our infrastructure.
12 - Your rights
You have the right to access your stored personal data, information about their origin and recipients and the purpose of data processing at any time and, if the legal requirements are met, the right to rectification, data portability, restriction of processing and blocking or deletion of incorrect or inadmissibly processed data.
You have the right to withdraw your consent to the processing of your personal data at any time with effect for the future.
You also have the right to object to the processing of your personal data on the basis of our legitimate interests if grounds for doing so arise from your particular situation. You may object to the processing of your data for direct marketing purposes at any time without giving reasons.
To exercise your above-mentioned rights, please contact us by e-mail at firstname.lastname@example.org or by postal mail at the address given under Section 2. However, you can also exercise some of your rights yourself quite simply, for example by making the appropriate settings as described above and by deleting individual details.
If you are of the opinion that the processing of your personal data by us violates applicable law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the data protection authority. However, in order to avoid proceedings, we kindly ask you to contact us in advance in all cases.
Version: 1st February 2022