According to Art. 4 (1) GDPR, personal data is all information relating to an identified or identifiable natural person (for example: name, date of birth or e-mail address). If your personal data is processed, this means that we collect, store or use it, for example (Art. 4 (2) GDPR).
a) Installing and launching the app
When installing and calling up this app, technically necessary personal data is collected in order to provide and display the content accordingly.
In particular, the following personal data is processed:
- IP address
- Device ID (MAC address)
The processing of the above-mentioned personal data takes place on the legal basis of Art. 6 (1) (f) GDPR. The WWF has a legitimate interest in ensuring the content and technical usability of the app. The app cannot be offered to users without the processing in question. There is also an interest in the technical security and availability of the app.
In principle, the data mentioned are deleted after the end of the respective session. If there is reason to assume unauthorized or criminal access (e.g. through hacking), certain data categories (e.g. log files) can be stored longer to clarify the incidents.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
b) Registration
Registration is required to use the WWF GhostDiver App.
In particular, the following personal data is processed:
After completing and submitting the registration form, you will receive a confirmation e-mail with an activation link. Registration is complete when you click the activation link.
The legal basis for the above-mentioned processing of the required data categories is Art. 6 (1) (b) GDPR. Registration is voluntary and takes place to fulfill the terms of use.
The data collected will be stored for the duration of the account's existence. The account can be deleted at any time.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
c) Login and single sign-on
After activating the account, you can log-in to use the WWF GhostDiver App.
In particular, the following personal data is processed:
For simplified registration (and login), we also offer the authentication functions of Google, Meta (Facebook) and Apple. These have the following addresses:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google's privacy policy and terms of use can be found at: https://policies.google.com/privacy?hl=de
- Apple Inc., One Apple Park Way, Cupertino, CA 95014 USA
Apple's privacy policy can be found at: https://www.apple.com/legal/privacy/de-ww/
It cannot be ruled out that data processing may take place in the USA or outside the EU. If data is transferred to third countries (outside the EU) for which there is no adequacy decision by the EU Commission, corresponding standard contractual clauses of the EU Commission have been concluded, Article 46 (2) (c) GDPR.
By clicking the "Continue with..." Apple, Google or Facebook button, you are automatically registered and logged in with the account you have connected to the respective platform.
In particular, it cannot be ruled out that the services mentioned will process the following data:
- Possibly profile data (from the respective platform)
- e-mail address
- password
- Possibly content from the app
The legal basis for the above-mentioned processing of the required data categories is Art. 6 (1) (b) GDPR. Login and registration are voluntary and to fulfil the terms of use.
If you voluntarily and consciously decide to log in via third-party services, the legal basis is also Art. 6 (1) (a) GDPR. The decision to use the named function is voluntary and signals consent to the data processing. It is possible to revoke your consent at any time with effect for the future. The option of customary registration via the app with the e-mail address is possible at any time.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
d) Map function
To display already reported ghost nets (ownerless nets in the sea), it is possible to open an integrated map. This makes it possible to assign the reports already made to the corresponding coordinates and to match them with one's own location.
In particular, the following personal data is processed here:
- GPS data (longitude and latitude)
The legal basis for using the map function and the associated data processing is Art. 6 (1) (a) GDPR. You can voluntarily decide and consent to the app using your GPS data for the purposes listed above. By giving your consent, you clearly indicate your consent to the intended data processing. It is possible to revoke your consent at any time with effect for the future. You can do this in the settings of your respective end device.
The lawfulness of the data processing for the period up to the revocation remains unaffected by this.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
e) Reporting function
To report ghost nets (abandoned nets in the sea), you can document the finds in a report.
In particular, the following personal data is processed here:
- If applicable, first and last name (voluntary)
- e-mail address
- GPS data (longitude and latitude)
The legal basis for using the reporting function and the associated data processing is Art. 6 (1) (b) GDPR. The notification of ghost nets (abandoned nets in the sea) is the core of the WWF GhostDiver App.
Any personal data that may have been provided voluntarily is based on Article 6 (1) (a) GDPR. You can voluntarily decide and consent to the app using your GPS data for the purposes listed above.
By voluntarily entering or giving your consent, you clearly indicate your consent to the intended data processing. It is possible to revoke your consent at any time with effect for the future. Corresponding information can be removed at any time in the settings of the app. The lawfulness of the data processing for the period up to the revocation remains unaffected by this.
The legal basis for possible processing in the context of the publication of illegal content or claims is Art. 6 (1) (f) GDPR. The WWF has an interest in ensuring that no illegal content is published on the portal or that the rights of third parties are restricted. In addition, traceability should be ensured in order to enforce any claims.
The published content is not checked before publication and is therefore the responsibility of the respective members. Insofar as an illegality or infringement of the rights of third parties can be assumed, the content can be deleted by the administrators if necessary.
The report you create is displayed to other users of the app to identify and detect ghost nets (abandoned nets in the sea). If you have given your name as part of the reports and have consented to publication, this will be displayed to other users. Normally, your reports are otherwise anonymous. You can delete your report at any time. If you delete the profile, the associated reports are automatically anonymized and can no longer be assigned to you.
As part of the report, photos/video recordings can be added to show the current situation. The published content, in particular images and other attachments, may be subject to certain copyright and data protection restrictions. Users are prohibited from using or uploading content that restricts the rights of third parties. If, for example, a third person is shown in a picture, it is assumed that the member has a corresponding right of use and has complied with the data protection requirements for use.
The data collected will be stored for the duration of the account's existence. The account can be deleted at any time.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
f) Notifications and Contact
For further communication there is the possibility to receive notifications and to stay in contact with the WWF. The communication aims to improve the processing of reports and ghost nets (abandoned nets in the sea).
In particular, the following personal data is processed here:
- First and Last Name
- e-mail address
- Phone number (optional)
The legal basis for using the notification function and the associated data processing is Art. 6 (1) (a) GDPR. You can voluntarily agree to the notifications within the app (e.g. updates or the successful removal of ghost nets).
The legal basis for further contact by the WWF and the associated data processing is also Art. 6 (1) (a) GDPR. If you voluntarily agree to this, the WWF may contact you via the specified channels.
By entering this information voluntarily, you are clearly indicating your consent to the intended data processing. It is possible to revoke the consent with effect for the future at any time. The notification function can be deactivated at any time within the settings of your end device. Consent to be contacted can be revoked within the WWF GhostDiver App.
The lawfulness of the data processing for the period up to the revocation remains unaffected by this.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
g) Personalization of the profile
Within the profile function there is the possibility to customise and add to your personal details. Personalisation of the profile promotes networking and communication with WWF for the removal of ghost nets (ownerless nets in the sea).
In particular, the following personal data is processed here:
- First and last name (voluntary)
- e-mail address
- Phone number (optional)
- Profile picture (optional)
The legal basis for creating the profile as part of the registration and the associated data processing is Art. 6 (1) (b) GDPR.
The legal basis for voluntary information is Art. 6 (1) (a) GDPR. By entering this information voluntarily, you are clearly indicating your consent to the intended data processing. It is possible to revoke your consent at any time with effect for the future. The information provided voluntarily can be changed or deleted at any time. The lawfulness of the data processing for the period up to the revocation remains unaffected by this.
The data collected will be stored for the duration of the account's existence. The account can be deleted at any time.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
h) Contact
Using the contact function, an e-mail can be sent to the WWF via the contact form. Data processing takes place for communication and answering inquiries.
The following categories of personal data are processed here:
- e-mail address
- content of the email
The legal basis for this within the context of the contact function is Art. 6 (1) (f) GDPR. The legitimate interest of the WWF lies in answering the request. Insofar as the fulfilment of contractual obligations is covered by the request, the legal basis is Art. 6 (1) (b) GDPR.
The collected data will be kept for the fulfilment of the respective purpose.
Insofar as there are statutory retention periods, the data may be stored for the correspondingly prescribed period (retention obligations).
