The protection of your personal data is important to us. With this data privacy statement, we aim to explain to you in more detail what personal data we collect when you use boatping.com and for what purpose the data is used.

1. Contact information and responsible party
Responsible for the processing of your personal data is:

Camilla van Klinken t/a Chasing Mermaids, Studio 18 Bluelion Place, 237 Long Lane, SE1 4PU.

If you have any questions or suggestions regarding data protection, please feel free to email us at team@boatping.com.

You can contact our privacy protection officer at team@boatping.com.

2. Subject matter of data protection
The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person.

3. Automated data collection
When accessing our website, your device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

URL of the page accessed
The latency of the network connection
Date and time

We save this data for the following purposes:

Load balancing, i.e. to distribute the access to our website across several devices and to be able to offer you the fastest possible loading times.

Ensuring the security of our IT systems, for example, to prevent specific attacks on our systems and to identify attack patterns.

Ensuring the proper operation of our IT systems, for example if errors occur that we can only remedy by storing the IP address.

To enable criminal prosecution, security or legal prosecution if there are specific indications of criminal offenses.

In this case, the processing takes place on the basis of our predominant legitimate interests mentioned above (Art. 6 Para. 1 lit.f GDPR).

4. Registration data
To be able to use all functions of BoatPing, you have to register. For this you have to provide the following mandatory information:

Phone number and/or Email address

If you login with your phone number your friends, who also use Boat Ping may be able to find you via the search function, assuming this is enabled or we have created it.

Alternatively, you can log in with your Facebook or Apple account. In this case, we receive the following personal data from Facebook or Apple in order to create a user account for you:
Name
Email address
Photo (Facebook only)
An authentication token

If you log in via Facebook, your Facebook friends who also use BoatPing may be able to find you via the search function when this is what you want and have, as such, enabled the correct settings on Facebook.

Your registration data is required to set up and manage a user account for you and so that you can use all the features of our website. In this case, you conclude a (free) usage contract with us on the basis of which we collect this data (Art. 6 Para. 1 b GDPR).

In order to conclude the contract, you have to provide us with this data. However, you are neither contractually nor legally obliged to conclude the contract and thus to provide the data.

In addition, you can provide further voluntary information as part of the registration, for example, you can save a profile photo, tell others about yourself or indicate your favorite sailing areas. This information is voluntary and not necessary to register you. Please note, however, that this information may be visible to other BoatPing users. You can determine whether you want to be found by other users by signing up to Fleets. If you sign up to a Fleet all the users that are part of that Fleet will be able to see some of your details. We collect this data in order to be able to provide you with the corresponding functions of our website, Art. 6 Para. 1 lit. b GDPR.

When you log in to BoatPing, we also save your IP address for a short period of time in order to be able to detect and prevent possible attacks and mass misuse of logins to boat ping (e.g. so-called brute force attacks) by accessing these IP Block addresses temporarily if necessary. The processing takes place in order to ensure the security of the processing according to Art. 32 GDPR and based on our legitimate interest in protecting us from misuse of our service (Art. 6 Para. 1 lit.f GDPR). The storage takes place only as long as it is necessary for these purposes.

5. Location data

The primary function of BoatPing is to log and track your sailing and boating trips. In order to do this we store the following types of location data:

• Precise location data – The precise GPS location of your device
• Motion data – Named fitness activity on iOS and physical activity data on Android which is movement and predicted mode of transport

Location data is used to show you your speed, COG (Course Over Ground), Distance travelled, DMG (Distance Made Good) as well as to create a track of your trip on a map while using the application to track your trip.

This data is also stored on your phone in the application so that you can review past trips and is automatically synchronised to our servers so that you can view your trips on multiple devices and ensure that you do not loose past trip data. By default this information is not made public however, you may choose to share trips or make them public using community features as described below.

We may also use location data in aggregated statistics for example to show how many miles all users in a given country or region have sailed in a period of time.

6. Community functions
At BoatPing, you can interact with other users, for example by joining a Fleet, sharing your trips via share links or embedding, commenting, giving other tips or discussing with other users. You may in future also be able to follow other users if you want to keep up to date with new posts from them.

The use of these functions is of course voluntary. If you use it, we collect the data you have entered in order to make it accessible to other BoatPing users in accordance with your settings and the function you use.

If you wish, we will also inform you by email or push notification if there is any news from your Fleets. You can set which notifications you receive yourself in your settings.

Your data is processed for these purposes in order to be able to provide you with the functions within the framework of your user contract (Art. 6 Para. 1 lit. b GDPR).

7. Inquiries
If you send us inquiries by email or other means, your details will be saved and used to process the request.

We store inquiries about contracts or of potentially legal relevance during the general limitation period, i.e. three years from the end of the year in which we received your inquiries. We save all other inquiries for a period of 24 months. After that, your inquiries will be deleted unless we are legally obliged to keep them longer.

The storage takes place on the basis of our legitimate interest, the proper documentation of our business operations and the securing of our legal positions (Art. 6 Para. 1 lit.f GDPR). For inquiries about contracts, the data is saved for the initiation and implementation of the respective contractual relationship (Art. 6 Para. 1 lit. b GDPR) and, if applicable, for the fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR).

8. Newsletter
If you register with us, we will inform you about news about our services on the boat ping platform about once a month and this is what you are signing up for as this is the only service we offer.

In this case, the collection and processing of your personal data takes place due to our legitimate interest in promoting similar services to your user account with BoatPing (Art. 6 Para. 1 lit. f GDPR, § 7 Para. 3 UWG).

You can object to this at any time – even when registering – by deactivating the corresponding checkbox or by clicking on the link to unsubscribe in the respective emails.

9. ReCaptcha
We use reCaptcha, a service from Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”), which is integrated into our website and shows the so-called Captchas – small tasks that are easy for people to solve but for machines are difficult to manage. These Captchas help us to prevent the automatic creation of user accounts and thus spam, fraud and other abuse in our community.

If you call up our registration form, reCaptcha will collect device and possibly personal data from you in order to be able to recognize whether you are a human user or a spam bot.

Further information can be found in Google’s privacy policy.

We use reCaptcha on the basis of our legitimate interest in protecting ourselves from spam, fraud against us and our users and other misuse through automatically created accounts (Art. 6 Para. 1 lit. GDPR).

10. Cookies
We save so-called “cookies” in order to be able to offer certain functions of our website and to optimize the use of our website. “Cookies” are small files that are saved on your device with the help of your internet browser.

Specifically, we use the following cookies (unless other cookies are specified elsewhere in this data protection declaration):

Session cookies: These cookies are required to save certain technical data during your visit to our website, e.g. to determine whether you have logged in.

Login cookies: These cookies are required to save your login over a session if you want to.
The legal basis for the use of these cookies is Section 15 (1) TMG and Article 6 (1) lit. b GDPR, insofar as these are necessary for the use of our website and the functions you have called up. We also use cookies based on the consent you have given.

11. Google Analytics
If you consent, we will use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Your data remains stored with Google Analytics for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Analytics is based on your consent (Art. 6 Para. 1 a GDPR).

You can revoke your consent at any time and deactivate Google Analytics using a browser add-on. You can download this here .

11.1. Google Optimize
If you consent, along with Google Analytics we will use Google Optimize, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Optimize collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Your data remains stored with Google Optimize for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Optimize is based on your consent (Art. 6 Para. 1 a GDPR).

You can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

12. Firebase
We use Firebase. Firebase is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Google’s privacy policy click here.

https://firebase.google.com/support/privacy

13. Social plugins
If you want, you can use social plugins to share the content of our website on social networks. We are planning to provide a two-click solution: If you want to share content via such a plugin, you must first click on an icon of the corresponding social network. This click then unlocks the plug-in of the respective social network for the future.

Only then will various data be transmitted to the respective social network. This can include:

Date and time of the visit to the website
URL of the website you are on
URL of the website you previously visited (“referrer”)
Browser used
Operating system used
Your IP address
You are not required to use this feature and if you do not this information will not be shared.

If you are logged into the respective social network while visiting our site, it is not excluded that the provider assigns the visit to your account. If you use the plugin functions (e.g. clicking the “Like” button, submitting a comment), this information will also be transmitted from your browser directly to the respective social network and saved there if necessary. The purpose and scope of the data collection and the further processing and use of the data by the networks can be found in the data protection information of the respective social network.

14. Integrated third-party content
We have also included third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it is not excluded that these providers can take note of the IP address assigned to you. As far as personal data is processed, this is done on the basis of the data protection declarations of the respective third party providers. The integration by us takes place on the basis of our legitimate interests, to be able to provide our users with the appropriate content and functionalities and to operate our website economically, as well as the fact that your legitimate interests do not prevail, Art. 6 para. 1 lit. f GDPR. We include the following third-party content:

Google Maps
If you want to activate the satellite or street view of Google in our maps, we integrate Google Maps, a service for users in the EU from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or for other users is provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”) for the display of maps. There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Google’s privacy policy, click here.

YouTube
We use YouTube videos. YouTube is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

For more information on Google’s certification, here. You can find Google’s privacy policy click here.

Google Fonts
We use fonts, a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”) to embed fonts. We do not transmit any personal data to Google. Google also does not use cookies. However, for technical reasons your browser will transmit your IP address to Google. For the USA, the European Commission made a decision on July 12, 2016 that an appropriate level of data protection exists under the regulations of the EU-US Privacy Shield (adequacy decision, Art. 45 GDPR).

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR. To view Google’s privacy policy, click here, for further information on data processing at Google Fonts, click here.

15. Web host
We operate our website on the servers of our web host Amazon Web Service EMEA Sarl, 38 avenue John F. Kennedy, L-1855, Luxembourg, which processes personal data on our behalf. Processing takes place only within the European Union.

We also host services with Krystal, Kemp House, 152 – 160 City Rd, London EC1V 2NX, UK which processes personal data on our behalf. Processing takes place only within the European Union.

Deletion of your data
Unless otherwise stated, we will delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the preceding paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website plus a period of 30 days in which we keep backup copies after the deletion. We will also keep your data if we are obliged to do so for legal reasons or if the data is needed for criminal prosecution or to secure, assert or enforce legal claims.

If you delete your user account, your profile will be completely and permanently deleted. However, we will keep backup copies of your data for a period of 30 days before they are finally deleted, provided that this data is no longer required for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims.

As far as data has to be kept for legal reasons, processing is restricted. The data will then no longer be available for further use.

Storage beyond the contractual relationship takes place on the basis of our aforementioned legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR.

16. Your rights as a data subject
16.1. Right to information
You have the right to receive information from us at any time on request about the personal data processed by us in the scope and under the conditions of Art. 15 GDPR and § 34 BDSG. To do this, you can submit an application by post or email to the above address.

16.2. Right to correct incorrect data
You have the right to request that we immediately correct your personal data if it is incorrect. For this, please contact the contact addresses given above.

16.3. Right to cancellation
You have the right, under the conditions described in Art. 17 GDPR and § 35 BDSG, to request that we delete your personal data. These requirements provide in particular a right to erasure if the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the obligation to erase them under EU law or the law of the Member State to which we are subject. For the period of data storage, see also section 15 of this data protection declaration. In order to assert your above right, please contact the above address.

16.4. Right to restriction of processing
You have the right to request that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the correctness of the personal data between the user and us is controversial, for the duration that requires the correctness to be checked and in the event that the user requests a restricted processing instead of the deletion in the case of an existing right to deletion; furthermore in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims and if the successful exercise of an objection between us and the user is still controversial. In order to assert your above right, please contact the above address.

16.5. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. In order to assert your above right, please contact the above address.

16.6. Right to object
You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation on the basis of Art. 6 Para. 1. Your right to objection exists for reasons arising out of your particular situation, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if the processing is necessary for the assertion and exercise of or defence against legal claims (Art. 21 (1) GDPR).

16.7. Right to complain
You have the right to contact a supervisory authority of your choice in the event of complaints.

16.8. Data processing when exercising your rights
Finally, we would like to point out that we exercise the rights according to Process Art. 15 to 22 GDPR to use personal data transmitted by you for the purpose of implementing these rights and in order to be able to provide proof of this. This processing is based on the legal basis of Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 ( 2) BDSG.

17. Changes to this data protection declaration
The current version of this data protection declaration is always available at https://www.boatping.com/privacy.

Updated: 20/04/2021