Data protection declaration for the cityscaper app

Please read this privacy policy carefully as it contains important information about who we are, how and why we collect, store, use and disclose personal data, your rights in relation to your personal data and how you can contact us and supervisory authorities in the event of a complaint.

1. Who we are

cityscaper GmbH (“cityscaper”, “we” or “us”) collects, uses and is responsible for certain personal data about you as part of the “cityscaper” app (the “Service”). For everyone located in the European Union, we are subject to the General Data Protection Regulation, which applies throughout the European Union (including the United Kingdom). We are responsible for your personal data within the meaning of these laws.

2. Public information

When you use the Service, your username and Shared Information (defined in Section 3 below) may be publicly viewed by others using the Service. We recommend that you do not use your real name or other information that can be used to personally identify you as part of your username. This information may be used to initiate unsolicited contact with you by third parties. Additionally, since the service uses your device's raw camera feed, for your own safety and privacy, you should avoid taking videos or photos in private spaces or of other people. We are not responsible for your username or the manner in which it may be used by third parties. Additionally, you should exercise caution with any information shared, and we recommend that you not disclose any personal information that could be used to identify or contact you when using the Service.

3. The personal information we collect

When providing the Service, we collect the following personal information either automatically or when you voluntarily provide it to us:

Your name and email address are collected when you sign up for our mailing list or contact us with a service-related issue or support ticket (your “Contact Information”). The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
Your username, email address, password, and other information that help us confirm your access to your account when you sign up for an account on the Service (your “Account Information”). To use the service, creating an account is voluntary. An account is required to manage your own projects. The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
Your location, whether collected from your device's GPS or other location information or from your IP address or other identifier (your "Location Information"), to display your location on the map, locate custom projects on the map, and the Augmented Reality experience or via your IP address for analysis purposes. The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
Your raw camera feed is collected by your device (your “Camera Information”) once you start the Augmented Reality experience. The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
All shared content that you post, send or otherwise share with other users through the Service (your “Shared Information”). This may include any interaction with other users in our feedback features, Augmented Reality representations and project descriptions, posting public comments, sending messages to other users and posting photos, etc. The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
Certain technical information about your device and other information such as your device make and model, configuration information, unique device identifiers (“Device ID”), device token, operating system version, language, time zone, device carrier is collected when you use the Service (your “Technical Information”). The legal basis for collecting this information is the fulfillment of a contract with you in accordance with GDPR Art. 6 (1) (b).
Information about your usage, including usage time, project views, access times, time-stamped Augmented Reality interactions, and interactions with other users (your “Usage Information”). The legal basis for collecting this information is our legitimate interest in accordance with GDPR Art. 6 (1) (f).
Information shared with us by third parties: We sometimes collect information about you from third parties such as Apple and Google. We may combine this information with information we collect directly from you. This information is collected:
If you download or purchase our mobile apps through the Apple App Store, Google Play Store or other stores, we may collect information about your download or purchase.
When you log in to the Service using a social media account such as Facebook or Twitter, we collect basic profile information such as your name, username, gender, age, profile photo and friends list. Please note that if you sign up for our Services through a third-party service, you represent that your access to and use of such features in connection with our Services will be in accordance with that third party's applicable terms of use and privacy policies.

4. How we use your personal data

We use your personal data as follows:

Operating the Service: In order to operate the advertised features of the Service, including location-based Augmented Reality displays and activities, operation of public forums and messages, and other aspects of the Service, cityscaper may use any of the information collected from you above.
Newsletter: cityscaper may use your contact or account information to send you commercial or marketing messages, including newsletters and email communications about our products or services.
More technical Support: cityscaper uses contact information, account information, technical information, usage information, and any other information you provide to us about your device or yourself, as necessary, to provide you with technical support for the Service.
Feedback functions: cityscaper may offer you the opportunity to participate in surveys and other service feedback. We may use your contact information and account information for these purposes. We may use your contact information to receive and process surveys and feedback to improve the Service. We may link your account information, shared content and usage information for these purposes and share them with third parties who have commissioned a specific project. Before the transfer, you will be informed about the process and the privacy policy of these third parties and can cancel the process if this data has not been completely anonymized before the transfer.
Analytics and service improvements: We use your usage information, technical information, location information and account information to collect and analyze application and user data to improve the Service.‍
Who we share your personal data with: We share your personal information with certain third parties as part of our operation of the Service. This data transfer enables us to provide you with the service in the best possible way. Some of these third-party recipients may be based outside the European Economic Area. For further information, including how we will protect your personal data in this case, please see their individual privacy policies linked below and the “Transferring your data outside the EEA” section below. We share your personal information with the following third parties:

Google Play Services: The service runs on Google Play Services for AR (ARCore) (https://play.google.com/store/apps/details?id=com.google.ar.core), which are provided by Google LLC and are subject to Google's Privacy Policy, which you can find here (https://policies.google.com/privacy). Your camera and location information will be shared with Google LLC for these purposes.
Email and Support: We use Hubspot to manage the service's support and newsletter functionality. Your shared information, contact information and account information may be shared with them for these purposes. You can view their privacy policy here (https://legal.hubspot.com/privacy-policy). We use Google Workspace to send emails. Your shared information, contact information and account information may also be shared with Google LLC for this purpose. You can read Google's privacy policy here (https://policies.google.com/privacy).
Mapping and location-based functionality: We use Mapbox to manage mapping, GPS, and other location-based features of the Service. Your location information may be shared with them for these purposes. You can view their privacy policy here (https://www.mapbox.com/legal/privacy/).
In addition, the Service uses your camera information and your device's sensor data (information about physical properties and your device's sensor feed, such as the inertial measurement unit). This helps position your device relative to the world as you create and share the city of the future. This data is packaged into a video file and shared with Google to use multi-user localization technology (AR Core Cloud Anchors). You can read Google's privacy policy here (https://policies.google.com/privacy).
Firebase: We use Google's Firebase service to deliver the content to the app and to store your feedback and input in Augmented Reality and share it with other devices. We also analyze user behavior via Firebase to improve the service. Your unique user ID and account information will be shared with Google for these purposes. You can read Google's privacy policy here (https://policies.google.com/privacy).
Other distribution: We will disclose your personal information when we believe in good faith that the access, use, preservation or disclosure of this information is reasonably necessary to satisfy any applicable law, regulation, legal process or to comply with a law enforcement or government request, such measures are necessary to detect, prevent or otherwise address fraud, security or technical issues related to the Service, such measures are appropriate to protect cityscaper or the rights, property or safety of its employees, customers or users. In other cases, we will only share your information if we inform you of the process and the privacy policy of those third parties before sharing. You can cancel the process. In all other cases, your personal data will not be passed on to other third parties without first being completely anonymized. ‍
How long will your personal data be kept: We will retain your personal information for as long as necessary to provide you with the service, unless a longer retention period is required or permitted by law. We will then delete all of the aforementioned data in our possession within a reasonable period of time. We do not verify the accuracy of the personal information we collect or that you provide. Please note that some data may be retained as necessary to resolve disputes, enforce cityscaper's Terms of Use and comply with technical and legal requirements and restrictions relating to the security, integrity and operation of the Service.

5. Transfer of your data from the EEA

cityscaper is based in Germany. Regardless of your location, you consent to the transfer, processing and storage of your information to and from the United States and other countries where our third party service providers are located, in accordance with the privacy policies of the third parties with whom we share your personal information. The laws of the United States and these other countries governing data collection and use may not be as comprehensive or protective as the laws of the country in which you live. If you would like further information, please contact us (see “How to contact us” below). We have concluded appropriate order processing contracts with all third parties to protect your data. We also store all data in the EEA if the third party service offers such an option.

6. EU citizens – your rights

Under the laws of some jurisdictions, including the General Data Protection Regulation in the EEA, you have a number of important rights in relation to your personal data.

Legally, you can ask us what information we hold about you and you can ask us to correct it if it is inaccurate. If we have asked you for your consent to process your personal data, you can withdraw this consent at any time.

If we process your personal data for consent purposes or to fulfill a contract, you may request that we provide you with a copy of the information in a machine-readable format so that you can transmit it to another provider.

If we process your personal data based on consent or a legitimate interest, you can request that your data be deleted.

You have the right to ask us to stop using your data for a certain period of time if you believe we are not lawfully doing so.

In certain circumstances, you can ask us not to make decisions about you through automated processing or profiling.

If you would like to exercise any of these rights, please send us an email to datenschutz@cityscaper.de. We may request additional verification information such as: Your username and other information necessary to ensure that you are the owner of this data.

7. Protection of your personal data

We have implemented appropriate security measures to prevent personal information from being accidentally lost or used or accessed in an unauthorized manner. For example, we limit access to your personal information to those who have a genuine business need to use it. Those who process your data will only do so in an authorized manner. We also have procedures in place to deal with suspected data breaches. We will notify you and any applicable regulator of a suspected data breach where we are legally required to do so.

8. Resolution of Disputes

We hope that we can resolve any questions or concerns you may have regarding our use of your personal information. Please contact us using the methods listed in the “How to Contact Us” section below to let us know your questions or concerns. We will then contact you to resolve the issue. If you are an EU citizen, the General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state in which you work, have your habitual residence or in which data breaches have occurred.

9. Changes to this Privacy Policy

This privacy policy was last updated on February 1st, 2024. We may change this privacy policy from time to time. If we do so, we will notify you by email to the email address you provided to us through your account or by posting a notice of the change within the Service.

10. How to contact us

Please contact us if you have any questions about this privacy policy or the information we hold about you. If you would like to contact us, you can do so by email datenschutz@cityscaper.de or by post to cityscaper GmbH, Kleinmarschierstr. 33, 52062 Aachen, Germany.

‍