This English version is provided for convenience only. The German version is legally binding. Read the German version
1. Controller
The controller within the meaning of the GDPR is:
EastsitePlatforms UG (haftungsbeschränkt) Seckenheimer Landstraße 7, 68163 Mannheim, Germany Email: info@traintrackapp.de
2. General information on data processing
(1) We only process personal data to the extent necessary to:
- provide the app,
- run its features,
- fulfil contracts,
- comply with legal obligations.
(2) Processing takes place exclusively on the basis of the GDPR, in particular Art. 6 GDPR.
(3) The app is aimed at users within the European Union.
3. Collection of personal data when using the app
3.1 Registration & user account
When you register, we process the following data:
- Name (freely chosen)
- Email address
- Password (stored in encrypted form)
- Profile information (e.g. bio)
- Profile picture (optional)
- Time of registration
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
3.2 Registration via third-party providers
Alternatively, you can register using the following services:
a) Google Sign-In b) Apple Sign-In
In this case, we receive the following from the respective provider:
- a unique user ID
- your email address (anonymised by Apple, if applicable)
- your name, if applicable
We do not receive access to passwords.
Legal basis: Art. 6(1)(b) GDPR
4. User content (posts, photos, videos, comments)
When you upload or publish content, we process:
- images and videos
- text content
- timestamps
- location details, if applicable
- technical metadata
Depending on your settings, this content is publicly visible.
Legal basis: Art. 6(1)(b) GDPR Art. 6(1)(f) GDPR (legitimate interest in operating the platform)
5. Location data
If you allow it, the app can access location data, e.g. for:
- location details in posts
- map features
- displaying sightings
Sharing your location is voluntary and can be revoked at any time in your device settings.
Legal basis: Art. 6(1)(a) GDPR (consent)
6. Push notifications
The app can send push notifications, e.g. about:
- new content
- community interactions
- system notices
Permission is requested via the operating system and can be deactivated at any time.
Legal basis: Art. 6(1)(a) GDPR
7. Gamification (points & badges)
When you use the app, we process data in order to award:
- points
- badges
- activity status
This data has no commercial value and is used solely for display within the app.
Legal basis: Art. 6(1)(b) GDPR
8. Payment processing & subscriptions
Paid features are processed exclusively via:
- Apple App Store
- Google Play Store
We do not receive any payment data (e.g. credit card details). We only process information about your subscription status.
Legal basis: Art. 6(1)(b) GDPR
9. Service providers (data processing on our behalf)
We use the following external service providers:
All service providers are contractually bound in accordance with Art. 28 GDPR.
9.1 Google Firebase / Firestore
- user authentication
- data storage
- server operation
Provider: Google Ireland Limited Data may be transferred to third countries. Such transfers take place on the basis of EU standard contractual clauses.
9.2 Algolia Search
Search function within the app
9.3 Google Maps API
Display of maps and locations
10. Log and usage data
When the app is in operation, technical data is processed automatically:
- device information
- operating system
- app version
- IP address (truncated/anonymised)
- times of access
This data is used for:
- security
- error analysis
- technical optimisation
Legal basis: Art. 6(1)(f) GDPR
Usage analysis in the app – Google Analytics 4 (GA4)
In our mobile app Traintrack, we use Google Analytics 4 (GA4) to analyse how the app is used and to improve our service technically and in terms of content.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The data processed may include in particular:
- device information (e.g. operating system, app version)
- usage and interaction data within the app
- IP address (truncated or anonymised)
- time and duration of use
- approximate location data (country/region)
Google Analytics 4 does not use traditional cookies but works with event-based measurements.
Personal data is processed only with your prior consent.
Legal basis: Art. 6(1)(a) GDPR (consent)
It cannot be ruled out that personal data will be transferred to Google servers in the USA. The transfer takes place on the basis of the standard contractual clauses approved by the European Commission in accordance with Art. 46 GDPR.
You can withdraw your consent at any time with effect for the future, e.g. via the privacy settings within the app or through the corresponding settings on your device.
11. Reporting system & communication
If you report content or users or contact us, we process:
- your contact details
- the reported content
- the content of our communication
Legal basis: Art. 6(1)(c) and (f) GDPR
12. Storage period
We store personal data:
- for as long as a user account exists
- beyond that, only if statutory retention obligations apply
Once an account has been deleted, the data is deleted without undue delay, unless there are legal reasons to the contrary.
13. Your rights as a data subject
You have the following rights at any time:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
Please send any requests to: info@traintrackapp.de
14. Withdrawal of consent
You can withdraw any consent you have given at any time with effect for the future.
15. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
16. Data security
We use technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
17. Changes to this privacy policy
We reserve the right to amend this privacy policy in order to reflect legal or technical changes.
