Privacy | Heymoney!

Privacy policy

The Heymoney website (heymoney.de, “Website”) is operated by IconicFinance (“we” or “us”). In this Privacy Policy we describe how we process your personal data in accordance with the General Data Protection Regulation (“GDPR”).

General information:

Details of the responsible body:

Company: IconicFinance GmbH

Legal representatives: Dr Bernd Storm van’s Gravesande, Arnold Brunner, Tobias Tschiersky

Address: IconicFinance GmbH, c/o Allianz X GmbH, Leopoldstraße 28a, 80802 Munich, Germany

Email address: datenschutz@heymoney.de

Contact details of the data protection officer:

IITR Data Protection GmbH

Dr Sebastian Kraska

Marienplatz 2, 80331 Munich, Germany

Data processing by us

Use of the website

Purpose of processing: providing the website to website visitors and ensuring the security of the website

Personal data processed: IP address, type of browser, type of terminal device, operating system, referrer URL, date and time of accessing the website, content of the visited website (“website usage data“).

Legal basis of the processing:

Provision of the website and website services: Art. 6 (1) lit. b GDPR (performance of a contract)
Security of the website: Our legitimate interest in providing visitors to the website with a functioning and technically secure website (Art. 6 (1) lit. f GDPR).

Recipient categories: Our service provider Amazon Web Services (Frankfurt am Main region), which provides the technical infrastructure for hosting and operating the website.

Duration of data storage: We process website usage data for the above-mentioned purpose only as long as necessary to provide you with the website content in a secure manner. Otherwise, we only store personal data for the assertion or defence of legal claims or for the fulfilment of legal retention obligations or in order to comply with legal obligations.

Website statistics

Processing purpose: Reach measurement, analysis of the use of the website by means of cookies or similar technologies.

Personal data processed: Type of terminal device, operating system, date, time and duration of the visit to the website, sub-pages visited on the website, screen resolution, default language of the browser, user agent of the browser (“Analytics data“).

Legal basis of processing: Our legitimate interest in providing a user-friendly, needs-oriented website (Art. 6 (1) lit. f GDPR).

Recipient categories: Our web analytics tool Countly, which is hosted and operated by us. We only analyse which pages have been accessed, not which interactions have been made on the website. We also do not create usage profiles of you as an individual visitor to the website but pseudonymise all data and then aggregate it at the first possible moment. The analysis data is used exclusively for optimising the website and is not used or passed on for other purposes.

Duration of data storage: We only process the analysis data for as long as is necessary for the analysis. The cookies we use are only used for a maximum of 30 minutes, as analysis data should only be collected for individual website visits but not over several visits. Otherwise, we only store your personal data for the assertion or defence of legal claims or for the fulfilment of legal retention obligations.

You can object to the processing by Countly here:

Your visit to this website is currently being tracked by Countly Web Analytics. Deselect this checkbox to opt-out.

Newsletter

Purpose of processing: sending newsletters to newsletter subscribers; measuring the reach and success of the newsletter; personalising the newsletter.

Personal data processed: E-mail address, first name, last name; information on delivery and opening of the newsletter as well as information on the newsletter links called up (“newsletter interaction data“).

Legal basis of the processing:

E-mail address for newsletter delivery, first name, last name for personalisation of the newsletter: Art. 6 (1) lit. a GDPR (consent).
Newsletter interaction data for reach measurement: Our legitimate interest in measuring the success of our direct marketing (Art. 6 (1) lit. f GDPR).

Recipient categories: Our service provider Braze, which manages subscribers, sends emails and collects newsletter interaction data on our behalf.

Duration of data storage: We only process your personal data for the stated purpose as long as you have not unsubscribed from the newsletter (i.e. revoked your consent). You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a corresponding message.

Otherwise, we only store your personal data for the assertion or defence of legal claims or for the fulfilment of legal storage obligations.

Contact form

Purpose of processing: to respond to requests from visitors to the website

Personal data processed: E-mail address, content of the request and – if provided – first name/last name (“contact form data“).

Legal basis of processing: Art. 6 (1) lit. b GDPR (contract performance)

Categories of recipients: External service providers or other contractual partners

Duration of data storage: We store your contact form data until we have finally answered your enquiry. Otherwise, we only store your personal data to defend legal claims or to comply with legal obligations.

Heymoney Academy

Purpose of processing: Login to the Heymoney Academy site

Personal data processed: Number entered to log in to Heymoney Academy

Legal basis of processing: Art. 6 (1) lit. b GDPR (contract performance)

Categories of recipients: Our service provider Amazon Web Services (Frankfurt am Main region), which provides the technical infrastructure for hosting and operating the website.

Duration of data storage: We only process the number you enter to see whether you are authorised to log in to the Heymoney Academy. The number is not stored or processed for analysis purposes. Otherwise, we only store your personal data to defend legal claims or to comply with legal obligations.

Registration for Allianz Agency

Processing purpose: registration to the Heymoney app by the representatives.

Personal data processed: E-mail address, representative no. and first name, surname (“registration data”)

Legal basis of the processing: E-mail address, first name, last name: Art. 6 (1) lit. a GDPR (consent)

Agent no.: Our legitimate interest in being able to assign and organise agents, e.g. provision of the app as a contact base to customers (Art. 6 (1) lit. f GDPR).

Recipient categories: External service providers or other contractors who assist us in providing the app.

Duration of data storage: We process your data as long as you want to use the app and do not revoke your consent.

Registration for Allianz Executives Login

Purpose of processing: registration for managerial support by managers.

Personal data processed: E-mail address, office, job title and first name, surname (“registration data”).

Legal basis of the processing: E-mail address, first name, last name: Art. 6 (1) lit. a GDPR (consent)

Office, job title: Our legitimate interest in being able to assign and organise managers, e.g. provision of new information for customer care (Art. 6 (1) lit. f GDPR).

Recipient categories: External service providers or other contractors who assist us in providing the app.

We use HubSpot in particular for this:

We send our newsletter using the newsletter service “HubSpot”, which is offered by HubSpot Inc (25 First Street, Cambridge, MA 02141 USA).

The email addresses of our newsletter recipients and their other data described in this notice are stored on HubSpot servers in the USA. HubSpot uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, HubSpot may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and display of the newsletters or for economic purposes to determine from which countries the recipients come. However, HubSpot does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

We have concluded an order processing contract and standard data protection clauses with HubSpot. HubSpot does not have the right to pass on your data.

You can find HubSpot’s privacy policy here.

The use of the HubSpot newsletter service is based on our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of users.

Information on tracking by Hubspot at: https://knowledge.hubspot.com/email/analyze-your-marketing-email-campaign-performance#performance

Duration of data storage: We process your data as long as you wish to use our service and do not revoke your consent.

Registration as a beta tester

Purpose of processing: management of beta testers (beta testers are pilot users who voluntarily test our platform and app during the pilot phase), organisation of training for beta testers and sending of relevant information material.

Personal data processed: Email address, your business address and – if provided – first name, surname (“beta tester data“).

Legal basis of the processing:

E-mail address, first name, last name: Art. 6 (1) lit. a GDPR (consent)
Office: Our legitimate interest to organise trainings according to the locations of the beta testers, e.g. provision of trainings close to the locations (Art. 6 (1) lit. f GDPR).

Recipient categories: External service providers or other contractual partners who assist us with data management and the dispatch of information material and sales directorates.

Duration of data storage: We process your beta tester data as long as you want to be a beta tester and do not revoke your consent.

Data subjects’ rights

Provided the relevant legal requirements are met, you have the following rights under the GDPR in relation to your personal data that we process:

Right to information

You can ask us to tell you whether we are processing your personal data and, if so, to provide you with a copy of that data (together with any other relevant information).

Right of rectification

If any personal data we process about you is incorrect or incomplete, you have the right to request that it be corrected or completed.

Right to erasure (right to be forgotten)

In certain circumstances, you may request that we delete your personal data.

Right to restrict processing

In certain circumstances, you can ask us to restrict the processing of your personal data.

Right of objection

You can ask us to stop processing your personal data if we:

Process your data on the basis of a legitimate interest and cannot provide compelling legal grounds for further processing; or
use your personal data for direct marketing.

Right to data portability

In certain circumstances, you have the right to request that we provide your personal data to us in a structured, commonly used, electronically readable format.

Right to withdraw consent

If we process your personal data on the basis of your consent, you have the right to revoke your consent at any time for the future. The processing of your personal data before the revocation remains lawful.

Right of appeal

You have the right to lodge a complaint with the competent data protection authority at any time if you believe that the processing of personal data by us violates applicable data protection law.

Contact

You can contact us by e-mail, via datenschutz@iconicfinance.io, via section 1 of this privacy policy or via the contact details provided in the imprint https://heymoney.de/impressum. For general issues, please contact hello@heymoney.de.

Version May 2021