Privacy Policy

Table of Contents

• Data Controller
• Overview of Data Processing
• Legal Bases
• Security Measures
• Processing of Uploads and Attachments
• Deletion and Retention Period
• Technical Framework
• Rights of Data Subjects

1. Data Controller

Join Group 2485
Represented by:
Maximilian Schmidt
Viktor Wilhelm
Stefan Sträter

Email: info@join.de

2. Overview of Data Processing

When using our application, personal data is processed to provide the functions of the platform.

Categories of Data Processed

• Inventory data
• Contact data
• Content data (e.g., tasks, descriptions)
• Usage and log data
• Meta and communication data
• Uploaded files (especially images)

Data Subjects

• Users of the application
• Communication partners

Purposes of Processing

• Provision and operation of the online service
• Management of tasks and file attachments
• User authentication
• Ensuring security and stability
• Communication with users

3. Legal Bases

The processing of personal data is based in particular on:

• Art. 6 (1) lit. a GDPR – Consent
• Art. 6 (1) lit. b GDPR – Performance of a contract
• Art. 6 (1) lit. f GDPR – Legitimate interests (technical operation and security)

4. Security Measures

To protect data, appropriate technical and organizational measures are employed, in particular:

• Encrypted data transmission (TLS/SSL)
• Access protection through authentication
• Role-based permissions
• Use of a secure cloud infrastructure

5. Processing of Uploads and Attachments

Local Processing

Uploaded files are initially processed in the browser:

• Automatic scaling of images to a maximum of 800 × 800 pixels
• Compression to approximately 70% quality
• Conversion to a suitable transfer format

Cloud Storage

The data is transmitted encrypted to Firebase Storage (Google Cloud Platform, location Europe) and stored there. In this process:

• Transfers are secured via HTTPS
• Data is encrypted at rest
• Files are uniquely assigned to a task
• Access is enabled only for authenticated users

Access Control

• Authentication via Firebase Authentication
• Blocking of unauthorized access
• Protected download URLs

6. Deletion and Retention Period

• When a task is deleted, all associated attachments are immediately and permanently removed.
• Users can delete individual files themselves at any time.
• No additional archiving of deleted data is performed.

7. Technical Framework

Supported file formats include in particular:

• JPEG, PNG, GIF, WebP

Firebase or Google Cloud Platform is used as a data processor in accordance with Art. 28 GDPR.

8. Rights of Data Subjects

Data subjects have the following rights under the GDPR in particular:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Contact

Join Group 2485
Represented by:
Maximilian Schmidt · Viktor Wilhelm · Stefan Sträter

📧 info@join.de