Mupixa UG (haftungsbeschränkt)
E-Mail: founders(at)mupixa(dot)com

Last updated: 01.04.2020

Thank you for your interest in the way we handle privacy and protection of your data at Mupixa UG (haftungsbeschränkt), registered at Amtsgericht Munich with the number HRB 255640. Henceforth reffered as  “Mupixa”, “we”, “us” or “our”. Your privacy is important to Mupixa. Mupixa strives to protect your privacy at all times and to apply the highest ethical and regulatory standards. That is why all communication by and in our Mupixa Software-as-a-Service (the“SaaS”) is encrypted by industry standard SSL encryption. This Mupixa Privacy Policy (the "Privacy Policy") tells you about how we collect, use, disclose, transfer, and store your information, as well as the choices you have regarding your information including but not limited to personally identifiable information (the ”Personal Data”). It also gives you information about our use of cookies (detailed description and definition below), analytics tools, marketing and advertising practices and offline activities. Other than as expressly set out in this Privacy Policy or as otherwise required or permitted by law, we will not share, sell or distribute any of the information you provide to us without your consent (that in certain cases needs to be expressly granted).

DECLARATION OF CONSENT

BY READING, ACCEPTING THE CHECK-BOX FOR CONSENT WHEN REGISTERING, CLICKING START ON MUPIXA EXPERIENCES OR BY USING OUR SOFTWARE-AS-A-SERVICE, YOU EXPRESSLY CONSENT TO THE COLLECTION, USE AND TRANSFER OF INFORMATION AS SET FORTH IN THIS{' '} PRIVACY POLICY WHILE ADHERING TO{' '} PRINCIPLES OF DATA AVOIDANCE AND DATA ECONOMY.

WE COLLECT, USE, TRANSFER OR FORWARD PERSONAL DATA IN COMPLIANCE WITH THE PRIVACY PROTECTION LAWS OF THE FEDERAL REPUBLIC OF GERMANY AS WELL AS WITH THE PRIVACY REGULATIONS OF THE EUROPEAN UNION.

As part of our provision of the Mupixa SaaS to you and from our interactions with you, Mupixa needs to collect and has a legitimate interest to collect Personal Data. The Personal Data we collect is limited to information related to and needed for the conduct of our legitimate business purposes and/or fulfill commitments to you and fulfill our legal obligations as described in this Privacy Policy. Otherwise, Mupixa may not be able to provide services or information to you, or enter commercial engagements with you. We may have access to the following categories of information about you and only some of this information is Personal Data that could identify you directly, but each category may offer some information about your interests and activities that could be used to make inferences about you.

Thank you for your interest in Mupixa. The protection of your personal data is of utmost importance to us. In the privacy policy below you'll find details regarding how we record and use the information you provide while browsing and using our website and application.

Products and Services

The SaaS enables you to share access to your designs (the  Design) via an URL for interactive sessions (the  “Session”) where third parties chosen by you can interact with it. When using the SaaS you can upload and/or import and share your own documents (the “User Generated Content”).

Sharing a Session as well as sharing User Generated Content immanently requires certain sharing of information that may include Personal Data. During the usage of our SaaS some additional information (e.g. screen resolution, IP addresses of all session participants, time-stamps during the session) is processed and stored by us and our infrastructure sub-processors. For more detailed information go to our  infrastructure sub-processors.

Collected Data Analysis

By using our SaaS that allows for Interaction Analysis, you acknowledge and agree that you and your company are responsible for (a) clearly notifying all Participants for which you make an Interaction Analysis that such Session will be recorded and analyzed, and (b) obtaining any consent necessary for such Session Recording and Session Analysis as required by applicable laws, rules and regulations, including without limitation data privacy laws. By making an Session Recording and requesting Session Analysis of any Session using our SaaS, you and your company represent and warrant that (c) you have received legally sufficient consent from all Participants recorded (d) for us to collect, process, use and store provided anonymised Personal Data as set forth in this Privacy Policy and any commercial agreement you have entered into with us, (e) for such Session Recording and Audio, Video and Session Analysis prior to starting the respective Session Recording, (f) you will only make, use, store and otherwise process such Session Recording and/or Session Analysis in accordance with all applicable laws, rules and regulations, including data protection laws and (g) you will store and otherwise restrict access to the respective Session Recordings and/or Session Analysis using appropriate technical and organizational safeguards and (h) that you are responsible for ensuring that your (and any of your personnel or representatives, if applicable) use, control, processing and treatment of such information and any of your legal policies relating thereto are in compliance with all applicable laws, rules and regulations.  Participants shall please be advised that for any Sessions you attend, Session Recording including Session Analysis will be conducted. By signing up for our SaaS or otherwise using it in any way, including without limitation by interacting with a Session during any Session, you expressly acknowledge that we will store the following anonymised data during a Session Recording and this data will be available for the person who invited you (by providing you with an URL) for a Session Analysis.

• timestamps for all actions (including Session start and end);
• scroll, hover and click/tap actions (position and timestamp);
• face-expression change-actions of the Tester with timestamp (if the Tester explicitly allows the camera to be used). No video, image or audio data is stored or transmitted;
• comments left while using the commenting mode (please be advised{' '} NOT to put any Personal Data in the comments);
• any answers left to polls in the Session;
• information of the used device to open the URL (e.g. operating system, device type, browser type and version);
• IP address;

Data We Collect

In order to activate and/or use our SaaS, you will need to create an account ( “Account”). During the process of setting up your Account, we will ask you for certain Personal Data such as your:

• e-mail address;
• time-stamp of Account registration;
• time-stamp of accepting our Terms of Service & Privacy Policy;
• password for you Account;
• personal and/or company name;
• country;
• postal code;
• IP address (necessary for some features);

We need this information to allow you to activate, manage or use our Mupixa products and services. We may associate your email address and other Personal Data (such as email, name and postal code) with your Account and access of our products or services.

Data Storage & Processing

The listed data is directly stored on Mupixa's systems which are hosted by our infrastructure sub-processors. For a more detailed information see our  infrastructure sub-processors listed below.

In order to be able to provide you with access to our services, we might need to share some of the listed data with our service sub-processors (e.g. purchase of a subscription plan). For a more detailed information see our  service sub-processors listed below.

Google User Data Handling when used as a Federated Identity (OAuth SSO)

If you register and login using your existing account with Google, Inc. ( "Google") we will only use the information we collect from Google OAuth for the purposes disclosed in this Privacy Policy and in accordance with Google's Limited Use requirements. These purposes may include: Authenticating you and allowing you to sign in to our applications and services. The information collected is limited to your email address, your given and family names as well as your unique user id and picture profile. This data will be stored on our systems hosted by our{' '} infrastructure sub-processors.{' '} No data will be shared with any third parties. All data will be deleted in case you decide to delete your Mupixa account.

Children's Privacy

Our app is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us. We will take steps to delete the information from our servers.

Website

You can visit most areas of the Mupixa website without disclosing any Personal Data. Our  infrastructure sub-processors  might log the domain name, IP address, browser type and further anonyme meta information of our website visitors via web server log files at irregular intervals.

SaaS

For our SaaS we will ask that you provide sign-up an Account at Mupixa – see above “Account”. In some cases, you will be unable to complete a particular step in the process if you do not want to provide the information requested. For example, we will ask for Personal Data in the following instances:

• If you use our online technical support or ask questions about our products and services using the contact form or the contact options on our website, we will ask you to give us Personal Data required for processing the support request. This can include your email address, name and address, as well as information about your computer hardware and software and the type of problem you have.
• If you have requested a test license on our website, in order to activate such license, you may have to provide Personal Data, such as an email address.
• If you request a service from us via our website.
• If you participate in a survey on our website.
• If you subscribe to a newsletter. If you signed up for a newsletter and no longer want to receive it, you can unsubscribe at any time by using the unsubscribe option provided in the email or by sending us an email using the contact information provided below.

User Experience and Statistics

We use our own technology (including soft authentication systems, storage and messaging engines, databases and big data repositories) to perform statistical evaluations using pseudonymized user profiles. We do this to optimize your experience with our products and provide relevant content and advertisements. If you utilize multiple email addresses to access your Mupixa Account, we may tie those emails to one profile. We may combine information we gather about your use of one product or service with your use of another product or service. We also use the information we collect to offer you content, search results and advertisements that will be of most interest to you. We believe more relevant advertising provides a better Internet experience. This is also how we support our business while still providing certain products or services to you free of charge. As part of this process, we may collect information about how you use and interact with the advertisements that we offer. We may also use information about how you use our products and services across various Devices. Based on this Device-specific information (for example, the hardware model, operating system, version, device) and the unique application number assigned to some of our products and services, we may be able to compile a personal profile about you. When you log in and access your Account or our products, we may automatically collect and store certain information. For example, details of how you use our products, where your computer is routing from, your browser type and version, and Cookies that may identify your browser and/or Account. By reviewing and accepting this privacy policy, you understand and agree that we may combine non-Personal Data or pseudonymized data obtained via our proprietary soft authentication systems with Personal Data obtained when you sign up for an Mupixa Account. We do not share this combined data with third parties.In addition to our own proprietary technology, we use the following third-party analytics tools to better understand your interaction with our website and use of our products/services. Our ultimate goal is to create a more user-friendly experience for you:

Google Analytics

We use Google Analytics, a web analysis service from Google, Inc. ( "Google"). Google Analytics uses Cookies to make it possible to analyze your use of our website. Information about your use of our website the Cookie generates is usually transferred to a Google server in the USA and saved there. However, before this happens, Google shortens and anonymizes your IP address (Google's anonymizeIp process) if located within a member state of the European Union or in other contracting member states to the Agreement on the European Economic Area. The entire IP address is transferred to a Google server in the USA and saved there only in exceptional cases. This anonymization ensures that your IP address cannot be traced back to you. Google will use this information to evaluate your use of the website in order to compile reports about website activities for Mupixa and provide additional services associated with website and Internet usage. Google can transfer this information to third parties, where appropriate, if legally mandated or if Google contracts with third parties to process such data. Google will not associate your IP address with other Google data. By using our website, you expressly consent to Google’s collection and storage of your data in the manner and for the purposes described above. You also have the option to prevent Google from acquiring and processing data generated by Cookies and data related to your use of our website (including your IP address) by downloading and installing a Google-provided browser plugin. More information about Google Analytics can be found  here.

Hotjar

We use Hotjar (a web analysis service from Hotjar Limited) in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of  Hotjar's webpage .

Drift

We use Drift (a web live chat service from Drift, Inc.) in order to allow for an easy communication channel between visitors of our website or active customers with the team. For more information, please check Drift's privacy policy  here.

Sharing information with third parties

Mupixa does not forward or sell Personal Data to third parties. If we work with advertising and publishing partners, we will only share non-Personal Data as fully explained below.

However, we may engage other companies to process data on our behalf. For example, we work together with Stripe (https://stripe.com) to provide you with a convenient way to order, pay for our SaaS. With any such  service sub-processors , we will only share Personal Data if we have an appropriate data processing agreement in place. We will only transfer the minimum amount of Personal Data we need in order for the data processing to occur. Such companies must adhere strictly to data protection legislation. They must also treat your Personal Data confidentially and use it only for providing us the data processing services. They must not use your Personal Data for their own business purposes. As we are a global corporation, we may store and process your personal information on a server outside the country where you live.

If we comply with privacy laws, we may share non-Personal Data with our advertising and publishing partners. Again, we will never share or sell Personal Data. This may allow our partners to tailor advertisements to you. We require these partners to comply with applicable laws and this privacy policy. However, these partners may still collect data if you visit a website by clicking on an advertisement. The way they collect data may include placing Cookies on your browser. They may also review the number of times you viewed an advertisement. The partners can track your search queries, where your computer is routing from and your browser type and version. We do not have control over the types of information such partners collect and how they will, ultimately, use it. We strongly recommend that you review any partner’s privacy policy before clicking on a particular advertisement. A partner may request that you provide Personal Data in order to access a certain website. In this case, your visit to the website will be governed by the partner’s own privacy policy. Again, we recommend that you review any partner’s privacy policy before providing such partner with any Personal Data. Finally, Mupixa may disclose your Personal Data if we are required by law to provide it to governmental agencies, courts or other authorities.

Protecting Personal Data

We have put in place lawful and industry-standard safeguards to protect your Personal Data. We do this to make sure that your Personal Data is not lost, damaged or deleted.

Viewing, correcting, blocking and deleting Personal Data

You have the right to view, correct, block or delete Personal Data Mupixa stores at any time. To do so, please contact us using the contact information below.

Retrieval of data or account termination

In case you need a copy of all stored personal data, please contact us using the contact information below. If you want your data deleted go to the following link and follow the instructions after loging in. Please note that the process can't be reverted.
Delete account

Public information

Note that information you send to a forum, such as URL or URL is classNameified as public information and is not subject to this privacy policy. When using any public platforms such as forums, social media etc. , there is a risk that others will find and use the information you submit. Be careful and handle your personal information in a responsible manner while online.

Contact information

Please ask us if you would like information about the Personal Data we store. We will gladly provide this for you for free as quickly as possible. We can also send this information to you electronically.
Contact