Privacy Policy

App and Website

Below we inform you in detail about the handling of your data which we process in connection with our website under the URL https://www.lambus.com/ (hereinafter referred to as "Website") and our travel planning app (hereinafter also referred to as "App").

This privacy policy only applies to our Website and App. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your personal data. This applies in particular for links to our partner services.

I. General Information

The general information presented in Section I. also apply to our App, unless otherwise stated or supplemented in Section II.


1. Responsibility

The person responsible within the meaning of data protection law is Lambus GmbH, Albert-Einstein-Str. 1, D-49076 Osnabrück, Germany, telephone number: 0541 350 263 23, e-mail address hello@lambus.com (hereinafter also referred to as "Lambus" or "we"). If you have any questions about data protection at Lambus, please contact our data protection officer at the e-mail address privacy@lambus.com .


2. Access to our Website

We automatically collect and store so-called log files data, which your browser transmits to us. These are:

  • Browser type/version,
  • Operating system,
  • URL of the previously visited website,
  • URL of the page you are viewing on the website,
  • IP address of the accessing terminal device,
  • the name and URL of the requested file,
  • the amount of data transferred,
  • the message as to whether the call was successful, and
  • Date and time of access to our website.

The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for pre-contractual purposes or in our legitimate interest to provide you with the content of our website and for prosecution in the event of illegal use of our website.


3. Blog Function

On our blog, which can be found at the URL https://lambus.com/blog/, and on which we publish various articles on topics related to travel and specific destinations, you can make public comments. Your comments will be published with your username on the blog. We recommend using a pseudonym instead of your username. The username and email address are required, all other information is voluntary. If you leave a comment, we will also store your IP address. The storage of your IP address is necessary for us to be able to defend ourselves in cases of a possible publication of illegal content against liability claims, this is in our legitimate interest. We need your e-mail address and your user name in order to contact you if a third party should object to your comment as unlawful. This processing serves the execution of the contract or our legitimate interest. We reserve the right to delete comments if they should be objected to as unlawful by third parties.


4. Newsletter Subscription

When you sign up for our newsletter on our website, we collect and use your email address to keep you informed about current travel topics and news about using our website by sending you newsletters. We use the double opt-in process to subscribe to our newsletter. This means that once you have subscribed, we will send you an email to the email address you provided, asking you to confirm your subscription. The e-mail address is mandatory and without it you will not receive any newsletter from us.

The data processing associated with the dispatch of the newsletter serves the purpose of providing you with interesting information about our website and thus of user retention.

Your data will not be passed on to third parties at any time.

By registering for our newsletter you have given the following consent:

"I agree that Lambus GmbH will inform me by e-mail a maximum of once a month about current travel topics and news regarding the use of the website and app and that my user behaviour in connection with receiving the newsletter will be evaluated by my participation in a performance measurement by the service provider Mailchimp (operated by Rocket Science Group LLC (675 Ponce De Leon Ave NE, Suite 500, Atlanta, Georgia 30308, USA). My e-mail address will be forwarded to Mailchimp and stored there for the duration of my newsletter subscription. Success measurement involves storing data on when and how often a newsletter is opened and what content I click on at what time. I can revoke this consent at any time with effect for the future. The legality of the newsletters sent until receipt of the revocation remains affected. Further information can be found in the data protection declaration".

If you no longer wish to receive the newsletter, you can unsubscribe at any time. You can unsubscribe by clicking on the link in the newsletter or by informing us directly, e.g. by e-mail.


5. Cookies

The use of our website is associated with the creation and use of cookies, as long as you have given us your consent via our banner (see section I., 5.2.). Cookies are small text files that are sent from our web server to the browser of your terminal device and stored there. In most cases the browser of your terminal is set in such a way that it accepts the creation and storage of cookies. You can prevent cookies from being saved by setting your browser accordingly. The presentation of the cookies will later be structured as follows:

NameDescriptionStorage duration
---

You can set your browser to being informed when cookies are set and decide individually whether to fully accept them or to only accept them in certain cases or not to accept them at all. If cookies are deactivated, however, the functionality of our website may be restricted.

5.1 Google Analytics

Our website also uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses cookies to help the website analyze how users use the site. The data can be used to create user profiles under a pseudonym. The cookies make it possible to recognise your browser. However, the data collected will not be used to identify you personally and will not be merged with your personal data.

The following cookies will be set and used:

NameDescriptionStorage Duration
_gaAnonymous ID for analyzing page views in Google Analytics2 years
_gatCookie to throttle the request requests.1 minute
_gidUnique User Identification24 hours

Google will use this data on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The data processing associated with analyses of website usage carried out by Google serves the purpose of optimally adapting the website to the needs and wishes of users.

Google and its affiliated companies operate servers worldwide on which personal data can be stored. When transferring data to third countries, Google ensures an adequate level of data protection in accordance with its data protection declaration.

In order to guarantee an anonymized collection of IP addresses, the source code of Google Analytics was extended by the code "_anonymizeIP". The IP addresses are thus only processed in abbreviated form in order to exclude the possibility of personal references. The IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.

A link in the cookie banner gives you the opportunity to obtain further information about the individual cookies. You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google not only through your browser settings, but also by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=en

By clicking this link an Opt-Out Cookie is set, which prevents that your data are seized by Google.

Please do not delete the respective opt-out cookie as long as you wish to maintain your revocation.

For more information about Google's terms of use and privacy policy, please visit the links below:

https://www.google.com/intl/de/analytics/learn/privacy.html

5.2 Cookie Banner

If you give us permission to set and use tracking cookies via our cookie banner, you have made the following declaration:

"I consent to Lambus GmbH, Albert-Einstein-Str. 1, D-49076 Osnabrück, Germany, using tracking cookies to optimize its website and to analyze my usage patterns using Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Lambus GmbH will pass this information on to Google Ireland Limited, whereby my IP address will be anonymised as soon as possible. The information transmitted by Google to Lambus GmbH does not allow any conclusions to be drawn about my person. I can revoke this consent at any time with effect for the future, without affecting the legality and permissibility of the cookies set and used up to the time of exercising the revocation. Further information can be found in the data protection declaration".


6. Social Media

We are present on various platforms and social networks. This enables us to get in touch with our users and interested parties active there and to inform them about our services of the travel planning app. The terms and conditions and data protection information of the respective operators apply on the respective platforms. By maintaining a presence there, we are jointly responsible with the operator in the sense of data protection law.

If you visit the presences held by us, we process your data, which you communicate to us in the course of an interaction with our presence (in particular by posting contents, etc.) on the basis of your consent, provided that you have given this, otherwise the processing takes place on the basis of our legitimate interest in being able to offer you a presence on the respective platform. If you communicate with us via the comment or message function, your data will be processed in order to reply to your message or comment and thus to implement the contract or because of our legitimate interest in being able to react to your message or comment. In addition, the platforms generally use cookies, which enable an analysis of your user behaviour and on the basis of which user profiles of your interests or preferences are created. Based on these usage profiles, advertisements will be placed with the respective operator of the platform or with your activity on the Internet that correspond to your interests. If you have an account with the respective platform, the data you have stored there can also be merged with the user profiles. This applies in particular if you as a registered user of the platform have an account and are logged in. We have no influence on the concrete data processing of the respective operator. You can find further information about data processing by the respective operator of the platform in the links below. Please note that your rights (as described in section I., 11. below) in connection with data processing on the respective platform may only be asserted against the respective operator. You are welcome to send us your request and we will forward it to the respective operator.

We are represented in the following social media:

6.1 Facebook

We maintain a Facebook page at https://www.facebook.com/lambusapp . Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Please refer to Facebook's Privacy Policy for Facebook privacy notices and information:

https://de-de.facebook.com/policy.php

6.2 Instagram

We also have an Instagram account at https://www.instagram.com/lambusapp/ Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Please refer to Instagram's Privacy Policy for information about Instagram's privacy practices:

https://help.instagram.com/519522125107875

6.3 Pinterest

In addition, we maintain a Pinterest account at https://www.pinterest.de/lambusapp/ . Pinterest is operated by Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Please refer to Pinterest's Privacy Policy for information about Pinterest's privacy practices:

https://policy.pinterest.com/de/privacy-policy

6.4 LinkedIn

We operate a LinkedIn account at https://de.linkedin.com/company/lambus- LinkedIn is operated by LinkedIn Ireland Unlimited Company, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. You can find notes and information on data protection at LinkedIn in LinkedIn's privacy policy:

https://de.linkedin.com/legal/privacy-policy?


7. Legal and Contractual Obligations to make available

The provision of all data to us is neither contractually nor legally prescribed.


8. Further Processing for Legal Defence or Prosecution

We can use your data for our own legal prosecution or defense as a legitimate interest.


9. Storage Duration and Deletion of Data

The log files data that your browser transmits to us, in particular your IP address, will be anonymized or deleted 7 days after the end of your last use of the website.

The storage period of the data you enter during registration depends on the usage contract concluded with us. If the user contract is terminated by you or us through termination, we are entitled, subject to statutory retention periods, to irretrievably delete your data. The protection of the data in case of termination is incumbent on you.

Data that we process on the basis of your consent will be blocked or deleted if you revoke your consent.

If you are an invited friend whose e-mail address was given to us by a user already registered with us, we will delete your e-mail address after 30 days if you have not registered with us within this time.

The data which you have provided to us in connection with the registration for our newsletter and which you have subsequently confirmed as part of the double opt-in procedure will be deleted as soon as you have unsubscribed from the newsletter. If you do not confirm your subscription to our newsletter, your e-mail address will also be blocked or deleted after one month if we are not allowed to process your e-mail address any further.

Data that you make available in the course of using one of our presences in social media (e.g. communication with us via the comment or message function) will be deleted as soon as the purpose of the processing has ceased, i.e. your request has been dealt with and the respective platform permits deletion.

As far as we process your data in the case of a legal dispute for legal prosecution or legal defence, these data remain stored for the duration of the legal dispute or statutory limitation periods. The limitation period can be up to 30 years, whereby the regular limitation period ends after 3 years.


10. Transmission of your Data

We will only pass on your data to third parties if we are entitled to do so on the basis of your consent or if we are entitled or obliged to do so on the basis of the applicable law. The same applies if we receive your data from third parties, i.e. neither from you nor from companies commissioned by us.

An authorization exists both in the case in which third parties on our behalf collect data for us and transmit it to us, as well as in the case in which we on our part pass on data to other companies and these process the data on our behalf. The latter is particularly the case if we do not carry out our business activities (e.g. IT services in connection with the operation of the website, creation and sending of newsletters) ourselves, but have them carried out by other companies, and this activity is connected with the processing of your data. In such cases, we have previously contractually obliged these companies to use the data only for the purposes permitted by law. We are authorised to control these companies in this respect.

There is a legal obligation, for example, to pass on data to criminal prosecution authorities.


11. Your rights (Objection, Revocation, Information, Correction, Blocking, Deletion, Transfer, Complaint)

11.1 Opposition

You can object to the processing of your personal data by us at any time for reasons arising from your particular situation. For this, you can use the contact possibilities mentioned in paragraph I. 1. If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing worthy of protection which outweighs your interests, rights and freedoms.

11.2 Revocation

Furthermore, you have the right to revoke any consent you have given with effect for the future. However, the legality of the data processing based on your consent remains unaffected until the revocation is exercised.

11.3 Other rights

You have the right at any time to receive information about your personal data stored by us free of charge, to correct incorrect data and to block or delete data. Furthermore, you have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else. Finally, you have the right to complain to a data protection authority. With the exception of your right of complaint to the data protection authority, you can address your respective request to us by using the contact data mentioned in section I. 1.


12. Data Security

Your personal data will be transmitted encrypted over the internet. We secure our website and other systems by technical and organizational measures, in particular the encryption technology TSL (Transport Layer Security), against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

All data collected and processed in connection with our website is stored on servers located in Frankfurt/a.M. and therefore subject to the high standards of the General Data Protection Regulation.

We take the appropriate technical and organisational measures within Art. 32 DS-GVO, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the probability and severity of the infringement of rights and freedoms of natural persons.

In this sense, the following measures, among others, are taken to protect your data and to secure it against loss, destruction, access, alteration and distribution by unauthorised persons:

  • Ensuring the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing;
  • Ensure rapid recovery of the availability of personal data in the event of a physical or technical incident;
  • Implement procedures to regularly review, evaluate and evaluate the effectiveness of the technical and organisational measures taken to ensure the security of the processing.

Please be aware that while we strive to provide a secure and reliable website for our users, the absolute confidentiality of any communications or materials transmitted in the course of using our website cannot be guaranteed.

II. Additional Information on the App


1. Access to our App

We automatically collect and store so-called Log Files data, which your terminal transmits to us. These are:

  • Type of mobile device (e.g. "iPhone 12"),
  • Operating system ("iOS" or "Android"),
  • Device version (e.g. "10.1"),
  • Display width (e.g. 375),
  • Display height (e.g. 812),
  • Display scaling (e.g. 3),
  • App version (e.g. "1.0.0"),
  • Date and time of access to our website,
  • IP address of the accessing terminal device.

The collection of this data is necessary for technical reasons. Unfortunately, it is not technically possible to use the website without providing your IP address. The data is collected for pre-contractual purposes or in our legitimate interest to inform you of the contents of our app as well as for legal prosecution in the event of illegal use of our app. If you have already registered to use our travel planning app, your data will be processed to fulfill the contract.


2. Registration with Lambus

2.1. Registration with Username and Password

When creating a user account, you will be asked to enter your first and last name, an e-mail address and a user name and password of your choice.

The username and password serve as access data. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about new features. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract. Without the provision of the aforementioned data, you cannot create a user account with us with the choice of your own user name and password.

In addition, after your registration, you may voluntarily submit a profile picture, state your gender and your PayPal e-mail address and username. If these voluntary data are not made by you, this remains without consequences.

You can cancel your user account at any time by sending us a message (see contact details in section I. 1. or using the e-mail address byebye@lambus.com ).

In addition, we save the IP address and time each time you access the user account. The storage takes place due to the protection against abuse and other unauthorized uses in our legitimate interest.

2.2. Registration via Facebook Connect

If you have a Facebook account and would like to register with Lambus using your Facebook login, we will first ask you for permission to process data in this context. Facebook is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). If you choose to register using your Facebook login, you have given the following statement:

"I agree that my public profile data stored on Facebook in the form of my first and last name, my Facebook ID (identification number) and my e-mail address will be forwarded from Facebook to Lambus GmbH if I register with my Facebook login data for the Lambus GmbH app and Facebook can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point".

Lambus GmbH does not provide any data from you to Facebook. We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.

You can revoke your consent to the processing of your first and last name, your Facebook ID and your e-mail address at any time by notifying us, e.g. by e-mail, or by cancelling your user account.

You will not be able to use the registration function via Facebook-Connect without providing the aforementioned data, which will be transferred from Facebook to us. Please refer to Facebook's Privacy Policy for information about Facebook's privacy practices:

https://de-de.facebook.com/policy.php

2.3. Registration via Google Account

If you have a Google account and would like to register with Lambus using your Google login, we will first ask you for permission to process the data in this context. Google is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

If you choose to register using your Google Account, you have made the following statement:

"I agree that the public profile data deposited in my Google account in the form of my first and last name, my Google ID (identification number), my e-mail address, my profile picture and the indication of my gender will be passed on by Google to Lambus GmbH if I register with my Google login data for the Lambus GmbH app and Google can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the legality of the processing of the data carried out up to that point."

Lambus GmbH for its part does not make any data from you available to Google.

We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you as far as this is necessary for the use of our app, e.g. to inform you about innovations. This data processing serves the implementation of pre-contractual measures and the fulfillment of the contract.

You can revoke your consent to the processing of your first and last name, your Google ID and e-mail address as well as your profile picture and the indication of your gender in the context of the registration for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.

You will not be able to use the Google Account registration feature unless you provide us with the aforementioned information, which will be transmitted to us by Google. You can find information about data protection at Google in Google's data protection regulations:

https://policies.google.com/privacy?hl=de

2.4 Registration via Apple ID

If you have an Apple account and wish to register with Lambus using your Apple ID, we will first ask you for permission to process data in this context. Apple is operated by Apple Inc, 1 Infinite Loop, Cupertino, CA 95014, USA ("Apple").

If you choose to register using your Apple account, you have provided the following statement:

"I agree that the public profile data stored in my Apple account in the form of my first and last name, my Apple ID (identification number), my email address, my profile picture and the indication of my gender will be shared by Apple with Lambus GmbH when I register for the Lambus GmbH app using my Apple login data, and Apple can see when I use the Lambus GmbH app. I can revoke this consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing of the data carried out up to that point."

Lambus GmbH does not provide Apple with any of your data.

We use your first and last name to know who our contractual partner is. We use your e-mail address to communicate with you, as far as this is necessary in the context of the use of our app, e.g. to inform you about innovations. This data processing is used to carry out pre-contractual measures and to fulfill the contract.

You can revoke your consent to the processing of your first and last name, your Apple ID and e-mail address, as well as your profile picture and the specification of your gender in the context of registering for our website at any time by notifying us, e.g. by e-mail, or by terminating your user account.

Without providing the aforementioned data, which is transferred to us by Apple, you cannot use the registration function via Apple ID. Notes and information on data protection at Apple can be found in Apple's privacy policy:

https://support.apple.com/de-de/HT210318


3. Push Notifications

When installing our app, we ask for your permission to send you push notifications. Push notifications are text messages that are displayed on your mobile device and that concern news about the app or the trip you created, such as marking a waypoint on a trip, inviting you to a trip, or sharing travel expenses. If you allow the receipt of push notifications, your device will send an encrypted, anonymized device identification number to the push notification system of your device's operating system so that the push notifications can be sent and received by you. This is done through the Google Firebase service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We receive statistics from Google in anonymous and aggregated form about user behavior, which we use to improve our app and identify errors.

With permission to receive push notifications, you have given the following consent:

"I agree that Lambus GmbH may send me push notifications with news about the app or my travels and that my device identification number may be sent to Google Firebase, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to receive the push notifications and to anonymously evaluate my user behaviour. I may revoke this consent at any time without prejudice to the legality and permissibility of the data processing carried out prior to the exercise of the revocation".

You may revoke your permission to receive push notifications at any time via the settings of your mobile device under "Settings", "Privacy" and "Messages" (iOS operating system) or under "Settings", "Device" and the administration of your "App Permissions" (Android operating system).

You can find out more about Google's Terms of Use and Privacy by clicking the links below:


4. Location Data

In addition, you have the possibility to access your location data. Using your location data, you can send your friends your current location or mark it on the map when they travel together.

With the permission to use your location data you have given the following consent:

"I agree that Lambus GmbH may collect and save my location so that I can display it to my friends or other participants of the trip within the app or mark waypoints using my location. I can revoke this consent with effect for the future, without affecting the legality and permissibility of the data processing carried out prior to exercising the revocation."

If you allow access to your location data, our app will only access this data and transfer it to our server to the extent necessary to provide the functionalities for displaying your own location. If you do not give us permission, we will not use this data. In this case, you will not be able to note your location on the map of your trip or send it to your friends.

You can revoke your permission to use your location data at any time via the settings of your mobile device under "Settings", "Privacy" and "Location Services" (iOS operating system) or under "Settings", "Device" and the administration of your "App Permissions" (Android operating system).


5. Invite Friends and add Participants

We give you the opportunity to invite friends to our app so that they can participate in the trips you create or create their own trips. We will generate a link for you, which you can either forward to your friends via email or messenger service, or you can tell us the email address of the person.

If you provide us with a friend's email address to invite them to our app, we assume that you are authorized to use that email address and that the person has previously consented to receive the invitation email from Lambus GmbH.

If you are the invited friend whose e-mail address was given to us by a friend already registered with us, we will store your e-mail address for a period of 30 days. Within this time the link generated by us is active and can lead you directly to our App in the App Store.

If you have created a trip or are a participant of a trip, you have the option to add other users as participants to your trip. The users of our app are not visible to each other. In order to add a specific user to your trip, you need to know the person's username, only then you can add them to your trip as participants. This user will then receive a message telling him or her that you want to add them to the trip.


6. Video Chat

You can start a video chat with the participants of your travel group. For this purpose, you must declare a one-time consent to the use of the camera and the microphone before the first use. Within the scope of the connection, image and sound recordings will be transmitted.

The video chat is only for your internal communication as a travel group. It will not be recorded, logged or evaluated in any other way by Lambus.


7. Feedback Form and how to contact us

Via the link "Feedback" you have the possibility to send us a message. If you have already registered with our app and are logged in, just fill in the message field and click "Send Feedback". In this case we can assign your message to your user account. We will send a reply to your email address, which is the email address of the logged in user profile. The message itself and your e-mail address are mandatory details and are used to process your request and thus to implement the contract.

If you have not yet registered with us or are not currently logged in, you can contact us at any time with any questions about our app at the contact details listed under I. 1. Your message and your e-mail or postal address are mandatory information that we need in order to process your request. If you provide us with further data on a voluntary basis (e.g. first name and surname for your inquiry by e-mail), these will also be used to contact you or process your request.

Depending on your position as an interested party or already registered user, the aforementioned data processing of the mandatory data serves to initiate the contractual relationship with us and thus the implementation of pre-contractual measures or the fulfilment of the user contract and thus the execution of the contract.

You will not receive any feedback on your request from us without providing the mandatory information. The non-availability of voluntary information remains without consequences.


8. Integration of Services of Third Parties

8.1 Google Firebase

We use Google Firebase features on our app, which provide developers of apps with various ways to improve their developed products and fix bugs, including analysis of user data. Google Firebase is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Firebase captures the interaction with our app, storing the events that occur. An overview of the events stored (e.g. user registration, clicking on an advertisement, etc.) can be found here:

https://support.google.com/firebase/topic/6317484?hl=de&ref_topic=6386699=en&reftopic=6386699

When Google Firebase is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, first-time starts, app executions, app updates and screens visited. The data processing associated with the integration of Google Firebase serves our legitimate interest to continuously improve our app and, in particular, to detect malfunctions at an early stage and to correct errors.

Google and its affiliated companies operate servers worldwide on which personal data can be stored. When Google transfers personal data to third countries, it ensures an adequate level of data protection in accordance with its data protection declaration.

For more information on Google's terms of use and privacy policy, please see the links below:

8.2 Crashlytics

In addition, we use Google's Crashlytics service, which allows us to analyze the crashes of our app and fix the causes of the crashes. This also includes an analysis of the user data. Crashlytics is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Crashlytics captures the events within our app that lead to a crash of the app, these are: Stacktrace (source code class and line number). These are all anonymous and not personally identifiable.

When Crashlytics is used, the following data is collected in particular: Number of users and sessions, session duration, operating systems, device models, regions, initial starts, app executions, app updates and current version of the Lambus app. The data processing associated with the integration of Crashlytics serves our legitimate interest in analysing app crashes and being able to prevent them as far as possible in the future.

For more information on Google's terms of use and privacy policy, please see the links below:

8.3 Google Maps

We also use on our app the maps of the service "Google Maps" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps allows you to mark different waypoints and highlights within our app that you are planning or have already visited for your trip.

Google will receive the information that you have accessed on the corresponding subpage of our app, as well as the data shown in section II. 1. The data processing is based on our legitimate interest in being able to provide you with a map within the app. An objection against the data processing carried out by Google can be accessed here:

https://adssettings.google.com/authenticated

In addition, your location data may be processed if you allow access to it via your mobile device. The processing of your location data in this case is based on your consent. You can revoke the access at any time afterwards directly in the settings of your mobile device under "Settings", "Privacy" and "Location services" (iOS operating system) or under "Settings", "Device" and the administration of your "Website permissions" (Android operating system).

You can find more information about Google's data processing and the Google Maps Terms of Use at the following links:

https://www.google.de/intl/de/policies/privacy

https://www.google.com/intl/de_de/help/terms_maps/

8.4 Payment Service Provider PayPal

We use the payment service PayPal in our app. PayPal is operated by PayPal (Europe) S. à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").

If you use the "Travel expenses" function during your trip to record the costs you have incurred for yourself and your fellow travellers, you can use the payment service PayPal to balance these costs.

In order to be able to transfer the incurred travel expenses to your fellow travellers via PayPal, you must have a PayPal customer account. You will then be redirected to the PayPal website where you can log into your customer account. PayPal collects in particular your first and last name, your address and bank data (e.g. account number or credit card number), passwords, the sums of the transaction as well as the data of the receiver. These data are processed exclusively by PayPal. We do not receive this information from PayPal.

The use of PayPal is based on our legitimate interest in providing you with the service of secure travel cost balancing through our app.

Further information on data protection and the general terms and conditions of PayPal can be found in the following links:

https://www.paypal.com/de/webWebsites/mpp/ua/privacy-full?locale.x=de_DE

https://www.paypal.com/de/webWebsites/mpp/ua/legalhub-full?locale.x=de_DE

8.5 Facebook Pixel

Furthermore, we use the so-called "Facebook pixel" of the social network Facebook in the context of our online offer. Facebook pixel is operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook pixels enable Facebook to identify you as a visitor to our online presence as a target group for displaying Facebook ads. We use Facebook pixel on the basis of our legitimate interests in order to display the Facebook ads placed by us only to those users who have shown an interest in our offer or have certain features which we transmit to Facebook anonymously (so-called "custom audiences"). We also use Facebook pixels to track the effectiveness of our Facebook ads for our own statistical and market research purposes when users are referred to our site by a Facebook ad ("conversion").

When Facebook pixel is used, Facebook collects, stores and processes data so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. You may enable Facebook and its affiliates to serve advertisements on and off Facebook. A cookie may also be stored on your device for these purposes.

If you wish to revoke your consent, click here:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen_product=ad_settings_screen

You can find out more about Facebook's terms of use, data processing and data protection by clicking on the links below: