islam.app
We — ummati GmbH (“ummati” or “we”) — would like to inform you about our processing of your personal data in accordance with the General Data Protection Regulation (“GDPR”).
Our privacy policy is modular. They consist of general information for any processing of personal data and processing situations (I.) and special information, the content of which relates only to the processing situation specified there (II. ff.).
The person responsible within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
ummati GmbH
Am Kaiserkai 69, 20457 Hamburg
email: admin@ummati.one
We process some of your personal data on the basis of the following legal bases:
a) Consent of the person concerned
Insofar as we obtain consent from the data subject for specific purposes, Art. 6 (1) (a) GDPR is the legal basis.
b) Fulfilment of contractual obligations
Insofar as processing is necessary to fulfill a contract to which you are a party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
c) Statutory requirements and obligations
Insofar as processing is necessary to fulfill a legal obligation to which we are subject, Art. 6 (1) (c) GDPR is the legal basis.
d) Safeguarding legitimate interests
Insofar as processing is necessary to protect our legitimate interest or a third party and your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Article 6 (1) (f) GDPR is the legal basis.
The personal data will be deleted or blocked as soon as there is no longer a legal basis for processing.
Internally, only those bodies process personal data that they need to fulfill their processing purposes. This also applies to the contract processors, service providers and vicarious agents used by us. All bodies and persons who work with personal data are bound to data secrecy and are advised to handle such data sensitively. Personal data will only be passed on to third parties if this is in accordance with data protection regulations. In particular, persons employed to carry out our business operations (e.g. banks, tax consultants, service providers for IT and IT services) and government agencies/authorities may receive your personal data insofar as this is necessary to comply with a legal obligation.
In some cases, our services require the processing of personal data in countries outside the EU/EEA (“third countries”) by our contract processors. Insofar as personal data is processed and there is no level of data protection in accordance with European standards in the country confirmed by an adequacy decision in accordance with Article 45 (3) GDPR by the EU Commission, we have concluded EU standard contractual clauses with the affected processors in order to establish appropriate guarantees within the meaning of Article 46 GDPR. A copy of the EU standard contractual clauses can be found here: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D0914&from=DE.Insofar as processing takes place in third countries, we will point this out below.
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the person responsible:
a) Right to information
In accordance with Article 15 GDPR, you have the right to request information about the personal data we process. In particular, you can
- information about processing purposes,
- the category of data,
- the categories of recipients to whom your data has been or will be disclosed and the information as to whether the personal data will be transferred to a third country or to an international organization (in this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR),
- the planned storage period,
- the existence of a right to correction, deletion, restriction of processing or objection,
- the existence of a right of appeal,
- the origin of their data, unless they were collected by us,
- as well as on the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
b) Right to rectification
In accordance with Article 16 GDPR, you have the right to correct and/or complete your personal data if they are incorrect or incomplete. We must make the correction immediately.
c) Right to restrict processing
In accordance with Article 18 GDPR, you have the right to request that the processing of your data be restricted if you dispute the accuracy of the data or if the processing is unlawful. If the processing restriction has been restricted, we will inform you before the restriction is lifted.
d) Right to deletion
In accordance with Article 17 GDPR, you have the right to delete your personal data, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
e) Right to be informed
If you have asserted the right to correct, delete or restrict processing against us, we are obliged to notify all recipients to whom the personal data has been disclosed of the correction, deletion of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort.
f) Right to data portability
In accordance with Article 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request transmission to another person responsible.
g) Right of objection
In accordance with Article 21 GDPR, you have the right to object to processing, provided that the processing is carried out on the basis of Article 6 (1) (e) or (f) GDPR.
h) Right to withdraw the declaration of consent under data protection law
In accordance with Article 7 (3) GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
i) Right to lodge a complaint with a supervisory authority
In accordance with Article 77 GDPR, you have the right to complain to a data protection supervisory authority about our processing of your personal data.
We are responsible for our website ummati.one and its sub-pages (“website”). Personal data is processed by using our website. Below, we provide detailed information about the data processing that takes place.
When you visit our website, we automatically collect data and information from the user's device (so-called log files).
Contract processor
To provide our website, we use the contract processor Webflow Inc., 398 11th St, San Francisco, CA 94103, United States, with whom we have concluded an order processing contract and who processes the personal data exclusively on our behalf. For better and faster access to our website, your personal data - in particular if you access our website in a third country - may also be processed in a third country (so-called content delivery network). This is done on the basis of concluded standard contractual clauses and/or an existing adequacy decision by the European Commission.
Information processed & duration of processing
The following information is processed:
- Information about the browser type and version used
- The operating system of the device
- The user's Internet service provider
- The IP address of the device
- date and time of access
The log files are deleted within seven days at the latest.
Purpose of processing & legal basis
The data is required to display the website on the user's device, its functionality and to analyze any faults. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The legal basis is Art. 6 (1) (f) GDPR. The collection of log files is absolutely necessary for the operation of the website. There is therefore no option for the user to object.
We are responsible for our app “islam.app” (“app) as far as the processing of your personal data as a registered user of the app is concerned. We use the contract processor Apple or Google to provide and use our app. We have concluded a corresponding order processing contract so that they process the personal data exclusively on our behalf. Data processing takes place exclusively within the EU.
Our app is provided via Google and Apple platforms. We have no influence on their data processing and the respective platform operator is responsible for data protection law. Their respective terms of use and data protection notices apply.
The Google Play Store's privacy policy can be found here: https://policies.google.com/privacy?hl=de
The Apple AppStore's privacy policy can be found here: https://support.apple.com/de-de/HT211970
If registration is offered, the following data is processed:
Information processed & duration of processing
As part of the registration process, you will be asked to provide the following personal data, which is required for registration and subsequent login:
- email address
- First name
- Last name
- phone number
- password
The personal data will be deleted when the user contract ends due to termination, you delete your account with us and provided that there are no further legal retention periods for the data. Purpose & legal basis The processing of personal data is carried out to fulfill our contractual obligations on the basis of the user agreement concluded with you (Art. 6 para. 1 p. b GDPR).
Using the app requires the processing of personal data, without which we cannot offer our services within the app.
Information processed & duration of processing
When using the app, in addition to account data, technical data from the terminal device you use and, if applicable, location data are processed. The following personal data is stored for the following period:
Folgende personenbezogene Daten werden für die folgende Dauer gespeichert:
- Account details
- Technische Daten des Endgeräts Session
- Standortdaten und IP-Adresse Session
Wir nutzen in unserer App Analyse-Tools, um das Nutzerverhalten besser ver-stehen zu können. Während der App-Nutzung wird das Nutzerverhalten in Form von Datenpunkten und „Ereignissen“ erfasst. Dies können sein:
- Status der App (App geöffnet)
- Nutzungsverhalten innerhalb der App, wie Nutzung bestimmter Features oder Klicken bestimmter Buttons
Purpose and legal basis
Data processing is carried out to fulfill our contractual obligations arising from the user contract concluded with you (Art. 6 (1) (b) GDPR). In addition, payment data in particular is stored on the basis of our legal obligation (Art. 6 (1) (c) GDPR).
Die Analyse der Ereignisse zu Marketingzwecken und zur Produktverbesserung basiert auf Art. 6 Abs. 1 S. 1 lit. a DSGVO.
Contract processor
To process subscriptions (in-app purchases), we use Adapty Tech Inc. as our order processor. We have concluded an order processing agreement with the processor. To analyze errors and crashes, we use the Firebase service provided by Google Ireland Ltd and Google LLC. This analysis program uses users' IP addresses for analysis purposes. These are anonymized and therefore no conclusions can be drawn about a specific person.
Firebase's privacy policy can be found at https://www.firebase.com/terms/privacy-policy.html. We use AlaDhan as a contract processor to provide the services (
The following personal data is transmitted to contract processors:
- technical information from the device (IDFA, IDFV, advertising ID, IP address, device model, operating system, language settings),
- usage data (in-app events),
- contact information (email, name, last name).
Das von uns verwendete Analyse-Tool Analytics for Firebase (kombiniert mit Google Analytics 4 mit aktivierter IP-Anonymisierung; „Analytics for Firebase“) wird von Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland sowie der Google LLC („Google“) angeboten, die als unser Auftragsverarbeiter agieren und mit denen wir einen Auftragsverarbeitungsvertrag geschlossen ha-ben. Soweit Google personenbezogene Daten in einem Drittland verarbeitet, hat Google zur Herstellung geeigneter Garantien im Sinne von Art. 46 DSGVO EU-Standardvertragsklauseln mit seinen Konzernunternehmen abgeschlossen. Die Datenschutzhinweise von Firebase finden Sie unter https://www.firebase.com/terms/privacy-policy.html.
If you have made appropriate settings on your device, we may send push notifications to your device to communicate relevant messages about our service. You can manage push notifications on the “Options” or “Settings” page in the respective game or in the settings of your device. In this case, your personal data is processed to fulfill our contractual obligations on the basis of the user agreement concluded with you (Art. 6 para. 1 lit. b GDPR).
The following information applies to any communication with us.
Information processed & duration of processing
There is a contact form on our website/app, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data is:
- Email
- Username
- Subject
- Question/problem
At the time the message is sent, the following data is also stored:
- The user's IP address
- date and time when the message was sent
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has finally been clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Purpose of processing & legal basis
The legal basis for the processing of data transmitted in the course of sending an email or the contact form is Article 6 (1) (f) GDPR. The sole purpose of processing personal data is to process the contact. If the purpose of contacting us is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
In addition, the following information applies to you if we are in a contractual relationship with each other.
Information processed & duration of processing
Which data you process in detail depends on the tasks within the contractual relationship. We only use personal information for the purpose for which it was provided to us. These include personal details (name, address and other contact details, date and place of birth). In addition, this may also include order data (e.g. payment order), data from the fulfillment of our contractual obligations (e.g. sales data in payment transactions), information about your financial situation (e.g. credit rating data), advertising and sales data and other data comparable to the categories mentioned above. The personal data will be deleted as soon as the contractual relationship with you has ended and unless there is any other reason for processing.
Purpose of processing & legal basis
The processing is carried out primarily for the purpose of establishing and executing the contractual relationship; the legal basis is Art. 6 (1) (b) GDPR. In addition, we also process your data in part on the basis of our legitimate interest, namely for the purpose of contact and communication management, profitability checks, contract and project management and to ensure the operation of information and telecommunications systems. The legal basis is Art. 6 (1) (f) GDPR. In addition, companies are bound by various legal obligations that must be complied with under applicable laws and regulations. The legal basis for processing to comply with legal requirements and obligations is Art. 6 (1) (c) GDPR. On the one hand, this includes tax storage obligations.
We have adopted the following list from Adapty Tech.