Privacy
Super Chill App Privacy Statement
Privacy Statement Stichting Super Chill version 1.0 – 3 April
Introduction
This is the privacy statement of Stichting Super Chill (hereinafter also referred to as: ‘Super Chill’, ‘we’ or ‘our/us’). Stichting Super Chill is on a mission to help 10 million children to have healthy and positive mindset. We do this by offering children simple, playful and accessible little rituals and playful exercises and calming exercises in our Super Chill app (the “App”). The exercises are based on yoga, meditation and mindfulness.
Download the print version of the privacy statement here.
When you use the App, sign up for our newsletter or contact us, we process your personal data. Handling that personal data properly is extremely important to us. That is why we take great care in the processing and protection of your personal data. This is done in accordance with the provisions of the General Data Protection Regulation (“GDPR”) and other applicable privacy laws.
In this privacy statement you can find more information about how we handle your personal data. The topics covered are:
- who we are
- the App
- the newsletter and other communications
- contacting Super Chill
- cookies
- how long we store your data
- how we keep your personal data safe
- when we share your personal data
- what your rights are
- changes and questions
If you all find this privacy statement a lot of text, you can find a brief overview of the most important information here.
Who we are
Stichting Super Chill is a foundation located at Jan van Galenstraat 51 in (1056 BH) Amsterdam. Super Chill is registered with the Chamber of Commerce with number: 78604192. You can reach us by sending an email to support@superchill.org.
- The App
When you use the App, we need personal data of a grownup and of one or more children. This concerns the following personal data:
- first and last name of a grownup
- email address of a grownup
- password
- first name (or nickname) child(ren)
- gender of child(ren) (optional; you can also indicate that you prefer not to share this)
- year of birth of child(ren)
- child’s emotion before starting an exercise
- child emotion after completing an exercise
- what exercises have been performed by a child, how often and for how long
- the avatar chosen by the child
We process this personal data so that the App can be made available to and used by a child to facilitate a healthy and positive mindset, and so that this process can be followed and supervised by a grownup. This purpose is further elaborated below, namely:
- accessing and using the App and the exercises contained therein. A grownup creates an account and creates a profile for each child using the App. A child can then (with the help of a grownup) view and perform the exercises in the App;
- Track per child which exercises were followed and what the emotions of the child were before and after completion of one (or more) exercises. In this way, a grownup can stay informed via the App or by email (as soon as this is offered) of the exercises followed and the influence thereof on the emotions of the child;
- analysing the use of the App and – on that basis – further developing the App and on that basis making suggestions for exercises that may be appropriate. Knowing a child’s emotions, gender, and year of birth allows us to offer exercises that suit the child’s emotion and that boys or girls of a certain age enjoy most;
- Maintaining and securing the App.
Before the first use of the App, a grownup creates an account and gives their consent to the processing of the personal data included above.
The App is expressly not intended to diagnose a child’s mental health. Despite that, the emotions of a child recorded in the App are health data and therefore special personal data. We may not use that personal data unless a grownup has given explicit consent for this.
If we are not allowed to use the personal data, a grownup and their child(ren) cannot use the App. A grownup who has created an account can withdraw their consent at any time. After the consent has been withdrawn, a grownup and his child(ren) can no longer use the App.
- The newsletter and other communications
When you have indicated through the website or in the App that you wish to receive our newsletter or other messages, we use your email address and any preferences to send newsletters and messages. We process this personal data in this case because you have given us your consent for this.
- Contacting Super Chill
When you contact us, we process your personal data to receive and respond to and/or follow up on your message or request. This may involve one or more of the following personal data:
- first and/or last name
- email address
- content of the message or request
In this case, we process this personal data because you have given us your consent for this.
- Cookies
We use cookies in the App and on our website. In addition to this privacy statement, in our cookie statement you can read which cookies we use, what personal data we collect with them, for what we use that personal data and what the retention periods of that personal data are. Our cookie statement can be found here.
How long we keep your data
We use your personal data for as long as necessary to fulfil the purpose for which it was collected and used (for example, for the time necessary to provide you with customer service, answer questions or resolve technical problems), unless a longer period is necessary for our legal obligations or to defend a legal claim.
Here below is an overview of the retention periods that we use, in principle:
- The App
We will keep your personal data for as long as you have not withdrawn the consent you have given. If you have not logged in for more than one (1) year, you will receive an email from us asking if you want to continue using the App. If you wish, you must log in so that we know that as well. If you do not log in within 30 days of receiving the email, we will delete your account and anonymise any personal data contained therein, with the exception of your email address if you are subscribed to the newsletter and other Super Chill communications.
- The newsletter and other communications
We store your personal data for as long as you are registered to receive the newsletter and other messages. Of course, it is always possible to indicate that you no longer want to receive messages.
- Contacting Super Chill
We store your personal data for as long as necessary to receive and answer and/or follow up on your question or complaint.
- Analysis of the App
We only store aggregated and anonymised data. We only store the personal data that underlies this for a very short time for this purpose; namely only to be able to anonymise and aggregate that data.
How we keep your personal data safe
We have taken measures to ensure that your personal data is properly secured using appropriate technical, physical and organisational measures so that it is protected against unauthorised or unlawful use, alteration, unauthorised access or disclosure, accidental or unlawful destruction and loss.
We have taken measures to limit access to your personal data to those individuals who need to have access to it for any of the purposes listed in this privacy notice. In addition, we contractually ensure that any third-party supplier that processes your personal data ensures the confidentiality and integrity of your data in a secure manner. We agree with anyone who has access to the personal data processed by us and who does not already have a confidentiality obligation due to a profession, functional or statutory regulation, to a confidentiality obligation regarding that data.
We periodically review the measures taken and adjust them if necessary.
When we share your personal data with third parties
In order to offer the App and our website to you, to send (news) messages, to answer your questions or to comply with a legal obligation, we may need to share your personal data with third parties. This may be both within and outside the European Economic Area (EEA).
Here below are some examples of personal data we may share with third parties include:
– web and app developers, to administer and maintain the App and website;
– third-party customer service centres, to help us answer your questions; advertising and media companies that assist us in achieving our social objectives;
– analytics service providers and search engines that help us improve our website and App;
– the Dutch tax authority and other relevant government institutions and regulators, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP).
We only share data with third parties with whom we have an agreement or where required by law. We ensure that, if necessary, agreements are made with these third parties about the requirements that the data exchange must meet and specifically that the respective third party also complies with the GDPR. The personal data collected will not be loaned, rented, sold or otherwise disclosed other than in the aforementioned ways. Without a legal basis, we will not transfer any data to a country outside the EEA.
What are your rights?
Subject to the conditions set out in applicable law, you have the following rights in relation to our processing of your personal data:
- Right of access
You have the right to request confirmation if Super Chill is processing personal data about you, and if so, access to the personal data and additional information. Upon request, we can also provide you with a copy of the personal data being processed.
- Right to rectification
You have the right to request that Super Chill correct, amend or supplement your personal data if we have incorrect or incomplete data about you. You can also correct, amend or supplement your personal data yourself by updating your account. We also kindly request that you to ensure that changes in personal circumstances (such as address changes, email details, etc.) are communicated to Super Chill so that we can ensure that your personal data is up to date. Super Chill will take all reasonable steps to ensure that all personal data is correct.
- Right to withdraw consent
You have the right to withdraw your consent to receive communications at any time by following the instructions in a communication or by [text missing?]. If we use your personal data based on your consent for reasons other than communication, you can withdraw your consent at any time by sending an email to support@superchill.org.
- Right to deletion
You have the right to request deletion of any irrelevant personal data we hold about you where (i) the data is no longer needed in connection with the purposes for which they are collected; (ii) you withdraw your consent and there is no other legal basis for processing; (iii) you object to the processing in the case of direct social purposes, or – in all other cases – there is no overriding legitimate reason for processing; (iv) we have processed your data unlawfully.
- Right to restriction of data use
You have the right to restrict our use of your personal data where (i) you dispute the accuracy of the personal data; (ii) the use is unlawful but you do not want us to erase the data; (iii) we no longer need the personal data for the relevant purposes, but you need them to set them up, exercise or defend legal claims; or (iv) where you object to data use based on our legitimate interests pending verification whether Super Chill indeed has compelling interests to continue the relevant data use.
- Right to data portability
To the extent that we use your personal data for the performance of a contract with you and that personal data is automatically processed, you have the right to receive all such personal data that you have provided to Super Chill in a structured, generally used and machine-readable format, and also to require us to send it to another controller, when that is technically feasible.
- Right to object
To the extent that we are dependent on our legitimate interests to use your personal data, you have the right to object to such use and we must stop this processing unless we can demonstrate compelling legitimate reasons for the use that violates your interests, rights and freedoms, or where we need to process the data for the establishment, exercise or defence of legal claims. You have the right to object to any profiling activities carried out by Super Chill.
- Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the collection and use of your personal data violates this privacy notice or applicable law
For more information about your rights, or how to exercise those rights, please send an email support@superchill.org. Upon receipt of all information as set out above, we will respond to your request in accordance with applicable law.
Changes and questions
This Privacy Statement may be revised from time to time. If it concerns a fundamental change in the nature of the use of your personal data or if the change is otherwise relevant to you, we will ensure that this information is provided well in advance before the change actually takes effect.
If you have any questions about this privacy notice or our handling of your personal data in general, please send an email to support@superchill.org. Privacy Statement Stichting Super Chill version 1.0 – 3 April