Privacy Policy

At SnapNext GmbH & Co. KG (hereinafter referred to as “SnapNext”), protecting your data is especially important to us. “SnapCube” is a brand of SnapNext. This policy outlines the information we process to support the products and features offered by SnapCube (hereinafter referred to as “SnapCube Products” or “Products/Services”). Additional information is available upon request from our data protection officer.

1. What types of information do we collect?

To provide SnapCube Products/Services, we need to process information about you. The types of information we collect depend on how you use our products. You can learn how to access or request the deletion of the information we collect by contacting our data protection officer.

1.1 Information and content you provide

We collect the content, communications, and other information you provide when using our products (e.g., photos & videos). This includes:

• Registration information: Details you provide when registering as an interested party, supplier, or client, such as your name, email address, date of birth, gender, etc.

• Content and communication data: Information you provide through using our products, such as photos, videos, metadata (e.g., capture location), and content you share in chats or social media.

• Technical data: Information such as your IP address, browser data, device information, operating system, hardware, and software versions.

1.2 Special categories of personal data

Photos of individuals may contain special categories of personal data (Art. 9 GDPR), such as ethnic origin, religious beliefs, or health-related information. SnapNext does not collect biometric data and does not conduct “profiling.” All image data is used solely for the purposes described and is not further processed.

1.3 Information about your usage

We collect information about how you use our products, including the types of content you interact with and the features you use. This information is used to enhance and tailor our products.

1.4 Device information

We collect information from and about the devices you use (e.g., SnapCube modules, computers, phones). This information is combined to provide you with a better user experience but is not linked to personal data.

2. How do we use this information?

We use the information available to us (subject to your consent) to provide and support SnapCube Products. This includes:

• Personalization and enhancement of our products: We use your data to personalize features and content (e.g., filters, advertisements) and to communicate a tailored brand message through our products.

• Product development: We use non-personal data to conduct testing for troubleshooting and develop new products.

• Facial recognition: We use facial recognition technologies to offer services like photo morphing or mask effects. These facial details are not stored.

• Mailing/SMS distribution: We use your contact details to send you requested messages with photo and video content and possibly inform you about SnapCube once.

2.1 Processing within the scope of camera interactions

• When using interactive SnapCube components that access a camera (e.g., for AI photo filters or personalized image experiences), processing is based solely on your prior consent (Art. 6(1)(a) GDPR). This consent is actively obtained via a notification field and confirmed by you through use of the application.
  
  

• Captured image data is temporarily stored for up to 90 days on our servers solely for the technical execution of the experience.
  
  

• Processing is carried out exclusively automatically by AI services we deploy (e.g., image transformations), without storing or analyzing biometric or permanently identifying features. Forwarding to third parties or use for AI training purposes occurs only when necessary for the specific action or apps.
  
  

• You can withdraw this consent at any time by not using the feature or by notifying datenschutz@snapnext.de. If image data is still temporarily stored, it will be deleted immediately.
  
  

• For temporary hosting and delivery of photo and image data, we use the service “Cloudinary” (Cloudinary Ltd., 3400 Central Expressway, Santa Clara, CA 95051, USA). Processing is based on a data processing agreement in accordance with Art. 28 GDPR. All data is processed on servers within the EU and automatically deleted when no longer needed (typically after 90 days).
  
  

• For certain AI-based functions (e.g., visual style transformations), we use services from the Google Cloud Platform, in particular the Gemini API (provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Processing occurs solely for technical implementation and on servers within the EU. We have ensured that image data is not stored or used for AI training. A data processing agreement in accordance with Art. 28 GDPR has been concluded.
  
  

• For the technical linking of individual processing steps (e.g., capturing, processing, delivery), we use a self-hosted workflow automation (n8n). Image data and other processed content are temporarily stored within so-called “Executions” for a maximum of 4 days to ensure technical traceability and troubleshooting. This data is automatically deleted and not evaluated for other purposes. The execution history of n8n is accessible only to administrators and is regularly reviewed and deleted.

3. How is this information shared?

Your information may be shared with others as follows:

• Sharing on Social Media: When you share content using our products, you are responsible for the subsequent processing of the data.

• Third-party apps, websites, and integrations: Information collected by third parties is subject to their own terms and policies.

• Sharing with third parties: We collaborate with clients, development partners, and freelancers to provide and improve our products. Personal data is only shared when necessary to fulfill a service.

4. What is our legal basis for processing data?

We collect, use, and share the data available to us based on the following legal foundations:

• Performance of a contract: Art. 6(1)(b) GDPR

• Consent: Art. 6(1)(a) GDPR

• Compliance with legal obligations: Art. 6(1)(c) GDPR

• Legitimate interests: Art. 6(1)(f) GDPR

5. How can you exercise your rights under the GDPR?

You have the right to access, correct, transfer, or delete your data. You can request the deletion of the information you share with us through the use of our Products/Services by sending a simple email to datenschutz@snapnext.de. We generally store image data for 30 to 60 days. Personal web data like IP addresses are not stored, unless you expressly agree to the storage.

6. Data transfer to third countries (outside the EEA)

We work with providers based in the EU or whose servers are located within the EU. If a transfer of your data to a third country is required, it is carried out only in compliance with the GDPR, for example, by concluding standard contractual clauses.

7. Identity verification

To ensure the data requested for information is not provided to unauthorized third parties, we may require additional information to confirm your identity.

8. Cookies

Our SnapCube products and associated web applications may use cookies or similar technologies,
to ensure functionality and improve the user experience.
If you do not wish cookies to be stored on your device,
you can deactivate this in your browser's system settings.
For more information on cookies on our site, see the Privacy Policy at https://snapcube.de/datenschutz

9. Contact

If you have questions about this policy, you can contact us as follows:

SnapNext GmbH & Co. KG
Rommerskirchener Str. 21
Atelier 54 im Walzwerk
50259 Pulheim

Email: datenschutz@snapnext.de
Contact: Maximilian Arbeiter, Managing Director

You also have the right to lodge a complaint with the competent supervisory authority:

Regional Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Tel.: 0211 38424-0
Email: poststelle@ldi.nrw.de