Privacy policy

 
Version dated May 12, 2025

Who is responsible for the careful handling of your data?

 

Responsible for the processing of your data within the meaning of the General Data Protection Regulation (GDPR) is the:

 

Menotracker GmbH

Engineer Walter Wraschko

Jochen Rindt-Strasse 1

1230 Vienna

 

Email: privacy@menotracker.com

Tel: +43 1 928 20 56 – 0

What personal data do we use?

 

By personal data we mean all information that relates to you as a person. In particular, we use name (first name and surname), year of birth, email address, country of residence and bank/credit card details . In addition, we  come into contact with so-called special categories of data due to the services we provide. This is primarily health data, i.e. personal data that relates to the physical or mental health of a natural person and from which information about their state of health can be derived. We therefore also collect data in particular on symptoms of the menopause (incontinence, blood pressure, etc.), (pre-)illnesses, medication and menstrual bleeding.

 

When does the controller use and process personal data? (Purposes of data processing and legal basis)

 

We know that the careful handling of your personal data is very important to you. As data protection is therefore a high priority for those responsible, we adhere unreservedly to the strict regulations of Austrian and EU data protection law.

 

The storage, processing and use of personal data and information are governed by the provisions of the Austrian Data Protection Act (DSG) as well as those of the Data Protection Amendment Act, the Data Protection Deregulation Act 2018 and the General Data Protection Regulation (GDPR). In accordance with this law, we also manage personal data and information that we receive outside Austria, unless local mandatory law requires otherwise.

 

We use the personal data in detail for the following purposes

 

       Management of the user profile,

       Fulfilment of the services offered, e.g. analysis and evaluation of the data

       Service billing.

Sensitive data (health data) is only processed on the basis of the legal requirements. If your express consent is required for this, this is done in the form of express declaration(s) of consent. These express declarations of consent can be revoked in writing at any time with effect for the future without giving reasons. You can send this revocation to the controller in person or by letter to the address stated in point 1 or electronically to the e-mail address provided.

 

The legal basis for data processing lies in the fulfilment of the contract (pursuant to Art 6 para 1 lit b GDPR), the declaration of consent (pursuant to Art 7 GDPR), the fulfilment of legal obligations (Art 6 para 1 lit c GDPR) and the predominantly legitimate interest of the controller (Art 6 para 1 lit f GDPR), which consists in achieving the above-mentioned purposes.

 

Your data will generally be stored until the end of the service provision. After completion of the service provision, the controller is subject to various retention regulations, in particular those of a fiscal nature.

 

When registering for the newsletter, your email address will be used for advertising purposes until you unsubscribe from the newsletter. Your consent serves as the legal basis (Art 6 para 1 lit a GDPR). You can withdraw your consent and unsubscribe from the newsletter at any time.

 

What does the controller do with your personal data?

 

We store the personal data for optimal order processing and, if necessary, pass it on to other companies for this purpose (Art 6 para 1 lit b GDPR).

Below you will find a list of all recipients or categories of recipients to whom we transfer personal data:

Recipient category

Purpose of the processing

Processing of service billing for subscriptions via Revenuecat https://www.revenuecat.com/gdpr/

For the purpose of invoicing services

Universities and research institutions

Anonymised data for the purpose of research after explicit consent

 

Processing service billing for B2B customers via Microsoft

For the purpose of B2B service billing

The data passed on in this way may only be used by the commissioned companies to fulfil their task. They are not permitted to use the information for any other purpose.

We store your personal data for the duration of the contractual relationship in order to fulfil the purpose.

 

Use of the following services:

Service

Purpose of the processing

Backend (data processing & storage): Supabase

·       https://supabase.com/

Hosting setup: hosted in the cloud

All user data is stored and processed there

Location: Frankfurt, Europe

 

Transaction emails: Resend

·       https://resend.com/home

Transaction emails are sent to users via this provider

Example verification for registration or forgotten password

Hosting setup: hosted in the cloud

Location: Ireland Europe

 

Analytics / Crashlytics / Push notifications: Firebase

·       https://firebase.google.com/

 

Firebase is used to track user activity (anonymously), collect app performance data and send push notifications to users

Hosting setup: hosted in the cloud

Location: Europe

 

Dynamic links: Appsflyer

·      https://www.appsflyer.com/

 

Hosting setup: Cloud

For resolution of dynamic links – no data exchange

 

Social logins: Google & Apple

·      For the support of Google & Apple Account Login

 

 

Marketing Mails: Mailerlite

·      https://www.mailerlite.com/

 

 

AI Use Case: Amazon Web Services – Bedrock

·      https://aws.amazon.com/de/bedrock/

 

Hosting setup: Cloud

Location: Europe

  

Your rights as a data subject

 

You can request information from us at any time as to whether and what personal data we store about you. The provision of information by us is free of charge for you. The right to information does not exist or only exists to a limited extent if and insofar as the information would disclose confidential information, e.g. information that is subject to professional secrecy.

 

If your personal data stored by the controller is incorrect or incomplete, you have the right to request that we rectify this data at any time. Until this data has been corrected, you can also request the restriction of processing.

 

You have the right to request the controller to erase your personal data if and to the extent that the data is no longer required for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from its IT systems and databases. There is no right to erasure if the data may not be erased due to a legal obligation or must be processed due to a legal obligation or if the data processing is necessary for the establishment, exercise or defence of legal claims.

 

You have the right to demand that we restrict the processing of your personal data.

You also have the right to receive your personal data from us in a commonly used and machine-readable format and the right to have this data transmitted directly to another controller. This right only exists if you have provided us with the data on the basis of your consent or on the basis of a contract concluded with you and the processing is carried out using automated procedures.

 

If your data is processed by the controller on the basis of Article 6(1)(f) GDPR (legitimate interest), you can object to the processing at any time.

In addition, you have the right to withdraw your consent to the processing of your data at any time. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

 

In accordance with Art 77 GDPR, you have the right to lodge a complaint with the Austrian data protection authority if you believe that the processing of your personal data violates data protection law. The contact details of the data protection authority are

 

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna

dsb@dsb.gv.at

 

Contact us

 

If you have any questions about the collection, processing and use of your personal data, please contact:

 

Email: privacy@menotracker.com

 

or by post:

 

Menotracker GmbH

Jochen Rindt-Strasse 1

1230 Vienna

 

We would like to point out that it is not possible for us to fulfil pre-contractual obligations or to process the contract if you do not wish to provide us with your personal data. In such cases, we reserve the right to refrain from concluding a contract or to withdraw from a contract already concluded with you and to cancel it.

 

Data security

 

Your personal data is protected by taking appropriate organisational and technical precautions. These precautions relate in particular to protection against unauthorised, unlawful or accidental access, processing, loss, use and manipulation.

Notwithstanding our endeavours to maintain an appropriately high level of due diligence at all times, it cannot be ruled out that information that you disclose to us via the Internet may be viewed and used by other persons.

Please note that we therefore accept no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorised access by third parties (e.g. hacking attack on email account or telephone).

 

Cookies

 

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our website more user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If you deactivate cookies, the functionality of our website may be restricted.

 

The data privacy officer can be contacted at

Telephone: +43 1 928 20 56 – 99

E-mail: privacy@menotracker.com