Data protection statement

1. Controller

The data controller is:

tritonus tech e.U.
Inh. Benjamin Pape
Winckelmannstraße 30/7
1150 Vienna
Austria
By e-mail: hello@tritonus.ai (hereinafter “we” or “us”)

2. Provision of the website and creation of logfiles

When you visit the website, the browser used on your device automatically sends information to the website server. This information is temporarily stored in a ‘logfile’. Logfiles contain the following data:

• IP address of the requesting terminal
• Date and time of the visit
• Name and URL of the retrieved file
• Browser and operating system of your terminal.

If this information constitutes personal data, the processing is based on our legitimate interest under Article 6(1)(f) GDPR in the stable and secure operation of our website. The collection of data is mandatory for the provision and operation of the website. There is therefore no possibility for you to object. Depending on the hosting provider, the data will normally be deleted after 7 days and at the latest after 30 days.

Our website does not use cookies or similar technologies.

3. Use of contact forms and other communication channels

If you contact us via the contact form on the website or by e-mail, your e-mail address and, where applicable, your name and other contact details will be kept for the purpose of handling the request and answering any queries you may have. If your request is for the conclusion of a contract, the legal basis for this processing is Article 6(1)(b) GDPR. In other cases, the basis is Article 6(1)(f) GDPR. The legitimate interest is to process your request. The data you have submitted will be deleted once they have been processed, unless this is precluded by statutory retention obligations.

4. Mycoscan mobile app

We provide the Mycoscan mobile app. The app allows you to recognise different types of mushrooms with the help of AI. The app is designed in a privacy-friendly way from the outset and processes only the minimum data necessary to run the app.

When the app is downloaded, certain necessary information is sent to the App Store you have selected (e.g. Google Play or Apple App Store – hereafter collectively referred to as ‘App Store’), in particular the user name, email address, customer number of your account, time of download, payment information and the unique device identifier can be processed. These data are processed exclusively by the relevant App Store and are outside our sphere of influence.

As part of your use of the app, we automatically collect certain data necessary to offer you the functionalities of our app and to ensure stability and security. This comprises:

• IP address
• Device ID
• Date and time of request
• Time zone difference to Greenwich Mean Time (GMT)
• data volume transferred on each occasion
• OS
• Location, if applicable.

It is possible to use the app without creating a user profile and without having access to the internet. We only store the device IDs of those devices through which the use of the app is subscribed in the App Store as long as we provide the app. This is to enable the recognition of devices for which a subscription has already been made. Apart from this, the above-mentioned data will not be stored but will be automatically transferred to us. If those data constitute personal data, the legal basis for this is Article 6(1)(f) GDPR. Our legitimate interest lies in the smooth, stable and secure provision of the app, as well as in the provision of subscriptions. The processing of this data is mandatory to make the app available, so you have no right to object. The app requires the following permissions:

• Camera access: This is needed for you to take photos of mushrooms and have them analysed in the app.
• Access to saved photos: This is needed for you to have photos analysed from your device memory in the app.

All photos will be stored only on your device and analysed locally by the app. We do not have access to photos that you have analysed in the app. The photos will not be transferred to us or third parties, nor will they be stored by us or third parties.

5. Involvement of external service providers

We work with some external service providers to obtain and implement contracts with our customers and to manage our business. In this context, we may also share personal data with these service providers. The legal basis for the processing of those data is Article 6(1)(b) GDPR, in so far as the involvement of the external service providers is necessary in order to obtain and/or perform the contract with you. If the involvement of external service providers serves to administer and improve our internal processes, this constitutes our legitimate interest in data processing; The legal basis for this data processing is then Article 6(1)(f) GDPR.

We work exclusively with external service providers who are obliged to comply with data protection rules, either under professional law or contractually by means of a contract-processing agreement. In so far as data may be processed outside the EU/EEA and there is no level of data protection in line with the European standard, we provide separate information in this regard below.

To host our website, we use the service of the provider Vercel, Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the Website is accessed, the technical connection data referred to in point 2 shall be transmitted to the servers of Vercel, Inc. This may constitute a transfer of personal data to the US. Vercel is certified under the EU-US Data Privacy Framework (DPF) and thus commits to a level of data protection comparable to that of the EU. For more information on how Vercel, Inc. processes your personal data, please consult Vercel’s privacy statement: https://vercel.com/legal/privacy-policy.

To manage the subscriptions to the app, we use the service of the provider RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA. By signing up for a subscription to use our app in your App Store, your personal data may be transferred from the App Store to RevenueCat. This is beyond our control, but it can be a transfer of personal data to the US. In order to ensure an appropriate level of data protection, we have concluded a contract with RevenueCat, Inc., which contains the applicable standard contractual clauses of the European Commission for data transfers to third countries. More information on how RevenueCat, Inc. processes your personal data can be found at https://www.revenuecat.com/dpa.

6. Duration of data retention

Unless specifically explained in this privacy statement, we keep your personal data only for as long as it is required by law or necessary for the purposes explained in this privacy statement.

7. Your rights as a data subject

As a data subject, you have the following data protection rights:

• right of access, Article 15 GDPR
• right to rectification, Article 16 GDPR
• right to erasure, Article 17 GDPR
• right to restriction of processing, Article 18 GDPR
• right to data portability, Article 20 GDPR
• right to withdraw your consent, Article 7(3) GDPR

In addition, under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority.

Right to object:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data is carried out pursuant to, inter alia, Article 6(1)(e) or (f) of the GDPR, in accordance with Article 21 of the GDPR. We will cease the processing of your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or where the processing is for the establishment, exercise or defence of legal claims.

In order to exercise your rights, you may contact us at any time by using the contact details set out in point 1.

We reserve the right to update this privacy statement at any time and to adapt it to the current legal situation.