LiquidEarth - Data Privacy Policy

Thank you for your using our LiquidEarth app (hereinafter "LiquidEarth app"). In the following, you will find information about data processing in connection with our LiquidEarth app:

1. Who provides the app and is responsible for data processing?

Terranigma Solutions GmbH

Laurentiusstraße 59

52072 Aachen

Germany

Phone: +49 174 5231499 

E-mail: privacy@terranigma-solutions.com

2. On what legal basis is the data processed?

We process your personal data in order to provide you with the LiquidEarth app with its various functions and to fulfil our contractual agreement with you (Art. 6 para. 1 letter b GDPR). If we want to process your data for additional purposes, we will ask you for your consent for the specific data processing beforehand (Art. 6 (1) lit. a GDPR). You can, of course, revoke your consent at any time. Further information on your right of revocation and instructions on how to exercise it can be found in item 10.

3. What personal data is processed?

The LiquidEarth app has been designed so that little personal data needs to be processed in order to use it. However, the full functionality of the app is only available to you if you are registered and have shared further personal data with us. If, in addition, we wish to process personal data that is not directly required for the use of the LiquidEarth app, we expressly ask you to consent to the respective data processing.

In order for you to be able to assess the type and scope of data processing, we explain below exactly what data is processed in connection with the LiquidEarth app:

3.1 Technically necessary connection and location data

  • IP address

  • User Agent (terminal type and operating system)

  • Date and time of access

  • HTTP Status Code

  • URL and referrer URL

  • user uploaded content

  • When spatial anchors are set , limited location data.

  • When using GPS probes, detailed location data

 

3.2 Registration data

In case you set up an account via our website, we process your registration data. The registration data includes

  • E-mail address

  • Password

  • Username

  • First name (optional)

  • Last name (optional)

 

3.3 Data in the context of your contact with us

  • Username

  • Contact details

  • All other personal data that are voluntarily provided in the course of contacting us

 

3.4 Data processing during camera use

  • When creating or locating anchors, pictures of the environment are processed on the device into a derived format. This derived format is transmitted to and stored on the cloud service (see 7.2).

  • When using the app in AR mode, the camera data is used for providing the background of the AR session. This data never leaves your device.

 

4. Functions of the app and purposes of data processing

In the LiquidEarth app, the personal data just explained are processed in order to provide the various functions of the LiquidEarth app and to protect it against misuse and manipulation. We explain the different processing purposes in detail below:

4.1 Basic functions of the LiquidEarth app and informational use

You can download the LiquidEarth app without registering. However, then you can only use the LiquidEarth app when logged in with a registered user account. Location data will only be processed if you consent to this use.

4.2 Profile and login

You can use some functions of the LiquidEarth app only if you are registered and logged in. The email address, password and username are used for authentication when you login via the app. Through the login we can protect the LiquidEarth app against misuse and manipulation. Your username is used to enable the LiquidEarth app to address you appropriately. You may find more information regarding the registration data in our privacy policy on your website.

4.3 Data processed during operations of the LiquidEarth App

While the App is being used, it frequently communicates with the LiquidEarth backend services over a TLS secured connection to load data or process user requests. Processing and response of these requests require your devices IP address to be temporarily stored in our backend.

You can share spaces with other Liquid Earth Users for collaboration. Sharing a space requires You to enter the email address of the user you want to share a space with. Sharing a space with another user will allow that user to view your email address that is stored in the spaces meta data.

While using the real-time collaboration features of the Liquid Earth App (“Multiplayer”) your username is transmitted and visible to other users to identify users in the current session. Real-time collaborative sessions can only be established between users with common access to a shared space. Therefore, your username and email address is not visible to other users as long as you have not shared a space with them.

5. What permissions does the app require on the functions of the end device?

In order to use all the functions of the LiquidEarth app, the LiquidEarth app needs permission to access various functions of your end device.

5.1 Technical requirements

In order to use the LiquidEarth app, an active internet connection of the terminal device is required. The app can be used with limited functionality in offline mode that operates with data previously cached on the device.

5.2 Possible additional permissions

The LiquidEarth app also needs access to the following features of your terminal device if you want to use all features of the LiquidEarth app. Before the LiquidEarth app can access these end device features, you will be explicitly asked for your consent.

a. Camera

If you want to use the augmented reality features, you must allow the LiquidEarth app to access the camera of your end device.

b. Location

If you manually enable location data or set spatial anchors, the LiquidEarth app needs permission to process your location.

c. Bluetooth

If the location determination is to be done with Bluetooth Beacons, the LiquidEarth app needs access to the Bluetooth function of your end device.

d. Media storage

If you want to upload data from your terminal device to our cloud environment, you need to allow the LiquidEarth app to access your end device's media storage.

6. Deletion of the data

Different retention periods apply to different types of personal data.

6.1 Technically necessary connection and location data

We only store the technically necessary connection and location data temporarily and the raw data is deleted after 14 working days.

6.2 Profile and login

The Data used for the login is processed to verify you have setup an active account and to assign your user name to your login session and deleted immediately afterwards. Your user name is stored on your device through your login session and is deleted by the app after that session ends.

6.3 Data in the context of a contact

We store the personal data provided by you until it is no longer needed to process your request and there are no statutory retention obligations that prevent deletion.

6.4 Data uploaded by the user

The user can upload data to Liquid Earth to view and analyze in the App. Upon deletion of the data by the user or deletion of the user account, such data is retained for 30 days for restoration before it is ultimately deleted from the platform. The user can request an immediate data wipe by e-mail.

7. With whom will your data be shared?

The provision of the functions of the LiquidEarth app requires the transfer of data to various service providers:

7.1 Hosting

For hosting our backend we are using Azure, a service of Microsoft Ireland Operations Ltd. (The Atrium Building, Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18, Ireland). The servers in question are located exclusively in the EU. A transfer of data to third countries does not take place.

For more information about Microsoft's privacy practices, visit https://privacy.microsoft.com/en-us/privacystatement.

7.2 Spatial Anchors

The Azure Spatial Anchor SDK database is hosted on our backend. It is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The servers in question are located exclusively in the EU. A transfer of data to third countries does not take place (also see item 7.1). 

For more information about Microsoft's privacy practices, visit https://privacy.microsoft.com/en-us/privacystatement.

7.3 Multiplayer services

For multiplayer services we use the Relay SDK provided by Unity Gaming Services.

During collaborative sessions with other users, the relay acts as a central hub to transmit data between the users. The Unity Gaming Services Relay collects required information including the IP-Address and derived approximate location.

All Data transmitted over the Relay are encrypted in transit. For detailed information on the collected data refer to https://docs.unity.com/relay/GoogleDataSafety.html. The Unity Gaming Services are operated and provided by Unity Technologies SF. For more information on Unity’s privacy practices, visit https://unity.com/legal/one-operate-dpa.  

8. Encryption technology

For connection between the LiquidEarth app and the backend we use TLS1.2. encryption. Switched connections between users in a network session are encrypted using DTLS.

9. Revocations of consents

You can revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

You can revoke consent by deleting your LiquidEarth Profile on the LiquidEarth website (www.terranigma-solutions.com/le-sign-up). You can also write us an informal email. Then we will support you with the further steps. In addition, you can define in the settings of your end device which data processing is possible by apps and which permissions an app has. Limiting the access permissions of the app may limit the functionalities of the app (e.g. Augmented reality is only possible with access to the devices camera).

10. Your additional data protection rights

According to the regulations of the Federal Data Protection Act and the General Data Protection Regulation (GDPR), you are entitled to various rights with regards to your data stored by us:

  • Based on Art. 15 (1) GDPR, you have the right to receive information about your stored data free of charge and, pursuant to Art. 15 (3) GDPR, the right to receive a copy of this data list.

  • Pursuant to Article 16 of the GDPR, you also have the right to rectify the data we process. Accordingly, you are entitled to correct or complete your data if they are incorrect or incomplete.

  • Pursuant to Art. 17 GDPR, you have the right to request that we delete your personal data processed by us.

  • According to Art. 18 GDPR, you may request us to restrict the processing of your personal data under certain circumstances.

  • According to Article 21 GDPR, you have the right to object to the processing of personal data concerning you under certain circumstances.

If you wish to exercise your rights, please contact us by e-mail at: privacy@terranigma-solutions.com.

11. Right of appeal to the supervisory authority

Pursuant to Article 77 GDPR, if you are affected by our data processing yourself, you have the right to lodge a complaint with a supervisory authority if you believe that our processing of personal data violates the GDPR.

Last updated on: 25.11.2022