Privacy Policy

Letterbox is a free open-source mail client on iOS and part of an ongoing research project at the Freie Universität Berlin, Germany. We are collecting data for research purpose. We respect your privacy and do not share personal data with third parties. We do not use third party trackers or analytic tools in the Letterbox app.

Responsible Body in Terms of the EU General Data Protection Regulation (GDPR):

Freie Universität Berlin
Kaiserswerther Straße 16-18
14195 Berlin

If you have any questions about this privacy policy, we will be happy to answer them. Please contact us:
letterbox@zedat.fu-berlin.de.

Scope

This privacy policy refers to the website www.letterbox-app.org and the iOS-App Letterbox.
Data protection refers to the protection of personal data. This concerns data that can be clearly assigned to an individual. When we collect and utilize personal data, we confine ourselves strictly to what is technically necessary and permitted by law. We collect and use personal data only with your prior consent or where allowed by law. It is important to us that you understand why we collect data and what we use them for. More information can be found below.

We collect information from you when you access the above-named domains. For purposes of identification and tracking unauthorized access attempts to this domain as well as for purposes of optimization of web-based services in connection with the use of the web pages of the above-named domain, user data are stored and used to create anonymous access statistics.

The EU General Data Protection Regulation (GDPR) took effect on May 25, 2018. It strengthens the rights of the individual user.

What is personal information

Personal information is information that can be used to identify you. This includes information such as your name, postal or IP address (if not anonymized), telephone number, and e-mail address, but not information that is not associated with your identity (such as anonymous log files in which the used browser types are logged).

Data provided by you (e.g., data input via a web form) can be or contain personal data. We store your data only at your request and to the extent needed (for example, for registration for an event) or for data backup. The specific use of such data is indicated in the respective context.

Using Letterbox app

Letterbox app is part of a resarch project and we are collecting meta data for research purpose. The collected data are stored on devices or servers of the Freie Universität Berlin with restricted access. We collect the data on your device and send the collected data via encrypted mail to letterbox@zedat.fu-berlin.de. You can find all collected data in letterbox-study folder. After receiving your mail, we automatically store and process the data without meta-information of the received mail.

While using Letterbox on your iOS-device, we are automatically collecting and storing the following data:

Please note that Apple has different data protection standards than those applying to Letterbox of Freie Universität Berlin. We explicitly point out that the operator of Letterbox has no influence over the processing of data, in particular, the storage, deletion, and exploitation of personal data that may be transmitted to the provider of Testflight. Both the nature and scope of data that may be transmitted are entirely up to the provider of the external service, in this case Apple. For more information about Apple’s privacy policy and how Apple deals with user data, please visit: https://www.apple.com/legal/privacy/.

Viewing the website www.letterbox-app.org

When you view the web pages of the above-named website or one of its subdomains, a log file is automatically created and stored on the server. Such files contain the web page you visited, the previous website you visited just before ours (in case it was a search engine, also the terms entered), date, time, the operating system you are using, features of the display (resolution in pixels and the so-called pixel-ratio for the detection of high-resolution displays), and the browser you are using (Internet Explorer, Firefox, Opera, etc.). Additionally, the size of the transferred data amount, a so-called HTTP status code (for example to identify a successfully transmitted web page), and the IP address of your computer (e.g., PC or smartphone) – whereby the IP address is immediately anonymized through deletion of the last octet of the address – are also stored.

The collection and use of information stored in the log file is only for anonymous evaluation for statistical purposes (for example, an analysis of user behavior, which pages of the website or subdomain are accessed, which browsers are used, etc.) and thereby to improve our services. A mapping of IP address to the user ID does not occur. It is not possible to trace the analysis results to a specific IP address.

Other active components

Java and Javascript applications are used on the web pages of the above-named domain. You can set your browser – if necessary, by using free add-ons – to reject the execution of such applications or to request confirmation from you. If you reject these applications, it may be possible that you cannot use certain features of the website.

Rights of Individuals

If you provide us with personal information (e.g., via web forms), you will as a rule find contact details on the same page where you can at no charge request information regarding which of your personal data are stored on our system. At your request, the information can also be provided electronically.

You have the right to ask the person responsible for confirmation of whether your personal data have been processed. If this is the case, you have a right of access to such personal data and to the information specified in Article 15 of the General Data Protection Regulation (GDPR).

You have the right to demand from the person responsible the immediate correction of incorrect and personal data concerning you and, if necessary, the completion of incomplete personal data (Article 16 of the General Data Protection Regulation).

You have the right to request the person responsible to delete your personal data without delay, provided one of the reasons detailed in Article 17 of the General Data Protection Regulation applies (right to erasure). The person responsible will then no longer process the personal data unless he/she can prove compelling legitimate grounds for processing that outweigh the interests, rights, and freedoms of the individual concerned.

You have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation. In such cases, personal data may only be processed if there are compelling legitimate reasons for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims (Article 21 of the General Data Protection Regulation, GDPR).

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Data Protetion Officers

Chief Data Protection Officer of Freie Universität
Ingrid Pahlen-Brandt, Email: datenschutz@fu-berlin.de

Deputy Data Protection Officer of Freie Universität
Andreas Hübinger, Email: andreas.huebinger@fu-berlin.de

Further information

You fond more information on pricay policies of the Freien Universität Berlin.
If you have any questions about this privacy policy, we will be happy to answer them. Please contact us:
letterbox@zedat.fu-berlin.de.