KOSMOS KAI: The Artificial Intelligence Robot
If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you may request restriction of processing instead of deletion.
If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request restriction of processing instead of deletion.
If you have objected to processing pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
In addition to the Privacy Policy of KOSMOS Verlag (https://www.kosmos.de/content/kosmos-datenschutz), the following data protection provisions apply specifically to the use of our app.
1. Foreword and Selected Definitions
This Privacy Policy informs users of our app about the processing of personal data that is collected and processed in the course of using the app.
GDPR is the abbreviation for the European General Data Protection Regulation.
BDSG is the abbreviation for the German Federal Data Protection Act in its current version.
Personal data means any individual information relating to an identified or identifiable natural person (see definition in Art. 4(1) GDPR). This includes, for example, names, email addresses, telephone numbers, as well as data such as IP addresses or customer numbers.
The processing of personal data includes any operation or set of operations, such as the collection, storage, transmission, archiving, or deletion of personal data (definition in Art. 4(2) GDPR).
The data subject within the meaning of data protection law is any natural person whose personal data is processed.
Further definitions can be found in the General Data Protection Regulation, in particular in Art. 4 GDPR (Definitions).
2. Data Controller and Data Protection Officer
Controller responsible for data processing
Franckh-Kosmos Verlags-GmbH & Co. KG
Pfizerstraße 5–7
70184 Stuttgart
Germany
Phone: +49 (0)711 2191-0
Email: info@kosmos.de
Data Protection Officer
DSB Externer Datenschutzbeauftragter Stuttgart
Fabian Henkel
Graduate in Business Administration (FH)
Certified Data Protection Officer
Phone: +49 (0)176 32744172
Email: info@externer-datenschutzbeauftragter-stuttgart.de
Website: https://www.externer-datenschutzbeauftragter-stuttgart.de
3. Data Exchange Through Use of the App
Principle: Local Processing
All processing operations take place exclusively locally on your end device. Deleting the app simultaneously deletes all data processed by the app. We have configured our app so that it does not transmit any data to our servers. This also includes metadata that would normally be generated in server log files. Use of the app is completely anonymous. This means that KOSMOS Verlag does not know the users and cannot establish any link to your identity.
Exception: Transmission of Anonymized Crash Reports Based on Your Consent
If you have given your consent, a report will be generated in the event of an app crash and sent to us for analysis of the cause of the crash. We use the Sentry service to receive these crash reports. The provider is Functional Software Inc., 132 Hawthorne Street, San Francisco, California 94107, USA.
When crash reports are transmitted, no personal data is stored; only information about the device type used, the operating system and its version, as well as the date and time, is transmitted. However, for technical reasons related to data exchange on the internet, your IP address is necessarily transmitted once to Sentry during the transmission of the crash report. This IP address is not stored.
The legal basis for sending crash reports to the extent described above is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time. To do so, please uninstall the app and reinstall it.
Sentry is operated on our behalf (processing on behalf within the meaning of Art. 28 GDPR) by SkySpirit GmbH, which supports us in the development and debugging of the app. SkySpirit GmbH has concluded a data processing agreement with Sentry based on the EU Standard Contractual Clauses. A sample of this agreement can be found at https://sentry.io/legal/dpa. Sentry’s Privacy Policy is available at https://sentry.io/privacy/.
4. Access Permissions on the End Device
For the full functionality of the app, it is necessary for you to grant access permissions. We explicitly point out that even when access permissions are granted, no data exchange with our systems takes place.
Granting access permissions is voluntary. By granting permissions, you allow the app to access certain functions or data on your end device, which are processed locally on your device by the app. By doing so, you give the app your consent to process data locally on your device (Art. 6(1)(a) GDPR). You may revoke granted permissions at any time by accessing the app permission settings on your end device. Depending on the operating system, permission management can be found under Settings > Apps or Permissions. Further information can be found in the user manual of your end device or operating system.
Access to Storage
The app allows you, among other things, to record data via the camera and microphone. Access to storage is required for this purpose.
Access to the Camera
Access to the camera is required to record gestures and movements that the robot learns; however, images are not recorded. Based on movements in front of the camera, the robot can learn commands.
Access to the Microphone
Access to the microphone is required to record and classify various sounds that are processed by the app in order to extract a fingerprint that makes it possible to distinguish between different sounds learned by the robot. The robot can learn commands based on the waveforms recorded by the microphone.
Access to Bluetooth
The app requires access to the Bluetooth interface on your device. This is necessary to connect the robot to your smartphone and control it.
Note on Bluetooth Access in Android-Based Systems
When using Bluetooth on devices with the Android operating system, permission for geolocation is required. This requirement is imposed by the operating system, not by our app. The app does not perform location tracking and does not process any geolocation data.
5. Your Rights Under the General Data Protection Regulation
Every natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 GDPR. In principle, you have the following rights, which you may assert against us:
Right to Withdraw Consent Pursuant to Art. 7(3) GDPR
You may withdraw any consent you have given at any time without stating reasons, with effect for the future.
Right of Access Pursuant to Art. 15 GDPR (restrictions possible under § 34 BDSG)
You have the right at any time to request information about the data processed about you and the purposes of processing.
Right to Rectification Pursuant to Art. 16 GDPR
If you discover that we are processing incorrect or incomplete data about you, you have the right to request rectification.
Right to Erasure Pursuant to Art. 17 GDPR (restrictions possible under § 35 BDSG)
You have the right at any time to request the deletion of your personal data processed by us. If complete deletion is not possible, for example because we must comply with statutory retention obligations or because we can assert other legitimate interests, we will restrict the processing of your data until such reasons no longer apply.
Right to Restriction of Processing Pursuant to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data. You may contact us at any time at the address stated in the legal notice. The right to restriction of processing exists in the following cases:
If the processing of your personal data has been restricted, such data may—apart from storage—only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
Right to Data Portability Pursuant to Art. 20 GDPR
You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, or to have it transmitted to a third party. If you request the direct transmission of the data to another controller, this will only take place insofar as it is technically feasible.
Right to Object to Certain Processing Operations and Direct Marketing Pursuant to Art. 21 GDPR
If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis for processing can be found in this Privacy Policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority Pursuant to Art. 77 GDPR in Conjunction with § 19 BDSG
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.
6. Further Information
If you contact us, for example by phone or email, we process your data for the purpose of responding to your inquiry. Comprehensive information on the processing of your data in the context of contacting and communicating with us can be found in the general KOSMOS Privacy Policy, available at the following link:
https://www.kosmos.de/de/content/Footer/Legal/Datenschutz