Legal information

Privacy policy

Last Updated: 10.01.2025

At Cherrypics, a product operated by Cherrydeck GmbH, Fettstrasse 5A, 20357 Hamburg, Germany (“we,” “our,” “us”), we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines what data we collect, how we process it, and your rights under applicable laws, including the General Data Protection Regulation (GDPR).

By using our platform (“Service”), you agree to the terms of this Privacy Policy.

1. Who is Responsible for Data Processing?

Cherrypics is a product owned and operated by: Cherrydeck GmbH Fettstrasse 5A 20357 Hamburg, Germany Email: [email protected]

2. What Data Do We Collect?

a. Personal Data You Provide

Account Information: Name, email address, password (encrypted), and payment details when creating an account or subscribing to a membership. Contact Information: Details you provide when contacting support or submitting inquiries. Uploaded Content: Files, photos, videos, and other media you upload to the platform.

b. Automatically Collected Data

Usage Data: IP address, browser type, device information, and log files (e.g., login activity, error reports). Cookies and Tracking Data: Cookies, web beacons, and analytics tools that gather data on your usage patterns. c. Third-Party Data Data collected via integrated third-party services like payment processors (e.g., Paddle) or email services (e.g., Mailchimp).

3. How We Use Your Data

We process your data for the following purposes: To provide our services: Enable account creation, media uploads, gallery sharing, and file management. To process payments: Manage subscriptions, issue invoices, and process transactions securely. To improve and personalize the platform: Analyze user activity to enhance performance and user experience. To ensure platform security: Detect and prevent unauthorized access, fraud, or misuse. To communicate with you: Send important updates, respond to support requests, and deliver optional newsletters if consented. Legal compliance: Comply with applicable laws and resolve disputes.

4. Legal Basis for Processing

We process personal data based on the following legal grounds: Contractual Obligation: Data processing is necessary to fulfill our contract with you (e.g., providing the platform services). Consent: Where you explicitly consent to optional processing (e.g., newsletters, marketing). Legitimate Interests: For security, analytics, and platform improvements. Legal Compliance: To meet legal and regulatory obligations.

5. How Do We Share Your Data?

We do not sell or rent your data to third parties. However, we may share your data in the following cases:

  • Service Providers: Trusted third-party providers that help us operate and improve the platform.

  • Legal Requirements: To comply with legal obligations or law enforcement requests.

  • Business Transfers: In the event of a merger, acquisition, or sale of assets.

  • With Your Consent: Where you explicitly permit sharing for specific purposes.

Third-Party Services

To provide the Cherrypics platform efficiently, we use the following third-party services:

Payment Processing – Paddle

  • Purpose: To process payments, manage subscriptions, and issue invoices.
  • Data Collected: Name, email, payment details, and billing address.
  • Privacy Policy: Paddle Privacy Policy

Email Communications – Mailchimp and Postmark

Analytics – Plausible and Google Analytics

Purpose: To analyze platform usage and improve performance.

  • Plausible: A privacy-friendly tool that does not use cookies or collect personal data.
  • Google Analytics: Tracks page views, usage patterns, and session duration using cookies.
  • Data Collected: IP address (anonymized), device details, and usage statistics.
  • Privacy Policies: Plausible Privacy Policy Google Analytics Privacy Policy

We ensure that all third-party providers adhere to strict data protection standards and comply with GDPR.

6. How Long Do We Retain Your Data?

We retain your data only for as long as necessary to:

  • Fulfill the purposes outlined in this Privacy Policy.
  • Comply with legal obligations (e.g., tax or financial records).
  • Resolve disputes and enforce agreements. Uploaded content (e.g., photos, videos) will be deleted [e.g., 30 days] after account termination, unless required otherwise by law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable essential platform functionality (e.g., user login).
  • Improve performance and analyze usage.
  • Provide personalized features or optional marketing services.

Managing Cookies: You can adjust cookie settings in your browser. However, disabling cookies may impact platform functionality.

8. Your Rights Under GDPR

As a user in the European Economic Area (EEA), you have the following rights:

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
  • Right to Restrict Processing: Limit how we process your data.
  • Right to Data Portability: Receive your data in a machine-readable format.
  • Right to Object: Object to data processing based on legitimate interests.

Withdraw Consent: Revoke your consent at any time for processing activities based on consent. To exercise any of these rights, contact us at [email protected].

You also have the right to file a complaint with the data protection authority in your jurisdiction.

9. Data Transfers Outside the EEA

We primarily store data on servers in the European Union (EU). If data is transferred outside the EEA, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Compliance with GDPR and relevant privacy frameworks.

10. Data Security

We implement industry-standard measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission.
  • Secure server infrastructure.
  • Regular monitoring for vulnerabilities.

However, no system can guarantee 100% security. Users are responsible for safeguarding their account credentials.

11. Third-Party Links

Our platform may include links to third-party websites or services. We are not responsible for the privacy practices of these external platforms.

12. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Significant updates will be communicated via email or notifications on the platform. Continued use of the platform after changes constitutes acceptance of the revised policy.

--

13. Contact Information

For any questions, concerns, or to exercise your rights under this Privacy Policy, please contact:

Cherrydeck GmbH

(Operator of Cherrypics)

Fettstrasse 5A 20357 Hamburg, Germany

General Inquiries: [email protected]

Thank you for trusting Cherrypics. We are committed to protecting your privacy while providing a secure and reliable service.