---
text:
-
- " Privacy Policy\n<p>September 1, 2020</p>\n<p>Threema GmbH (hereafter «Threema»)
was founded on the premise of bulletproof data protection.\nIt is our primary goal
to store only the absolute minimum of information for the shortest possible time
(«Privacy by Design»).\nIn addition to using state-of-the-art encryption methods,
we take all necessary technical and organizational measures to prevent unauthorized
data access and misuse.\nThe processing and protection of data is carried out in
accordance with applicable legal regulations and EU Regulation 2016/679 (GDPR).</p>\n1.\nGeneral
Information\n<p>The Threema Work app (hereinafter referred to as \"Threema Work\")
has been made available to you for use by your employer or organization (hereinafter
referred to as \"Organization\").\nThe Organization or its authorized administrator
have the possibility to determine or limit the use of Threema Work and thus the
extent of the processed data individually.\nIn this document, optionally processed
data is marked with an asterisk (*).</p>\n<p>Threema Work <strong>can be used without
providing any personal data</strong>.\nIf you voluntarily provide your phone number
or email address, you confirm in accordance with Art.\n8 GDPR that you are at least
16 years old or that you have obtained the consent of your legal guardian.\nBy using
the app, you agree to the collection, processing and use of data as described below.</p>\n2.\nPurpose
of Data Processing\n<p>Threema processes data on behalf of your Organization and
to the extent determined by your Organization to enable the transmission of short
messages and media to other participants.\nThe data processed within the scope of
order fulfillment will be processed exclusively by Threema on its own server infrastructure
in Switzerland and will not be passed on to third parties.</p>\n3.\nScope and Duration
of Data Processing\nA.\nInventory Data\n<p>Depending on the Organization's configuration,
the following inventory data is collected and stored when using Threema Work:</p>\n<ul>\n<li>License
data (user name and password)</li>\n<li>Threema ID</li>\n<li>Public key</li>\n<li>Date
(without time) of creation of the Threema ID</li>\n<li>Date (without time) of the
last login</li>\n<li>Operating system and version of the Threema Work app</li>\n</ul>\n<p>The
following information is optional and can be provided by the user or the Organization
voluntarily in order to make it easier to be found by other Threema Work users:</p>\n<ul>\n<li>Nickname
*</li>\n<li>Mobile phone number (one-way encrypted) *</li>\n<li>Email address (one-way
encrypted) *</li>\n</ul>\n<p>When exchanging messages, only the following information
will be passed on to other participants or shared with the Organization upon signing
in:</p>\n<ul>\n<li>Threema ID</li>\n<li>Public key</li>\n<li>Nickname</li>\n</ul>\n<p>The
information will not be passed on to third parties.<br>\n<br>All information will
only be stored until it is deleted by the user or by the Organization's administrator
or until the Organization's account is closed at Threema.\nOnce the information
is deleted, it cannot be restored.</p>\nB.\nMessage Contents\n<p>Threema Work encrypts
all messages, including control messages, using a highly secure end-to-end encryption
method.</p>\n<p>Header information of messages (sender, recipient etc.) is protected
by an additional encryption layer for transmission to the server, and from the server
to the recipient, to prevent eavesdropping by third parties (e.g.\nin open wireless
LANs).</p>\n<p>Neither Threema as the operator of the Threema servers nor your Organization
have the ability to decrypt messages, as they have no knowledge of the private keys
1).</p>\n<p>Encrypted messages and media (images, videos, files, etc.) are completely
deleted on the servers as soon as they have been successfully delivered.\nIf the
messages and media are not or not completely fetched, they will be automatically
and irretrievably deleted from the server after two weeks.</p>\n<p>1) * In order
to ensure compliance with applicable regulation, your Organization has the option
of setting up a pre-calculated key pair instead of having it created by the user
at initial setup.\nIn this case, messages may also be decrypted by the Organization.\nShould
this option be used, the Organisation is obliged to comply with the relevant statutory
provisions and to inform the user of this fact.</p>\nC.\nAddress Book Data\n<p>At
the explicit request of the user and if not deactivated by the Organization, email
addresses and phone numbers from the address book can be synchronized.\nThis data
is transmitted to the servers in one-way encrypted (\"hashed\") form and additionally
protected using SSL.\nThe servers only keep these hashes in volatile memory for
a short time to determine the list of matching IDs, and then delete the hashes immediately.\nAt
no point are the hashes or the results of the synchronization written to a data
carrier.</p>\nD.\nLocation Data (Android)\n<p>The “send location” feature transmits
the coordinates of the user’s current location to Threema if and only if the user
has allowed location sharing on their mobile device and the permission to access
the user’s location has been granted.\nThe coordinates are used to display a map
section including a list of POIs (Places of Interest).\nThe coordinates are transmitted
in encrypted and anonymized form, without any reference to a Threema ID or any other
personally identifying information whatsoever.</p>\n<p>Generally, to use the “show
map” feature, location sharing is not required.\nIf location sharing is enabled,
the permission to access the user’s location has been granted and the “your location”
feature is used, the coordinates of the user’s current location are transmitted
to Threema in order to center the map at the user’s current location.\nBoth transmission
and processing of the coordinates are performed in encrypted and anonymized form,
without any reference to a Threema ID or any other personally identifying information
whatsoever.</p>\n<p>If the features “send location” and “show map” are not used,
or the permission to access the user’s location has not been granted, no coordinates
will be transmitted.</p>\nE.\nCrash Reports\n<p>In order to improve the stability
and reliability of the app, Threema relies on anonymous crash reports.</p>\n<p>\n<strong>iOS:</strong>
If the user voluntarily and explicitly agrees to the transmission of a crash report
after a crash of the app, information about the crash (status of the app at the
time of the crash) is transferred to a server of Threema and stored there for evaluation.\nIf
the user does not agree to the crash report transmission, nothing will be sent.\nCrash
reports do not contain any personal data.\nOn iOS, they consist of a stack trace,
some information about the device (model, operating system version, but no serial
number or similar), the app version, the time stamp of the start and crash, and
the list of software libraries loaded in memory.\nProcessor register contents or
log messages are not being collected.</p>\n4.\nData Processed by Third Parties\n<p>Threema
GmbH does not pass on any data to third parties, is completely free of advertising
and does not use analytics software to monitor user behavior.\nHowever, some functionalities
can only be provided by using external data sources, frameworks or operating system
services, which in turn process data and are subject to a separate privacy policy.</p>\nA.\nCrash
Reports\n<p>In order to improve the stability and reliability of the app, Threema
Work relies on anonymous crash reports.</p>\n<p>\n<strong>Android</strong>: If the
user voluntarily and explicitly consents to the general transmission of crash reports
to Google when setting up his mobile phone, information (status of the app at the
time of the crash, stack trace, manufacturer and operating system of the mobile
phone, latest log messages) will be transmitted to Google and stored there for evaluation
by Threema GmbH.\nThis information does not contain any personal data.</p>\n<p>\n<strong>Windows
Phone</strong>: If the user voluntarily and explicitly agrees to the transmission
of a crash report after a crash of the app, information about the crash (status
of the app at the time of the crash) is transferred to the servers of HockeyApp
(a Microsoft company) and stored there for evaluation by Threema GmbH.\nIf the user
does not agree to the crash report transmission, nothing will be sent.\nHockeyApp's
Privacy Policy can be found at https://www.hockeyapp.net/imprint/.</p>\n5.\nRight
to Information, Correction, Blocking, Deletion and Objection\n<p>You have the right
to receive information about your personal data stored by Threema at any time.\nLikewise,
you have the right to correct, block or (apart from the legally required data storage
for business purposes) delete your personal data.</p>\n<p>The stored inventory data
can be viewed at any time within Threema Work in the \"My ID\" tab.\nIf this function
has not been deactivated by the Organization, the inventory data can be corrected
or deleted with immediate effect.</p>\n<p>In case of loss of the end-user device,
mobile phone numbers and email addresses linked to a Threema ID can be deleted via
the following link: https://myid.threema.ch/unlink</p>\n<p>The Organization's administrator
is able to irrecoverably delete all personal data and revoke the key pair at any
time.\nRevocation can also be requested directly by the end user via the following
link: https://myid.threema.ch/revoke</p>\n6.\nResponsible Body\n<p>If you have any
questions about the extent of data processed, please first contact the responsible
administrator or the data protection officer of your organization.</p>\n<p>If you
have any questions about data protection at Threema in general, you can also contact
us directly.\nSend us an email to privacy@threema.ch.</p>\n<p>Responsible body and
direct contact for data protection topics at Threema:</p>\n<p>Threema GmbH<br>Data
Protection Officer<br>Churerstrasse 82<br>8808 Pfäffikon SZ<br>Switzerland<br>privacy@threema.ch<br>\n<br>CHE-221.440.104<br>\n<br>Representative
in the EU according to Art.\n27 para.\n1 GDPR: GeKaCe GmbH, Dept.\nT, Weilerweg
13, 72411 Bodelshausen, Germany</p>\n7.\nAmendment of the Privacy Policy\n<p>We
reserve the right to change this Privacy Policy from time to time in order to comply
with changed legal requirements or to reflect new functionalities of the app.\nThe
current Privacy Policy is always available for consultation from within Threema
Work.</p>\nDisclaimer\n<p>This is a mere translation of the German version of this
document.</p>\n<p>In case of any discrepancies between the English version and the
German version of this document,<strong> t</strong>\n<strong>h</strong>\n<strong>e</strong>\n<strong>German
version will prevail</strong>.</p> "
updated_at:
- 2021-05-16 20:21:23.747527894 Z
- 2021-05-16 20:21:30.219821163 Z