PRIVACY POLICY

Privacy Policy for the Wireless Basic APP

We take the protection of your personal information extremely seriously and treat said information confidentially and in compliance with the statutory data protection rules and this Privacy Policy. This Privacy Policy applies to our mobile iPhone and Android apps (hereinafter referred to as the “APP”). The policy explains the nature, purpose and extent of the data we collect during your use of the APP. We wish to point out that the transmission of data on the internet can pose security risks. It is impossible to guarantee complete data protection in relation to third-party access.

I.        Data Controller

RP-Technik GmbH

II.       Data Protection Officer

We have appointed a Data Protection Officer for our company.

sicdata Unternehmensberatung
Tobias Erdmann
Heiligenstock 34c
42697 Solingen, Germany
Telephone: +49 (0) 212 73 87 24 0
Email: erdmann@sicdata.de

III.     Provision of the website and the application

To provide our services via the APP, we require the access permissions set out below which will enable us to access certain functions on your device.

Address and the associated GPS data for the location/building data

Camera access

Internet access

Successful access to the end device

Android device battery status

Android version of the Android device.

Host name of the accessing computer

Time of the server request

IP address

Camera access

IV.    Analysis tool

The website and application are analysed with Azure Application Insights on the basis of Art. 6(1)(1f) of the General Data Protection Regulation (GDPR). Our aim in using these analyses is to ensure that the design of our website and application meets the requirements of users and to continually optimise the same. We also use analysis measures to record statistics about usage of our website and the application and to improve the services we offer you. These measures are also taken so we can monitor the proper functioning of the application. These interests are to be deemed legitimate for the purposes of the aforementioned regulation.

Azure Application Insights collects telemetry data, for example performance data, the number of page requests, the number of users and sessions, HTTP requests, and the server availability time. The IP address collected is anonymised once the telemetry data has been analysed. The telemetry data is deleted after 90 days.

Further information: https://docs.microsoft.com/en-gb/azure/azure-monitor/app/data-retention-privacy

V.      Registration and use of our site and app

On our website and in our application, we give Wireless Basic users the option of registering by providing their personal data. During this process, the data is entered into an input form and is transmitted to us and stored by us. The following data is processed during the registration process on the legal basis of processing for the purpose of performance of a contract (Art. 6(1)(b) GDPR). Said data will be erased upon termination of the contractual relationship with you, or with the organisation you work for, taking into consideration any statutory retention periods providing there are no other reasons to retain the data after the deletion date. The data will be processed on servers (storage media) belonging to a service provider.

Your registration details will be a valid email address, a user name of your choosing and your first and last name. The specified email address will also be used to reset your password, where necessary. It is also necessary to provide your business contact details in order to identify you and, where applicable, so we can contact you with a view to fulfilling the contract, Art. 6(1)(b) GDPR.

To use the features of our application and/or website, you must provide additional information. This includes entering the basic data for an installation (e.g. postal address or a “name” for the installation. If you prefer, you can electronically generate the GPS coordinates for the postal address entered and add these instead).

We also use your business contact details for marketing, advertising and sales purposes if you have granted your consent to the same by checking the box on our registration/login page pursuant to Art. 6(1)(a) GDPR. You may revoke this consent at any time with effect for the future by unchecking the box.

We may also collect and process the following technical data which will be assigned to your name and your contact details. This includes the type, name and configuration of any devices plus data which, during both normal and disrupted operation, is attributed to you or your organisation on those devices. This will be, for example, automatically updated reports from self tests, any error messages that have occurred, information about the current operating status, etc. and entries by technicians in the case of malfunctions or maintenance, photos of the building or installations or floor plans showing the position of the installations, etc.

The purpose of collecting this data is to obtain an overview of the technical conditions of your installation and thus fulfil our contractual obligation. All technical data will be anonymised upon termination of the contractual relationship with you, or with the organisation you work for, or when your registration comes to an end. This will remove any reference to your identity.

We also use this anonymised technical data to further develop our application, the website, our devices, our services, to request or arrange repair or maintenance services, and to analyse maintenance requirements and installations, etc.

VI.    Data disclosure

Your personal data will not be passed to third parties for purposes other than those listed below.

We will only forward your personal data to third parties, where:

• you have expressly consented to the same in accordance with Art. 6(1)(1a) GDPR,

• disclosure of the same is necessary pursuant to Art. 6(1)(1f) GDPR to assert, exercise or defend legal claims, and where there is no reason to believe that you have any overriding, legitimate interest in your data not being disclosed,

• there is a statutory obligation to disclose the data in accordance with Art. 6(1)(1c) GDPR, and

• where legally permitted to do so and where this is necessary in accordance with Art. 6(1)(1b) GDPR to fulfil a contractual relationship with you.

• The Contractor will ensure that the Principal is able to ensure compliance with the Contractor’s obligations under Art. 28 of the GDPR. The Contractor undertakes to provide the Principal with the necessary information upon request and, in particular, to provide evidence that the technical and organisational measures have been implemented.

If your personal data is forwarded to third parties for the purpose of fulfilling a contract pursuant to Art. 6(1)(b) GDPR, this disclosure will be to the following categories of recipients:

We use service providers for all services associated with internet access. We also commission service providers, e.g. technicians, to perform maintenance and repair work on the Wireless Basic products. To perform this activity in order to fulfil the contract with you, or with the organisation you work for, you will be given access to your personal data, with the exception of the details for the registration process.

We, and our service providers, process your data within the European Union.

If the agreed service is provided outside the EU/EEA, the admissibility of the data processing will be ensured through appropriate measures.

VII.  Rights of the data subject

You are entitled:

• in accordance with Art. 15 GDPR to request access to the personal data processed by us about you. In particular, you may request information about the purpose of the processing, the category of personal data, the categories of any recipients your data has been or will be disclosed to, the intended storage duration, the existence of a right to correct, erase, restrict the processing or object to the same, the existence of a right to complain, the origin of your data if this was not collected by us, and about the existence of any automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof.

• in accordance with Art. 16 GDPR, to request the rectification of inaccurate personal data held by us or the completion of personal data held by us without undue delay.

• in accordance with Art. 17 GDPR to request that the personal data we hold about you is erased except where the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, on the grounds of public interest, or to assert, exercise or defend legal claims.

• in accordance with Art. 18 GDPR, to request that the processing of your personal data is restricted where the accuracy of your data is disputed, where the processing is unlawful but you are opposed to its erasure, and where we no longer require the data but you need it to assert, exercise or defend legal claims, or where you have objected to the processing of the same in accordance with Article 21 of the GDPR.

• in accordance with Art. 20 GDPR, to obtain your personal data that you have provided us with, in a structured, commonly used and machine-readable format, or to request the transmission of the same to a different controller.

• in accordance with Art. 7(3) GDPR, to revoke the consent you once granted to us at any time. This means that we may no longer continue with the data processing the consent related to in the future, and

• in accordance with Art. 77 GDPR, you have the right to file a complaint with a supervisory authority. To do this, you can usually contact the supervisory authority in your usual place of residence or place of work or our company headquarters.

VIII.         Right to object

1.       Right to object to data collection in certain scenarios and to direct marketing (Art. 21 GDPR)

If data processing is performed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. This also applies to profiling based on those provisions. Details of the respective legal basis for data processing can be found in this Privacy Policy. If you submit an objection, we will no longer process your personal data in question except where we are able to demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing is necessary to establish, exercise or defend legal claims (objection pursuant to Art. 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data in question for the purposes of such direct marketing. This also applies to profiling where it is related to such direct marketing. If you object, your personal data will then no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
 

IX.     Changes to the Privacy Policy

It may be necessary to modify this Privacy Policy as a result of changes to our website and our application or due to amended statutory or official requirements. The latest version of the Privacy Policy, and previous privacy policies, can be viewed and printed out on this website at any time.

Last updated: 09/10/2020