We are pleased about the use of our CityLine Mobile App. Hectronic GmbH (hereinafter "Hectronic", "we" or "us") attaches great importance to the security of users' data and compliance with data protection regulations. We would like to inform you below about the processing of your personal data through our app.
Responsible entity:
Hectronic GmbH, Allmendstrasse 15, 79848 Bonndorf, Germany
Tel.: +49 7703 9388-0
E-mail: mail@hectronic.com
External data protection officer:
DDSK Ltd.
E-mail: datenschutz@hectronic.com
Terms
The technical terms used in this privacy policy are to be understood as legally defined in Art. 4 GDPR.
Automated data processing (log files, etc.)
Our online offer can be used without actively providing personal information. However, we automatically store access data (server log files) with each use of our app, such as the operating system used, the date and duration of the visit, your device identification number, and for security reasons, e.g. to detect attacks on our app, the IP address. This data is evaluated exclusively for the improvement of our offer and does not allow any conclusions to be drawn about the users of our app. This data is not merged with other data sources.
We process and use the data for the following purposes: providing the app, improving our app, preventing and detecting errors/malfunctions and misuse of the app.
To improve our app, we rely on crash reports. For this purpose, information such as the state of the app at the time of the crash, details of the manufacturer and operating system of the mobile device, and the time of the crash are transmitted to the service provider we use with your express consent.
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO); legitimate interest, according to Art. 6 para. 1 lit. f) DSGVO.
Legitimate interests: Ensuring the functionality and error-free as well as secure operation of the app and to adapt this app to the requirements of the Users' requirements.
Firebase Crashlytics
Service used: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO)
Third country transfer guarantee: Standard data protection clauses Art. 46 para. 2 c) DSGVO https://policies.google.com/privacy/frameworks?hl=de
We have integrated functions and content (map service) into our online offering that are obtained from third-party providers.
In order to be able to display this content to the visitors of our online offer, the respective third-party provider processes, among other things, the IP address of the user so that the content can be transmitted to the browser and displayed. Without this processing, the display of third-party content is not possible.
In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offer, technical information about the user's browser or operating system, the time of the visit or referring websites. The data obtained in this way is stored in cookies on the user's terminal device.
In order to protect the personal data of visitors to our online offering, we have taken certain security precautions to prevent the automatic transmission of this data. This data is only transmitted when users use the buttons or click on the third-party content.
Categories of data subjects: Users of the plug-in or embedded third-party content
Categories Data: Usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address).
Purposes of processing: Designing our online offering, increasing the reach of social media advertisements, sharing posts and content, interest and behavior-based marketing, cross-device tracking.
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO)
Service used: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
Opt-out link: tools.google.com/dlpage/gaoptout or https://myaccount.google.com/
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO)
Third country transfer guarantee: Standard data protection clauses Art. 46 para. 2 c) DSGVO https://policies.google.com/privacy/frameworks?hl=de
We offer the possibility to use their user account in the app. In the course of registration, we collect the necessary data from interested visitors, which we need to provide the associated functions.
If users decide to register, they will receive an e-mail which must be confirmed and which serves to prevent the misuse of false e-mail addresses.
To protect the use of the internal area, we collect the IP addresses and the time of access to prevent misuse of a user account and unauthorized use. We do not share this data with third parties unless this is necessary to pursue our claims or we are required to do so by law.
Categories affected: registered users
Categories Data: Master data (e.g. name, card issuer), contact data (e.g. e-mail address, telephone number), login data (customer number, password), meta and communication data (e.g. device information, IP addresses), usage data (e.g. day, time, parking machine).
Purposes of processing: Facilitation of website function, contract fulfillment, customer retention.
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO)
Our service includes the option of re-locating devices for certain roles. You can only use this function after you have agreed to a pop-up that we can collect your location data by means of GPS and/or your IP address in anonymized form for the purposes of service provision. Consent to use the device location can be deactivated at any time in the settings by switching off the "Request GPS password" slider.
Categories concerned: registered users, "guests
Categories Data: Location data (GPS, IP address),
Purposes of processing: Provision of location-based functions within the app
Legal basis: Consent (Art. 6 para. 1 lit. a) DSGVO)
We transmit the personal data of visitors to our online offering for internal purposes (e.g., for internal administration or to the HR department in order to comply with legal or contractual obligations). The internal data transfer or disclosure of data only takes place to the extent necessary and in compliance with the relevant data protection regulations.
We are a globally active company with headquarters in Germany. The data of visitors to our app is stored in our centralized customer database in Germany in compliance with the relevant data protection regulations. Processing beyond administrative purposes does not take place.
Legal basis: Legitimate interests (Art. 6 para. 1 lit. f) DSGVO)
Legitimate interests: Centralized management and administration in the company to take advantage of synergy effects, cost savings, increased effectiveness.
In order to execute contracts or to fulfill a legal obligation, it may be necessary for us to pass on personal data. If we are not provided with the data required in this respect, it may not be possible to conclude the contract with the data subject.
In the event that we transfer data to a country outside the EEA for processing, we ensure that the processing is legally permissible in the manner we intend. In this case, we have concluded standard contractual clauses including a separate regulation of appropriate technical and organizational measures to protect the data of data subjects in the best possible way. In the case of a third country transfer, we have linked you to the guarantees used directly in the description of the service used.
As a matter of principle, we store the data of visitors to our online offering for as long as is necessary for the provision of our service or insofar as this has been provided for by the European Directive and Regulation Maker or another legislator in laws or regulations to which we are subject. In all other cases, we delete the personal data after the purpose has been fulfilled, with the exception of data that we must continue to store in order to fulfill legal obligations (e.g., we are obliged to retain documents such as contracts and invoices for a certain period of time due to retention periods under tax and commercial law).
The relevant legal bases are primarily derived from the GDPR. These are supplemented by national laws of the Member States and are applicable together with or in addition to the GDPR where applicable.
Consent: Art. 6 para.1 lit. a) DSGVO serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose.
Performance of a contract: Art. 6(1)(b) DSGVO serves as the legal basis for processing operations necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject.
Legal obligation: Art. 6 para. 1 lit. c) DSGVO serves as the legal basis for processing which is necessary for compliance with a legal obligation.
Vital interests: Article 6(1)(d) DSGVO serves as the legal basis if the processing is necessary to protect the vital interests of the data subject or another natural person.
Public interest: Article 6(1)(e) of the GDPR serves as the legal basis for processing operations necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Legitimate interest: Article 6(1)(f) of the GDPR serves as the legal basis for processing necessary to protect the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Right to information: Pursuant to Art. 15 DSGVO, data subjects have the right to request confirmation as to whether we are processing data relating to them. They can request information about this data as well as the further information listed in Art. 15 (1) DSGVO and a copy of their data.
Right to rectification: Pursuant to Art. 16 DSGVO, data subjects have the right to request that data concerning them and processed by us be corrected or completed.
Right to erasure: Data subjects have the right pursuant to Art. 17 DSGVO to request the immediate deletion of the data concerning them. Alternatively, they can demand that we restrict the processing of their data in accordance with Art. 18 DSGVO.
Right to data portability: Pursuant to Art. 20 DSGVO, data subjects have the right to request that the data they have provided to us be made available to them and transferred to another data controller.
Right of complaint: Data subjects also have the right to complain to the supervisory authority responsible for them in accordance with Art. 77 DSGVO.
Right to object: If personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f) DSGVO, data subjects have the right to object to the processing of their personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from their particular situation or the objection is directed against direct marketing. In the latter case, data subjects have a general right to object, which is implemented by us without specifying a particular situation.
Some data processing operations are only possible with the express consent of the data subjects. You have the possibility to revoke an already given consent at any time. For this purpose, an informal message or e-mail to datenschutz@hectronic.com to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.