Data protection policies for apps

The following Data Protection Policies apply to the mobile Apps of aerome GmbH Ambient Air care, available through Google's Play Store and Apple's AppStore.

By downloading our application, you legitimized yourself to the respective store, e.g. to the AppStore using your Apple ID. Any use of personal data, collected by Google or Apple while downloading or using the applications, that does not comply with the European General Data Protection Regulation (GDPR) cannot be ruled out by and lies out of the sphere of influence of aerome GmbH Ambient Air Care. Disclosure of data by aerome GmbH Ambient Air Care to Apple or Google will not be done.

The following will give an overview about what kind of personal data will be collected, processed or stored by aerome GmbH Ambient Air Care:

1. Data Protection at a Glance

General information

The following will give a simple overview about what will happen to your personal data when using our mobile application (»App«). Personal data means any information that can be used to identify you as a natural person. Comprehensive information about data protection can be found after this text, in our Data Protection Policy.

Collection of data in our Apps

Who is responsible for the App’s collecting of data?

The processing of data in our Apps is done by its distributor. The distributor is:

aerome GmbH Ambient Air Care
Duerener Strasse 422
D – 50858 Cologne
Germany

Phone: +49 221 48556710
E-Mail: info@aerome.com

How do we collect your data?

Your data will be collected by:

  • yourself, transmitting them to us, e.g. any data you enter directly in the App.
  • our IT systems, automatically while using the App, this especially applies to technical data (e.g. device ID of the scense, mobile device, operating system or time of use).

The collection of this data happens automatically, as soon as you use our Apps.

What do we use your data for?

This data is collected, to transfer your chosen instructions via the App to a server and from there to remote controlled devices (function fulfilment). Other data can be used for analysis, error management and bug fixing.

What rights do you have regarding your data?

You have the right, at any time and free of charge, to obtain information about source, recipient and purpose of your stored personal data. Moreover, you have the right to demand the rectification, locking or erasure of this data. Regarding this, as well as any further questions regarding data protection, you may contact us using the specified address. Furthermore you have the right to appeal at the supervisory authority in charge.

Furthermore you have the right (under certain circumstances) to demand the restriction of the processing of your personal data. Please refer to the Data Protection Policy »Right to restriction of processing« for more details.

2. General and Mandatory Information

Data protection

The operator of these Apps take the protection of your personal data very seriously. We treat your personal data confidentially and appropriately according to the legal data protection regulations as well as this Data Protection Policy.

When using our App, various personal data will be collected. Personal data means any information that can be used to identify you as a natural person. This Data Protection Policy on hand explains what data will be collected and what it will be used for, as well as how and for what purpose this happens.

We explicitly point out that any data transmission using the internet (e.g. by communicating via e-mail) can have security flaws. To completely secure data from being accessed by third parties is technically impossible.

Responsible body

Responsible for the processing of data in these Apps is:

aerome GmbH Ambient Air Care
Duerener Strasse 422
D – 50858 Cologne
Germany

Phone: +49 221 48556710
E-Mail: info@aerome.com

Responsible body is the natural or legal person which, alone or together with others, decides about the purpose and the means of processing personal data (e.g. device-ID, IP-Adress etc.).

Right to object to processing of data

A lot of data processing operations is only possible with your explicit consent. You have the right to object at any time, an informal e-mail to us suffices. The data processing’s legality up to the time of objection stays untouched.

Right to object to collecting data in particular situations as well as direct marketing (Art. 21 GDPR)

Should the processing of personal data be based on point (e) or (f) of Article 6(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, including profiling based on those provisions. The respective legal basis for a processing of data is explained in this Data Protection Policy. If you object, we will no longer process your personal data, except we can prove reasons of compelling worth of protection, outweighing your interests, rights and freedom or the processing is necessary for the establishment, exercise or defence of legal claims (Right to object, according to art. 21 para. 1 GDPR).

Should your personal data be processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extant that it is related to such direct marketing. If you object, we will no longer process your personal data for direct marketing (Right to object, according to art. 21 para. 2 GDPR).

Right to appeal at the supervisory authority

In cases of violation against the GDPR, persons affected have the right to appeal at a supervisory authority, especially in the member state of their habitual residence, their workplace or of the place of the suspected violation. The right to appeal exists inviolated of other administrative or judicial legal appeals.

Right to data portability

You have the right to receive the personal data concerning yourself, which you have provided, in a structured, commonly used and machine-readable format and have the right to have those data transmitted directly to another controller, where technically feasible.

SSL / TLS-Encryption

For security purposes and to protect the transmission of confidential content, e.g. coordinates or requests sent to use as the operator of the app, these Apps make use of SSL- or TLS-Encryption respectively. When SSL- or TLS-Encryption is activated, data that is transmitted from you to us cannot be read by third parties.

Access, Locking, Erasure and Rectification

Within the scope of applicable legal regulations, you have the right, at any time and free of charge, to obtain information about the collected personal data, as well as source, recipient and purpose of those data. Moreover, you have the right to demand the rectification, locking or erasure of this data. Regarding this, as well as any further questions regarding data protection, you may contact us using the specified address. Furthermore you have the right to appeal at the supervisory authority in charge.

Right to restriction of processing

You have the right to obtain restriction of processing. You may contact us using the specified address. The right to obtain restriction of processing is available where one of the following applies:

  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  • we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of us override those of yours.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3. Collecting of data by our Apps

Application data

The server, the App are communicating with, stores information in so-called log files automatically. This applies to information automatically transmitted by our Apps, as follows:

  • type of mobile device
  • operating system in use
  • language / regional settings in use
  • technical information about the device in use
  • date and time of the request
  • IP address
  • mobile phone number or device identification
  • current geolocation information about the mobile device
  • device-ID of the scense

This happens based on point (b) of Article 6(1) GDPR, that regulates the lawfulness of processing when it is necessary for the performance of a contract or in order to take steps prior to entering into a contract.

Processing of data (customer and contract data)

We collect, process and make use of personal data only when it is necessary for the reason, the content or the rectification of the legal relationship (inventory data). This happens based on point (b) of Article 6(1) GDPR, that regulates the lawfulness of processing when it is necessary for the performance of a contract or in order to take steps prior to entering into a contract. We only collect, process and make use of personal data via the usage of our Apps (user data), when it is necessary to make use of or to account the usage of the service.

The collected customer data will be erased after the completion of the order or the termination of the business relationship.