Source: http://app.dataprotection.pendix.com/
Timestamp: 2019-04-20 02:21:41+00:00

Document:
We only process the personal data of our users to the extent this is necessary for the provision of a functional app as well as for the provision of our contents and services. The personal data of our users are only processed regularly with the consent of the user. An exception is made in case the data processing is permitted by legal provisions.
Provided that we seek the consent of the affected person for personal data processing, art. 6 par. 1(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for personal data processing.
In case of the processing of personal data, which are necessary for the performance of a contract, to which the person concerned is a contractual party, art. 6 par. 1(b) GDPR serves as legal basis. This also applies to processing operations which are necessary for the implementation of precontractual measures.
The personal data of the user are deleted or blocked as soon as the purpose of storage ceases to apply. The personal data can also be stored, if this is provided for by the European or national legislature in European Union regulations, laws or other provisions, to which the person responsible is subject. The data are also blocked or deleted when a storage period prescribed by the mentioned standards expires unless it is necessary to further store the data for the conclusion of a contract or the performance of a contract.
With each visit to our app, our system automatically collects data and information from the computer system of the mobile phone.
the product and version information of the used mobile phone, the set preferred language as well as the IP address.
The legal basis for the temporary storage of the data and the logfiles is art. 6 par. 1(f) GDPR.
The temporary storage of the IP address by the system is necessary to allow the delivery of the app to the mobile phone of the user. For this purpose, the IP address of the user must be stored for the duration of the session.
The data are stored in logfiles in order to ensure the functioning of the app. Furthermore, we use these data for the optimization of the app and for ensuring the safety of our information technology systems. The data are not analyzed for marketing purposes in this context.
These purposes also include our legitimate interest in data processing according to art. 6 par. 1(f) GDPR.
The personal data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. If the data are collected for the provision of the app, this is the case when the respective session is ended. If the data are stored in logfiles, this is the case after twelve months at the latest.
The collection of the data for the provision of the app and the storage of the data in logfiles is absolutely necessary for the operation of the app. Therefore, the user has no possibility to object.
If we process data in third countries (countries outside the EU / EEA) or transfer data to companies in third countries, we will only arrange this if we are authorised by you or by law. If there is no adequacy decision by the European Commission according to art. 45 GDPR for the respective third country, i.e. there is no adequate level of data protection in the third country, we will ensure via contractual regulations (standard contractual clauses by the EU on data protection) or other appropriate guarantees according to art. 46 GDPR that your privacy and your personal data are also protected at the company in the third country adequately and as provided by law.
It may happen that third-party contents, such as YouTube videos or maps from Google Maps are integrated within this app. This always assumes that the provider of these contents (hereinafter referred to as “Third-party provider”) see the IP address of the users. Because without the IP address, they would not be able to send the contents to the browser of the respective user. Consequently, the IP address is necessary for the presentation of these contents. We strive to only use those contents, the providers of which only use the IP address for the provision of the contents. However, we have no influence on whether the third-party providers store the IP address e.g. for statistical purposes or not.
(8) the existence of an automatic decision making, including profiling according to art. 22 par. 1 and 4 GDPR and – at least in these cases – conclusive information of the involved logic as well as the scope and the pursued effects of such a processing for the affected person.
If the processing of your personal data was limited, these data – except for their storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of a substantial public interest of the European Union or of a member state.
If the processing was limited according to the above-mentioned conditions, you will be informed by the person responsible bevor the limitation is removed.
If the person responsible made your personal data public and if he is obliged to the deletion of these data according to art. 17 par. 1 GDPR, he will take appropriate measures, also of a technical nature, under consideration of the available technology and the implementation costs in order to inform the authority responsible for processing the personal data that you as the affected person demanded the deletion of all links to these personal data or of copies or replications of these personal data.
If you asserted the right of correction, deletion or limitation of the processing against the person responsible, he is obliged to inform all the recipients to which your personal data have been disclosed about this correction or deletion of the data or the limitation of processing, unless this turns out to be impossible or is connected with a disproportionate effort.
You have the right to receive your personal data, which you have provided to the person responsible, in a structured, common and machine-readable format. Furthermore, you have the right to transfer these data to another person responsible without impeding the person responsible to which the personal data were provided, provided that the processing is based on a consent according to art. 6 par. 1(a) GDPR or art. 9 par. 2(a) GDPR or on a contract according to art. 6 par. 1(b) GDPR and the data are processed by means of automatic procedures.
With the exercise of this right you also have the right to effect that your personal data are transferred directly from a person responsible to another person responsible, provided this is technically possible. The freedoms and rights of other persons must not be affected by this.
If your personal data are processed for direct advertising, you have the right to file an objection against the processing of your personal data for the purposes of such advertisement at any time; this also applies for profiling, provided it is connected with such direct advertising.
If you object to processing for purposes of direct advertising, your personal data won´t be processed for these purposes anymore.
You have the possibility to exercise your right of objection by means of an automatic procedure in the context with the use of services from the information society, irrespective of guideline 2002/58/EG, for which technical specifications were used.
These decisions, however, must not be based on special categories of personal data according to art. 9 par. 1 GDPR, unless art. 9 par. 2(a) or (g) applies and appropriate measures have been taken for the protection of your rights and freedoms as well as of your legitimate interests.
The user is not subjected to such an automatic decision in individual cases, including profiling, when he uses our app.
The supervisory authority to which the appeal has been filed, shall inform the complainant about the status and the results of the appeal, including the possibility of a judicial remedy according to art. 78 GDPR.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 45
 art. 46
 art. 22
 art. 17
 art. 6
 art. 9
 art. 6
 art. 9
 art. 9
 art. 78