Source: https://www.durr-group.com/en/data-protection-app/
Timestamp: 2019-08-18 05:12:53
Document Index: 124907462

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 6', 'Art. 78']

Data Protection App | Dürr
Data Privacy Information Dürr Events App
(for Google Android compatible devices and iOS devices)
This privacy policy describes how Dürr Aktiengesellschaft (public limited company) (hereinafter referred to as "Dürr AG") processes and protects the data you provide to us when using the Dürr Events app and which is required when installing the Dürr Events App on your Android terminal (e.g. compatible Android smartphone or Android tablet), as well as your iOS terminal (e.g. iPhone, iPod or iPad), in accordance with the General Data Protection Regulation (GDPR) requirements.
1. Responsible Person and Data Privacy Officer
Responsible body in the sense of the data privacy regulations for all data processing and data transfer processes made via the Dürr Events app is:
If you have any questions, comments or complaints or wishes to exercise your rights in connection with this data privacy notice and the processing of your personal data via the Dürr Events app, you can contact the Dürr AG data privacy officer directly using the above-mentioned contact details or by e-mail (dataprotection@durr.com). They will be happy to take care of your data privacy concerns.
2. Which data do we need from you to operate the Dürr Events app? Which data is collected and stored when using the Dürr Events app?
a. Download and installation of the Dürr Events app
(1) Via Google’s Play Store (Google-android compatible terminal devices)
To use the Dürr Events app on your Android device (e.g. Android smartphone or Android tablet), you need to download the Dürr Events app from Google's Play Store and install it on your device. To do this, you must be logged into the Google Play Store with your Android user account. You do this by entering your user name (your email address) and password.
Google may collect and process information and data through the Play Store. For more information regarding the purpose and scope of the data collection and how Google subsequently processes and uses your information in the Play Store, please see Google's Privacy Policy. This can be found online at http://www.google.de/intl/de/policies/privacy/. Here, among other things, you will also find information about settings you can use to protect your privacy and information regarding your further rights concerning Google's collection, processing and use of your data. For additional information about using Google Play Store, please refer to the Play Store Terms of Use, available online at https://play.google.com/intl/de_de/about/play-terms.html.
(2) Via the App Store or iTunes
To use the app on your iOS device (e.g. iPhone, iPod or iPad), you must download the app from Apple's App Store (for Mac: via iTunes) and install it on your device. To do this, you must be logged into the App Store with your Apple user account, enter your Apple ID (usually your email address) and your password.
Apple may collect and process information and data via the App Store. Information about the purpose and extent of data collection, and regarding the further processing of your data can be found in the data privacy regulations of Apple. These can be found online at https://www.apple.com/legal/privacy/de-ww/. Here, among other things, you will also find information on the settings you can use to protect your privacy and regarding your further rights concerning the collection, processing and use of your data by Apple. For additional information about using the App Store and iTunes and other Apple online services, see Apple's Terms of Use, available online at http://www.apple.com/legal/internet-services/itunes/de/terms.html.
b. Access rights of the Dürr Events app to data of the mobile device
Some of the services offered by the Dürr Events app require the application to grant access to individual features of your mobile device:
Already when installing the Dürr Events app in the Google Play Store you have to confirm the following access permissions:
If you do not wish to accept these access rights, please refrain from installing and using the Dürr Events app.
Access to location data:
The Dürr Events app offers the feature to show you the distance to the respective event based on the location data of your mobile device. For this, the Dürr Events app needs access to the location data of your mobile device. The access authorisation is verified by the Dürr Events app the first time the function is used. The location data collected shall be used solely for the above stated purpose. If you deny access to the location, we will not be able to provide you with the location-dependent features of the DürrEvents app that use this data.
If you have agreed to receive push notifications, the app will send push notifications about certain events to your mobile device's home screen.
When you confirm the access authorisations and accesses during or after installation, you hereby provide us your consent to these accesses on your terminal device. As such, the legal basis for processing the data is Art. 6 Par. 1 lit. a GDPR. The purpose of data processing through your terminal device via certain access rights is the technical operation and use of the Dürr Events app, with all features included.
You can deactivate the granted access rights in your mobile device's system settings for the Dürr Events app at any time.
For location data, proceed as follows:
Go to "Settings" on your mobile device
Select the "Security and privacy" menu item (the name of the menu item may vary slightly for different Android devices).
Select the "location access" menu item.
Then select the Dürr Event app and deactivate the site access.
For push notifications, proceed as follows:
Select the "Notifications" menu item.
Select the Dürr Events app and deactivate further notifications.
Select the "Location services" menu item
Then select the Dürr Events app and deactivate location access
Select the "Notifications" menu item there
Then select the Dürr Events app and deactivate further notifications
c. Data processing when using the Dürr Events app (usage data)
The following data is recorded when using the Dürr Events app, whereby storage of the so-called usage data ensues solely for internal system-related and statistical purposes:
Login times (first and last login)
Pages accessed in the app
There will be no storage of this data together with other personal data of the user. The IP addresses are also stored in our system's log files.
The storage of log files is performed to ensure the correct functioning of the Dürr Events app. In addition, the data is used to optimise the application and ensure our IT systems' security.
The data is deleted the moment it is no longer needed to achieve the purpose for which it was collected. For the storage of data in log files, this will be at the latest after 25 months. Storage beyond this time is possible. In this case, the users' IP addresses are deleted or modified so that they can no longer be allocated to the accessing client.
The recording of data to provide the Dürr Events app and the storage of data in log files is essential for Dürr AG. Consequently, the user has no option of contesting this.
d. Use of the analysis software Google Mobile App Analytics with IP anonymisation
The use of the app is automatically logged, whereby Dürr AG uses Google Analytics in the "Mobile App Analytics" version specially designed for apps. Google Analytics is an analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The logging already starts with the download and the installation of the app on your device. Google Analytics uses an anonymous identifier, which fulfils the functions of a cookie on platforms such as mobile devices, on the device you use. This is a file that is stored on your mobile device and allows analysis of your app usage. The information generated by the anonymous identifier about your app usage is usually transferred to a Google server in the U.S. and stored there. On behalf of Dürr AG, Google will use this information to evaluate the use of the app, compiling reports on app activity and providing other app-related services to Dürr AG as an app provider. The IP address of your terminal device transmitted by the app as part of Google Analytics will not be merged by Google with any other data held by Google.
The legal basis for data processing Google Analytics is Art. 6 Par. 1 lit. f GDPR.
Dürr AG has a legitimate interest in the collection and evaluation of statistical data, as this is necessary to keep the services and offers offered in our app available to you as a customer and to continually improve them.
You can deactivate the collection and transmission of the data generated by the anonymous identifier and related to your app usage (including your IP address) to Google as well as the processing of this data by Google in the settings of your Dürr Events app account.
Go to "My Profile" in the Dürr Events app
Deactivate the "Allow analytics to collect user data" feature
e. Participant lists and message function
The Dürr Events app offers you the possibility to register in the participant list of the respective event and to make it visible for other participants of the event. You can provide your consent to this publication by going to the list of participants. Your data (first name, surname and e-mail address) will then be visible to other event participants, and they can send you messages and e-mails directly via the app. The legal basis for processing the data is Art. 6 Par. 1 lit. a GDPR. The purpose of data processing is to provide you with additional features of the Dürr Events app.
You can revoke your consent to the display of your data in the participant list and to the use of this data for individual communication channels (e-mail, direct messages) at any time. The revocation of consent does not affect the lawfulness of the processing performed out on the basis of the consent up to the revocation.
For the recall please proceed as follows:
Select the "Settings" menu item there
Deactivate the "Register to the subscriber list", "Register for direct messages" and/or "Register for e-mails" features.
f. Event surveys
The Dürr Events app offers you the option of participating in surveys for a specific event. In the event that you expressly agree to this within the app, your name and e-mail address will be processed for this purpose. The legal basis for data processing is Art. 6 Par. 1 lit. a GDPR. The purpose of data processing is to provide additional features of the Dürr Events app. You can revoke your consent at any time in your profile settings by deactivating the corresponding feature for event surveys.
3. How is your data used and possibly forwarded to third parties, and for which purpose is this carried out?
You can, for example, use the app to book Dürr AG events and request information about them. The app serves the provision of the aforementioned feature. You can use the Dürr Events app by logging in to your user account, created by a Dürr AG employee, with your user name and password. To create your account for the Dürr Events app, the data transmitted to Dürr AG will be that which was available to Dürr AG at the time of confirmation of participation in the respective event and which was required for the event registration (e.g. first and last name, e-mail address).
The legal basis for processing the data is Art. 6 par. 1 lit. a GDPR. We store this data so as to be able to provide the Dürr Events App and enable its use.
The Dürr Events app will be presented on the platform of the Eventbase Technology Inc. ("Eventbase") provider, 1280 Homer St. Vancouver, BC Canada V6B 2Y5. Eventbase processes the data collected via the Dürr Events app exclusively on behalf of and on the instructions of Dürr AG. Eventbase processes the data solely for the purpose of making the Dürr Events app and its functions available and accessible to you.
If you have consented to the collection and processing of your data for one of the features provided by the Dürr Events app, the legal basis for the processing by Eventbase is Art. 6 Par. 1 lit. a GDPR.
For data processed by Eventbase for operating the application on the basis of justified interests of Dürr AG, the legal basis is Art. 6 Par. 1 lit. f GDPR. For more information on the legitimate interest and the possibilities for objection, please refer to the information in this data privacy notice about the individual features of the Dürr Events app.
Dürr AG has taken a variety of security measures to protect personal information appropriately and adequately.
The databases of Dürr AG are protected by physical and technical measures, as well as by procedural measures that restrict access to the information to specially authorised persons in compliance with this data privacy statement. The information system is kept behind a software firewall to prevent access from other networks that are connected to the internet. Only employees who require the information to complete a special task can obtain access to personal information. The employees of Dürr AG are trained regarding security and data privacy practices.
Dürr AG has taken precautions to ensure the security of your personal data. Your data will be conscientiously protected from loss, destruction, falsification, manipulation, and unauthorised access or unauthorised disclosure and disclosure. Dürr AG takes every effort to provide you with a secure environment for the use of the Dürr Events app, but cannot guarantee the absolute security of your data.
Communication between the Dürr Events app installed on your terminal device and the server operated by Dürr AG always ensues via a sufficiently-encrypted Internet connection (SSL certificate).
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. This is basically the case once the purpose of the data processing no longer applies. In addition, storage can take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.
If personal data relating to you is processed, you are a data subject as defined in the GDPR, and you are entitled to the following rights towards Dürr AG as the controller:
a. Information, rectification, restriction and deletion
You have the right, at any time, to obtain information free of charge regarding the data stored by Dürr AG about yourself, its origin and its recipients, as well as regarding the purpose of data processing via the applications of Dürr AG. In addition, when statutory provisions regarding this exist, you have the right to rectification, erasure and restriction of the processing of your personal data.
Details can be found in the relevant legal regulations Art. 15 to 19 of the GDPR.
b. Right to data transmission
You have the right to receive the personal data relating to you that you have made available to Dürr AG in a structured, commonly used and machine-readable format. Dürr AG can satisfy this right by providing a csv-export of the processed customer data relating to you.
When you have exercised your right to rectification, deletion or restriction of processing to the responsible office, this office is obliged to inform all recipients, to whom the personal data relating to you was disclosed, about this rectification or deletion of the data or the restriction of processing, unless this proves to be impossible or involves an unreasonable expense or effort.
You have the right vis-à-vis Dürr AG to be informed about these recipients.
d. Right to objection
You have the right, for reasons that result from your particular situation, to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6 Par. 1 lit. e or lit. f GDPR.
e. Revocability of data privacy consent declarations
In addition, you may revoke the consent that you have given Dürr AG with effect to the future at any time, using the contact details stated above.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement if you take the view that that the processing of the personal data relating to you infringes the general data privacy regulation.
The supervisory authority, with which the complaint has been lodged, will inform the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Dürr AG may update this Privacy Policy from time to time. Such changes are displayed within the Dürr Events app.