Privacy Information for the Uhlmann Smart App

Scope

This Privacy Information applies to the personal data processed by Uhlmann Sonnenschirme GmbH & Co. KG ("Uhlmann" or "we") in connection with the use of the Uhlmann Smart App ("App"). The App is used to control Uhlmann umbrellas with intelligent control functions and is technically based on the Casambi platform[1].

The purpose of this Privacy Information is to inform users ("Users" or "you") in accordance with the information obligations under Articles 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of their personal data.

This Privacy Information may be updated when necessary to reflect changes in data processing practices. The current version can be found in the App and on our website www.uhlmann-sonnenschirme.de. We will not make any substantial changes to this Privacy Information or restrict the rights of Users under this Privacy Information without informing you.

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws is:

Uhlmann Sonnenschirme GmbH & Co. KG
Langer Rain 5
88524 Uttenweiler
Germany

Phone: +49 7374 920 57-0
Fax: +49 7374 920 57-50
Email: infonoSpam@uhlmann-online.de
Website: www.uhlmann-sonnenschirme.de

Commercial Register: HRA 729173
Register Court: Amtsgericht Ulm
VAT Identification Number: DE 368 934 450

Represented by: Christian Maar

Data Protection Officer

The Data Protection Officer of the controller is:

Melanie Schoch
OFFICESCHOCH GmbH
Ostmarkstraße 10
73312 Geislingen an der Steige
Germany

Phone: +49 7331 9322 537
Email: datenschutznoSpam@uhlmann-online.de

Personal Data Processed and Data Sources

We collect three types of information about Users: (i) Account Data; (ii) Analytics Data; and (iii) Business Partner Data.

Account Data is obtained directly from Users in connection with the use of the App. Account Data may also be provided to us by the company or organization on whose behalf you use the App.

Analytics Data is automatically collected when you use the App. Although we do not normally use Analytics Data to identify individuals, individuals may sometimes be identified from it, either alone or in combination or connection with Account Data. In such cases, Analytics Data will also be considered personal data under applicable laws, and we will treat the combined data as personal data and process such data in accordance with this Privacy Information.

Uhlmann may process the following categories of data:

Account Data

1. Account details and access credentials
2. Email address
3. Photos in which a person is recognizable, provided the User uploads such photos to the App or takes them with the App
4. Feedback and reviews (e.g., public App Store reviews that you may provide regarding the Uhlmann Smart App)

Analytics Data

1. IP address
2. Device type and model (computer, phone, or tablet)
3. Operating system
4. Visit time
5. Browser type and version
6. Language settings
7. Metadata about App usage
8. Location data
9. Time zone
10. Settings and preferences: information about the device connecting to the App (such as hardware model, device identification number, and operating system)

Business Partner Data

1. Name
2. Organization and job title
3. Contact information such as email address and phone number
4. Any direct correspondence with Uhlmann, such as support requests
5. Opt-outs and opt-ins for direct marketing

Cookies and Analytics Tools

We use various technologies to collect and store Analytics Data and other information when Users use our App, including cookies and similar technologies.

A cookie stores information. A cookie is created when you visit the App and stored on your device (smartphone, notebook, tablet, desktop PC, etc.). When this App is accessed again by you, the device sends the previously received cookie back. We can evaluate the information obtained through this process. Cookies allow us to identify visitors to our App and facilitate the use of our App, as well as create aggregated information about our visitors. This helps us improve our App and better serve our Users. Cookies will not harm your device or files. We use cookies to customize our App and the information we provide according to the individual interests of our Users.

Users can choose to set their web browser to reject cookies or to warn when cookies are sent. Please note that some parts of our App may not function properly if the use of cookies is rejected.

Purposes and Legal Bases for Processing

Purposes of Processing

To Provide Our App and Fulfill Our Contractual Obligations (Legal Basis: Contract Performance pursuant to Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR)

We process personal data to offer the App to our Users. Personal data may be processed to fulfill our contractual obligations to the User or to the organization the User represents. For example, we may use the data to offer essential functionalities of the App and grant access to the App.

For Our Legal Obligations (Legal Basis: Fulfillment of a Legal Obligation Art. 6(1)(c) GDPR)

We process personal data to enable us to fulfill our legal obligations. This includes data processed to fulfill our accounting obligations and to provide information to relevant authorities.

For Claims and Legal Proceedings (Legal Basis: Legitimate Interest Art. 6(1)(f) GDPR)

We may process personal data in connection with handling claims, debt collection, and legal proceedings. We may also process data to prevent fraud, misuse of our App, and for data, system, and network security.

For Communication and Marketing (Legal Basis: Consent Art. 6(1)(a) GDPR)

We may process personal data for the purpose of contacting our Users regarding our App and informing Users about changes to our App. We may also process personal data to market our App, for example in the form of sending newsletters.

For Quality Improvement and Trend Analysis (Legal Basis: Legitimate Interest Art. 6(1)(f) GDPR)

We may process information about the use of the App to improve the quality of our App, for example through analysis of trends in the use of our App. Where possible, we will do this only using aggregated, non-personal data.

International Data Transfers

Uhlmann stores Users' personal data primarily within the European Economic Area. However, since our App is based on the technical platform of Casambi Technologies Oy, we have service providers in multiple geographic locations. Therefore, we and our service providers may transfer or access personal data in countries outside the European Economic Area or outside your country of residence.

We will take measures to ensure that Users' personal data receives an adequate level of protection in the countries where it is processed. We provide adequate protection for the transfer of personal data to countries outside the European Economic Area through a range of agreements with our service providers based on Standard Contractual Clauses or other similar arrangements.

Recipients of Personal Data

We do not share personal data with third parties outside the organization of Uhlmann, unless one of the following circumstances applies:

It is Required for the Purposes Set Out in This Privacy Information

To the extent that third parties need access to personal data to provide the App, Uhlmann has taken appropriate contractual and organizational measures to ensure that personal data is processed exclusively for the purposes set out in this Privacy Information and in accordance with all applicable laws and regulations.

With Express Consent

We may share personal data with third parties outside the organization of Uhlmann for reasons other than those stated above if we have the express consent of the User to do so. You have the right to withdraw this consent at any time.

Retention Period

Uhlmann does not store personal data longer than is legally permissible and necessary for the purposes of providing the App or the relevant parts thereof. The retention period depends on the nature of the information and the purposes of processing. The maximum duration may therefore vary depending on use.

We will not store Analytics Data in connection with the App longer than is reasonably necessary.

Rights of Data Subjects

You have the right:

1. pursuant to Art. 15 GDPR to request access to your personal data processed by us;
2. pursuant to Art. 16 GDPR to request without undue delay the rectification of inaccurate or completion of your personal data stored by us;
3. pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
4. pursuant to Art. 18 GDPR to request restriction of processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data, but you need it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
5. pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
6. pursuant to Art. 7(3) GDPR to withdraw your consent once given to us at any time. This has the consequence that we may not and will not continue the data processing based on this consent for the future; and
7. pursuant to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement if you believe that the processing of your personal data violates the EU General Data Protection Regulation (GDPR).

If you wish to exercise your data subject rights, please send your request by mail to the address stated in the imprint.

Right of Objection

If your personal data is processed on the basis of legitimate interests, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, insofar as there are grounds for doing so arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of withdrawal or objection, an email to infonoSpam@uhlmann-online.de is sufficient.