FAZUA App Privacy Policy
Introduction
With the following information, we would like to give you an overview of the processing of your personal data in our FAZUA App (hereinafter referred to as "app"). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always carried out in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.
Controller
Controller in the sense of the GDPR is:
Porsche eBike Performance GmbH
Marie-Curie-Strasse 6, 85521 Ottobrunn
Phone number: +49 (0)89 / 540462-100
Email: contact@porsche-ep.com
Data protection officer
You can reach our data protection officer as follows:
E-Mail address: dpo@porsche-ep.com
You can contact our data protection officer any time to ask questions and make suggestions regarding data protection and the exercise of your rights.
Third Parties
We use third-party services for certain functions and services on our app. The specific services can be found in the corresponding chapters.
In some cases, we use service providers that are based in a third country, i.e. outside the EU. We only transfer data to a third country where there is an adequate level of data protection or appropriate safeguards as defined in Art. 44-49 GDPR. You have the right to request a copy of the appropriate safeguards we have put in place. To do so, please send us an email to the email address mentioned in this privacy policy.
Provision of the app
General information
When using our app, we automatically collect data that your device transmits to our server (in so-called "server log files"). Our server collects a series of general data and information with each call to our app. This general data and information is stored in the server log files. The following can be collected:
- Operating system used
- Authentication provider
- Host name of the accessing end device
- Date and time of the server request
- IP address
- User ID
- Profiles used in the engine
- Bike ID
- History of recent events when using the app
Purpose of processing
When using this general data and information, we do not draw any conclusions about your person. The purposes pursued by us include in particular:
- ensuring that the app connects smoothly,
- Setting of different driver profiles for individual driving experiences
- Technical support for fine tuning of FAZUA hardware
Legal basis
The legal basis for data processing is your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR or our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f GDPR. We have an overriding legitimate interest in being able to offer our services in a technically flawless manner.Storage period
Log files are stored for security reasons (e.g. to analyze error messages) and to improve the app for a maximum of 7 days and are deleted afterwards.
Storage duration
The log files are stored for security reasons (e.g. to analyze error messages and to improve the app) for a maximum of 7 days and then deleted.
Recipients of personal data
We use the following service providers:
Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Ireland
Third country
-
Suitable warranty
-
More information
-
Provider
Auth0 / Okta Inc.
Address
10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA
Third country
USA
Suitable warranty
Standard data protection clause
More information
Privacy policy
Provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Suitable warranty
Standard data protection clauses
More information
Privacy policy
Permissions of the app
General information
The provision as well as use of functions of our app requires the access and input of some specific data or functions of your used device.
Our app requires the following permissions:
- Bluetooth (device nearby) for connectivity
- Camera
- Photos / saved recordings
- File manager for saving PDF
- Device memory
- Push notifications
- Mobile data
- Location
Our app also requires the following information in order to use all services:
- First and last name (voluntary)
- Email address
- Age
- Size
- Weight
- Gender
- Date of birth
This gives us access to the personal data contained in the permissions and entered on your terminal device.
Purpose of processing
We need these permissions to provide app functionality.
Legal basis
The legal basis for data processing is your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. The respective authorizations required for this are requested individually.
Storage duration
We delete your personal data that we process on the basis of the authorizations granted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case at the latest when the user manually deletes the user account.
You can change the settings on your device and revoke the permissions at any time. Please note that if you do not grant permissions or revoke them at a later time, you will not necessarily be able to use all of the app's features.
Recipients of personal data
We use the following service providers:
Provider
Google
Address
Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Suitable warranty
-
More information
Privacy policy
Provider
Auth0/Okta Inc.
Address
10800 NE 8th Street, Suite 700, Bellevue, WA 98004
Third country
USA
Suitable warranty
Standard data protection clauses
More information
Privacy policy
Provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Suitable warranty
Standard contractual clauses
More information
Privacy policy
Data analysis and data collection
General information
We collect, store and analyze (personal) data created during the active recording of journeys. When recording a journey, the following data is collected and analyzed:
- Number of connected bicycles in "Your Bicycles
- Firmware versions (remote control and motor)
- Battery charge cycles
- Maximum battery capacity
- Odometer
- Components SN
- Driving profile settings per user & profile
- Profile ID
- Profile drive system
- Bike category
- Fitness level
- Power setting (1-5)
- Setting the support relationship (1-5)
- Setting the acceleration (1-5)
- Current values per saved profile (formula output)
- Values per profile (saved) / history of changes per profile
- Mileage stamp per activated profile
- Trip Summary Data
- Battery SoC / Consumption
- Average engine power
- Maximum power of the driver
- Average performance of the driver
- Maximum speed
- Average speed
- Duration of the trip
- Active time
- Location of the ride (GPS)
- Total distance
- Maximum cadence
- Average cadence
- Calories burned
- Height difference
- Support mode Split
- Power distribution user
- Power distribution engine
Purpose of processing
In the collection, storage and analysis, we pursue the following purposes:
- ensuring that the app connects smoothly,
- Setting of different driver profiles for individual driving experiences
- Analysis of driver data and engine data
- Market research and product development
Legal basis
The legal basis for the data processing is your consent according to Art. 6 para. 1 p. 1 lit. a GDPR. Before you start a ride, you will be informed about a corresponding recording. By pressing the start button, you consent to the processing of the above data for analysis purposes.
Storage duration
We delete your personal data that we process on the basis of the authorizations granted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case at the latest when the user manually deletes the user account.
Unless you track rides via the app, we do not collect or analyze any data.
Recipients of personal data
We use the following service providers:
Provider
BigQuery
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Suitable warranty
-
More information
Privacy policy
Provider
Firebase
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Suitable warranty
-
More information
Privacy policy
Provider
Mapbox
Address
85 2nd St., Suite 300, San Francisco, CA 94105
Third country
-
Suitable warranty
Standard data protection clauses
More information
Privacy notice
Cookies
General information
We do not use cookies in our app.
Analytics and marketing cookies
We do not use any analysis and marketing cookies. However, it cannot be ruled out that cookies from third-party services are set by providing the app via App Store or Google PlayStore. These are cookies that are technically necessary to provide all functions of our app.
Recipients of personal data
We use the following service providers:
Provider
Google Ireland Limited, Analytics
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Suitable warranty
-
More information
Privacy policy
Provider
Apple Inc.
Address
Apple Inc., One Apple Park Way, Cupertino, CA 95014
Third country
USA
Suitable warranty
Standard data protection clauses
More information
Privacy policy
Service provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Suitable warranty
Standard data protection clauses
More information
Privacy policy
Contact options
General information
Through our app you have the possibility to contact us by email or via our form.
In the course of contacting you and responding to your inquiry, we process the following personal data from you:
- Name
- Phone number
- Date and time of the request
- IP address
- Other personal data that you provide to us in the course of contacting us.
Purpose of processing
We process your data to respond to your inquiry as well as other matters arising from it.
Legal basis
If your request is based in connection with pre-contractual measures or with an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 para. 1 p. 1 lit. b. GDPR.
If your request is made independently of contractual or pre-contractual measures, our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.
Storage period
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is generally the case when the circumstances indicate that the specific matter has been conclusively processed.
Recipients of personal data
We use the following service providers:
Provider
Google
Address
Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Suitable warranty
-
More information
Privacy policy
Your rights
Right of confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
Information (Art. 15 GDPR)
You have the right to receive from us at any time free of charge information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.
Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
Deletion (Art. 17 GDPR)
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.
Restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the legal requirements is met.
Data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) p. 1 lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) p. 1 lit. b GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In addition, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
Objection (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) p. 1 lit. e GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
Revocation of consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time with effect for the future.
Complaint to a supervisory authority
You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.
Supervisory authority responsible for us:
The Bavarian State Commissioner for Data Protection (BayLfD)
State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
PO Box 1349
91504 Ansbach
Tel.: 0981/180093-0
poststelle@lda.bayern.de
https://www.lda.bayern.de