FAZUA App Privacy Policy
Introduction
With the following information, we want to give you an overview of the processing of your personal data in our FAZUA app (hereinafter referred to as "app"). We also want to inform you about your existing rights under data protection laws. The processing of your personal data by us is always carried out in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR") and any applicable country-specific data protection laws.
Controller
Controller within the meaning of the GDPR is:
Porsche eBike Performance GmbH
Marie-Curie-Straße 6, 85521 Ottobrunn
Telephone number: +49 (0)89 / 540462-100
Email: contact@porsche-ep.com
Data protection officer
Our data protection officer can be reached as follows:
Niklas Hanitsch
c/o secjur GmbH
Steinhöft 9
20459 Hamburg
Telephone number: +49 40 228 599 520
E-Mail: dsb@secjur.com
For all questions and suggestions regarding data protection and the exercise of your rights, you can contact our data protection officer directly at any time.
Use of third parties
We use third-party services for certain functions and services provided in our app. The specific services are listed in the corresponding chapters.
In some cases, we may use service providers located in a third country, i.e. outside the EU. We only transfer data to third countries that provide an adequate level of data protection or appropriate safeguards within the meaning of Art. 44-49 of the GDPR. You have the right to request a copy of the appropriate safeguards we apply. To do so, please send us an email to the email address mentioned in this privacy notice.
Provision of the app
General information
When using our app, we automatically collect data that your end device transmits to our server (in so-called "server log files"). Our server collects a series of general data and information with each request of our app. This general data and information are stored in the server log files. The following can be collected
- used operating system
- authentication provider
- hostname of the accessing end device
- date and time of the server request
- IP-address
- user ID
- used profiles in the motor
- bike ID
- history of recent events when using the app
Purpose of processing
When using this general data and information, we do not make any inferences about your person. The purposes pursued by us include in particular:
- ensuring a smooth connection setup of the app,
- setting different driver profiles for individual driving experiences
- technical support for fine tuning of FAZUA hardware
Legal basis
The legal basis for data processing is your consent pursuant to Art. 6 (1) p.1 lit. a GDPR or our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f GDPR. We have an overriding legitimate interest in being able to offer our services in a technically impeccable manner.
Storage period
Log files are stored for security reasons (e.g. to analyze error messages) and to improve the app for a maximum of 7 days and are deleted afterwards.
Recipients of personal data
We use the following service providers:
Service provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Ireland
Third country
-
Appropriate safeguards
-
Further information
-
Service provider
Auth0 / Okta Inc.
Address
10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Service provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
App authorizations
General information
The provision as well as use of functions of our app requires the access and input of some specific data or functions of your used device.
Our app requires the following authorizations:
- bluetooth (device nearby) for connectivity
- camera
- photos / saved images
- file manager for PDF storage
- device memory
- push notifications
- mobile data
- location
Furthermore, our app requires the following information to be able to use all services:
- first and last name (optional)
- email address
- age
- height
- weight
- sex (gender)
- date of birth
This gives us access to the personal data covered by the permissions as well as the personal data entered that is located on your end device.
Purpose of processing
We need these authorizations to provide app functionality.
Legal basis
The legal basis for data processing is your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. The respective authorizations required to do so will be requested individually.
Storage period
We delete your personal data that we process based on the authorizations granted as soon as they are no longer required to achieve the purpose for which they were collected. This is at the latest the case when users delete their user account manually.
You can change the settings on your device at any time and withdraw the authorizations. Please note that you will not necessarily be able to use all of the app's functions if you do not grant authorizations or revoke them at a later time.
Recipients of personal data
We use the following service providers:
Service provider
Google
Address
Gordon House, Barrow Street, Dublin 4, Ireland
Third country
-
Appropriate safeguards
-
Further information
Privacy notice
Service provider
Auth0/Okta Inc.
Address
10800 NE 8th Street, Suite 700, Bellevue, WA 98004, USA
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Service provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Cookies
General information
We do not use any cookies in our app.
Analytical and marketing cookies
We do not use any analytics and marketing cookies. However, it is possible that the provision of the app via App Store or Google PlayStore may set cookies from third-party services. These are cookies that are technically necessary to provide all functions of our app.
Recipients of personal data
We use the following service providers:
Service provider
Google Ireland Limited, Analytics
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Service provider
Apple Inc.
Address
Apple Inc., One Apple Park Way, Cupertino, CA 95014
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Service provider
Sentry / Functional Software Inc.
Address
45 Fremont Street, 8th Floor, San Francisco, CA 94105
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Contact options
General information
In our app you have the possibility to contact us by e-mail or by using our contact form.
As part of the contact and response to your request, we process the following personal data from you:
- name
- email address
- phone number
- data and time of the request
- IP address
- Other personal data that you provide us when contacting us.
Purpose of processing
We process your data to respond to your request as well as any other issues related to it.
Legal basis
If your request is related to pre-contractual measures or an existing contract with us, the legal basis is the performance of a contract or the execution of pre-contractual measures pursuant to Art. 6 (1) p. 1 lit. b. GDPR.
If your request is made independently of contractual or pre-contractual measures, our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.
Storage period
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact requests, this is generally the case when the circumstances indicate that the specific issue has been conclusively resolved.
Recipients of personal data
We use the following service providers:
Service provider
Google
Address
Gordon House, Barrow Street, Dublin 4, Ireland
Third country
USA
Appropriate safeguards
Standard contractual clauses
Further information
Privacy notice
Your rights
Right of confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
Right of access (Art. 15 GDPR)
You have the right to receive from us at any time free of charge access to the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.
Right to rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, considering the purposes of the processing.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of personal data concerning you without undue delay if one of the reasons provided for by law applies and to the extent that the processing or storage is no longer necessary.
Right to restriction of processing (Art. 18 GDPR)
You have the right to demand restriction of processing by us if one of the legal requirements is met.
Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format. Furthermore, you have the right to transfer this data to another controller without any obstruction by us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 (1) p. 1 lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) p. 1 lit. b GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority assigned to us.
In addition, when exercising your right to data portability pursuant to Article 20 (1) GDPR, you have the right to seek to have the personal data transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
Right to object (Art. 21 GDPR)
You have the right to object at any time, for reasons arising out of your particular situation, to the processing of personal data relating to you which is carried out based on data processing based on public interest pursuant to Art. 6 (1) p. 1 lit. e GDPR or based on our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise, or defence of legal claims.
Revocation of consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time with effect for the future.
Complaint to a supervisory authority
You have the right to lodge a complaint about our processing of personal data with a supervisory authority responsible for data protection.
Supervisory authority responsible for us:
Der Bayerische Landesbeauftragte für den Datenschutz (BayLDA)
Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Postfach 1349
91504 Ansbach
Telephone number: 0981/180093-0
poststelle@lda.bayern.de
https://www.lda.bayern.de