Privacy policy of the App

When you use this mobile application ("App") from FROMM System GmbH ("FROMM" or "we"), various personal data is collected. Personal data is data by which you can be personally identified. We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations. The following notes provide a simple overview of the processing of your personal data when using this App. In addition, we would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

1. Data protection at a glance

Who is responsible for data collection within the App?

Data processing within the App is carried out by the publisher of the App. This is:

FROMM System GmbH

Neulandstrasse 10

77855 Achern

Germany

As data protection officer has been appointed:

Peter Dippold, who can be contacted at datenschutz@frommsystem.de or at +49-7221-3577374

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This can be data that you enter directly into the App, for example.

On the other hand, data is collected after our App has been granted access to the data storage of your mobile device, e.g. in the context of the provision/download of PDF manuals and firmware updates, which are stored locally.

Finally, data is automatically collected by our IT systems when the App is used. This is mainly technical data (e.g. mobile device, operating system or time of use). This data is collected automatically as soon as you use our App.

What do we use your data for?

The data is primarily collected in order to send your selected instructions via the App to the server and from there to the controlled devices (function fulfillment).

2. Automated data processing when using our App

Download our App

When downloading our App, only the necessary information is transferred to the App Store, in particular

  • User name, e-mail address and customer number of your account,
  • Time of the download,
  • Payment information,
  • Individual device identification number.

We have no influence on the collection, processing and use of this personal data in connection with your registration and the provision of downloads in the respective App Store and the App Store-software. In this respect, the provider of the respective App Store is solely responsible. If necessary, please contact the respective App Store provider directly.

We do not pass on data to Apple or Google.

Using our App

The use of our App is only possible without registration. Nevertheless, during communication with our server, the App automatically transmits data, which are automatically stored by the server in so-called server log files. These data are:

  • App version
  • Operating system
  • Screen resolution
  • Mobile device
  • IP address
  • Date and time of the server request
  • Accessed contents and functions

These data are recorded on the basis of Art. 6 (1 ) (f) GDPR. We have a legitimate interest in the technically correct display and optimization of our App - for this purpose the server log files must be recorded. A consolidation of this data with data from other data sources is not carried out.

External Hosting

Our server is hosted by an external service provider ("Hoster"). The personal data collected when accessing these files is stored on the servers of the Hoster. Our Hoster will process your data only to the extent necessary to fulfil its performance obligations and will follow our instructions in relation to such data. In order to ensure data protection compliant processing, we have concluded a contract for commissioned data processing with our host.

SSL or TLS Encryption

This App uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the provider of the App. When SSL or TLS encryption is enabled, the information you submit to us cannot be read by third parties.

3. Access permission in the mobile device

In order for the App to work properly, you need to grant access to certain smartphone features. You will be prompted once at the beginning or when you use the function in question to grant the appropriate access permission:

  • Network Access & Network Connections (Network access is required because the App can only access e.g. manuals or firmware updates with an Internet connection)
  • Bluetooth (To connect to the FROMM handset, the Bluetooth connection must be switched on)
  • Memory (when providing / downloading e.g. PDF manuals and firmware updates, these are stored locally)
  • Location (Location authorization is required for the Bluetooth functions. The location information itself is not processed)
  • Contacts and call lists (When Bluetooth pairing with the FROMM handset, the smartphone may ask to share the contacts and call lists. This is not required and does not need to be given. Even if it is granted, the App and the handset will not process this data)

If you allow access to this data, the App will only access your data and transfer it to our server to the extent necessary to provide the functionality. We will treat your data confidentially and delete it if you revoke the rights of use or if it is no longer required for the provision of services and if there is no legal obligation to retain it. The legal basis for the processing is Art. 6 (1) (f) GDPR.

Revocation of access permission

You can revoke the access permissions as follows:

If you use Android:

  • Tap Settings
  • Touch on authorizations
  • Touch the corresponding authorization
  • Scroll to APP and deactivate/revoke permission

If you use iOS:

  • Touch Settings
  • Touch Privacy
  • Touch the corresponding authorization
  • Scroll to APP and deactivate/revoke permission

When you uninstall the App, the permissions are automatically deleted.

4. Contact request

If you would like to contact us by e-mail, phone or fax, the App refers you to our general web offer of the FROMM group of companies by an external link. You are leaving the App, contact within or through the App is not possible. Before contacting a company of the FROMM Group, please read the applicable data protection regulations, which you can find on the website of the respective company. The respective companies of the FROMM Group are responsible for the processing of your data in cases of contact requests.

5. Recipients of personal data

Within our company, only those persons have access to personal data that require this for the purposes stated in each case. We will only pass on your personal data to external third parties if this is necessary to process or handle your request, if another legal permission exists or if we have your consent.

6. Duration of the storage of personal data

We only store personal data until the purpose for which it was collected ceases to apply; it is necessary in order to provide a service that you have requested or for which you have given your consent, or unless there are no legal obligations requires us to store the data for a longer period of time, such as storage periods under commercial or tax law.

7. What rights do you have regarding your data?

As a data subject, you have numerous rights at your disposal. In particular:

Right of Access: You have the right to have access to your data that we store.

Right to Rectification and Erasure: You can demand that we rectify inaccurate personal data and - if the legal requirements are met - erase your data.

Right to Restriction of processing: You can demand that we restrict the processing of your data, provided the legal requirements are met.

Right to Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, demand that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another responsible party.

Right to object to data processing on the basis of Art. 6 (1 ) (e) or (f) GDPR: You have the right to object to data processing by us at any time for reasons arising from your particular situation, provided that this is based on the legal basis "legitimate interest". If you exercise your right of objection, we will stop processing your data unless we can prove- in accordance with the legal requirements - that there are compelling legitimate grounds for the processing which override your rights or unless we demonstrate the establishment, exercise or defence of legal claims.

Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data until withdrawal remains unaffected.

Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or your country or the data protection authority responsible for us.

8. Conclusion

The current version of this privacy policy applies.

Last update: March 2020.