Privacy Policy Conn.Logger Android App

Date: 03.05.2023 

 

This Privacy Policy elaborates on the clauses under which the use of the Conn.Logger Android Application will be governed. This policy explains how we collect, use, disclose, and safeguard your information when you download and use this mobile application.

IF YOU DO NOT AGREE WITH THE TERMS MENTIONED IN THIS POLICY, DO NOT ACCESS THE APPLICATION.

1. Policy Conventions

This privacy statement applies to the Conn.Logger mobile application (referred to as “the app”). In this policy, you as the user will be referred to as “you”, “your” and we as the developer of this app will be referred to as “we”, “our”, and ”us”. This Privacy Policy will be referred to as “the/this policy”.

We reserve the right to make changes to this policy at any time and for any reason. We will alert you about any changes by updating the “Last Updated” date of this policy. You are encouraged to periodically review this policy to stay informed on updates. You will be deemed informed, subject to, and agreed on the changes in any revision by your continued use of the app once the updated policy is posted.

2. Policy Scope and Exclusions

This policy is not valid if the app is installed from any third-party online application store(s) or unauthorized sources. These third-party online application store(s) or unauthorized sources may collect, store, and use your data for which we will not be responsible.

3. Data Controlling Body

As per the General Data Protection Regulation (“GDPR”) requirements, MRS Electronic GmbH & Co. KG shall be considered as the data controller of this app. For more information on the data controlling body, refer to the below-given information:

Company Name: MRS Electronic GmbH & Co. KG

Address: Klaus-Gutsch-Str. 7, 78628 Rottweil, Germany

Telephone: +49 (0)741 / 2807 – 0

Email:info@mrs-electronic.com

Website: www.mrs-electronic.com

 4. Access and Storage of Information

The app accesses your mobile device’s storage for the following two purposes:

  1. To temporarily store ConnectedLogger’s Flash Data. This data is then uploaded to the Lenticul server and then subsequently removed from the mobile device’s storage, automatically.
  2. To upload symbol libraries to the app. The symbol libraries serve as a parsing mechanism for the data logs.

5. Data That We Collect and Process

When you use our app, we use an analytics software (Firebase Crashlytics) to allow us to record any anomalies/crashes in the app. The Android OS allows us accessing your city location, device model and version, device identifier (or “UDID”), timestamps, mobile carrier, system configuration information and OS version. This information is read at runtime and then shown to the user through the app interface. The purpose of collecting this information is to help in troubleshooting any device or firmware related bugs or known issues.

Permissions asked from the users by the Conn.Logger app include the following:

5.1. Bluetooth Permissions

Bluetooth permissions are required from you to allow the app to discover and pair Bluetooth devices. As this app also targets API Level 31(Android 12) and higher, the following permissions are required from the user:

  • BLUETOOTH_ADMIN: To initiate device discovery or manipulate Bluetooth settings.
  • BLUETOOTH_SCAN (Android 12 above): To search nearby Bluetooth devices such as BLE peripherals.
  • BLUETOOTH_CONNECT (Android 12 above): To communicate with already-paired Bluetooth devices.
  • BLUETOOTH_ADVERTISE: To allow your current device to be discoverable by other devices.
  • ACCESS_FINE_LOCATION: To derive physical location through Bluetooth scan results.

5.2. Location Permissions

BLE can be used to get location information using the BLE broadcast UUID data and an internet connection. While this data can be acquired via scan, the following Location permissions are required.

  • ACCESS_COARSE_LOCATION: To get NetworkProvider level of permission.
  • ACCESS_FINE_LOCATION: To get NetworkProvider as well as GPS.

5.3. Network and Wi-Fi State Permissions

The following two permissions are required to verify whether the mobile device is connected to a Wi-Fi or any other network.

  • ACCESS_NETWORK_STATE
  • ACCESS_WIFI_STATE

5.4. Storage Permission

Storage permission is required to download the app logs into the mobile device. Similarly, mobile device storage can be used to upload symbol libraries for the Conn.Logger app.

6. How We Process Your Information

If you are an individual from the European Economic Area (EEA), our legal basis for collecting and using your personal information will depend on the case of use and the specific context in which we are collecting it. However, we will normally collect personal information from you only where: (a) we have your consent to do so, (b) we need your personal information to perform a contract with you (e.g., to deliver the services you have requested), or (c) where the processing is in our or a third party entity’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms). In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

While we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal.

We will only disclose personal data if and to the extent that we are required to do so by law, by a court, or by an administrative order. The legal basis for this is Art. 6 (1) lit. c GDPR (legal obligation).

We share information including personal information with our third-party service providers that we use to provide us with the following services:

  • Application development
  • Backup and storage
  • Customer support and technical support
  • Analytics, and other services

Our third-party service providers may have access to or process your personal information for the purpose of providing the above-mentioned services to us. The legal basis for data processing described in this section 4 is Art. 6 (1) lit. b GDPR (lawfulness of processing) and Art. 28 GDPR (processor). We do not permit our third-party service providers to use the personal information that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us.

In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including meeting the national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, legal processes, to establish or exercise our legal rights, or to defend us against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

We may share your information with other affiliated companies which may use your information as described in this Privacy Policy.

We may share personal information with third parties only when we have consent to do so.

In the event that MRS Electronic GmbH & Co. KG is acquired by or merged with a third-party entity or undergoes a change of control or any form of sale or transfer of some or all of its assets, we reserve the right, in any of these circumstances, to transfer or assign the information that we have collected from users as part of that merger, acquisition, sale, or other change of control.

We may transfer your personal information to countries other than the one in which you live. We deploy the "International Data Localization Obligations" if we transfer personal information originating from the European Union or Switzerland to other countries not deemed adequate under applicable data protection law.

If you reside in a jurisdiction that imposes “Data Localization” or “Data Residency” obligations (i.e., requiring that personal information of its residents be kept within the territorial boundaries of such jurisdiction), and we become aware of that, we may maintain your personal information within such territorial boundaries, if we are legally obligated to do so.

You acknowledge and agree that while doing so, we may continue to collect, store and use your personal information elsewhere as explained above.

7. Storage Period

We will retain your personal information for no longer than necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

For personal information that we process on behalf of our Customers, will be retained in accordance with the terms of our agreement with them, subject to the applicable law.

8. Your Privacy Rights

You have the following rights regarding your personal data:

8.1. Right to Information

You have the right to request information about your personal data processed by us in accordance with Art. 15 GDPR.

8.2. Right to Rectification

The right to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR.

8.3. Right to Have Your Data Erased

You have the right to have your personal data erased in accordance with Art. 17 GDPR. According to this provision, your right to have your data erased may be excluded due to a conflicting interest.

8.4. Right to Restriction

You have the right to have the processing of personal data concerning you, limited in accordance with Art. 18 GDPR.

8.5. Right to Withdraw The Given Consent

You have the right to withdraw your given consent for processing of your personal data at any time according to Art. 7 para. 3 GDPR.

8.6. Right to Data Portability

You have the right to receive your personal data that you have provided to us in a structured, current, and machine-readable format or to request its transfer to another person responsible in accordance with Art. 20 GDPR.

8.7. Right to Complain To A Data Protection Regulatory Authority

You have the right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we have our registered office or, if applicable, that of your usual place of work or usual residence.

8.8. Right to Object

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons resulting from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to indicate a special situation.

Upon receipt of a request from one of our Customers for us to access, change, or remove their data, we will respond to their request within thirty (30) days. We will retain personal information that we store and process on behalf of our Customers for as long as needed to provide the Services to our Customers. We will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you are a Customer or otherwise provide us with personal information in connection with your use of our Website, App, or Services, we will delete your information upon your request.

9. Data Security & Updates to This Policy

We attach great importance to the protection of all personal data related to our App or its use. We have security measures in place for protection against the loss, misuse, and alteration of the data we store. Our security measures and privacy statement are reviewed and where appropriate, updated, and improved. Only authorized employees have access to your personal data.

We have taken additional, extensive precautions regarding the App and its use. Regardless of these precautions, the user should be aware that despite all the security measures, the exchange of information via the Internet can never be completely secure. We cannot guarantee the security of data transmitted via the App while it is being transmitted over the Internet.

In general, we only use your personal information in the manner described in this Policy in effect when we receive that personal information. Your continued use of our Services constitutes your agreement to this Privacy Policy and any future revisions.