The following Data Protection Policies apply to the mobile Apps of Smart Wash Uganda, available through Google’s Play Store and Apple’s AppStore.
By downloading one or more of our applications, you legitimized yourself to the respective store, e.g. to the AppStore using your Apple ID. Any use of personal data, collected by Google or Apple while downloading or using the applications, that does not comply with the European General Data Protection Regulation (GDPR) cannot be ruled out by and lies out of the sphere of influence of Smart Wash Uganda. Disclosure of data by Smart Wash Uganda to Apple or Google will not be done.
The following will give an overview about what kind of personal data will be collected, processed or stored by Smart Wash Uganda:
1. Data Protection at a Glance
General information
The following will give a simple overview about what will happen to your personal data when using our mobile applications (»Apps«). Personal data means any information that can be used to identify you as a natural person. Comprehensive information about data protection can be found after this text, in our Data Protection Policy.
Collection of data in our Apps
Who is responsible for the App’s collecting of data?
The processing of data in our Apps is done by its distributor. The distributor is:
Dr. Simon Donhauser
Frankfurter Ring 186
80807 München
Germany
E-Mail: simon [@] smart-wash-uganda.com
How do we collect your data?
Your data will be collected by:
- yourself, transmitting them to us, e.g. any data you enter directly in the Apps.
- our Apps, accessing the data storage of your device, e.g. to send a message to a contact from your address book.
- our IT systems, automatically while using the Apps, this especially applies to technical data (e.g. mobile device, operating system or time of use).
The collection of this data happens automatically, as soon as you use our Apps.
What do we use your data for?
Part of this data is collected, to transfer your chosen instructions via the App to a server and from there to remote controlled devices (function fulfillment). Other data can be used for analysis, error management and bug fixing.
What rights do you have regarding your data?
You have the right, at any time and free of charge, to obtain information about source, recipient and purpose of your stored personal data. Moreover, you have the right to demand the rectification, locking or erasure of this data. Regarding this, as well as any further questions regarding data protection, you may contact us using the specified address. Furthermore you have the right to appeal at the supervisory authority in charge.
Furthermore you have the right (under certain circumstances) to demand the restriction of the processing of your personal data. Please refer to the Data Protection Policy »Right to restriction of processing« for more details.
2. General and Mandatory Information
Data protection
The operator of these Apps take the protection of your personal data very seriously. We treat your personal data confidentially and appropriately according to the legal data protection regulations as well as this Data Protection Policy.
When using these Apps, various personal data will be collected. Personal data means any information that can be used to identify you as a natural person. This Data Protection Policy on hand explains what data will be collected and what it will be used for, as well as how and for what purpose this happens.
We explicitly point out that any data transmission using the internet (e.g. by communicating via e-mail) can have security flaws. To completely secure data from being accessed by third parties is technically impossible.
Responsible body
Responsible for the processing of data in these Apps is:
Dr. Simon Donhauser
Frankfurter Ring 186
80807 München
Germany
E-Mail: simon [@] smart-wash-uganda.com
Responsible body is the natural or legal person which, alone or together with others, decides about the purpose and the means of processing personal data (e.g. names, e-mail-addresses, etc.).
Right to object to processing of data
A lot of data processing operations is only possible with your explicit consent. You have the right to object at any time, an informal e-mail to us suffices. The data processing’s legality up to the time of objection stays untouched.
Right to object to collecting data in particular situations as well as direct marketing (Art. 21 GDPR)
Should the processing of personal data be based on point (e) or (f) of Article 6(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, including profiling based on those provisions. The respective legal basis for a processing of data is explained in this Data Protection Policy. If you object, we will no longer process your personal data, except we can prove reasons of compelling worth of protection, outweighing your interests, rights and freedom or the processing is necessary for the establishment, exercise or defense of legal claims (Right to object, according to art. 21 para. 1 GDPR).
Should your personal data be processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, we will no longer process your personal data for direct marketing (Right to object, according to art. 21 para. 2 GDPR).
Right to appeal at the supervisory authority
In cases of violation against the GDPR, persons affected have the right to appeal at a supervisory authority, especially in the member state of their habitual residence, their workplace or of the place of the suspected violation. The right to appeal exists inviolated of other administrative or judicial legal appeals.
Right to data portability
You have the right to receive the personal data concerning yourself, which you have provided, in a structured, commonly used and machine-readable format and have the right to have those data transmitted directly to another controller, where technically feasible.
SSL- / TLS-Encryption
For security purposes and to protect the transmission of confidential content, e.g. coordinates or requests sent to use as the operator of the app, these Apps make use of SSL- or TLS-Encryption respectively. When SSL- or TLS-Encryption is activated, data that is transmitted from you to us cannot be read by third parties.
Access, Locking, Erasure and Rectification
Within the scope of applicable legal regulations, you have the right, at any time and free of charge, to obtain information about the collected personal data, as well as source, recipient and purpose of those data. Moreover, you have the right to demand the rectification, locking or erasure of this data. Regarding this, as well as any further questions regarding data protection, you may contact us using the specified address. Furthermore you have the right to appeal at the supervisory authority in charge.
Right to restriction of processing
You have the right to obtain restriction of processing. You may contact us using the specified address. The right to obtain restriction of processing is available where one of the following applies:
- you contest the accuracy of the personal data collected and stored by us, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;
- you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of us override those of yours.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
3. Collecting of data by our Apps
Application data
The server, the Apps are communicating with, stores information in so-called log files automatically. This applies to information automatically transmitted by our Apps, as follows:
- type of mobile device
- operating system in use
- language / regional settings in use
- technical information about the device in use
- date and time of the request
- IP address
- mobile phone number or device identification
- current geolocation information about the mobile device
- user, fore and surname
This happens based on point (b) of Article 6(1) GDPR, that regulates the lawfulness of processing when it is necessary for the performance of a contract or in order to take steps prior to entering into a contract.
Address data on your device
When you want to transmit information out of these Apps to other recipients, our Apps access the address book. Data from the address book are only used for addressing and for sending the selected information and are not collected or processed any further. Such data includes:
- full name
- mobile phone number
- e-mail address
This happens based on point (b) of Article 6(1) GDPR, that regulates the lawfulness of processing when it is necessary for the performance of a contract or in order to take steps prior to entering into a contract.
Processing of data (customer and contract data)
We collect, process and make use of personal data only when it is necessary for the reason, the content or the rectification of the legal relationship (inventory data). This happens based on point (b) of Article 6(1) GDPR, that regulates the lawfulness of processing when it is necessary for the performance of a contract or in order to take steps prior to entering into a contract. We only collect, process and make use of personal data via the usage of our Apps (user data), when it is necessary to make use of or to account the usage of the service.
The collected customer data will be erased after the completion of the order or the termination of the business relationship.