Data usage statement for app usage

Information on the processing of personal data when using the ACC app (data usage declaration according to GDPR)

We provide information below about the processing of your personal data when using the ACC app in accordance with the General Data Protection Regulation (GDPR 2018) and the Federal Data Protection Act (BDSG 2018):

General

The ACC app was developed and is made available for use by:

Alarm IT Factory GmbH
Rotebuehlstr. 51A
D-70178 Stuttgart

Managing Director:
Dipl.-Ing. (FH) Peter Gunsser
M.Sc. Davide Acquadro

HRB 744409 District Court Stuttgart | VAT ID: DE288432278
E-Mail: info@alarm-it-factory.de | Web: www.alarm-it-factory.de
Phone: + 49 711 62 007 69 – 0 | Fax: + 49 711 62 007 69 – 9

How the ACC app works:

The app used by the user clearly displays the messages that the ACC developed by us sends to the end devices. An interface (ACC channel) sends the message to the ACC app web service in the cloud (Azure Cloud and hosted by us administered/used). This ACC app web service is necessary to send push notifications to the end device. The end device can then download the message from the ACC app web service and display it in the ACC app. For more information on this and the full range of functions, see sales@alarmcontrolcenter.de. The report can then be accepted or rejected via the app (feedback to the ACC app web service and thus to the ACC). In addition, there are other functions such as "Set participant status" to interact directly with the ACC (or the ACC app web service). The content of the ACC database is updated here.

Localization of the processing processes of used data:

Data processing takes place via two servers, the ACC server, which is operated by the user, and the cloud server mentioned above (ACC app web service). The data of the messages (message text, times, etc.) are then stored on the cloud server.

Type of the user's personal data processed by the app:

• User name of the user (ID or telephone number)
• the personal password of the user (encrypted storage)
• other app-specific, individual settings of the user, e.g. ringtone setting
• Information or messages transmitted by the ACC to the user (message text, status of the message, etc.)

Evaluations of the user's personal data processed by the app:

We do not evaluate the personal data processed by the app (e.g. individual usage analyses, determination of score values, etc.). The user receives (only) the information that he has requested in a prepared form. There is the possibility to submit a support request and the data already described above will be sent to the ACC support by e-mail.

Securing the user's personal data:

The data backup is always based on the state of the art with current backup systems:

• In the app: In a database (SQLite) and in the internal app storage
• In the ACC app web service: in a database of the Microsoft SQL server

Deletion of the user's personal data:

The user can manually delete the reports in the ACC app. Depending on the setting, the messages can be saved for a maximum of 99 days. Data such as username, password and user settings are stored until the user account is deleted. Deletion occurs when the employee no longer works for the company or should no longer be alerted by the ACC. If the app is uninstalled from the smartphone, the personal data is also deleted, but it is still available in the ACC app web service. All personal data processed with the use of the ACC app will be deleted after the statutory retention periods, in particular tax retention periods, have expired.

User rights:

The user of the ACC app has the following rights under Art. 15 - 21 of the GDPR:

• Right to information according to Art. 15 GDPR.
• Right to rectification according to Art. 16 GDPR
• Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
• Right to restriction of processing in accordance with Art. 18 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object under the conditions of Art. 21 GDPR

To assert the aforementioned rights, an e-mail to: datenschutz@alarm-it-factory.de.

All information and all our activities according to the above regulations are - depending on the factual and legal situation - transmitted or provided free of charge and within the normatively regulated deadlines.

Information on the company's data protection officer:

Our data protection officer is entered in the register of the competent authority. He is available for all questions regarding the protection of personal data and can be reached at the following e-mail address: datenschutz@alarm-it-factory.de

Status: October 2021