Smart Material App Privacy Notice

1. General

Here we provide you with an overview of how we process and use your personal data when you use our mobile application - the SMART MATERIAL app with your mobile device, as well as your data protection rights. We provide this information on app use in addition to our general information on data protection.

We make the use of our app available to you on a voluntary basis. With the instructions, we want to ensure that you know how our services work and what happens to your data when you use the app. The app provides designers and developers with a tool to compare different materials according to predefined parameters and select them based on requirements. Initial price indications for materials and detailed data sheets can be output and exported. Users can request further information or contact directly from the app.

Personal data is processed for this purpose, about which we provide information here.

2. Responsible

FEINGUSS BLANK GmbH
Industriestrasse 18
88499 Riedlingen

Phone: +49 7371 182 0
Fax: +49 7371 182 44 300
E-mail: info@feinguss-blank.de

For further information, please refer to our imprint.

3. Data Protection Officer

If you have any questions regarding data processing or data protection at FEINGUSS BLANK GmbH, you can contact our data protection officer at any time. You can reach him by post to the above address (please note 'Attn. Data Protection Officer' on the envelope), by e-mail at datenschutz@feinguss-blank.de or confidentially via our data protection portal.

4. Usage data

If you download our SMART MATERIAL app from the respective app store, data is processed and the necessary information is transferred to the app store or Google Play Store. Feinguss Blank GmbH has no influence on the data processing by Google and Apple.

These are in particular user name, email address and customer number of your account, time of download, individual device identification or unique number of the end device (IMEI), mobile phone number (MSISDN), MAC address for WLAN use and the unique number of the network subscriber (IMSI). The operator of the respective app store (Apple App Store or Google Play Store) is responsible for this. We have no influence on this data collection. We process this provided data insofar as this is necessary for downloading the app to your smartphone. They are not stored any further beyond this.

Data protection information from Google (https://www.google.de/intl/de/policies/privacy/) and Apple (https://www.apple.com/de/privacy/privacy-policy/).

When using an app, we process the following data to enable the usability of the functions provided and to ensure the security and stability of the app:

• IP address of the user
• Date and time of the request
• Content of the request (concrete page)
• Access Status/HTTP Status Code
• Data volume transferred in each case
• Operating system of the user device

The legal basis for the processing is Art. 6 (1) lit. f DSGVO. You can navigate within our app as on our general website, but you can also use the app-specific services, for example to compare and analyse selected materials or to contact us from the app.  In doing so, you may be redirected to your email system or your telephone app, from which you can independently make a call or an enquiry to us. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

5. Authorisations

When downloading and installing the SMART MATERIAL app, the following permissions and access to your smartphone are requested:

ACCESS_NETWORK_STATE: Information about networks and existing network connections, active roaming, failed connections.

INTERNET: use full network access to an existing Internet connection (WLAN or mobile radio) to transfer data. The WLAN MAC address can also be read out with this.

WAKE_LOCK: the app can prevent the system from entering a sleep/standby state.

BIND_GET_INSTALL_REFERRER_SERVICE: this allows the developer to see who recommended the installation of the app - if a website linked to the app in the Playstore, the user followed that link, and installed the app from there using the "Install" button.

AD_ID: The Advertising ID is a unique ID for advertising purposes provided by Google Play services and can be reset by the user. Users can reset their ID or disable personalised advertising in Google Play apps or in the "Google Settings" under "Services" the option Ads "Disable personalised advertising".

6. Contents of our Smartmaterial app

a) Registration

Registration on our app is neither possible nor required for use.

b) Data processing for information on materials

If you start a search query via your preferences and display the materials you have narrowed down, the queries you have selected will be sent via the app as a query to our database with the relevant information and parameters and from there displayed in the app on your device. 

c) Contact / Info

If you wish to contact us, you can do so from within the app using the general contact forms on our website via your network connection to our web servers - further guidance on processing can be found here.

Alternatively, you can also select various direct contact paths from within the app, which are marked with corresponding symbols.

Telephone handset symbol - contact for further information and hotline: When clicked, you will be informed that charges may apply with your call. You will be redirected to your phone app where our hotline number is displayed. You can contact this number.

Envelope or data sheet icons - You can click on these icons and request contact or quotations by e-mail or request selected data sheets with all details. This will redirect you to your mobile email app with a pre-written text that you can send to us as usual via the standard email service of your mobile device to the correct address with us. You will be asked to confirm your email address after the initial request.

The personal data sent by you to our contact persons (in particular your e-mail address and name) is processed exclusively for the purpose of processing your respective enquiry, for correspondence with you, as well as for the possible initiation and substantiation of a contract (in particular orders) with you pursuant to Art. 6 para. 1 sentence 1 lit. b) DSGVO. The personal data collected will be automatically deleted once your enquiry has been dealt with; this is the case if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Symbol Film / Youtube - we show our own corporate films on our YouTube channel under the symbol/link Filmwelt. Youtube is a service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

If you click on the symbol or one of the thumbnails shown, the Youtube.com website is opened via a connection and our company presence is displayed there behind the link https://www.youtube.com/@FeingussBlank. In order to be able to show you our films as sparingly as possible and without unnecessary data transfers to the USA, we use this external option instead of integrating the videos into our app via scripts. In this way, neither cookies that require consent nor access to your terminal device are necessary for viewing. When you click on the link, you are then directly on the platform of the provider YouTube, a Google subsidiary, from where the videos are also accessed. If you are logged into a Google account, Google itself may also collect personal data on the YouTube platform under its own responsibility. Information on this and on data protection at YouTube can be found here: https://policies.google.com/privacy?hl=de.

7. Google Firebase

Our app accesses services from Firebase. Firebase is a mobile app development platform from Google with powerful features for developing, managing and enhancing apps. This provides our app developers with a reliable collection of tools and services, see firebase.google.com/terms/. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The use of Google Firebase may require the forwarding of your personal data to the USA. Firebase is part of the Google Cloud Platform (Google Ireland Limited, Gordon House, Barrow Street, Sieblin 4, Ireland.

Some Firebase services process personal data. For the most part, this is limited to so-called instance IDs, which are provided with a time stamp. The instance IDs created by Firebase are only used once and therefore enable the assignment to specific events or processes. According to Google, the data collected in this process is not personal data.

In other cases, Google Firebase stores, among other things, the number and duration of sessions, operating systems, device models, region and a range of other data. A detailed overview of the data collected by Google Firebase can be found at: https://support.google.com/firebase/answer/6318039.

We use Google Firebase primarily to select configuration data necessary for operation and to transfer this to end-user devices in order to analyse user behaviour and solve problems in the user experience, for example by evaluating crash reports (cf. under Crashlytics) in order to open newly installed apps on a specific page or in a specific context. We do not use push notifications or so-called in-app messages. Data stored at Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months.

Details: //support.google.com/analytics/answer/7667196?hl=en
 Privacy policy: https://www.firebase.com/terms/privacy-policy.html

8. Firebase Crashlytics

In order to improve the stability and reliability of our apps, we rely on anonymised crash reports. We use "Firebase Crashlytics", a service of Google Ireland Ltd, Google Building Gordon House, Barrow Street, Dublin 4, Ireland.

In the event of a crash, anonymous information is transmitted to Google's servers in the USA (state of the app at the time of the crash, installation UUID, crash trace, manufacturer and operating system of the mobile phone, last log messages). This information does not contain any personal data. Crash reports are only sent with your explicit consent. When using iOS apps, you can give your consent in the settings of the app or after a crash. For Android apps, there is the option to generally consent to the transmission of crash notifications to Google and app developers when setting up the mobile device. The legal basis for the data transmission is Art. 6 para. 1 lit. a DSGVO.

You can revoke your consent at any time by deactivating the "Crash reports" function in the settings of the iOS apps. For Android apps, deactivation is basically done in the Android settings. To do this, open the Settings app, select the item "Google" and there, in the three-point menu at the top right, the menu item "Usage & Diagnostics". Here you can deactivate the sending of the corresponding data. You can find more information in the help for your Google account.

Google LLC is used in relation to Firebase Crashlytics as part of a commissioned processing pursuant to Art. 28 DSGVO. The possible transfer of data to countries outside the EU/EEA takes place on the basis of the EU standard contractual clauses.

Further information on the data protection of Firebase Crashlytics:

https://firebase.google.com/support/privacy and

docs.fabric.io/apple/fabric/data-privacy.html.

9. Firebase Analytics

We use Google Firebase Analytics to track the use of our app and to deduce which features are of particular interest to users and how we can improve the app and our offerings. All IP addresses are only stored in anonymised form. Therefore, the data collected cannot be used to identify users personally.

The following app usage data is collected by Google Firebase Analytics:

• Number of users and sessions
• Session duration
• Operating system
• Device model
• Region
• First start
• App executions and updates

In order to collect the corresponding data for usage analysis, Firebase Analytics uses the advertising ID of your mobile device, an app instance ID. You can also restrict the use of the advertising ID in the device settings of your mobile device. You actively decide whether you want to allow the use of Google Firebase Analytics.

You can object to the use of Google Firebase Analytics at any time by deactivating the "App usage data" slider in the privacy settings under the tab Settings for usage analysis:

For Android: Settings > Google > Ads > Reset Ad ID
For iOS: Settings > Privacy > Ads > No Ad Tracking

Further information: https://firebase.google.com/support/privacy?hl=de

10. IP anonymisation for Google Analytics and Firebase

We have activated the IP anonymisation function in our app. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this app, Google will use this information for the purpose of evaluating your use of the app, compiling reports on its activities and providing other services relating to the use of the app and internet usage to the operator. The IP address transmitted by your device as part of Google Analytics will not be merged with other data from Google. More information: https://support.google.com/analytics/answer/2763052.

11. Your rights as a data subject

Right to confirmation - You have the right to request confirmation from us as to whether personal data relating to you is being processed.

Right to information according to Art. 15 DSGVO - You have the right to receive information from us at any time and free of charge about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

Right to rectification under Article 16 of the GDPR - You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

Right to erasure according to Art. 17 DSGVO - You have the right to demand that we immediately delete the personal data concerning you, provided that one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

Right to restriction of processing according to Art. 18 DSGVO - You have the right to demand that we restrict processing if one of the legal requirements is met.

Right to data portability pursuant to Article 20 of the GDPR - You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability under Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

Right of objection according to Art. 21 DSGVO - You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) (e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests) DSGVO. This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the purpose of asserting, exercising or defending legal claims.

In individual cases, we process personal data in order to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your personal data for direct marketing purposes, we will no longer process the personal data for these purposes. 

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) DSGVO, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Right to withdraw consent under data protection law - You have the right to withdraw consent to the processing of personal data at any time with effect for the future.

Right to complain to a supervisory authority - You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection. You can find a compilation of the contact details of the data protection officers in the federal states and the supervisory authorities for the non-public sector as well as in other countries on the pages of the Federal Commissioner for Data Protection and Freedom of Information, BfDI under Addresses and Links.

12. Automated decision making & profiling

We do not use profiling in the context of the use of our websites. Art. 22 DSGVO.

13. Storage, deletion and blocking

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the legal provisions to which our company is subject. If the purpose of storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

14. Storage period

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.

15. Other data protection issues

On our homepage you will find further information about our products, our company and also about data protection. If you have further questions, comments or other requests regarding your personal data that are not answered here, simply contact us using our contact details, via our data protection portal or at datenschutz@feinguss-blank.de.