With the following Privacy Policy, ABUS informs you about the types of your personal data (hereinafter also referred to simply as “Data”) that are processed, the purposes for which they are processed, and the extent of such processing in connection with the provision of the ABUS Application.
ABUS has implemented appropriate technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorised access.
The terms used are not gender-specific.
Controller
Contact Details of the Data Protection Officer
Overview of Processing Activities
Processing of Your Personal Data for Registration for ABUS One
Processing of Your Personal Data for the Use of ABUS One
Contact
Data Retention
Services
Google Analytics for Firebase and Firebase Crashlytics
Google Cloud Messaging (Firebase Cloud Messaging)
Rights of Data Subjects
Amendments and Updates to the Privacy Policy
ABUS August Bremicker Söhne KG
Altenhofer Weg 25
58300 Wetter, Germany
E-mail address: dataprotection@abus.de
The following overview summarises the types of data processed and the purposes of their processing and identifies the data subjects concerned.
ABUS processes the following personal data:
Username
Password
E-mail address
Mobile phone number
First name and last name
Your Data are collected and processed for the following purposes:
Registration and creation of a user account
Identification details in the event of a support request
The legal basis for the processing of your personal data is your consent pursuant to Article 6(1)(a) GDPR.
Data collected and processed by ABUS when the Application is used:
Timestamp indicating when a User was assigned to a lock
All locks linked to a smartphone
Usernames of Users of the individual locks
Role of the User
Lock status
Location data of the smartphone
Version of the smartphone operating system
Smartphone model
Data collected and processed by ABUS from the IoTect 9001 lock being used:
Basic device master data (serial number, firmware version, IP address)
Device status data of the IoTect 9001 lock (e.g. component type, component name, firmware version, battery status, settings)
Information on the use of system notifications (e.g. event type, timestamp)
Geolocation data of the lock
Data collected and used by ABUS in connection with remote access in order to establish connectivity between the IoTect 9001 lock and the Application via the online service:
Device ID
Public and local device IP address
Network ports
ABUS processes the following personal data for the provision and improvement of the Application:
Provision of the App functionalities and the service offered via the App
Improvement of geolocation accuracy
Troubleshooting
Improvement of the user-friendliness of the App
Improvement of our product and service offering
Log Data
Where necessary, ABUS requires the generated logs and their analyses to maintain the technical operation of the system and to investigate cases of damage or misuse.
The legal basis for the processing of your personal data for the use of the service is the service agreement concluded with ABUS pursuant to Article 6(1)(b) GDPR.
The legal basis for the processing of your personal data to maintain the technical system and to investigate cases of damage and misuse is ABUS’s legitimate interest pursuant to Article 6(1)(f) GDPR.
When contacting ABUS (e.g. via contact form, e-mail, telephone, or social media), the information provided by the persons making the enquiry is processed insofar as this is necessary to respond to the contact enquiries and any requested measures. The following personal data are processed for this purpose:
Master data (e.g. names, addresses)
Contact data (e.g. e-mail addresses, telephone numbers)
Content data (e.g. text entries)
Contact enquiries and communication
Performance of a contract and pre-contractual enquiries (Article 6(1), sentence 1, point (b) GDPR)
Legitimate interests (Article 6(1), sentence 1, point (f) GDPR)
The Data processed by ABUS will be deleted in accordance with statutory requirements as soon as the consent permitting their processing is withdrawn or other permissions cease to apply (e.g. if the purpose for processing such Data no longer applies or the Data are no longer required for that purpose).
Your Data will be retained only for as long as necessary to fulfil the respective purpose and to comply with statutory requirements. Upon expiry of the applicable statutory retention period, your personal data will be deleted by ABUS without undue delay.
The ABUS One Application optionally uses Google Analytics for Firebase and Firebase Crashlytics.
Firebase Crashlytics is used for error analysis in the event of potential crashes. By using these services, ABUS can identify and analyse possible malfunctions in the Application and subsequently rectify such errors.
Google Analytics for Firebase is used to analyse the use of the Application in order to continuously improve the provision and use of the Application.
When launching the Application for the first time, the User can choose whether Google Analytics for Firebase and Firebase Crashlytics are to be used. The User can disable the use of Google Analytics for Firebase and Firebase Crashlytics in the Application at any time.
The information generated about the use of the ABUS One Application is transmitted, with an anonymised IP address, to a Google server in the USA and stored there. For IPv4 User IP addresses, the IP anonymisation function in Analytics sets the last octet to zero in memory; for IPv6 addresses, it sets the last 80 bits to zero. As a result, the User’s exact IP address is not stored. Google will use this information to evaluate the use of the ABUS One Application and to compile reports on activity for the App operators. Google may also transfer this information to third parties where applicable. If the User consents to the use of Google Analytics for Firebase and Firebase Crashlytics in the ABUS One Application, the User agrees to the processing by Google of the Data collected about them in the manner and for the purpose described above.
The integration is based on your express consent pursuant to Article 6(1)(a) and Article 6(1)(f) GDPR in order to make the Application more user-friendly and to continuously improve it.
To enable push notifications to be sent, a Firebase Cloud Messaging registration token is created when the Application is launched for the first time, uniquely identifying the App installation on the smartphone. The token is used to identify the message destination. Messages are sent via the Google Firebase Cloud Messaging service, which is provided by Google, Inc., Mountain View, USA.
The integration is based on your express consent pursuant to Article 6(1)(a) GDPR, which you provided when launching the Application for the first time.
As a data subject, you have various rights under the GDPR, arising in particular from Articles 15 to 21 GDPR:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with the competent supervisory authority
ABUS asks that you regularly review the content of this Privacy Policy. ABUS will amend the Privacy Policy whenever changes to the data processing carried out by ABUS make this necessary. We will inform you as soon as the changes require any action on your part (e.g. consent) or any other individual notification.
Version: 16 February 2023