1. General

We take the protection of your personal data very seriously and treat it confidentially and in accordance with statutory data protection regulations and this privacy policy. This privacy policy applies to our mobile iPhone and Android app (hereinafter "APP"). It explains the type, purpose, and scope of data collection within the scope of APP use. We point out that data transmission over the Internet can have security gaps. Complete protection of data against access by third parties is not possible.

Responsible Body

The responsible body for data processing within the APP is:
microsynetics GmbH
Brüderstraße 17 – 19
59494 Soest
Tel: +49 (0)40 226 307 058
Email address: support@caera.de

App Name

• caera

Purposes for which personal data is processed

• Alerting emergency services when a fall is detected by the emergency bracelet
• Creation of a health profile to provide important information on pre-existing conditions to the emergency contact or emergency hotline in case of a fall.
• Provision of contractual services and customer service/answering customer inquiries

Main Functions

• Alerting stored contact details in case of a fall
• Communication via chat
• Location tracking in case of a fall
• Voice connection with emergency contacts

Data Protection Officer

You can reach our data protection officer at:
www.mein-datenschutzbeauftragter.de
Mr. Philipp Herold
Hafenstraße 1a
23568 Lübeck
Email address: support@caera.de

General Storage Period for Personal Data

Subject to differing or more specific information within this privacy policy, the personal data collected by the APP will be stored until you request its deletion, revoke your consent to storage, or the purpose for data storage ceases to apply. If there is a legal obligation to retain data or another legally recognised reason for storing the data (e.g., legitimate interest), the relevant personal data will not be deleted before the respective retention reason ceases to apply.

Legal Basis for Storing Personal Data

The processing of personal data is only permissible if there is a valid legal basis for processing this data. If we process your data, this regularly occurs on the basis of your consent according to Art. 6 para. 1 lit. a GDPR (e.g., when voluntarily providing your data in the registration form or as part of the contact form) and for the purpose of contract fulfillment according to Art. 6 para. 1 lit. b GDPR (e.g., when using in-app purchases or other paid app functions). The respective relevant legal bases may be specified elsewhere in this privacy policy.

Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the app operator, or communication between app users, the APP uses encryption. This encryption prevents unauthorized third parties from reading the data you transmit.

Changes to this Privacy Policy

We reserve the right to amend these data protection provisions at any time in compliance with legal requirements. We will inform you about changes to the privacy policy.

2. Your Rights

The GDPR grants data subjects whose personal data is processed by us certain rights, which we would like to explain to you here:

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your consent. Your consent is voluntary and can be revoked at any time. 

You can review and revoke the permissions you have granted us for the functions listed in point 3 at any time via your settings (e.g., via iOS / Settings / APP / Allow Access or Android / Settings / Applications / Application Manager / APP / Permissions). If you revoke the permissions, the functionality of the app may be impaired.

You give your consent for optional information (e.g., your illnesses and risk factors) by entering your information in the optional data fields. You can revoke your consent at any time by deleting this information.

If you wish to exercise your right of revocation, you can do so by using the "Revoke button". We will delete your data via the button. Alternatively, you can send an email to support@caera.de to communicate your revocation.

The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. The right to complain exists irrespective of other administrative or judicial remedies.

Information, Deletion, and Rectification

You have the right at any time to obtain information about your processed personal data. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data, if not collected by us.

 

You have the right to demand the immediate rectification of inaccurate personal data stored by us or its completion.

You have the right to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given above.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given above for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

3. APP Access Rights

To provide our services via the APP, we require the access rights listed below, which allow us to access certain functions of your device.

• Sending notifications: "May APP send you notifications?"
• Device number of your smartphone (identification of device type)
• Camera (scanning the QR code)
• Microphone (communication with emergency contacts, among others)
• Display over other apps
• Device location (to use location functions)

Access to device functions is necessary to ensure the functionality of the APP. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a GDPR. Your consent is voluntary and can be revoked at any time. Without your consent, the functionality of the app may be impaired. The storage period for the data collected in this way is regulated as follows:

The data collected from you will be stored by us as long as your user account exists. As soon as you delete your account, all collected personal data will also be deleted. Data that must be retained for the fulfillment of our contractual obligations is exempt from deletion.

4. Collection of Personal Data within the APP

General

When you use the APP, we collect the following personal data from you:

• First and last name
• Date of birth (optional)
• Salutation
• Email address
• IP address
• Device identifier
• Illnesses such as high blood pressure, diabetes (optional)
• Risk factors such as allergies, medications (optional)
• Time
• Date
• Geographical location
• Emergency contacts
  • First and last name
  • Mobile number
  • Salutation
  • Email address
  • IP address
  • Geographical location (optional)

Purposes

The processing of this personal data is necessary to uniquely identify you in an emergency and to provide emergency contacts/emergency services with initial information.

The use of optional information serves to provide emergency contacts/emergency services with further useful information and to analyze fall risks early. If you register as an emergency contact in the app, your data is required to identify you, enable exchange among emergency contacts, and inform you in case of an emergency. The "pseudonym names" are visible among the contacts.

Legal Basis

The legal basis for the data processing of mandatory information is the fulfillment of our contractual obligations (Art. 6 para. 1 lit. b GDPR).

The legal basis for optional information (e.g., your illnesses and risk factors) is consent according to Art. 9 para. 2 lit. a GDPR in conjunction with Art. 6 para. 1, sentence 1 a) GDPR 

You give your consent by entering your details in the optional data fields. You can revoke your consent at any time by deleting this information. 

The storage period for the data collected in this way is regulated as follows:

The data collected from you will be stored by us as long as your user account exists. As soon as you delete your account, all collected personal data will also be deleted. Data that must be retained for the fulfillment of our contractual obligations is exempt from deletion.

App Management by Third Parties

If the app is not managed by the data subject themselves but by a third party (e.g., the app user and wearer of the bracelet), the third party is obliged to obtain the necessary data protection consents from the data subject (wearer).

Inquiries within the APP, by Email or Phone

If you contact us (e.g., via the contact form within the app, by email, or phone), your inquiry, including all personal data resulting from it (e.g., name, inquiry), will be stored and processed by us for the purpose of handling your request. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 lit. a GDPR). The data you send us via contact inquiry will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage ceases to apply (e.g., after your request has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected. We do not pass on your data without your consent.

Push Notifications

We use push notifications to inform you about processes within the app and to alert the emergency contact in case of an emergency that may require your special attention or a response from your side.

How Push Notification Services Work

What newsletters are for websites, push notifications are for apps. After downloading the app, the mobile device registers with the corresponding push service of the platform (iOS – Apple Push Notification Service; Android – Google Cloud Messaging). The service then sends the registration ID (Android) or token (iOS) to the registered device. The app sends the ID or token to the server, where it is stored in a database. If a push notification is to be sent, the server sends the desired message with the registration ID / token to the platform's push service, which forwards the push notification to the respective devices.

Log Out

You can suspend receiving push notifications when not using the app by explicitly logging out of the app.
You can revoke consent to receive push notifications via the operating system as follows:

• iOS / Settings / APP / Notifications
• Android / Settings / Applications / Application Manager / APP / Notifications

Legal Basis

The legal basis for sending push notifications is your consent within the meaning of Art. 6 para. 1 lit. a GDPR.

Use of Camera Data

Camera data (images) can be used in various ways in our app:

• A barcode / QR code scanner is used. When used, the camera data is only used internally for code evaluation and then immediately discarded.

Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers.

For subscribing to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we send an email to the specified email address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email or by email to support@caera.de .

5. Miscellaneous

This app was provided via the Google PlayStore or the Apple AppStore.