This section provides further information on which personal data we collect from you and how we process it:
3.1 Information collected when downloading
When downloading the App, certain essential information is passed on to your chosen app store (such as Google Play or the Apple App Store). This specifically includes your user name, email address, customer account number, time of download, payment details (if appropriate) and the individual ID number of your end device. As this data is processed exclusively through the respective app store, the way it is handled is beyond our control.
The first time you download the App, we also ask you to specify the country in which you intend to use it so that we can offer you services in the appropriate language. The legal basis for this is established in point (b) of Article 6(1) of the GDPR. Without this information, we would not be able to offer you access to the App in your own language.
3.2 Information collected automatically
We collect certain information automatically while the App is in use. This includes the internal device ID, the version and language of your operating system, the screen resolution, the Bluetooth MAC address, and the time of access.
We do not save this data, but it is sent to us automatically (1) to allow you to use the App and its associated functions, (2) to improve the functions and performance characteristics of the App, and (3) to prevent and eliminate misuse and malfunctions. The justification for processing this data is (1) that it is essential to the provision of the App (as stipulated in point (b) of Article 6(1) of the GDPR), and (2) that we have a legitimate interest in not only ensuring the operability and trouble-free operation of the App, but also offering a service in line with market requirements and customer needs. For further information about the balancing of interests in accordance with point (f) of Article 6(1) of the GDPR, please contact us using the details provided above.
3.3 Information collected while using the App
Within the App, you have the option of voluntarily submitting data relating to you. This data includes personal data and is used by us for the following purposes:
3.3.1 If you use the App to register yourself or your Geberit device, create a service request, order consumables, or submit our contact form, we will collect your personal data (including your title, first name, last name, email address, postal address and phone number). We use this data to provide you with our services and to maintain a contractual relationship with you. The legal basis for this is established in point (a) and point (b) of Article 6(1) of the GDPR.
3.3.2 When you connect the App to your Geberit device, we collect the serial number of your Geberit device. We use the serial number to check whether you use your Geberit device publicly or privately and whether you have already registered it with us. If this is the case, further operating options are automatically activated. The connection between the App and the Geberit device is voluntary and based on your consent. The legal basis for this is established in point (a) of Article 6(1) of the GDPR. You can disconnect the Geberit device from the app again at any time without affecting the lawfulness of processing based on consent before disconnection.
3.3.3 In addition, service technicians commissioned by Geberit can read out anonymized, technical data from your Geberit device via a special app in case of service (this concerns the Geberit ID as well as device, statistical and diagnostic data such as model, article number, serial number, manufacturing date, device settings, profile settings, meter readings from the device components, descaling history, error codes and error history). This can be done on site or via a remote service, during which the serial number of your Geberit device is read out. We require the technical data in order to provide you with our services and to improve our range of services through anonymised data analyses. The legal basis for this is established in points (b) and (f) of Article 6(1) of the GDPR. If you would like further information about the balancing of interests in accordance with point (f) of Article 6(1) of the GDPR, please contact us using the details provided above.
3.3.4 We – along with other companies associated with the Group – also use your data for advertising purposes, particularly by post or in the form of email newsletters, customer surveys or other forms of contact (such as text message or telephone) if you would like us to contact you in this way. The legal basis for this is established by your consent, provided that we have obtained this, or our legitimate interest in providing relevant advertisements on the basis of points (a) and (f) respectively of Article 6(1) of the GDPR. If you would like further information about the balancing of interests in accordance with point (f) of Article 6(1) of the GDPR, please contact us using the details provided above.
3.4 The App uses one or more of the following tools and technologies
3.4.1 Microsoft App Center Analytics
Our App uses technologies from the Microsoft Analytics App Center (Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA; “Microsoft”) with various functionalities (“Microsoft Analytics”). Microsoft Analytics makes it possible to analyse how our App service is used. It records entirely anonymised information about the use of our App and sends this to Microsoft, where it is then stored. Microsoft uses this information to evaluate how our App is used and provide us with further services associated with the use of apps. Microsoft is certified under the Privacy Shield framework and therefore guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). The legal basis for the use and evaluation of the data and the use of Microsoft is a legitimate interest in the analysis, optimisation and economic operation of our App within the scope of point (f) of Article 6(1) of the GDPR.
You can prevent your activity data from being shared with Microsoft by using the slider below to deactivate the “Send analytics data” setting.