GEIGER app – Privacy Policy

Last updated: February 5, 2025

This Privacy Policy explains how cyberGEIGER GmbH collects, uses, and protects your personal information when you use our GEIGER App application.

Identity and contact information

If you have any questions or concerns about this Privacy Policy, please contact us at:

cyberGEIGER GmbH, Blücherstraße 19, 79110 Freiburg i. Br., Germany.

Data Protection Officer (DPO): Dr. Bernd Remmele, legal@cyber-geiger.com

Data collection and processing

We collect the following types of data:

  • Device information: device type, operating system. The app retrieves this data automatically.
  • Personal identifiers: your company name, company location (municipality). You enter this data in the profile settings.
  • Usage data: app features accessed, user selection of GEIGER-provided content. The app stores this data by logging the user’s interaction with its user interface.
  • Performance data: crash logs, diagnostic data, location data, device identifier.

The legal basis for collecting this data is informed user consent. You provide the consent upon the application’s first use on your device. Your continued use of the application confirms continued consent.

Purpose of data processing

We use device information, personal identifiers, and usage data to:

  • Provide the app’s services,
  • Personalise the app experience, and
  • Improve the app’s services.

We use usage data and performance data to:

  • Analyse app usage and performance, and
  • Improve the app’s services.

Data sharing and international transfers

We may share the following information with the following service providers:

  • Azure (Microsoft Schweiz GmbH, Zurich, Switzerland): We may share device information, personal identifiers, and usage data with this service provider who assists us in cloud storage and processing.
  • Google Cloud (Google Cloud EMEA Limited, Dublin, Ireland): We may share device information, personal identifiers, and usage data with this service provider who assists us in cloud storage and processing.
  • OpenAI Platform (OpenAI, Inc., San Francisco, CA, USA): We may share device information, personal identifiers, and usage data with this service provider who assists us in processing data.
  • Sentry (Functional Software, Inc., San Francisco, CA, USA): We may share performance data with this service provider who assists us in performance analysis.
  • Mixpanel (Mixpanel, Inc., San Francisco, CA, USA): We may share performance data with this service provider who assists us in performance analysis.

We maintain customer agreements, data protection addendums, or data processing agreements in which each service provider guarantees secrecy and exclusive use of the data for providing their services to us.

Data retention

We retain your personal information for as long as necessary to provide our services. We store and retain data as follows:

  • Device information is not stored.
  • We store personal identifiers and user selection of GEIGER-provided content on your device and in the Azure and Google clouds. You can delete the device-stored data by uninstalling the app. We delete the cloud-stored data automatically after 90 days.
  • The providers of data analysis services store app features access data and performance data. They delete the data automatically after 90 days.

Data subject rights

Data subjects have the following rights:

  • Right to access data, right to rectification, and right to data portability: You can access and rectify personal identifiers on the app’s profile page. You can access and rectify user selection data on the app’s todo page. You can download all device-stored data on the app’s profile page. You can access and rectify all other data by contacting the DPO.
  • Right to erasure: You can erase device-stored data by uninstalling the app. You can contact the DPO to request the erasure of all other data before we delete it automatically.
  • Right to restrict processing and right to object processing: You can stop processing by uninstalling the app and contacting the DPO to request erasure.
  • Rights related to automated decision-making, including profiling: You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. You will not be subjected to any such decision as part of using the app.

Consent and withdrawal

You provide consent for data collection, storage, and processing by accepting the terms detailed in this privacy policy upon first using the application on your device.

You can withdraw your consent at any time by uninstalling the application and contacting the DPO to erase your data before we delete it automatically.

Children’s privacy

Our app is not intended for children under 16. We do not knowingly collect personal information from children under 16. We have instructed our distribution channels, including app stores, to enforce this requirement. If you believe we have collected such information, please contact us immediately.

Data security measures

We store and transmit all data with state-of-the-art encryption.

We provide access to data to authorised staff only. We perform monthly security reviews with the authorised staff to protect personal data from loss or disclosure.

Complaints procedure

You also have the right to file a complaint with the data protection authority. For cyberGEIGER GmbH, the relevant data protection authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Baden-Württemberg), Postfach 10 29 32, 70025 Stuttgart, Germany.

Updates to the Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on https://www.cyber-geiger.com/app and updating the ‘Last updated’ date. We may request you to provide your consent again to continue using the app.

Scroll to Top