This Privacy Policy informs data subjects, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the nature, scope and purposes of the processing of personal data in connection with the iOS application Wetterstein (hereinafter "the App").
The controller within the meaning of Article 4(7) GDPR is:
Jonathan BraunA Data Protection Officer has not been appointed, as the statutory conditions requiring such an appointment are not met.
This Privacy Policy applies exclusively to the App. It does not extend to the services of Apple Inc. accessed through the App, which are governed by Apple's own privacy provisions, nor to any external websites reached via links contained in the App.
The App does not require a user account and does not offer any registration or login. It contains no advertising, no analytics services and no software components provided by third parties other than the frameworks forming part of the iOS operating system. The controller operates no servers of his own and receives no personal data of users.
The only category of personal data processed is the approximate location of the device, which is transmitted to Apple Inc. for the purpose of retrieving weather data and a place name. The individual processing operations are described in Sections 4 to 8.
Purpose. The App displays the current weather at the user's location. Determining the location is technically necessary for this purpose.
Scope. The App requests authorisation of the type "While Using the App" only; authorisation for background access is not requested. The App requests the location with an accuracy of approximately one kilometre and does not request the highest level of accuracy available under iOS.
Use. The location data are used for three purposes: retrieval of weather data (Section 5), determination of the place name displayed within the App (Section 6), and calculation of the positions of the sun and the moon. The last-mentioned calculation is performed exclusively on the device; no data are transmitted for that purpose.
Storage. Location data are not stored. They are held in the working memory of the device for the duration of a request only and are not written to persistent storage.
Refusal. If authorisation is not granted or is withdrawn, the App remains fully functional and displays the weather for a predefined example location (Berlin). In that case no location data are processed.
Authorisation may be granted or withdrawn at any time in the settings of the operating system.
Weather data are obtained from the WeatherKit service operated by Apple Inc. For this purpose the App transmits the approximate coordinates of the device to Apple. The controller has no access to these requests and receives no data resulting from them.
Apple's processing of these data is governed by the Apple Privacy Policy and is further described on the Apple WeatherKit attribution page.
In order to display the name of the current location within the App, the approximate coordinates of the device are transmitted to Apple's geocoding service, which returns a place name. The place name is held in working memory only and is not stored. This processing is likewise governed by the Apple Privacy Policy.
Apple requires that weather data be displayed together with an attribution to Apple Weather. The corresponding image file is retrieved from Apple's servers when the detail view is opened. In the course of that retrieval, Apple as the operator of the server necessarily receives the technical connection data inherent in any request over the internet, in particular the IP address of the device.
The App stores two items of information in the local user defaults of the device:
These entries constitute application settings. They contain no information relating to an identified or identifiable natural person, are not transmitted, and are removed when the App is uninstalled. No weather data, location data, place names or usage data are stored.
The only recipient of personal data is Apple Inc., One Apple Park Way, Cupertino, California 95014, USA, together with its affiliated companies, in its capacity as the provider of the services described in Sections 5 to 7. No data are disclosed to any other recipient.
Processing by Apple may take place on servers located outside the European Economic Area, in particular in the United States of America. The safeguards applied by Apple to such transfers within the meaning of Chapter V GDPR are set out in the Apple Privacy Policy.
Personal data are not sold, let, or otherwise made available to third parties for commercial purposes.
Location data and place names are not retained; they are processed for the duration of the respective request only. The settings referred to in Section 8 are retained until the App is uninstalled or the settings are altered by the user. With regard to data processed by Apple, the retention periods stated by Apple apply.
The App uses no analytics services, no advertising networks, no cross-app or cross-site tracking, and does not access the Advertising Identifier (IDFA). It requests no authorisation for the camera, the microphone, the photo library, contacts, the calendar, health data, or notifications, and provides no widgets and no integration with Siri or Shortcuts.
Automated decision-making within the meaning of Article 22 GDPR, including profiling, does not take place.
Data stored locally are protected by the security mechanisms of the iOS operating system, including file-level protection of the application container. All network connections are established by the frameworks of the operating system by way of transport encryption (HTTPS). The App implements no cryptographic functions of its own and operates no servers of its own.
Data subjects are entitled to the following rights vis-à-vis the controller: the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), the right to data portability (Article 20 GDPR), and the right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR).
Since the controller neither receives nor stores personal data, no data set concerning a data subject exists on the part of the controller. Processing of location data ceases in its entirety upon withdrawal of the authorisation in the settings of the operating system; the settings referred to in Section 8 are erased by uninstalling the App. Requests concerning data processed by Apple should be addressed to Apple.
Requests may be submitted to the controller at any time using the contact details set out in Section 1.
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Article 77 GDPR).
The provision of location data is neither required by law nor by contract and is not a prerequisite for the use of the App. The sole consequence of not providing them is that the weather is displayed for a predefined example location instead of the user's own location.
The App is not directed at children and knowingly processes no personal data of children. It contains no user account, no user-generated content, no communication functions and no advertising.
This Privacy Policy may be amended in order to reflect changes to the App or to the applicable legal requirements. The version in force at any given time is available on this page and is identified by the version number and effective date stated at the beginning of this document.