1. Controller

The controller responsible for the collection, processing and use of personal data in connection with the air-⁠Q app is

Corant GmbH

Karl-Heine-Str. 99

04229 Leipzig

Phone: +49-(0)341-97856749

Website: www.air-q.com

Email: info@air-q.com

2. Installing the air-⁠Q App

The air-⁠Q app is available via distribution platforms operated by third parties, so-called app stores (Google Play and Apple App Store). Downloading may require prior registration with the respective app store and installation of the app store software. Corant has no influence over the collection, processing and use of personal data in connection with your registration and the provision of downloads within the respective app store and app store software. The operator of the respective app store is solely responsible in this regard. Please contact the respective platform provider directly if you have questions.

3. Required Permissions

For the air-⁠Q app to function properly, you need to grant access to certain smartphone features and personal data stored on the device. You’ll be asked once at the start, or only when using the respective feature, to grant the corresponding access permission.

The following access permissions are required:

Network Access & Network Connections

Network access is required since the air-⁠Q app needs access to the internal network to function properly. Some features can only be used in online mode.

Location Information

The air-⁠Q app needs the location coordinates of the respective air-⁠Q device to provide all features. These are used to create individual evaluations and location-based air quality comparisons that are made available to you.

Storage

As part of device registration, information about air-⁠Q safety notifications is encrypted and stored locally. This serves as an error log and supports the proper functioning of the air-⁠Q app. This data is only requested when needed and isn’t sent automatically.

Device Status

For our security checks, we need access to the status of your smartphone/tablet/mobile device.

Viewing and Revoking Granted Permissions

You can review and revoke the granted permissions at any time in your operating system under Settings > Apps > air-⁠Q > Permissions (varies by operating system). However, for the air-⁠Q app to function properly, you need to grant access to certain smartphone features and personal data stored on the device.

4. What Data Is Required to Use the Service?

Below, we’d like to inform you about what data is collected, processed and stored via the air-⁠Q app.

4.1. Setup Data

After installation, the air-⁠Q app requires the following setup data: "email address", "password". This setup data is required for the app to function.

4.2. Email Address

You need your email address to log in to the air-⁠Q app. Your email address is also used to uniquely identify you with our online service. The air-⁠Q devices you use are assigned to your email address, and it’s ensured that use complies with our terms of use.

4.3. Password

Your personal password, which you set when setting up the air-⁠Q app, is also required to log in to our online service. If you change your password, this applies to both the air-⁠Q app and the online service.

4.4. Device ID

The air-⁠Q app requires the unique device ID of your air-⁠Q device(s). This ID is used to ensure a unique assignment of your device/device type/usage model to your user account.

4.5. Location Data

The air-⁠Q app requires the air-⁠Q’s location coordinates. These are used to relate your indoor air data to the corresponding outdoor air data (e.g. readings from the Federal Environment Agency), and to create an internal air quality map. Location data is not related to other personal data. Tracing it back to individual persons is impossible.

4.6. WiFi Data

The air-⁠Q app stores WiFi networks/SSIDs within the air-⁠Q’s radio range for connection purposes. This WiFi data is also transmitted to the air-⁠Q Cloud when the air-⁠Q Cloud is active, to enable connecting and changing WiFi access via the web.

4.7. Data Collection When Using Push Notifications

You can have notifications about air quality situations sent to you. To do this, your smartphone registers with the respective push service (Apple Push Notification or Google Cloud Messaging) after downloading the air-⁠Q app. The service then sends a token to your device. The token is transmitted from the air-⁠Q app to Corant and stored there in a database. When a notification is to be sent, Corant sends the message with the token to the push service, which forwards it to your device.

As soon as you turn off push notifications in the air-⁠Q app’s settings, the token is deleted from Corant’s database.

5. Does Corant or Its Partners Receive Data, and for What Purpose?

Corant and its partners receive and process the data you provide in the air-⁠Q app for specific purposes. Below, we’d like to inform you in detail about the purposes and recipients:

All personal data collected, processed and stored in the air-⁠Q app goes exclusively to Corant and — except in the cases described below — is not shared with third parties. However, the data is intended to be processed and made available in aggregated form for statistical purposes.

a) When using the air-⁠Q online services, Corant transmits your encrypted login data (email address, password, device ID/information about the air-⁠Q devices used) to Amazon AWS as the operator/host of the air-⁠Q online services. All data is explicitly stored on servers in Germany.

Transmission of the above-mentioned data only occurs after you’ve explicitly consented to the use of the online services as part of the registration process. The data transmission ensures both secure login for the online services and a clear assignment of the air-⁠Q devices to your user account.

Data transmission between the air-⁠Q app and the recipients described here always uses SSL encryption that reflects the current state of the art.

6. Data Collection for Analysis Purposes and Troubleshooting

Data is collected in the air-⁠Q app to ensure error-free provision of the app and to further develop the app based on user needs. Corant developed the features needed for this itself. Corant uses Google as a service provider to evaluate the data.

6.1. Analysis to Ensure Error-Free Operation and Needs-Based Development

To ensure the app is free of errors, Corant uses various analysis features. If an error occurs, it can be traced afterward to determine where it happened, so the cause can be identified. The analysis features also provide information to further develop the air-⁠Q app based on user needs.

The following data is collected:

  • Client IP (truncated, doesn’t allow device and person to be identified)

  • Device ID (randomly generated number in the app, which doesn’t allow device and person to be identified)

  • App version

  • Operating system

  • Screen resolution

  • Mobile device/type

  • Date and time

  • Content and features/subpage accessed

Usage data is not linked with other personal data.

6.2. Analysis of Cross-Platform Usage Behavior

In addition to the information mentioned in 6.1, an anonymous user ID is collected for this purpose. This lets Corant evaluate how the offerings in the air-⁠Q app and the air-⁠Q online services are used to complement each other.

The user ID is a hash of your email address and air-⁠Q device ID, which can no longer be assigned to individual users. Your personal data and usage behavior remain effectively anonymous.

7. Retention Periods and Deletion of Data Used

7.1. Retention Periods During Active Use

During active use of the app, certain data is stored until uninstallation. This includes

  • Connected air-⁠Q devices.

  • The measurement/air quality data collected and transmitted to the air-⁠Q app.

7.2. Deletion of Your Data Upon Uninstallation

When the air-⁠Q app is uninstalled, all data is removed from the smartphone. Data stored in the air-⁠Q online services is not automatically affected by this. This data remains stored until you explicitly request deletion. This serves as a safety measure for you, since your data shouldn’t be lost when the air-⁠Q app is deleted or uninstalled (e.g. when switching smartphones).

8. Your Rights

You have the following rights:

  • a) Right to access (Art. 15 GDPR)

  • b) Right to rectification (Art. 16 GDPR)

  • c) Right to erasure (Art. 17 GDPR)

  • d) Right to restriction of processing (Art. 18 GDPR)

  • e) Right to object (Art. 21 GDPR)

The air-⁠Q app is not used for profiling or scoring measures pursuant to Art. 22 GDPR.

9. Contact Details for the Data Protection Officer and Supervisory Authorities

Corant GmbH

Data Protection Officer

Karl-Heine-Str. 99

04229 Leipzig

Email: datenschutz@air-q.com

Federal Commissioner for Data Protection and Freedom of Information

Husarenstr. 30

53117 Bonn

poststelle@bfdi.bund.de or poststelle@bfdi.de-mail.de

10. Changes or Amendments to This Privacy Policy

This privacy policy is currently valid and dated 29.10.2023. Further development of our app or the implementation of new technologies may make it necessary to change this privacy policy.

Last updated: 29.10.2023