Privacy in our apps

Controller

adhoc networks GmbH, represented by its managing director Ole Ostermann

Oststraße 52, 22844 Norderstedt, Germany

Phone: +49 (0) 40 60 06 01 60

Email: info@ad-hoc.com

Our data protection officer: Mauß Datenschutz GmbH, represented by its manager Tobias Mauß, Neuer Wall 10, 20354 Hamburg, Germany, info@datenschutzbeauftragter-hamburg.de

Who the apps are for

Our apps are professional tools for waste-management and logistics companies and their staff. Access is created by invitation only — either by adhoc networks or by an administrator at the company using the app. There is no open sign-up. The apps are not intended for children and young people under the age of 16.

Where we process data on behalf of the company using the app, we act as a processor under Art. 28 GDPR. That company is then the controller under the GDPR, and its own privacy notice applies to this processing in addition to this one.

What data we process

Account data. Name, email address, phone number where provided, role and permissions, and the assignment to a company. This data comes from the invitation or from your company.

Sign-in and log data. Times of sign-ins, device type and app version, technical logs about errors and access, and push tokens if you have enabled notifications.

Data you enter in the app. Operational data such as containers, locations, fill levels, jobs, completed work steps and related entries. This data belongs to the company using the app.

Error and crash reports. Technical details about errors in the app — see the "Error and crash reports" section.

Purposes and legal bases

• Providing and operating the apps, managing your access, support: Art. 6(1)(b) GDPR (contract or quasi-contractual relationship) and Art. 6(1)(f) GDPR (our legitimate interest in secure, working operations); where we act for our customers, Art. 28 GDPR.
• Security and troubleshooting, traceability of access: Art. 6(1)(f) GDPR.
• Push notifications: Art. 6(1)(a) GDPR (your consent via your device settings), which you can withdraw in your device or app settings at any time.
• Legal obligations, such as commercial and tax retention duties: Art. 6(1)(c) GDPR.

We do not use data from the apps for advertising, we do not pass it on for advertising purposes, and we do not sell data.

Error and crash reports

So that we can find and fix errors in our apps, the apps automatically send error and crash reports to Bugsink, an error-monitoring tool we host ourselves on our own infrastructure (bugsink.ad-hoc.com). No third-party error-monitoring service is involved.

Such a report contains technical details: the error message and technical trace (stack trace), app version, operating system and device type, the time and the place in the app where the error occurred. If you were signed in at that moment, the report may also contain an identifier for your account, so that we can fix the error precisely and come back to you if needed.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in a stable and secure application. We use these reports solely to analyse errors, never to evaluate you or your behaviour. Reports are deleted automatically after a limited period.

Recipients

For operation, hosting and maintenance we use service providers as processors under Art. 28 GDPR, contractually bound to our instructions. You can request a current list of these processors at info@ad-hoc.com. Beyond that, we only pass on your data with your consent, where we are legally required to, or where it is necessary to enforce our rights.

Your account data is visible to the administrators of the company through which your access was set up.

Retention

We store account data for as long as your access exists. After your account is deleted we remove the account data; log data expires after a short period. We keep data longer only where statutory retention periods require it (e.g. § 257 German Commercial Code, § 147 German Fiscal Code) or where it is needed to enforce existing claims. Your company's operational data stays with that company.

Deleting your account

You can have your account and the personal data attached to it deleted at any time. Delete account and data explains how — in short: an email to info@ad-hoc.com. Alternatively, an administrator at your company can delete your access.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw consent at any time; this does not affect the lawfulness of processing carried out up to that point.

To exercise these rights, contact info@ad-hoc.com or our data protection officer. We may need to verify your identity to prevent misuse. If your request concerns data we process on behalf of your company, we will forward it to that company.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Changes

As we develop our apps further, we will update this notice. The version published here is the one that applies.