Privacy Policy

Protecting your data is important to us. WeatherPush is a weather service by Atkuva GmbH, available as an app for iOS and Android as well as an installable web app (PWA) and as a website at weatherpush.de. We process as little personal data as possible. This policy gives you an overview of what happens to your data when you use WeatherPush.

Data Controller

The controller responsible for data processing in this app is:

Atkuva GmbH
Sohldfeld 22
31139 Hildesheim
Germany

Phone: +49 5121 9289245
Email: mail@atkuva.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Hosting

The backend services of WeatherPush (e.g. the weather API and the delivery of notifications) are hosted by the following provider:

Uberspace (Jonas Pasche)
Kaiserstr. 15
55116 Mainz, Germany

When you use the app, technical access data (e.g. IP address, time of the request) is processed on the host's servers to the extent necessary for a secure and stable service (Art. 6 (1) (f) GDPR). A data processing agreement (DPA) is in place with the host.

Data Collection

We only collect data where it is technically necessary. No personal profiles are created.

Weather Data and Location Search

To display the weather, the app transmits the location you selected or that was determined (coordinates) to our weather API in order to retrieve the relevant weather data. Our server retrieves the weather data for these coordinates from external weather services (the Norwegian Meteorological Institute / met.no and Bright Sky, which provides data from the German Weather Service). Only the coordinates are transmitted, not your IP address or your device. Location search queries are sent only to our WeatherPush API and processed there using a locally hosted database built from the GeoNames dataset. The iOS and Android apps first use the operating system or device provider's geocoding service to name the current location. If that service returns no result, and generally in the web app, the location is resolved using our local GeoNames database. The legal basis is our legitimate interest in a functioning location search (Art. 6 (1) (f) GDPR).

Location Data

For the plain weather display, your location is not stored in a user database. Only if you enable weather alerts do we store the associated location (coordinates and place name) together with your push token on our server, for as long as the alerts are active (see “Push Notifications”). When you disable the alerts, this data is deleted from the server. There is no user account; the data is not linked to your name or e-mail address.

Push Notifications

If you wish, WeatherPush can inform you about weather warnings (e.g. frost, heat, rain) via push notification. This feature is optional and only active if you enable notifications in the app and grant permission on your device or browser.

When you enable notifications, we transmit to our server (Uberspace) a device-specific push token (push endpoint), your language setting, the platform (iOS, Android or web), as well as the warning thresholds you have chosen and the associated location. This data is stored so that we can send you the requested warnings. The push token does not allow you to be identified personally and does not grant access to any other data on your device.

Delivery of Notifications

To deliver notifications we use the push service of Expo (650 Industries, Inc., USA). Expo forwards the notification to the respective platform service:

• On iOS devices via the Apple Push Notification service (APNs) of Apple Inc. (USA).
• On Android devices via Firebase Cloud Messaging (FCM) of Google LLC (USA).
• In the web app (PWA) via the push service of your browser (e.g. Mozilla, Google or Apple).

In doing so, the push token and the content of the notification are transmitted to these services. These providers in the USA may offer a level of data protection that does not correspond to that of the EU. The legal basis for the processing is your consent given by enabling notifications (Art. 6 (1) (a) GDPR; where your device is accessed, additionally § 25 (1) TDDDG).

Withdrawal

You can disable notifications in the app at any time or revoke the permission in your device or browser settings. After deactivation, no further notifications are sent and the stored push token is deleted.

Storage Period

We store personal data only for as long as is necessary for the respective purposes. The data stored for push notifications (push token, language setting, warning settings, location) is deleted as soon as you disable notifications or the token becomes permanently invalid.

Legal Bases and Withdrawal

Where we obtain your consent, Art. 6 (1) (a) GDPR is the legal basis. For processing that is necessary for the provision and security of the service, we rely on our legitimate interest (Art. 6 (1) (f) GDPR). You can withdraw any consent given at any time with effect for the future.

Your Rights

You have the right to information, rectification, erasure and restriction of the processing of your personal data, as well as the right to data portability and to object. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, an informal message to the controller named above is sufficient.

Encryption

Communication between the app and our servers is encrypted via TLS (HTTPS) to protect your data against access by third parties.

If you have any questions about data protection, please use the contact options provided in the imprint.