Privacy Statement power2max app/web portal
We are delighted that you are using the power2max app and would like to extend our thanks for your interest in power2max and our products.
power2max protects your privacy. This Privacy Statement is intended to inform you how we, Saxonar GmbH, referred to in the following as “Saxonar” or “we”, collect and use your personal data in connection with our power2max app and the power2max web portal.
We only process your personal data with your consent or when we are permitted to do so by law. We will only process personal data that is necessary for the performance and use of our services and that you have disclosed to us on a voluntary basis.
I. Name and contact details for the controller
The controller in the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and any other relevant data protection rules is:
represented by its Managing Director: Dipl.-Ing. (FH) Andreas Görnitz
02906 Waldhufen OT Nieder Seifersdorf
Phone: + 49 35827-849911-90
Fax: +49 35827-849911-99
Our Data Protection Officer can be reached at the aforementioned address and under the following contact details:
II. Data processing, purpose and legal grounds
Creation of an account at the power2max web portal
When you register a power2max account on https://apps.power2max.com/portal/index.php or in the power2max app, you are asked to provide personal data such as your
• email address and
• first name and surname.
You then register on the portal with your email address and your password. Your power2max user account is password-protected. Your data is stored on a server located in Germany.
You have the option of adding further information to your user account, including
• your date of birth and
• your postal address.
You will also be asked to add further data to your profile, including
• your postal address and
• your telephone number if you use the power2max app and the power2max portal in order to make use of the services we offer, e.g. an inspection.
Data collection and storage takes place exclusively associated with your registration and only to the extent that is technically necessary. The data disclosed to us is processed strictly in accordance with the terms of this Privacy Statement. You are entitled at any time to cancel the link between the authentication code and your power2max user account. The authentication code will then be erased from the Saxonar servers.
Login to/registration of a power2max account using login details from social networks
You have the option of registering and subsequently logging into the power2max portal using your login details for social networks (e.g. your Facebook login details). Where you make use of this login method, you agree that certain information, for instance
• your name,
• your email address,
• your profile photo and
• if applicable, your posts, commentaries and other information associated with your account on the social networks will be passed on by the provider of the social media account to Saxonar.
The information is disclosed to Saxonar by means of the login mechanism for signing into accounts with social media. Of all the information disclosed in this context, power2max only uses your name and email address, which it associates with your power2max account.
Adding a power2max power meter to your power2max account
The power2max app will ask you to add your power meter to your power2max account in order to manage it, to adjust settings or to install paid software upgrades. By adding the power meter to your account, you declare that you are the rightful owner of this power2max product.
The portal provides you with the option of defining other persons – who must be owners of a user account on https://apps.power2max.com/portal/index.php – that are entitled to manage your power meter. In this regard, the term “manage” means to administrate and change all kinds of settings.
Saxonar is able to access your power2max account in order to provide you with product support when you have made contact with power2max customer care and have placed a service enquiry.
When you connect the power2max app with your power meter by Bluetooth, we will record data, e.g.
• the IP address used for software updates/upgrades,
• the time and date of updates/upgrades,
• system crash/diagnosis logs,
• the geographic position of your device,
• information about the device,
• information about the network used for synchronisation purposes (e.g. Wi-Fi or mobile data)
• as well as the battery, i.e. charge level of your device.
Contacting customer care
When you make contact with the power2max customer care by email, telephone or using the app, we will record personal data according to necessity, e.g.
• postal address,
• telephone number,
• email address and
• preferences for contacting,
• as well as information about your power2max products, e.g. serial numbers and date of purchase that you have disclosed to us on a voluntary basis. We do so exclusively for the purpose of making contact with you and to process your enquiry.
We may also produce error logs that may be helpful in the diagnosis of problems in regard to product or app performance and will record information on support or service problems. The purpose of this information is to provide customer and product support. We process data in order to track, analyse and improve the use, performance and functions of our products, as well as to protect the security and integrity of our products. For instance, we analyse usage behaviour and research how you use our products.
We may access your power2max account in order to provide the necessary support. For the purpose of improving our customer care – subject to the provisions of applicable laws – we will analyse the customer feedback provided voluntarily to Saxonar within the framework of customer surveys. The purpose of this information is also to conduct research for the development of future products, hence allowing you and others to enjoy an improved, intuitive and more personal experience and to promote the expansion and commitment of our product users.
We may also use your personal data to make contact with you and to provide you with important information about our products, for instance to notify you of significant changes to this Privacy Statement and to send you offers for our products and apps, in accordance with applicable laws and pursuant to the options you have selected in the section concerning marketing information.
The legal grounds for this form of data processing are set out in Art. 6 paragraph 1 point (a), Art. 6 paragraph 1 point (b), Art. 6 paragraph 1 point (c) GDPR and are legitimate interests for the orderly provision/development of our services pursuant to Art. 6 paragraph 1 point (f) GDPR.
Granting of permissions for the power2max app
In order to ensure that you can use the power2max app without restrictions, the power2max app will ask you to allow access to certain data on your mobile telephone. Granting of this permission is optional, although certain functions may not be available, or may only be partially available, if you do not grant the permissions. You are entitled at any time to change your mind and to alter the app permissions in the settings of your mobile telephone.
The following section describes the permissions that are requested and the reasons why they are necessary:
• Bluetooth interface: allows the app on the mobile telephone to connect with the power2max power meter.
• Location: we collect and process geo-information when you log into or use our web portal/the app. Based on the Android requirements, the power2max app needs access to your location in order to establish a Bluetooth connection between your mobile telephone and the power meter. Where you provide consent, we also use GPS, wireless networks, radio masts, Wi-Fi access points and other sensors to collect data about your precise location.
• Photos/media files, device storage: allows the app to create a temporary file on the mobile telephone before uploading a file to the power2max performance meter. This file is erased once upload is complete.
The legal grounds for this data processing are set out in Art. 6 paragraph 1 point (a), Art. 6 paragraph 1 point (b), Art. 6 paragraph 1 point (c) GDPR and Art. 6 paragraph 1 point (f) GDPR. Our legitimate interest lies in the provision of optimised services, as well as the optimised functionality and availability of the app.
You have the right at any time to withdraw your consent, effective for the future, by sending a message to email@example.com or by using the unsubscribe option at the end of each newsletter.
III. Purchasing products in the power2max online shop
When you click on a link in the power2max app in order to purchase power2max products, you will be redirected to the www.power2max.com website. The Privacy Statement on www.power2max.com defines the collection of personal data when purchasing a product in the power2max online shop and when accessing this website.
IV. Third parties to whom your data may be disclosed
power2max GmbH and Saxonar service providers
Saxonar is a German company and manufacturer of the power2max power meters. International sales and marketing is organised by power2max GmbH. In order to offer our products, apps and services, we must share your personal data with power2max GmbH and our service providers.
The legal grounds for this data processing are set out in Art. 6 paragraph 1 point (f) GDPR. Our legitimate interest lies in the provision of optimised services, as well as in the optimised functionality of the power meter and marketing of our products.
We are entitled to disclose data about you to third parties, provided you have granted your consent. The legal grounds are as set out in Art. 6 paragraph 1 point (a) GDPR.
Moreover, we are entitled to pass on your data to third parties if we are required to do so by law. We can also transfer your personal data to affiliated companies, subsidiaries or third parties in cases of restructuring, fusion, sale, joint ventures, transfer of ownership, assignment or other forms in which business operations, business assets and business shares in Saxonar und power2max, whether partly or wholly, are relocated elsewhere, including in connection with bankruptcy or similar procedures. The legal grounds for this data processing are set out in Art. 6 paragraph 1 point (c) and (f) GDPR.
V. Social media
Our website uses social plug-ins by the social networks Facebook, Twitter and Instagram in order to publicise our company and to provide information on new products and innovations, pursuant to Art. 6 paragraph 1 sentence 1 point (f) GDPR. The underlying marketing purpose should be considered our legitimate interest as defined in the GDPR. The respective providers are responsible for ensuring compliance with data protection rules and regulations.
Our online presence may include functions and content by the service Twitter, which are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include images, videos or texts and buttons with which users can express their liking of the content or subscribe to the authors of the content or to our posts. Where the users are members of the Twitter platform, Twitter is able to associate accessing of these contents and functions with the user profiles.
Twitter is certified under the Privacy Shield Framework and therefore guarantees compliance with European data protection laws
In addition, our website uses plug-ins by the social network Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. The Instagram plug-in can be identified by the “Instagram button” on our website.
Cookies cannot be used to execute programs or to place viruses on a computer. The information we receive from the cookies helps us facilitate your navigation and enables the correct display of our webpages.
The data processed by cookies for the purposes outlined above is necessary for the protection of our legitimate interests and the legitimate interests of third parties according to Art. 6 paragraph 1 sentence 1 point (f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser in such a way that cookies are not placed on your computer or so that you are alerted in each case when a new cookie is placed. Please bear in mind that disabling cookies entirely may prevent you from using all of the functions of our website.
On no accounts will we pass on the data collected from you to third parties or associate the information with your personal data, except where you provide explicit consent. We also collect usage data concerning the use of the power2max app and the portal. Among other things, this data includes the date and time at which the app accesses our server, the app version, the location of the device, the language settings, which information and files are downloaded in the app, user behaviour, information on the device status, hardware and operating system, as well as information about the app functions. Saxonar uses this information to optimise the quality and functions of the power2max app, to develop and market products and functions that provide you and other users with the maximum benefits, and in order to identify and rectify problems associated with use of the app as quickly as possible.
VII. Analysis tools
a) Google Analytics
Google is certified according to the Privacy Shield Framework and therefore guarantees compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the add-on "_gat._anonymizeIp" for web analysis via Google Analytics on these web pages. Where this add-on is used, Google truncates and anonymises the IP address for the data subject’s Internet connection when the access to our websites takes place from a Member State of the European Union or another signatory state to the Agreement on the European Economic Area (so-called IP masking).
Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website operator with other services relating to website and Internet use. Google may transfer this information to third parties when required to do so by law or when the third parties process the data on behalf of Google.
Google provides an add-on with which to prevent the collection of data by Google Analytics and its processing by Google. You can download and install this add-on at your own risk from the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.
We use Hotjar in order to better understand our users’ needs and to optimize our service and users’ experience. This is provided by Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe. Hotjar is used for the protection of our legitimate interests for the aforementioned purposes pursuant to Art. 6 paragraph 1 point (f) GDPR.
The information is transmitted to the Hotjar servers in Ireland and stored there. By using Hotjar, the following information is collected:
the IP address of your device (in an anonymous format)
Your e-mail address including your first and last name, as far as you have provided us with this information
geographical position (country only)
Date and time of access to our website
Screen size of your device
Device type and browser information
With Hotjar we can follow your movements on our website (with the help of so-called heatmaps). For example, we can see how far you scroll and which buttons you click and how often. Furthermore, with the help of Hotjar it is also possible to get feedback directly from you. We will use this information to evaluate your visit on our website, to generate reports of use and to evaluate other services related to the website. In this way, we receive valuable information to make our website even more customer-friendly.
Nevertheless, when using Hotjar we pay particular attention to the protection of your personal data. The areas of our website in which personal data of you or third parties are displayed are automatically hidden by Hotjar and are at no time traceable.
In addition, Hotjar offers the option of using a “Do Not Track header” to prohibit the use of Hotjar, so that no data about the visit of the respective website are recorded. This setting is supported by all common browsers in current versions. To function your browser sends a request to Hotjar, with a command to disable the tracking. If you use our website with different browsers, you must set up the “Do Not Track header” for each of these browsers / devices separately.
Detailed instructions with information about your browser can be found here: https://www.hotjar.com/opt-out
More information about Hotjar Ltd. and about the Hotjar tool can be found on the Hotjar website: https://www.hotjar.com
This website uses the retargeting technology AdRoll, Semantic Sugar, Inc. (dba AdRoll), 972 Mission Street, San Francisco CA, 94103, United States
These targeting measures are carried out for the purposes stated above pursuant to Art. 6 paragraph 1 point (f) GDPR.
b) Facebook Custom Audience
We have integrated the Remarketing feature “Custom Audience” of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA (“Facebook”) on our website. This allows us to provide interest-based advertisement (“Facebook Ads”) to users of our website as part of their visit to the social network Facebook or other websites that also use this process.
For this marketing function, we use the “Facebook pixel” on our website, a so-called web beacon or tracking pixel. When you visit our website, this tracking pixel establishes a direct link between your browser and the Facebook server. Facebook receives the information from your browser that our website has been called up by your device. We point out that we have no influence on the extent of the transmitted data and their further use by Facebook and therefore inform you according to our knowledge. By integrating Facebook Custom Audience, Facebook receives the information that you have accessed the corresponding website or clicked an ad from us. If you are registered with a service of Facebook, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a chance that the provider will find out and store your IP address and other identifying features.
You may object to the use of Facebook Website Custom Audience anytime in the future via https://www.facebook.com/settings/?tab=ads.
For more information about privacy and your related options, visit https://www.facebook.com/settings/?tab=ads and https://www.facebook.com/about/privacy.
c) Google Adwords
We have integrated Google AdWords into our website. Provider is the Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google AdWords is an internet advertising service that allows us to serve ads both on Google’s search engine and on the Google Network. Google AdWords allows us to set certain keywords, which will only display an ad on Google’s search engine results when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topic related web pages using an automated algorithm and according to pre-defined keywords.
The purpose of using Google AdWords is to advertise our website by displaying interest-based advertising on third-party websites and in the search engine results of Google’s search engine, and by displaying advertisements on our website.
The data and information collected is used by Google to provide visitor statistics for our website. We use the visitor statistics to determine the total number of users, to measure the success or failure of each AdWords ad, and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertiser receives any information from Google that identifies users. The conversion cookie stores personal information, such as the websites you visit. Each time you visit our website, your personal information is transferred to Google.
IX. Retention period for storage of your personal data
We store your data for as long as you remain a registered user of the products. In addition to this, we only store your data when it is necessary for compliance with legal obligations (due to warranty, limitation periods or retention periods) or is otherwise necessary.
You are entitled to delete your user account on the account page. When you delete your account, all of your personal data is erased and cannot be restored. Therefore, we kindly request that you make sure to create a backup of the content you upload before it is erased. Usage data relating to you that is anonymised and processed for statistical and other purposes will not be erased but kept separately from your personal data. This data can no longer be associated with you personally. Please bear in mind that your user account is not deleted when you uninstall our app.
Deletion of your account will not erase your personal data if its storage is necessary for compliance with a legal obligation.
X. Links, apps by third-party providers and data protection policies of third-party providers
The power2max app and the power2max portal may contain links to other websites that are not operated by Saxonar. We do not check these websites and apps that are connected by the links, and we are not responsible for the data protection policies and contents of the websites and apps that are connected by these links.
XI. Rights of the data subject
Where personal data relating to you is processed, you are the data subject in the meaning of the GDPR, and you are entitled to the following rights toward the controller:
• according to Art. 15 GDPR the right to obtain from us information about personal data concerning you that is being processed. In particular, you can obtain information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the scheduled retention period, the existence of a right to rectification, erasure, restriction of processing or objection, as well as the right to lodge a complaint and to obtain information on the source of the data when it was not collected by us;
• according to Art. 16 GDPR the right to obtain without undue delay the rectification of inaccurate personal data concerning you;
• according to Art. 17 GDPR the right to obtain from us the erasure of personal data concerning you without undue delay, except where the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise and defence of legal claims;
• according to Art. 18 GDPR to obtain restriction of processing of the personal data concerning you where the accuracy of the personal data is contested by you, the processing is unlawful and you oppose the erasure of personal data and request the restriction of its processing instead, we no longer require the data, but it is required by you for the establishment, exercise and defence of legal claims, or where you have objected to processing in pursuant to Art. 21 GDPR;
• according to Art. 20 GDPR to receive in a structured, commonly-used and machine-readable format the personal data concerning you that you have provided to us, and the right to transmit this data to another controller.
You also have the following rights:
a) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 paragraph 1 point e or f GDPR.
We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where it is necessary for the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you shall have the right to object at any time to processing of your personal data, to the extent that it is related to such marketing.
Where you object to processing for direct marketing purposes, the personal data relating to you shall no longer be processed for such purposes.
b) Right to withdraw a declaration of consent under data protection laws
You have the right at any time to withdraw your consent under data protection laws. The withdrawal of your consent will be without prejudice to the lawfulness of processing conducted until such time as your consent is withdrawn.
c) Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
We otherwise use suitable technical and organisational measures to protect your data against coincidental or wilful manipulation, partial or complete loss and destruction and against unauthorised access by third parties. Our security measures are kept up-to-date in line with technological progress.
Policy regarding children
The power2max app is not designed for persons below 16 years of age. We request that persons below 16 years of age do not submit any personal data whatsoever on the power2max app. Where we become aware that we have registered data concerning a child aged less than 16 years of age, we will take steps to erase this data as quickly as possible. Where you become aware that a user of the power2max App or the power2max portal is younger than 16, we kindly request that you make contact with us at firstname.lastname@example.org.
XIII. Updating of the Privacy Statement
We may amend this Privacy Statement from time to time when we add new products and apps, improve our current range or in the event of changes to technologies and laws. For the date of the most recent revision of this Privacy Statement, please refer to the caption “LAST UPDATE” at the start of the page. Changes enter into force upon publication of the revised Privacy Statement.
Where there are significant changes, we will inform you specifically and, when required to do so by relevant laws, also obtain your consent. In accordance with applicable laws, you will be informed by email or by publication of a notice of the changes on https://apps.power2max.com/portal/index.php or in the power2max mobile app.
Version: September 2018