Legal

Privacy Policy

I. Information on the processing of your data pursuant to Art. 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The controller for this app is Linus Kneser, reachable at linus@kneser.eu

2. Data processed for the provision of the app and the creation of log files

a. What data is processed for what purpose?

When using the app, access is made to the camera image and, where applicable, to the screen content of the device. No images are stored; only colors are extracted from the individual images.

When using Hue, the app-specific API key and username, as well as the local IP address of the Hue Bridge, are stored in order to control lights via the Hue Bridge. In order to remember selected lights and zones, these are also saved, potentially including their names.

b. On what legal basis is this data processed?

The data is processed on the basis of Art. 6(1)(f) GDPR.

c. Are there any recipients of personal data other than the controller?

When determining the local IP address of the Hue Bridge, an online service provided by Signify is used (https://discovery.meethue.com), whereby the IP address and access time may potentially be stored. This is necessary in order to control Hue lights.

d. How long is the data stored?

Image data is deleted immediately and never actually stored.

Settings remain saved for as long as the app is installed.

3. Rights of data subjects

a. Right of access

You may request information pursuant to Art. 15 GDPR about your personal data that we process.

b. Right to object:

You have a right to object on special grounds (see section II).

c. Right to rectification

Should the information concerning you no longer be accurate, you may request rectification pursuant to Art. 16 GDPR. Should your data be incomplete, you may request that it be completed.

d. Right to erasure

You may request the erasure of your personal data pursuant to Art. 17 GDPR.

e. Right to restriction of processing

You have the right pursuant to Art. 18 GDPR to request that the processing of your personal data be restricted.

f. Right to lodge a complaint

If you are of the opinion that the processing of your personal data violates data protection law, you have the right pursuant to Art. 77(1) GDPR to lodge a complaint with a supervisory authority of your choice. This includes the supervisory authority responsible for the controller: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.

g. Right to data portability

In the event that the conditions of Art. 20(1) GDPR are met, you have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, either to yourself or to a third party. The collection of data for the provision of the app and the storage of log files are strictly necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified pursuant to Art. 6(1)(f) GDPR. The conditions of Art. 20(1) GDPR are therefore not met in this regard.

II. Right to object pursuant to Art. 21(1) GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims. The collection of data for the provision of the app and the storage of log files are strictly necessary for the operation of the website.

III. Changes to this Privacy Policy

We reserve the right to update this privacy policy when changes are made to the app or the legal requirements. Current version as of: April 22, 2025.