Privacy Policy
Revised Privacy Policy for Hufrehe Alarm App
Effective Date: May 16, 2026
This Privacy Policy describes how Hufguru UG (haftungsbeschränkt) ("we," "us," or "our") collects, uses, and discloses your personal data when you use the "Hufrehe Alarm" mobile application (the "App"). We are committed to protecting your privacy and handling your data in a transparent and secure manner, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union, the UK General Data Protection Regulation (UK GDPR), and relevant data protection laws in Latin America (e.g., LGPD in Brazil, LFPDPPP in Mexico).
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Data Controller
Hufguru UG (haftungsbeschränkt)
An Sichelscheid 13
52134 Herzogenrath, Germany
Email: office@hufrehealarm.com
2. Data We Collect and How We Use It
We collect and process various types of personal data for specific purposes, based on different legal bases:
2.1. Data Processed for App Operation (Log Data)
When you use the App, certain data is automatically transmitted to us to ensure app functionality, ongoing development, and to prevent or resolve malfunctions. This includes:
- Device ID, operating system, time of access, and IP address.
Legal Basis: Article 6(1)(f) GDPR/UK GDPR (legitimate interest). Our legitimate interest lies in ensuring system security, investigating misuse, and restoring system integrity after technical failures. This data is deleted after a maximum of 14 days, unless required longer due to a security incident.
2.2. Data Processed for Registration and System Use (Contractual Necessity)
When you register for an account or use the App, we process personal data necessary for the fulfillment of our contract with you. This includes:
- Name, address, email, phone number, date of birth, username, and payment details.
- Uploaded user content, specifically hoof photos for AI analysis.
Legal Basis: Article 6(1)(b) GDPR/UK GDPR (performance of a contract). We store this data for as long as necessary to fulfill the contract and/or comply with legal retention periods.
2.3. Data Processed for Specific App Functions (Consent & Contractual Necessity)
- AI Analysis (Hoof Photos): To perform the AI-supported analysis of hoof health, we process the hoof photos you upload. While these photos are primarily related to animal health, we acknowledge that they may be linked to you as the user. Therefore, we process these photos based on:
- Legal Basis: Article 6(1)(b) GDPR/UK GDPR (performance of a contract) for providing the AI analysis service you requested.
- Explicit Consent (where required): In certain jurisdictions or if these photos are deemed sensitive personal data (e.g., health-related data linked to an individual), we will seek your explicit consent in accordance with Article 9(2)(a) GDPR/UK GDPR before processing them. You will be prompted for this consent within the App.
- Interactive Map (Location Data): To display regional partners, the App uses your device's location if you have granted permission. This feature is optional.
- Legal Basis: Article 6(1)(a) GDPR/UK GDPR (your consent). You can change or revoke these permissions at any time in your device settings.
3. Permissions
If granted via your device settings, the App accesses:
- Camera & Photos: For uploading hoof photos for analysis.
- Location: For displaying partners on the interactive map.
You can manage and revoke these permissions at any time through your device's operating system settings.
4. Data Transfer to Third Parties
We share data with the following service providers who act as our processors:
- Hosting: Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany.
- App Agency (Maintenance): DeineSeite.at, Fahndorf 30, A-3710 Ziersdorf, Austria.
International Data Transfers:
Currently, no personal data is transferred to third countries outside the European Union or the European Economic Area. Should we engage service providers or partners in countries outside the EU/EEA (e.g., for cloud services or local partnerships in Latin America), we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses approved by the European Commission, or reliance on adequacy decisions, in accordance with Article 44 et seq. GDPR/UK GDPR. We will update this Privacy Policy accordingly.
5. Your Data Protection Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access (Art. 15 GDPR/UK GDPR): You have the right to request copies of your personal data.
- Right to Rectification (Art. 16 GDPR/UK GDPR): You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure (Art. 17 GDPR/UK GDPR): You have the right to request that we erase your personal data, under certain conditions.
- Right to Restriction of Processing (Art. 18 GDPR/UK GDPR): You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing (Art. 21 GDPR/UK GDPR): You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability (Art. 20 GDPR/UK GDPR): You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at office@hufrehealarm.com.
6. Supervisory Authority
If you are a resident of the European Union or the United Kingdom, you have the right to lodge a complaint with a competent supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
For Germany, the competent supervisory authority is:LDI NRW (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)Kavalleriestr. 2-4
40213 Düsseldorf, Germany
For the United Kingdom, the competent supervisory authority is:Information Commissioner's Office (ICO)Water Lane, Wycliffe House
Wilmslow, Cheshire, SK9 5AF, United Kingdom
7. Data Protection in Latin America
We are committed to complying with relevant data protection laws in Latin American countries where the App is available, such as the Lei Geral de Proteção de Dados (LGPD) in Brazil and the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) in Mexico. We will ensure that our data processing practices align with the principles and requirements of these laws, including providing adequate notice, obtaining necessary consents, and respecting data subject rights. Specific details regarding local compliance will be provided as the App expands into these markets.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.