The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Nicolas Autzen
Heinrich-Vogeler-Weg 18
27726 Worpswede, Germany
Email: hi@hamme.software
For any privacy-related matter — access, erasure, objection or general questions — please contact the email address above.
This policy applies to the Sturmschaden app for iPhone and iPad.
The website hamme.software has its own privacy policy.
The app works without an account and without registration. The postcode or place you enter, your queries and the certificates you create (PDF) are stored locally on your device — we cannot see them and do not receive a copy.
The app does not use location services (no GPS) — you enter the place you need the certificate for yourself, as a postcode.
To find places matching your postcode and to fetch official wind speeds, the app connects directly to servers of the German Weather Service (DWD), a German federal authority. No server or intermediary of ours is involved.
As technically required, your IP address and the request itself (entered postcode or selected place, chosen weather station and date range) are transmitted to the DWD. When creating the certificate, a map extract is additionally loaded from the DWD. We ourselves do not store this data.
Recipient: Deutscher Wetterdienst, Frankfurter Straße 135, 63067 Offenbach, Germany. Legal basis: Art. 6(1)(b) GDPR (providing the function you requested). For processing by the DWD, see its privacy policy.
To select a weather station, the app shows a map powered by Google Maps. When the map loads, map data is fetched from Google servers; your IP address is transmitted to Google in the process, and device information required to provide and secure the map service may be processed.
The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA.
Legal basis: Art. 6(1)(b) GDPR (displaying the station picker as part of the requested function). Third-country transfer: For transfers to the USA, Google relies on the EU-US Data Privacy Framework (DPF), under which Google LLC is certified (adequacy decision of the EU Commission). Details in Google's privacy policy.
To detect crashes, fix errors and keep the app stable, we use services of Google's Firebase platform:
- Firebase Crashlytics records technical diagnostics data in the event of crashes and errors (e.g. device model and OS version, time and type of the error, crash logs and randomly generated installation identifiers).
- Firebase Analytics records usage data about the app (e.g. screens viewed and interactions, approximate region, technical device information).
This data is not linked to your name or any other aspect of your identity — as also declared in the “App Privacy” section on the App Store.
The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data is also transferred to Google LLC in the USA (EU-US Data Privacy Framework, see section 05).
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in detecting and fixing errors, keeping the app stable and understanding its usage in order to improve it. You can object to this processing at any time (Art. 21 GDPR, see section 08) — an email to hi@hamme.software is enough.
Retention: Crash and diagnostics data (Crashlytics) is deleted after 90 days; user-level analytics data is deleted after 14 months at the latest. Details at firebase.google.com/support/privacy.
Exporting the insurance-ready certificate is an in-app purchase. Payment is handled entirely by the Apple App Store — we receive no payment data, only a confirmation that the purchase was made, without any reference to your person. Apple's privacy policy applies to the payment processing.
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). An informal email to hi@hamme.software is all it takes.
Right to lodge a complaint (Art. 77 GDPR): You may complain to a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover, Germany, lfd.niedersachsen.de.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
We will update this policy when the app or the legal situation changes. The current version is always available at hamme.software/en/apps/sturmschaden/privacy. The German version at hamme.software/apps/sturmschaden/datenschutz is authoritative; in case of discrepancies it prevails.