DATA PROTECTION DECLARATION
Tree Register - Vienna Tree Register App
Status: January 5, 2026 | Version: 1.0
1. RESPONSIBLE PARTY
Paul NiederleVienna, AustriaEmail: support@paulify.eu
Data Protection Officer: No data protection officer has been appointed, as there is no legal obligation to do so under Article 37 GDPR.
2. WHAT DATA IS COLLECTED?
2.1 Location Data (GPS)
What: GPS coordinates, approximate location data
What for:
- Displaying trees near you
- Navigation to trees
- Rally radius check
- AR mode
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Storage:
- Temporarily in RAM
- For Rally: Max. 6 months or until deleted
- NOT permanently stored
Revocation: Device settings → App permissions
2.2 Camera and Photos
What: Photos of trees (EXIF data is removed)
What for:
- Notes with images
- Rally photo challenges
- Achievements
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Storage:
Locally on your device
Optional: Cloud (encrypted)
Photos are Private
Revocation: Device settings
2.3 Device information
What: Device ID (pseudonymized), OS version, app version, device model
What for: Assignment, error analysis, compatibility
Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interest)
Note: The device ID is pseudonymized and cannot be directly assigned to a natural person. It changes upon reinstallation.
2.4 User Data
What: Notes, favorites, rally names, achievements
Storage:
- Locally in the Room database
- Optional: Cloud sync (Supabase, EU)
Legal basis: Art. 6 para. 1 lit. b GDPR
2.5 Tree Inventory Data
Source: City of Vienna (data.wien.gv.at), CC BY 4.0 Content: Tree species, location, planting year, etc. No personal data
3. TRANSFER TO THIRD PARTIES
3.1 Supabase (Cloud Backend)
Provider: Supabase Inc., Singapore Server: EU (Frankfurt) Data: Rally data, optional notes/photos Purpose: Cloud database, multiplayer, sync Security: TLS 1.3, Row Level Security Privacy Policy: https://supabase.com/privacy
Note: Data processing takes place exclusively on servers within the European Union.
** ### 3.2 OpenStreetMap
Purpose: Map tiles Data: IP address (temporary) Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
3.3 City of Vienna
Purpose: Tree inventory download Data: IP address (temporary) Website: https://data.wien.gv.at
3.4 Wikipedia (USA)
Purpose: Tree species information Data: Anonymous API requests Guarantees: EU Standard Contractual Clauses Privacy Policy: https://foundation.wikimedia.org/wiki/Privacy_policy
Note: No personal data is transmitted to Wikipedia.
4. STORAGE PERIOD
| Data type | Duration |
|----------|-------|
| Location (temporary) | 24h |
| Rally data | 6 months |
| Notes/Photos | Until deleted |
| Server logs | 7 days |
Auto-deletion: Inactive rallies after 12 months
5. YOUR RIGHTS (GDPR)
✅ Right of access (Art. 15): What data is stored?
✅ Correction (Art. 16): Directly in the app
✅ Deletion (Art. 17): Settings → "Delete all data" or email
✅ Data Export (Art. 20): JSON export in the app
✅ Revocation (Art. 7): Permissions in device settings
✅ Complaint (Art. 77): Austrian Data Protection Authority (dsb@dsb.gv.at)
6. SECURITY
We implement technical measures for data protection:
Encrypted transmission (HTTPS/TLS)
Access control (row-level security)
Pseudonymization (device IDs)
Regular updates
Note: Absolute security cannot be guaranteed.
7. CHILDREN & SCHOOLS
Minimum Age: All age groups (including school classes)
Consent: For users under 16 years of age, obtaining the necessary consent is the responsibility of the parents/guardians or the school.
Recommendation for Teachers:
- Use pseudonyms ("Team 1", not "Max Mustermann")
- Obtain consent before the rally
- No photos of people
Note: Teachers are acting in an educational capacity. The app is only a technical platform.
App includes:
- ❌ No advertising
- ❌ No in-app purchases
- ❌ No tracking
- ❌ No social media
8. NO TRACKING
❌ No Google Analytics ❌ No Facebook SDK ❌ No Firebase Analytics ❌ No advertising IDs
Local statistics (only on device):
- Trees visited, achievements, rally progress
- Not transmitted
9. CONTACT
Privacy inquiries: Email: privacy@paulify.eu Subject: "Privacy - Tree Inventory" Response: Within 30 days
Please include:
If possible, the device ID (optional, in app settings)
Type of inquiry
Support: support@paulify.eu
10. SUMMARY
✅ What the app does:
Shows trees (Open Data Vienna)
GPS only with permission
Save favorites locally
Multiplayer rallies (optional)
🔒 Data Privacy:
- EU servers (GDPR compliant)
- Encrypted
- Pseudonymized
- No tracking
- Can be deleted at any time
📱 Permissions:
- Location: Map, navigation
- Camera: Photos (optional)
- Internet: Maps, rallies
All permissions are optional and revocable.
--
Last updated: January 5, 2026 | Version: 1.0
End of Privacy Policy
Thank you for your trust! 🌳