Skip to content

DATA PROTECTION DECLARATION

Tree Register - Vienna Tree Register App

Status: January 5, 2026 | Version: 1.0


1. RESPONSIBLE PARTY

Paul NiederleVienna, AustriaEmail: support@paulify.eu

Data Protection Officer: No data protection officer has been appointed, as there is no legal obligation to do so under Article 37 GDPR.


2. WHAT DATA IS COLLECTED?

2.1 Location Data (GPS)

What: GPS coordinates, approximate location data

What for:

  • Displaying trees near you
  • Navigation to trees
  • Rally radius check
  • AR mode

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Storage:

  • Temporarily in RAM
  • For Rally: Max. 6 months or until deleted
  • NOT permanently stored

Revocation: Device settings → App permissions

2.2 Camera and Photos

What: Photos of trees (EXIF data is removed)

What for:

  • Notes with images
  • Rally photo challenges
  • Achievements

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Storage:

  • Locally on your device

  • Optional: Cloud (encrypted)

  • Photos are Private

Revocation: Device settings

2.3 Device information

What: Device ID (pseudonymized), OS version, app version, device model

What for: Assignment, error analysis, compatibility

Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interest)

Note: The device ID is pseudonymized and cannot be directly assigned to a natural person. It changes upon reinstallation.

2.4 User Data

What: Notes, favorites, rally names, achievements

Storage:

  • Locally in the Room database
  • Optional: Cloud sync (Supabase, EU)

Legal basis: Art. 6 para. 1 lit. b GDPR

2.5 Tree Inventory Data

Source: City of Vienna (data.wien.gv.at), CC BY 4.0 Content: Tree species, location, planting year, etc. No personal data


3. TRANSFER TO THIRD PARTIES

3.1 Supabase (Cloud Backend)

Provider: Supabase Inc., Singapore Server: EU (Frankfurt) Data: Rally data, optional notes/photos Purpose: Cloud database, multiplayer, sync Security: TLS 1.3, Row Level Security Privacy Policy: https://supabase.com/privacy

Note: Data processing takes place exclusively on servers within the European Union.

** ### 3.2 OpenStreetMap

Purpose: Map tiles Data: IP address (temporary) Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

3.3 City of Vienna

Purpose: Tree inventory download Data: IP address (temporary) Website: https://data.wien.gv.at

3.4 Wikipedia (USA)

Purpose: Tree species information Data: Anonymous API requests Guarantees: EU Standard Contractual Clauses Privacy Policy: https://foundation.wikimedia.org/wiki/Privacy_policy

Note: No personal data is transmitted to Wikipedia.


4. STORAGE PERIOD

| Data type | Duration |

|----------|-------|

| Location (temporary) | 24h |

| Rally data | 6 months |

| Notes/Photos | Until deleted |

| Server logs | 7 days |

Auto-deletion: Inactive rallies after 12 months


5. YOUR RIGHTS (GDPR)

Right of access (Art. 15): What data is stored?

Correction (Art. 16): Directly in the app

Deletion (Art. 17): Settings → "Delete all data" or email

Data Export (Art. 20): JSON export in the app

Revocation (Art. 7): Permissions in device settings

Complaint (Art. 77): Austrian Data Protection Authority (dsb@dsb.gv.at)


6. SECURITY

We implement technical measures for data protection:

  • Encrypted transmission (HTTPS/TLS)

  • Access control (row-level security)

  • Pseudonymization (device IDs)

  • Regular updates

Note: Absolute security cannot be guaranteed.


7. CHILDREN & SCHOOLS

Minimum Age: All age groups (including school classes)

Consent: For users under 16 years of age, obtaining the necessary consent is the responsibility of the parents/guardians or the school.

Recommendation for Teachers:

  • Use pseudonyms ("Team 1", not "Max Mustermann")
  • Obtain consent before the rally
  • No photos of people

Note: Teachers are acting in an educational capacity. The app is only a technical platform.

App includes:

  • ❌ No advertising
  • ❌ No in-app purchases
  • ❌ No tracking
  • ❌ No social media

8. NO TRACKING

❌ No Google Analytics ❌ No Facebook SDK ❌ No Firebase Analytics ❌ No advertising IDs

Local statistics (only on device):

  • Trees visited, achievements, rally progress
  • Not transmitted

9. CONTACT

Privacy inquiries: Email: privacy@paulify.eu Subject: "Privacy - Tree Inventory" Response: Within 30 days

Please include:

  • If possible, the device ID (optional, in app settings)

  • Type of inquiry

Support: support@paulify.eu


10. SUMMARY

✅ What the app does:

  • Shows trees (Open Data Vienna)

  • GPS only with permission

  • Save favorites locally

  • Multiplayer rallies (optional)

🔒 Data Privacy:

  • EU servers (GDPR compliant)
  • Encrypted
  • Pseudonymized
  • No tracking
  • Can be deleted at any time

📱 Permissions:

  • Location: Map, navigation
  • Camera: Photos (optional)
  • Internet: Maps, rallies

All permissions are optional and revocable.

--

Last updated: January 5, 2026 | Version: 1.0

End of Privacy Policy

Thank you for your trust! 🌳