Privacy Policy.

Controller

The entity named in the legal notice (Impressum) is responsible for the data processing described below.

Usage Data

When you visit our websites, usage data is temporarily stored on our web server and evaluated for statistical purposes to improve the quality of our website. This dataset consists of:

• the name and address of the requested content,
• the date and time of the request,
• the amount of data transferred,
• the access status (content delivered, content not found),
• a description of the web browser and operating system used,
• the referral link that indicates which page you came from,
• the IP address of the requesting device, shortened so that it can no longer be linked to a person.

Data Security

To protect your data from unauthorized access as comprehensively as possible, we implement technical and organizational measures. We use an encryption process on our website. Your information is transmitted between your device and our server via TLS encryption. You can generally recognize this by the closed lock symbol in your browser's status bar and the address line beginning with https://.

Required Cookies

We use cookies on our website that are necessary for its operation.

Cookies are small text files that can be stored on your device and read by it. A distinction is made between session cookies, which are deleted once you close your browser, and permanent cookies, which remain stored beyond the session.

We do not use required cookies for analytics, tracking, or advertising purposes.

Some of these cookies contain only information related to specific settings and cannot be linked to a person. They may also be necessary to enable user navigation, security, and website functionality.

We use these cookies on the basis of Article 6(1)(f) GDPR.

You can configure your browser to inform you about cookie placement. This makes the use of cookies transparent for you. You may also delete cookies at any time via your browser settings and prevent new cookies from being set. Please note that doing so may cause our website to display incorrectly or limit functionality.

Provider	Purpose	Storage Duration	Adequate Level of Data Protection
Borlabs Cookie	Storage of the visitor's cookie preferences	1 year	Processing only within EU/EEA

Google Analytics

To ensure our website is designed according to user needs, we use the web analytics tool “Google Analytics.” Google Analytics creates usage profiles based on pseudonyms. Permanent cookies are stored on your device and read by us to recognize and count returning visitors.

Google Ireland Limited and Google LLC (USA) support us as processors under Article 28 GDPR. Data processing may therefore occur outside the EU/EEA. Due to processing in the USA, no adequate level of protection can be assumed. Authorities may access this data for security or monitoring purposes without informing you or allowing legal redress.

Where optional cookies or similar technologies are used, or data is stored/read on your device, this occurs pursuant to § 25(1) TTDSG. Further processing occurs on the basis of your consent under Article 6(1)(a) GDPR, provided via our “Borlabs Cookiebanner.”

You may withdraw your consent at any time. Please follow this link and adjust the settings in our banner.

Dealfront (Leadfeeder)

We use the service Dealfront (formerly Leadfeeder) provided by Dealfront Group GmbH, Tuomiokirkonkatu 11, 33100 Tampere, Finland. Dealfront helps us identify which companies visit our website, providing valuable insights for sales and marketing.

Data processed:

When our website is accessed, Dealfront collects the visitor’s IP address. Because IP addresses constitute personal data, they are technically processed first. Dealfront immediately shortens or anonymizes the IP address, so no reference to individuals is possible. Based on the anonymized IP address, Dealfront checks whether the visit originates from a corporate network.

Data collected includes:

• - technically required IP address (before anonymization),
• - anonymized/shortened IP address,
• - visited pages, dwell time, interactions,
• - time of visit,
• - device and browser information.

Use of Cookies

Dealfront does not use cookies for identification.

Purpose of processing

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in understanding which companies are interested in our services and how users interact with our content — allowing us to continuously improve our offering and prioritize relevant leads.

Where data is processed

Dealfront processes data within the European Union (including Finland and Germany). Transfers to other European data centers may occur but only in compliance with the GDPR. Personal data is not permanently stored or transferred to third countries.

Storage duration

Anonymized data processed by Dealfront is retained for up to 2 years and then automatically deleted. Full IP addresses are not stored.

Right to object

You may object to Dealfront’s data processing at any time. More information is available here:

https://www.dealfront.com/privacy-policy/

Contact Form

You can contact us via our contact form. To use this form, we require the information marked as mandatory fields.

This data is processed on the basis of Article 6(1)(f) GDPR to respond to your inquiry.

You may also choose to voluntarily provide additional information. These details are optional and not required for contacting us. Voluntary information is processed based on your consent.

Your data is processed solely to respond to your inquiry and will be deleted once no longer needed, unless legal retention periods apply.

If your data submitted via the contact form is processed under Article 6(1)(f) GDPR, you may object at any time. You may also withdraw consent for voluntary information at any time by contacting the email address listed in the legal notice.

Email, Telephone, or Fax Inquiry

If you contact us via email, telephone, or fax, your inquiry, including all personal data contained within (name, inquiry), will be stored and processed in order to handle your request. We do not share this data without your consent.

Processing is based on Article 6(1)(b) GDPR if your request relates to a contract or necessary pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) GDPR) or our legitimate interests (Article 6(1)(f) GDPR) to effectively process inquiries.

Your data will remain with us until you request deletion, withdraw consent, or the purpose for storage no longer applies. Legal retention periods remain unaffected.

Embedded Videos

We embed videos on our website that are not stored on our servers. To prevent automatic loading of third-party content, we display only locally stored preview images when you open our website. At this stage, no data is transmitted to the third-party provider.

Only after clicking the preview image will third-party content be loaded. At that moment, the provider receives information about your visit, including necessary technical usage data, and may place tracking technologies. We have no control over this further processing.

By clicking the preview image, you consent to loading third-party content.

Embedding occurs based on your consent. Please note that third-party providers may process data outside the EU/EEA, where authorities may access data without your knowledge or legal remedies. Further processing takes place based on Article 6(1)(a) GDPR if consent was given via the Borlabs Cookiebanner.

Provider	Maximum Storage Duration	Adequate Data Protection Level	Withdrawal of Consent
YouTube / Google USA	6 months	No adequate level of protection. Use of Standard Contractual Clauses.	If you click a preview image, third-party content loads immediately. If you no longer wish this on other pages, do not click the preview images.

Social Plugins

We enable the use of social plugins. For data protection reasons, these plugins are initially integrated in a deactivated state. This means no data is transmitted to social media services when the page is loaded.

You may choose to activate and use social plugins. In the first step, all data and functions required for displaying the plugin are provided from our server. Only when you click the preview image or icon does your browser connect to the corresponding social media provider.

Once activated, the provider receives your IP address and information about your visit—whether or not you have an account with the provider. If you are logged in, the data may be directly associated with your profile.

We have no control over the provider’s subsequent processing. It is likely that usage profiles are created and used for personalized advertising or to inform other users about your activity.

Embedding occurs based on your consent via clicking the preview. Data may be processed outside the EU/EEA, with potential access by authorities. Further processing takes place per Article 6(1)(a) GDPR.

If you wish to prevent future processing, simply do not click the preview images or icons again.

Provider	Maximum Storage Duration	Adequate Data Protection Level	Withdrawal of Consent
Twitter	-/-	No adequate protection. Standard Contractual Clauses.	Withdraw consent using our banner settings.
LinkedIn	-/-	No adequate protection. Standard Contractual Clauses.	Withdraw consent using our banner settings.

Your Rights as a Data Subject

The GDPR grants you specific rights regarding the processing of your personal data:

Right of Access (Art. 15 GDPR)

You may request confirmation as to whether personal data relating to you is being processed. If so, you have the right to access this data and obtain additional information under Article 15 GDPR.

Right to Rectification (Art. 16 GDPR)

You have the right to request the immediate correction of inaccurate personal data and the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You may request the deletion of personal data concerning you where one of the reasons listed in Article 17 GDPR applies.

Right to Restriction of Processing (Art. 18 GDPR)

You may request restriction of processing if one of the conditions of Article 18 GDPR applies—for example, if you have objected to processing while the controller reviews the request.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller.

Right to Withdraw Consent (Art. 7 GDPR)

If data processing is based on consent, you may withdraw your consent at any time. The withdrawal applies only to future processing.

Right to Object (Art. 21 GDPR)

You may object to processing based on Article 6(1)(e) or (f) GDPR for reasons relating to your particular situation. We will then stop processing the data unless compelling legitimate grounds outweigh your interests or processing serves legal claims.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.

Exercising Your Rights

Unless otherwise described above, please contact the entity listed in the legal notice (Impressum).

Data Protection Officer

Our external data protection officer is available for any questions at:

datenschutz süd GmbH
Wörthstraße 15
97074 Würzburg

Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-sued.de

Please indicate the responsible entity (Impressum) when contacting the data protection officer.

Cookie Settings

Privacy Policy for Apps of Smart City System Parking Solutions GmbH

Privacy Policy of the CityPilot App

This privacy policy relates to the processing of your personal data under the GDPR when you use our CityPilot App as a free service. Please note that this privacy policy may change if procedures are adjusted. Controller: Smart City System Parking Solutions GmbH (“SCS”) processes your personal data as the controller under Article 4 No. 7 GDPR for operating the CityPilot App and related services. You may contact us as follows: Smart City System Parking Solutions GmbH Schwabacher Straße 510 c 90763 Fürth Description of processing, purposes, and data categories within CityPilot App use: The CityPilot App is a digital parking guidance system for publicly available parking areas equipped with SCS sensors. The app allows users to quickly and freely find available parking spaces. If navigation features are used, they are provided by a third party (Google Inc.), over whose processing SCS has no influence. The following categories of data are processed:

IP address

Below we inform you about the scope of processing. Required data and functions: To ensure operation of the CityPilot App, we process user IP addresses. No other data is stored during app use. Legal basis: IP storage occurs based on our legitimate interest under Art. 6(1)(f) GDPR to ensure secure app operation. Data disclosure: We do not transfer your data to third parties unless required or permitted by law or expressly consented. Storage location: We use processors under Art. 28 GDPR. All data is processed exclusively on servers in the EU unless otherwise noted. Deletion: We only process data as long as necessary. We do not log data, therefore it is not stored.

Your rights under GDPR include access, rectification, deletion, restriction, data portability, and the right to object where processing is based on legitimate interests (Art. 6(1)(f)). We will stop processing unless overriding legitimate grounds exist or processing serves legal claims.

You also have the right to lodge a complaint with a supervisory authority. Contact details of the Data Protection Officer:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-Mail: office@datenschutz-sued.de

Please include the controller name when contacting the DPO.

Privacy Policy of the TicketPilot App

This privacy policy relates to the processing of your personal data within the meaning of the GDPR when you use our TicketPilot App as a free service.

Please note that this privacy policy is subject to change if procedural adjustments are made.

Controller:

Smart City System Parking Solutions GmbH, hereinafter SCS, processes your personal data as the controller within the meaning of Art. 4 No. 7 GDPR for the operation of the TicketPilot App and the associated services. You can reach us as follows:

Smart City System Parking Solutions GmbH
Schwabacher Straße 510 c
90763 Fürth

As part of our services and the installation of one or more parking spaces with the ParkingPilot sensors developed by SCS, customers are given the option to use our TicketPilot App.

The TicketPilot App is used by enforcement personnel of parking operators to manage parking spaces equipped with sensor technology from Smart City System Parking Solutions GmbH more efficiently.

The login credentials for this app are set by an administrator of the parking operator.

Depending on the nature and scope of use of the app, various types of data are collected or processed. These include in particular:

IP address
Login data (username, email address, and account password)
Marking of time-limit violations (anonymous, i.e., the account ID is not logged)
Reporting sensor issues (the account ID is logged)

Below we would like to provide further details about the scope of data processing.

Required Data and Functions

After installing the TicketPilot App on your mobile device, the app requires access to photos, media, and files (Android version). However, the app does not access your photos or media; it only stores parking maps locally on your device to ensure efficient mobile internet usage and reduce data consumption.

To enable the use and secure operation of the TicketPilot App, we process user login data (username and password) during app login. SCS has no influence on the choice of username; this is determined by the administrator of the parking operator.

If a disturbance is reported during a parking check by an enforcement officer, the report is stored together with the account ID and transmitted to SCS.

The app also provides the option to issue tickets. For this purpose, personal data (vehicle license plates) can be entered and printed as a ticket afterwards. License plates are stored only locally on the device. SCS does not store any personal data during this process.

No other data is stored from our customers when using the TicketPilot App.

Legal Basis for Data Processing

Your data is processed within the use of our TicketPilot App on the basis of Art. 6(1)(b) GDPR, as your use is part of a contractual agreement with you and is required to fulfill that contract.

The storage of log files is based on our legitimate interest according to Art. 6(1)(f) GDPR. Storing these logs helps ensure the proper and secure operation of our TicketPilot App.

Disclosure of Your Data

Your data will generally not be transmitted to third parties. Data will only be transferred if it is intended for transfer, you have expressly consented, or we are legally obligated or permitted to do so.

Storage Location of Personal Data

For processing your personal data provided during your use of the TicketPilot App, we are supported by processors. All companies contracted by SCS are bound to GDPR-compliant data processing under Art. 28 GDPR. SCS retains full instruction authority and ensures continuous compliance with processing requirements.

Unless otherwise stated, personal data is processed exclusively on servers within the European Union.

Deletion of Your Data

We process your data only as long as necessary for the purposes for which it was collected. We do not log or store data. Therefore, your data is not retained.

Your Rights as a Data Subject

You have the right under Art. 15 GDPR to obtain information from the controller about your personal data, as well as the right to rectification under Art. 16 GDPR or deletion under Art. 17 GDPR if any of the listed grounds apply—for example, if the data is no longer needed for the intended purpose. You also have the right to restrict processing if the conditions of Art. 18 GDPR apply, and the right to data portability under Art. 20 GDPR.

If we process your personal data on the legal basis of Art. 6(1)(f) GDPR, you also have the right to object at any time for reasons arising from your particular situation. We will then stop processing unless compelling legitimate grounds override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.

You also have the right to lodge a complaint with a supervisory authority if you believe the processing of your data violates data protection regulations. Complaints may be filed in the member state of your residence, workplace, or the location of the alleged violation.

Firebase Cloud Messaging (FCM) is a messaging service provided by Google that enables push notifications. In connection with the use of FCM, the following types of personal data may be processed:

Device information (e.g., device ID, device type, OS version)
Push tokens used to identify devices and deliver notifications
Smart City System Parking Solutions stores push tokens to deliver notifications to the corresponding devices.

If you activate push functionality, your device information will be transmitted to Google servers operating the Firebase Cloud Messaging service after your explicit consent.

If you activate push notifications in the “Settings” menu, your device information will be transmitted to Google servers that operate the built-in Android Push service. In these cases, data may be transferred without adequate safeguards as defined in Art. 46 GDPR to Google data centers in non-EU countries (e.g., the USA). Following the CJEU ruling of July 16, 2020 (Case C-311/18 “Schrems II”), no adequate level of data protection is guaranteed in the USA. There is a risk of access by U.S. security authorities without effective legal remedies or enforceable data subject rights. Data transfer therefore only occurs with your explicit consent under Art. 49(1)(a) GDPR.

Data Protection Officer Contact Information

Our external data protection officer can be contacted using the information below:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-Mail: office@datenschutz-sued.de

Please indicate the responsible entity when contacting the data protection officer.

Privacy Policy of the OfficePilot App

This privacy policy relates to the processing of your personal data under the GDPR when you use our OfficePilot App as a free service.

Please note that this privacy policy may change if procedural adjustments are made.

Controller:

Smart City System Parking Solutions GmbH, hereinafter SCS, processes your personal data as the controller within the meaning of Art. 4 No. 7 GDPR to operate the OfficePilot App and its associated services. You can reach us as follows:

Smart City System Parking Solutions GmbH
Schwabacher Straße 510 c
90763 Fürth

Description of data processing, purposes, and data categories when using the OfficePilot App:

As part of our services, we offer customers the OfficePilot App. The app is a digital parking guidance / parking management system for employees or affiliates of our customers. SCS allows customers to create sub-accounts for employees through a master account. Employees can use the app to find available parking spaces on company premises. Employees may also use reservation functions if enabled.

The login credentials for this app are set by an administrator at the company/customer.

If navigation features are used within the app, they are provided by a third-party provider (Google Inc.) over whom SCS has no influence.

Depending on the nature and scope of the app usage, different types of data are processed, in particular:

IP address
Login data (username, email address, account password)
Reservation data (per reservation: account ID, selected parking space, start and end date of the reservation)

Below we describe the processing in more detail.

Required Data and Functions

To enable the use and secure operation of the OfficePilot App, we process login data (username and password). SCS has no influence on the selected username; it is set by the company administrator.

If reservation functions are used, the reservation data described above is processed. No evaluation of reservation data is currently performed.

No other data is stored during the use of the OfficePilot App.

Legal Basis for Data Processing

Processing of your data while using the OfficePilot App is based on Art. 6(1)(b) GDPR, as the use is part of a contractual agreement and necessary for its fulfillment.

The storage of log files is based on our legitimate interest according to Art. 6(1)(f) GDPR to ensure proper and secure operation of the OfficePilot App.

Disclosure of Your Data

Your data is not transferred to third parties unless intended for such transfer, you have expressly consented, or legal requirements oblige or permit us to do so.

Storage Location of Personal Data

For data processing during the use of the OfficePilot App, we are supported by processors under Art. 28 GDPR. SCS retains exclusive instruction authority and ensures GDPR compliance.

Unless otherwise stated, data is processed exclusively on servers within the EU.

Deletion of Your Data

We process your data only as long as necessary for the purposes for which it was collected. We do not log data; therefore, no data is stored.

Your Rights as a Data Subject

You have the right to access, rectification, deletion, restriction, and data portability under the conditions of the GDPR. When processing is based on legitimate interests (Art. 6(1)(f)), you may object for reasons relating to your particular situation. Processing will cease unless compelling legitimate grounds exist or processing is required for legal claims.

You also have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.

Data Protection Officer Contact Information

Our external data protection officer can be contacted here:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-Mail: office@datenschutz-sued.de

Please name the responsible entity when contacting the data protection officer.

Privacy Policy of the Installation App

Privacy Policy under Art. 13 GDPR

This privacy policy relates to the processing of your personal data under the GDPR when using our Installation App as a service.

Please note that this privacy policy may be subject to updates following procedural changes.

Controller:

Smart City System Parking Solutions GmbH, hereinafter SCS, processes your personal data as the controller within the meaning of Art. 4 No. 7 GDPR for the operation of the Installation App and its associated services. You may contact us as follows:

Smart City System Parking Solutions GmbH
Schwabacher Straße 510 c
90763 Fürth

Description of data processing, purposes, and data types in the Installation App:

As part of our service and the installation of parking spaces with SCS hardware, partners/customers/service providers are given access to the Installation App.

The Installation App helps ensure the correct installation of SCS hardware.

Login credentials are created by an administrator of the customer, partner, or service provider.

Depending on app usage, different types of data may be processed, including:

IP address
Login data (username, email address, password)
Timestamps
User ID
Content (task, free text, images)

Required Data and Functions

After installing the Installation App, the following functions may be used:

Logging of all task-related activities (e.g., when/where a sensor was installed, removed, feedback provided) for maintenance purposes
Transfer of free-text fields within the installation feedback and chat features (used to flag unusual situations)
Uploading photos for maintenance purposes (e.g., installed sensors)

To enable secure operation, login data is processed. SCS has no influence on the username selection.

No further data is stored when using the Installation App.

Legal Basis for Data Processing

Processing is based on Art. 6(1)(b) GDPR, as app usage is part of a contractual agreement required for fulfillment.

Log file storage is based on our legitimate interest (Art. 6(1)(f) GDPR) to ensure secure and proper operation.

Disclosure of Your Data

Your data is not shared with third parties unless intended for sharing, legally required, or expressly consented by you.

Storage Location of Personal Data

Processors under Art. 28 GDPR support SCS with data processing. SCS retains exclusive instruction authority and ensures GDPR compliance.

Data is stored exclusively on EU servers unless otherwise specified.

Deletion of Your Data

Your data is processed only as long as necessary. We do not log data, so no data is stored.

Your Rights as a Data Subject

You have rights to access, rectification, deletion, restriction, data portability, and objection under the GDPR. You may lodge a complaint with a supervisory authority.

Data Protection Officer Contact Information

Our external data protection officer can be contacted here:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-Mail: office@datenschutz-sued.de

Please indicate the responsible entity when contacting the DPO.

Privacy Policy of the ParkAgent

Privacy Policy pursuant to Art. 13 GDPR

This privacy policy relates to the processing of your personal data within the meaning of the GDPR when you use our dashboard as a free service. Please note that this privacy policy may be subject to changes if procedural adjustments are made.

Controller:

Smart City System Parking Solutions GmbH, hereinafter SCS, processes your personal data as the data controller within the meaning of Art. 4 No. 7 GDPR for the operation of the dashboard and its associated services. You can reach us as follows:

Smart City System Parking Solutions GmbH
Schwabacher Straße 510 c
90763 Fürth

Description of data processing, purposes, and categories of data in connection with the use of the dashboard

To provide our service and in connection with equipping one or more parking spaces with the ParkingPilot sensors developed by SCS, customers are given access to the dashboard. This allows the customer to manage and monitor all parking spaces equipped with the system.

Depending on the type and scope of use of the dashboard, various types of data may be collected or processed. These include in particular:

Username (required for login/account creation)
User ID
Email address
Password
Log files

Below we provide more detailed information about the scope of data processing.

Required data and functions

To enable the use and secure operation of the dashboard, we create a username and password for our customers during registration, which the customer can change after the first login. We also store log files of our users for security reasons to ensure a secure operation of the dashboard.

Beyond this, no additional customer data is stored when using the dashboard.

Voluntary information and functions

Our dashboard also offers customers the option of adding additional users to the system. When creating additional users, it is possible that the customer transmits personal data to us in the form of a username and email address, so that SCS can set up another user account. Creating additional users is voluntary and not required for general use of the dashboard.

Additionally, customers may opt to receive email notifications in the event of a parking duration overstay. For this, the customer must provide an email address. The use of this function is voluntary and can be revoked at any time.

Required cookies

In providing our dashboard, we use one cookie necessary for its functionality.

Cookies are small text files stored on your device and can be read by your browser. A distinction is made between session cookies, which are deleted once you close your browser, and persistent cookies, which remain stored beyond a single session.

We do not use this required cookie for analytics, tracking, or advertising purposes.

The cookie contains only information related to certain settings and is not personally identifiable. It is necessary for user navigation, security, and technical operation of the dashboard.

Legal basis for data processing

Your data is processed as part of the use of our dashboard on the basis of Art. 6(1)(b) GDPR, as your use is part of a contractual agreement and is required for its fulfilment.

The storage of log files is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. This allows us to ensure the proper and secure operation of the dashboard.

We also set required cookies on the basis of legitimate interest, as they are necessary for the correct operation of the dashboard.

If, when using the dashboard, you provide voluntary information or use optional functions, the resulting data processing is based on your revocable consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. Please note that processing operations that occurred before the withdrawal remain unaffected.

Disclosure of your data

Your data is generally not transferred to third parties. A transfer only occurs if the data is intended to be transferred, if you have expressly consented, or if we are legally required or permitted to do so.

Storage location of personal data

When processing personal data that you provide when using our dashboard, we are supported by data processors. All companies contracted by SCS are bound by Art. 28 GDPR to process data only according to our instructions. As the controller, SCS retains full authority and ensures compliance at all times.

Unless otherwise stated below, personal data is processed exclusively on servers within the European Union.

Deletion of your data

We process your data only as long as necessary for the purposes for which it was collected. We do not record or store anything beyond this. Therefore, your data is not retained.

Your rights as a data subject

You have the right under Art. 15 GDPR to obtain confirmation as to whether personal data concerning you is being processed, as well as access to this data and the information listed in Art. 15 GDPR. You also have the right to rectification under Art. 16 GDPR or deletion under Art. 17 GDPR if the conditions listed there are met—for example, if the data is no longer necessary for the purposes pursued.

You also have the right to restrict processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.

If we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time for reasons arising from your particular situation. We will then stop processing unless compelling legitimate grounds for the processing override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims.

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection law. The complaint may be lodged with the supervisory authority of your place of residence, workplace, or the place of the alleged infringement.

Contact details of the Data Protection Officer

Our external Data Protection Officer is available to assist you with any data protection queries at the following contact details:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-Mail: office@datenschutz-sued.de

If you contact our Data Protection Officer, please also specify the controller.

End User Software Agreement for Smart City System Parking Solutions Apps

IMPORTANT: PLEASE READ THIS DOCUMENT CAREFULLY BEFORE INSTALLING, DOWNLOADING, OR USING THE SOFTWARE.
This software agreement (“Agreement”) applies between you (a natural or legal person), the end user, and Smart City System Parking Solutions GmbH (“SCS”). The Agreement grants you the right to use the software as specified in Clause 1 below. The software may have been downloaded from SCS websites or servers, or other sources. This Agreement governs the rights of the end user and does not constitute a contract for the sale of the software. SCS retains ownership rights to the software copy and any other copies you may make under this Agreement.

Please read this Agreement carefully before installing, downloading, or using the software. By clicking “I accept the terms” during installation, download, or use of the software, you agree to this Agreement. If you do not agree, you must immediately click “Decline” and abort installation or download, or destroy/return the software and any accompanying documentation.
BY USING THE SOFTWARE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS AGREEMENT AND AGREE TO BE BOUND BY ITS TERMS.

1. SOFTWARE.

For the purposes of this Agreement, the term “Software” refers collectively to: (a) the software product indicated above; (b) all content in object code form obtained from SCS servers; (c) digital images, photo collections, clip art, or other artistic works (“Library Files”); (d) related written materials and other documentation (“Documentation”); and (e) extensions, updates, modified versions, supplements, and copies of the Software provided by SCS under this Agreement (“Updates”).

2. END USER RIGHTS AND USE.

SCS grants you a non-exclusive, non-transferable right to install the Software on the storage media of a mobile device and to use it on such a device.

3. LIMITATIONS OF END USER RIGHTS.

You may not copy, distribute, or modify the Software except as expressly permitted by this Agreement:
(a) You may exercise the right to use and modify the Software only to the extent expressly allowed under this Agreement.
(b) You may not resell, sublicense, rent, lease, or loan the Software.
(c) You may not reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Software (except where such restrictions are invalid under applicable law), or use the Software as a basis for derivative works.
(d) You agree to use the Software only in compliance with applicable laws, including copyright and intellectual property laws.

4. COPYRIGHT.

The Software and all associated rights, including ownership rights, belong to SCS and/or its licensors or subsidiaries and are protected by international treaties and applicable national laws. The structure, organization, and code of the Software are valuable trade secrets and confidential information of SCS and/or its licensors and subsidiaries. Except as stated in Clause 3, you may not copy the Software. Any permitted copies must contain all copyright notices included in the original Software.

5. TERM OF AGREEMENT.

This Agreement becomes effective on the day the Software is first installed. You may terminate it at any time by deleting and destroying all copies of the Software and associated materials, or by returning them to SCS. Your rights automatically terminate without notice if you fail to comply with the terms of this Agreement. In such cases, you must immediately destroy or return all copies of the Software and materials.

6. WARRANTY DISCLAIMER.

You acknowledge that the Software is provided “as is” without any express or implied warranties. To the extent permitted by law, SCS and its licensors disclaim all warranties, including merchantability, fitness for a particular purpose, and non-infringement. There is no guarantee that the Software will meet your requirements or run uninterrupted or error-free. You assume all risks arising from the use of the Software.

7. NO ADDITIONAL OBLIGATIONS.

SCS has no obligations arising out of this Agreement beyond those expressly stated.

8. LIMITATION OF LIABILITY.

To the extent permitted by law, SCS and its employees, licensors, or subsidiaries are not liable for lost profits, loss of revenue, data loss, business interruption, or any direct, indirect, incidental, punitive, or consequential damages arising from the use or inability to use the Software. This applies even if SCS was aware of the possibility of such damages.
Nothing in this Agreement limits liability for death or personal injury caused by negligence.

9. TECHNICAL SUPPORT.

SCS is not obligated to provide technical support unless agreed upon in a separate written agreement.

10. EXPORT CONTROL.

The Software contains cryptographic technology subject to U.S. export regulations and may be subject to export/import restrictions in other countries. You agree to comply with all applicable regulations. You confirm you are not a government end-user as defined in U.S. EAR regulations.

11. NOTICES.

All notices and returns of Software or Documentation must be sent to the following address:

Smart City System Parking Solutions GmbH
Schwabacher Str. 510c
90763 Fürth
Germany

12. APPLICABLE LAW & GENERAL PROVISIONS.

This Agreement is governed by German law.

Terms of Use for Smart City System Parking Solutions – Apps

1. Acceptance

These terms of use, together with the Privacy Policy and the End User Software Agreement (EUSA), govern your use of the Smart City System App and associated services (“Service”). By using the Service, you enter into a binding agreement with SCS. Additional terms may apply to specific Service components.
You may not use the Service if you do not accept the terms.

2. Eligibility

You must be at least eighteen (18) years old to use the Service.

3. Use of the Service

You agree to:
Comply with applicable laws, these terms, and standards of good conduct.
Not use the Service for illegal, offensive, fraudulent, abusive, or defamatory purposes.
Respect the privacy of others.
Not remove or alter copyright notices or trademarks contained in the Service.
Not use the Service to mass-download content, distribute malware, or otherwise harm the Service or other users.
Not reverse engineer, disassemble, or attempt to derive the source code of the Service.

4. Licenses

You are granted a non-exclusive, non-transferable license to access and use the Service according to these terms. No additional intellectual property rights are granted.
Use of the Service is also subject to the EUSA.

5. Important Information

Information provided by the Service may be inaccurate or incomplete. Availability and accuracy depend on third-party data, wireless networks, and satellite systems. These may not function in all areas or at all times. Do not rely solely on the Service for critical communications or emergencies.

6. Third-Party Content

SCS and its licensors disclaim all liability for third-party content accessible through the Service.

7. Availability

The Service may not be available in all countries or languages. It may depend on network availability. SCS reserves the right to modify the Service at any time.

8. Personal Data

8.1 Processing of personal data is governed by the Privacy Policy.
8.2 Certain technical data may be processed, such as network codes, language, time zone, device ID, and confirmation of your acceptance of terms.
8.3 Some Service features may collect anonymized usage information to improve the Service.
8.6 We may use collected information for purposes described in the Privacy Policy.
8.7 GPS and A-GPS may be used for certain features.

9. Limitation of Liability

The Service is provided “as is” and “as available.” SCS does not guarantee uninterrupted or error-free operation. You use the Service at your own risk.

10. Indemnification

You agree to indemnify SCS against claims arising from misuse of the Service or violations of these terms.

11. Miscellaneous

11.1 Governing law: German law applies.
11.2 Invalid provisions shall be replaced with valid ones that reflect the intended purpose.
11.3 SCS may update the terms at any time.
11.4 Links to third-party sites are provided for convenience; SCS is not responsible for their content.

12. Intellectual Property

The Service and associated software are protected by copyright. SCS retains all rights.

Initial Information pursuant to Art. 13 and 14 GDPR

The following information is intended for business partners, prospects, or contact persons of business partners to explain how we collect, use, and disclose personal data.

I. Controller

The controller for your personal data is:

Smart City System GmbH, Schwabacher Straße 510c, 90763 Fürth
datenschutz@smart-city-system.com

II. Legal Basis and Purposes of Processing pursuant to Art. 13 GDPR

Your data may be processed to carry out pre-contractual measures or fulfil contractual obligations (Art. 6(1)(b) GDPR), such as processing orders, deliveries, or responding to inquiries.

Smart City System GmbH may also process your data to comply with legal obligations (Art. 6(1)(c) GDPR), such as tax, commercial, or export regulations.

Processing may also occur based on legitimate interests (Art. 6(1)(f) GDPR), such as managing business relationships, internal administration, IT security, compliance investigations, facility security, or establishing legal claims.

You must provide the personal data required for initiating and maintaining a business relationship. Otherwise, we may be unable to contact you or enter into a business relationship.

III. Legal Basis and Purposes pursuant to Art. 14 GDPR

We may use publicly available contact data to contact your company by phone, based on presumed consent, within legally permitted limits. This serves our legitimate interest in public relations. You may exercise your rights and object at any time.

IV. Recipients of Personal Data

Your data is only shared with third parties if legally required or with your consent. Processors are carefully selected and contractually bound under Art. 28 GDPR.

V. Data Transfers to Third Countries

If we transfer data outside the EEA, this occurs only where adequate protection is confirmed by the EU Commission or where standard contractual clauses or explicit consent are in place.

VI. Storage Period

Personal data is stored only as long as necessary for the above-mentioned purposes or statutory retention requirements.

VII. Your Rights

You have rights of access, rectification, deletion, restriction, portability, and objection. Objections may be made when data is processed on the basis of public interest or legitimate interest.

Your rights can be exercised here:

Smart City System GmbH
Schwabacher Straße 510c, 90763 Fürth

You may also lodge a complaint with a supervisory authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Email: poststelle@lda.bayern.de

VIII. Contact Details of the Data Protection Officer

datenschutz süd GmbH
Wörthstr. 15
97082 Würzburg
office@datenschutz-sued.de
Tel. +49 (0) 931 304 976 0

Applications

If you decide to send us an application, we would like to point out the following: You yourself determine the scope of the data that you wish to transmit to us as part of your application. We process your personal data in accordance with the applicable data protection regulations on the basis of Art. 88 GDPR in conjunction with Section 26 (1) sentence 1 BDSG. We process the data that you disclose to us as part of your application exclusively for the purpose of applicant selection. The data will not be processed for any other purposes. Depending on how you sent us your application, it will be forwarded to our HR department either electronically or as a paper file and processed there as quickly as possible. As a rule, applications are forwarded to the management. Beyond this, your data will not be passed on. Your information will be treated confidentially within our company. In the event of an unsuccessful application, your documents will be deleted 3 months after the end of the application process.

If we wish to consider your application for other or future job postings, we will obtain your corresponding consent. In this case, we will process your data on the basis of Art. 6 (1) sentence 1 lit. a GDPR.

Your rights as a data subject

Pursuant to Art. 15 (1) GDPR, you have the right to obtain, upon request and free of charge, information about the personal data stored about you at Smart City System GmbH. In addition, you have the right, provided the legal requirements are met, to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR) of your personal data. If data processing is based on Art. 6 (1) e) or f) GDPR, you have the right to object pursuant to Art. 21 GDPR. If you object to data processing, this processing will no longer take place in the future, unless the controller can demonstrate compelling legitimate grounds for the further processing which override the interests of the data subject in the objection. If you have provided the data yourself, you have the right to data portability pursuant to Art. 20 GDPR. If data processing is based on consent pursuant to Art. 6 (1) a) or Art. 9 (2) a) GDPR, you may withdraw your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out up to that point. In the aforementioned cases, in the event of questions or complaints, please contact us in writing or by e-mail at: datenschutz@smart-city-system.com or Smart City System GmbH, Schwabacher Str. 510c, 90763 Fürth. You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible is that of the federal state in which you live or in which the controller has its registered office.

Contact details of the Data Protection Officer:

Our company Data Protection Officer will be happy to answer any questions or suggestions you may have on the subject of data protection:

datenschutz süd GmbH

Wörthstraße 15

97082 Würzburg

Web: www.datenschutz-nord-gruppe.de

E-mail: office@datenschutz-sued.de