Last changed 08.05.2024
We appreciate your use of the NV Charts App, and are committed to respecting your privacy. When using the NV Charts App some personal data is collected. We are interested in keeping this process as transparent as possible to you and like to explain the process to you. This english version is a translation for your convinience but only the german version of this text is applicable.
The NV Charts App is a GPS navigation app that uses the device's location data for navigation and users account data for features within the app. Personal data is processed and stored according to this privacy policy.
The NV Charts App collects location data to enable the following features:
These features remain active even when the app is closed or not in use.
When registering, data is stored to create a user account. Account data is necessary for us to associate purchased charts, user settings, and user information. An email address and an encrypted password are required to be stored. Your personal data provided during registration is necessary to use the app.
By registering with the NV Charts App, the user agrees that NV and any potential partners may store, process, and use all data transmitted during registration (hereinafter referred to as "account data"). Location data is stored only as long as necessary to provide the features and is then permanently deleted.
NV and its partners will not share this data with unauthorized third parties or use it for advertising purposes. However, NV reserves the right to contact you about matters directly related to the use of the app, such as important chart or software updates. Our legitimate interest is to improve the app.
The NV Charts App and the accompanying services (hereinafter collectively referred to as „Service“) are offered by NV Chart Group GmbH, Carlshöhe 75, 24340 Eckernförde, Germany (hereinafter „NV“).
By registering for the service the user agrees that NV and its contractors store, process and use all data disclosed in connection with the registration (hereinafter “Account Data”). NV and its contractors will not divulge these data to any third parties and will not use these data for the purposes of advertising. Though NV might contact you, in direct relation to our use of the service, in case of important chart data or software updates. If the user cancels his or her account or if that account is terminated by NV, the Account Data will be stored by NV and/or its contractors for the safekeeping period mandated by law.
Collecting Account-Data is necessary to enable us to assign purchased charts and other information to a user.
The Service may enable the user to share personal data (position, route, track, markers etc.) via social networks (eg Facebook). NV is not responsible for the data protection policies of these networks and excludes all liability for any violations of applicable data protection laws by these networks and any loss or damage incurred or suffered as a result of such violations.
The service may allow the user to to record location-based data in the background. This feature is active when a track is recorded and background recording is enabled in the GPS settings. If you do not If you do not wish to use this feature, you can disable this feature.
The Service may enable the user to share his or her position with other users so that his or her position can be displayed on other users map display. When activated, the position will be displayed, together with the deviceID (eg: Ann's iPad, Android 8963, Bobs PC) and the boat name saved in the service on all users devices that have the feature enabled as well. If this feature is enabled NV has to save this data for transmitting purposes and no longer than one hour. Data is only stored this way, when this feature is used.
The Service may enable the user to save personal data on our server permanently with the “nv-cloud function”. Data is only stored this way, when this feature is used. This enables the user to synchronize personal data (routes,tracks, markers) between different devices. Data used with this function is saved for the same period as the Account-Data and is deleted whenever the Account-Data is deleted. Data saved with the nv-cloud function is not visable or accessible by other users.
NV reserves the right to store, process, analyse and use the data shared by the users in anonymised or pseudonymised form.
There is no specific retention period. You can request the deletion of your data at any time.
If your personal data is being processed, you are a data subject under the GDPR and have the following rights with respect to the NV as data controller:
You can request confirmation from the controller as to whether personal data concerning you is being processed.
If such processing exists, you can request information from the controller on:
(1) The purposes for which the personal data is processed;
(2) The categories of personal data that are processed;
(3) The recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
(4) The planned retention period of the personal data concerning you or, if specific information is not possible, criteria for determining the retention period;
(5) The existence of a right to rectify or erase the personal data concerning you, a right to restrict processing by the controller, or a right to object to this processing;
(6) The existence of a right to file a complaint with a supervisory authority;
(7) Any available information on the source of the data, if the personal data is not collected from the data subject;
(8) The existence of automated decision-making, including profiling according to Art. 22 para. 1 and 4 GDPR, and – at least in these cases – meaningful information on the logic involved and the significance and intended consequences of such processing for the data subject.
You have the right to request information as to whether your personal data is transferred to a third country or an international organization. In this context, you can request to be informed of the appropriate safeguards under Art. 46 GDPR in relation to the transfer.
You have the right to obtain from the controller the rectification and/or completion of your personal data if it is incorrect or incomplete. The controller must make the correction without undue delay.
Under the following conditions, you can request that the processing of your personal data be restricted: (1) If you dispute the accuracy of your personal data for a period that allows the controller to verify its accuracy; (2) If the processing is unlawful and you oppose the deletion of personal data and instead request the restriction of its use; (3) If the controller no longer needs the personal data for processing but requires it to establish, exercise, or defend legal claims; or (4) If you object to the processing according to Art. 21 para. 1 GDPR and it is not yet clear whether the controller's legitimate grounds outweigh your own.
If the processing of your personal data has been restricted, these data may – apart from storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for important public interest reasons of the Union or a member state. If the processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.
a) Obligation to Erase You can request that the controller immediately delete the personal data concerning you, and the controller is obliged to erase this data immediately if one of the following reasons applies: (1) The personal data concerning you is no longer required for the purposes for which it was collected or otherwise processed; (2) You withdraw your consent on which the processing is based under Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing; (3) You object to the processing under Art. 21 para. 1 GDPR, and there are no overriding legitimate reasons for the processing, or you object to the processing under Art. 21 para. 2 GDPR; (4) Your personal data was processed unlawfully; (5) The deletion of your personal data is required to fulfill a legal obligation under Union or member state law to which the controller is subject; (6) Your personal data was collected in connection with the information society services offered under Art. 8 para. 1 GDPR. b) Notification to Third Parties If the controller has made your personal data public and is obliged to erase it under Art. 17 para. 1 GDPR, they will take appropriate measures, including technical ones, considering available technology and implementation costs, to inform data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to this personal data or copies or replications of it. c) Exceptions The right to erasure does not apply where processing is necessary: (1) To exercise the right to freedom of expression and information; (2) To fulfill a legal obligation requiring processing under Union or member state law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) For reasons of public interest in the area of public health under Art. 9 para. 2 lit. h and i, and Art. 9 para. 3 GDPR; (4) For archival purposes in the public interest, scientific or historical research purposes, or statistical purposes under Art. 89 para. 1 GDPR, to the extent that the right to erasure will likely render impossible or seriously impair the achievement of the processing objectives; or (5) To establish, exercise, or defend legal claims.
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, they are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller.
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided, as long as: (1) The processing is based on consent under Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract under Art. 6 para. 1 lit. b GDPR; and (2) The processing is carried out by automated means. In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This should not impair the freedoms and rights of others. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on these provisions. The controller will no longer process the personal data concerning you unless they demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims. If your personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing, including profiling to the extent that it is related to direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. You can exercise your right to object using automated procedures based on technical specifications related to the use of information society services, regardless of Directive 2002/58/EC.
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, that has a legal effect on you or significantly affects you in a similar way. This does not apply if the decision: (1) Is necessary for the conclusion or performance of a contract between you and the controller; (2) Is authorized by Union or member state law to which the controller is subject and that law includes suitable measures to safeguard your rights, freedoms, and legitimate interests; or (3) Is based on your explicit consent. However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR unless Art. 9 para. 2 lit. a or g applies, and suitable measures are in place to protect your rights and interests.
Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, particularly in the member state of your place of residence, employment, or the location of the alleged violation, if you believe the processing of your personal data violates the GDPR. The supervisory authority that received the complaint will inform the complainant of the progress and outcome of the complaint, including the possibility of judicial remedy under Art. 78 GDPR.
From time to time our privacy policy may change. We will not reduce your rights under this Privacy Policy without your explicit consent. We will keep an updated version available in the app. If changes are significant, we can provide a more prominent notice.
If you have any questions regarding privacy while using the Application, or have questions about our practices or wish to request deleting of personal data, please contact us.
Contact:
NV Chart Group GmbH
voluntary supervisor data protection: Jeppe Scheidt
Carlshöhe 75
24340 Eckernförde - Germany
email: info@nvcharts.com