The protection of your personal data is important to UBIMET GmbH, Donau-City-Strasse 11, 1220 Vienna (hereinafter UBIMET). Therefore, we conduct our activities in accordance with applicable legislation on protection of personal data and data security. In this data protection policy, you will learn which personal data we process in what way and for what purpose, when you visit our website and when you use our services of SEVERE WEATHER CENTRE. In addition, we inform you about your rights as a data subject.

UBIMET continuously provides meteorological information (hereinafter "Information Service") via the websites and the app. The Information Service contains in particular information on the current weather (at home and abroad) and the expected development of the weather, in particular information on rain, snow, thunderstorms, wind and freezing rain, if the published threshold values in the region selected by the user are exceeded (hereinafter "Severe Weather Warnings").

There are different options to use the Information Service provided by UBIMET:

• Use free of charge with advertising
• Use without advertising and tracking-free – Contentpass
• Use with registration for Severe Weather Warnings by e-mail or SMS

UBIMET reserves the right to restrict, discontinue or change any or all of the information and services provided as part of the Information Service, or to make the subscription dependent on a fee.

Paid content and Information Services are clearly identified as such. These are provided subject to registration and completion of a subscription through the Information Service.

Personal data is treated and collected with due care and in accordance with the provisions of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG).

1. CONTROLLER AND PROCESSOR

Controller within the meaning of the data protection regulations in the context of our products and services:

UBIMET GmbH (Austria)
Donau-City-Straße 11
1220 Vienna

2. DATA SECURITY

UBIMET has taken appropriate technical and organisational measures to protect your data, which protect your data inter alia against loss, manipulation or unauthorized access. The measures taken are subject to regular review and are constantly adapted to the state of the art. Should there be a violation of the protection of your personal data that is likely to result in a high risk for your rights and freedoms, you will be notified immediately and if possible within 72 hours.

Please note that you are responsible for the safekeeping and confidentiality of user data and passwords that have been provided or communicated to you.

3. USE BY MINORS

It should be noted that any processing of personal data may only be for persons who have reached the age of 14 years. The use of systems and tools by users under this age limit, and the resulting processing of data, is prohibited without the approval of a parent/guardian. Should such data processing nevertheless occur, we will, as soon as we have gained knowledge of it, stop processing this data.

4. DATA PROCESSING, PURPOSE AND LEGAL BASIS

General information on the collection and processing of personal data

Personal data - according to the GDPR, all information relating to identified or identifiable natural persons - will only be processed by us if you actively provide it to us, for example when you register with us, order something or get in contact with us.

We collect, use and administer your personal data pursuant to GDPR Art. 6 only if

• you have given us your approval pursuant to GDPR Art. 6 para. 1 (a) for data processing, for one or more specific purposes,
• we need your data for the performance of a contract or for the implementation of pre-contractual measures pursuant to GDPR Art. 6 para. 1 (b) (e.g. if you register or subscribe to UBIMET products or services),
• the processing is required to fulfil a legal obligation pursuant to GDPR Art. 6 para. 1 (c), or
• we have a legitimate interest pursuant to Art. 6 para. 1 (f), for example when answering inquiries, processing applications/registrations or to inform about UBIMET products and services.

We use the personal data provided by you solely to fulfil the respective processing purpose (e.g. registration/contact form, sending newsletters, execution of contracts or pre-contractual measures), answering inquiries, sending information material to interested parties and existing customers.

4.2 Data that is collected automatically

When you visit our website, we are able to automatically collect the following information: your IP address; login data; browser plug-in types and versions; operating system and platform; information about your visit, including the URL clickstream (sequence of page views) on, through and from our website; products that you look at or have searched for; download failure; duration of the visit on certain pages and interactions between the pages. Automatic data collection is done through the use of various technologies, including "cookies". For more information about cookies used on our website, please refer to the cookie consent according to the "IAB Transparency and Consent Framework" under Cookie Settings or our COOKIE POLICY

We use the data that is collected automatically by us pursuant to Art. 6 para. 1 lit. f GDPR (a) for evaluation and optimisation, including troubleshooting of our website; (b) to ensure the protection and security of our website; (c) to evaluate and optimise the effectiveness of advertising and marketing measures on the website.

4.3 Data provided by you

Personal data will only be processed by us in accordance with the applicable data protection regulations. If you correspond with us or fill in a form on our website, download an app or register, you acknowledge that the data you provided will be processed for the purposes described below.

4.3.1 Data processing via app download

When downloading the app, you have to authenticate yourself in the app store (e.g. Google Play Store, Apple App Store) with the necessary information. UBIMET has no influence on the data collected in the course of the download, in particular the e-mail address and user number of your store account or the device code of your device, and is not responsible for this. UBIMET only processes the device information of the data provided, insofar as this is necessary to download the app to^ your device.

4.3.2 Use free of charge with advertising

As a non-registered user, you have the opportunity to use the Information Service free of charge with advertising. In the context of free of charge use, we finance our offer with your consent through advertising that we tailor to your presumed interests (so-called target group-related advertising). For this purpose, we provide data to selected third parties and store or use cookies, device identifiers and similar tracking technologies on your end devices. For detailed information on the services and cookies used for this purpose, please refer to the Cookie Consent in accordance with the "IAB Transparency and Consent Framework" under Cookie Settings or our COOKIE POLICY.

This includes the processing of the following data:

• Usage behaviour and content data (behavioural and usability data from mobile and web applications, interactions, device data and user content are collected).
• Location and movement data

4.3.3 Use without advertising and tracking-free – Contentpass

As a non-registered user, you also have the option of visiting and using the Information Service free of advertising and tracking.

For this purpose, we use the paid contentpass, a service of Content Pass GmbH, Wolfswerder 58, 14532 Kleinmachnow, Germany.

contentpass enables you to visit various participating digital offers such as websites and apps without advertising or tracking. You pay contentpass for this service. We recognise you as a contentpass user when you visit our websites and then offer you our service entirely without advertising and tracking.

In order to be able to offer this service on our websites, we transmit your IP address to contentpass at the beginning of your registration. This transmission is necessary for technical reasons in order to direct you to the registration page operated by cotentpass. For the registration and the associated data processing, contentpass is the controller within the meaning of the DSGVO.

The legal basis for the data transfer of your IP address and the cookie data is Art. 6 para. 1 lit. f DSGVO, as we have a legitimate interest in making our websites available without advertising and tracking.

For more information on how your data is processed in the context of using contentpass, please see the current contentpass privacy policy at: https://my.contentpass.net/privacy.

4.3.4 Use with registration for Severe Weather Warnings by e-mail or SMS

The personal data (first name, last name, e-mail and mobile phone number) provided by you as part of the registration (creation of a user account) at UBIMET will be processed by UBIMET for the purpose of providing and carrying out the Severe Weather Warning Information Service by e-mail or SMS in accordance with Art. 6 para. 1 lit. b GDPR.

You can also register with the login data of social networks (e.g. Facebook, Google+). When you register, you will be asked whether you agree that the provider of the social network may disclose certain information to UBIMET, e.g. your name, email address, profile photo, posts, comments and other information related to your social network.

This information is provided to UBIMET by providers of the social network due to the functioning of the login configuration for the social network.

UBIMET links the e-mail address provided by the provider of the social network with your user account, so that you can also log in to your user account with your e-mail address in the future if you no longer want to log in with the login data of the social network. The processing of this information serves the legitimate interest of UBIMET to offer you an alternative registration method and to protect your user account.

4.3.5 Handling of payment information regarding registration for Severe Weather Warnings by e-mail or SMS

For the processing of payments for chargeable offers (subscriptions) we use the payment service provider heidelpay GmbH, Vangerowstrasse 18, D – 69115 Heidelberg. The administration of your credit card information and the processing of payments are carried out exclusively via systems of the payment service provider. If you enter your credit card information, this is done directly in an input field of the payment service provider, which automatically stores this information and uses it for your payments. We do not collect and store any credit card information from you. Therefore, please inform yourself at the payment service provider about the type, scope and purpose of the collection and use of your credit card information.

The payment service provider processes your customer and contact information on our behalf exclusively for the purpose of receivable management (including compliance checks, where legally required) and to carry out credit checks. The legal basis for processing your data for the above purposes is the fulfilment of a legal obligation that we are subject to respectively our legitimate interest in compliance with legal requirements.

4.3.6 Data processing not subject to approval

• Contact by you

If you contact us via our contact forms on our website, by e-mail, telephone or in writing, the personal data and information provided to us when you contact us will only be used to process your request.

• Registration or ordering or subscription of products and services

In accordance with GDPR Art. 6 para. 1 (b), we use information that you provide in regard to a registration or order or subscription to products and services for the execution and processing of the contractual services.

• Direct marketing activities

Information about our products and services is provided pursuant to GDPR Art. 6 (1), if after a balancing of interests, we can assume that you could reasonably expect that your personal data will be processed in that manner and the respective direct marketing activity is deemed to be in the legitimate interest of UBIMET Activity. Otherwise, we process your personal data for the purpose of direct marketing activities only with your approval.

4.3.7. Deletion of your user account

You can request the deletion of your user account via the contact form https://uwz.at/de/sc or https://uwr.de/de/sc on the websites of the Severe Weather Centre:

• Enter your name and e-mail address
• Select the option ‘Delete account’ under subject
• You are also welcome to send us a personal message about the reason for deleting your account
• A UBIMET employee will then contact you shortly

Your personal data collected in the course of using the account will then be deleted immediately, unless it is necessary to retain it for the following purposes:

• Fulfilment of statutory retention periods, which may result from commercial or tax law obligations; these periods are up to ten years
• Assertion, exercise or defense of legal claims

Please note: Deleting your account will automatically deactivate and delete your subscription to severe weather warnings by email or text message.

5. DATA SHARING

A transfer of your data to third parties does not take place, unless we are legally obliged to do so, or the data transfer is necessary to fulfil our contractual obligations or takes place with your approval.

Your personal data will also be processed on our behalf by our service providers (processors). In particular, these processors are group companies as well as providers of marketing tools, software solutions, IT services, mail service and other similar services. All our processors process your data only on our behalf and on the basis of our instructions for the purposes outlined above. In addition, through contractual obligations, we ensure that our processors comply with the privacy laws in the same way as we do.

6. STORAGE PERIOD

Your personal data will be processed and stored by UBIMET as long as is necessary for the use of the website, for the fulfilment of the contractual obligations or within the scope of statutory warranty and retention periods.

7. LOCATION DATA

When using the app, location data is transmitted to UBIMET for the better usability of the application, in particular for an automatic weather display for the current location of the user. If you make a weather data request, UBIMET determines your current location via your end device and/or GPS technology. In addition, this data is used to process your respective weather data request more efficiently. These localization functions (location services) are active by default in the respective settings of the end devices after the apps have been installed. You can activate or deactivate this at any time within the scope of your respective end device and, depending on the device used, you will be asked before or after installing the app. Location data can only be collected by UBIMET when the location services are activated. Your location data will be anonymized after your weather request has ended and will be statistically evaluated to improve UBIMET's service and for marketing purposes.

8. LINKS TO OTHER WEBSITES

UBIMET websites contain links to other websites. UBIMET is not responsible for the privacy policy and/or the content of these other websites.

9. DATA SUBJECT RIGHTS

You have the following rights in connection with the personal data stored about you:

Right to information: You can request information about whether your personal information is being processed and, if so, which and to what extent.

Right to correction: If your personal data is processed incompletely or incorrectly, you can request its correction and/or its completion at any time.

Right to erasure: You may request the deletion of your personal data, provided that it

• has been processed unlawfully,
• the processing disproportionately interferes with your legitimate interests,
• the personal data is no longer necessary for the purposes for which they were collected,
• you have revoked your approval and there is no other legal basis for the processing or
• the erasure is required to fulfil a legal obligation.

Please note that there may be reasons opposing an immediate deletion, e.g. in the case of legally regulated storage requirements.

Right to restriction of processing: You may request the restriction of the processing of your data if

• you deny the accuracy of the data for a period of time that allows the accuracy of the data to be verified;
• the processing of the data is unlawful, but you reject an erasure and instead require a restriction of data usage;
• the data is no longer needed for the intended purpose, but you still need this data for the assertion, exercise or defence of legal claims, or
• you have lodged an objection to the processing of the data.

From the date of the restriction request, this data is processed only with individual approval or for the assertion and enforcement of legal claims.

Right to data portability: You may request that your provided data be made available in a structured, common and machine-readable format, if

• this information is processed based on your revocable approval or to fulfil a contract between you and UBIMET, and
• this processing is done using automated methods.

Right of withdrawal: All declarations of approval can be withdrawn independently of one another at any time.

If you are registered as a user of our services, we also offer you the option of viewing the data yourself via an account and, if necessary, of deleting or changing it.

Right to complain: If you believe that UBIMET violated Austrian or European data protection laws when processing your data, we ask you to contact UBIMET to clarify any questions.

Of course, you also have the right to contact the relevant data protection authority or supervisory authority within the EU.

Right to objection: For reasons arising from your particular situation, you may at any time object to the processing of personal data relating to you that is necessary to protect the legitimate interests of UBIMET or a third party. Your data will not be processed after the objection unless there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

10. ESTABLISHMENT OF THE RIGHTS

If you wish to claim any of these rights, you can contact UBIMET at the following e-mail address info@ubimet.com or contact our Data Protection Officer:

Name	Kai Viehmeier
	c/o Kai Viehmeier Consulting GmbH
Straße	An der Straßenbahn 12
Postcode	D-31157
Town	Sarstedt
Telephone/Fax	+49 5066 - 69 56 080
E-Mail	dsgvo@kai-viehmeier-consulting.de
Internet address	http://www.kai-viehmeier-consulting.de

In the course of asserting your rights, it is possible that additional information may be required to confirm your identity (for example, the presentation of an official photo ID). This protects your rights and privacy so that no third party obtains information about your data.

UBIMET will endeavor to respond to all reasonable requests free of charge and as soon as possible in accordance with applicable law.

11. CHANGES TO THE DATA PROTECTION POLICY

The Data Protection Policy was last updated on 05/11/2023. We may occasionally update this privacy statement when we add new products and apps or streamline our current offer, or when technologies and laws change. Changes will take effect with the release of the revised Data Protection Policy.

In the event of significant changes, we will inform you and, if required by applicable law, we will seek your approval.