Privacy

Privacy Policy

Last updated: June 2026

This privacy policy is a translation of the German original. The German version is legally authoritative.

Controller

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Andreas Heidrich

Wacholderweg 16

14532 Kleinmachnow

Germany

wildtier-support@hablamax.de

Principles

2. General Information

The protection of your personal data is very important to me. This privacy policy informs you about which personal data is processed when using the "Wildtier-Sichtungen" app and for what purposes.

The app is used to report and display wildlife sightings. Use of the app is generally possible without registration.

Data we collect

3. Processed Data and Purposes

3.1 Use of the App (Technical Data)

When using the app, technically necessary data is processed to provide the app and ensure stable operation, in particular:

  • Date and time of access
  • Technical device information (e.g. operating system, app version)
  • Anonymized device identifiers

No profiling or tracking of user behavior takes place.

3.2 Location Data (GPS)

The app may use your location to geographically assign wildlife sightings and to notify you of sightings near you.

  • Location access is only carried out with your explicit consent
  • Location permission can be revoked at any time in the device settings
  • Location data is used to display and assign sightings and to determine notifications near you

3.2.1 Background Location Tracking (optional)

You can additionally enable background location tracking. When switched on, the app updates your location position even when it is not open, in order to send you notifications about sightings in your vicinity.

  • This feature is disabled by default and is only activated after your explicit, separate consent via a toggle in the settings
  • This requires the "Always Allow" (background location) permission
  • On Android devices, a persistent notification is shown while background tracking is active; this is required by the operating system
  • Background tracking is tied to the app's GPS switch and only runs while GPS is enabled in the app; if you use a manual location, your actual GPS position is not transmitted to our servers
  • You can disable background tracking at any time via the toggle in the app or in the device settings

Location data determined in the background is used exclusively to update your notification position and is not combined into movement or behavioral profiles.

3.3 Reporting Wildlife Sightings

When you report a sighting, the following data is processed:

  • Type of animal
  • Location of the sighting (coordinates)
  • Time of the sighting
  • Optional additional information

The reported data is displayed publicly within the app, but without any reference to your person.

3.4 Push Notifications

The app may send push notifications, for example about new sightings.

  • Push notifications are optional
  • You can disable them at any time in the device settings
  • A technically required push token is processed for this purpose

For push notifications, the push services of the respective platform are used (Apple Push Notification Service / Firebase Cloud Messaging).

Push tokens are transmitted to servers of Google (USA) and Apple (USA). For more information, see sections 4.3 and 4.4.

3.5 Server Log Files / IP Addresses

When content is accessed, connection data (e.g. IP address) is technically transmitted to the server.

  • IP addresses are not stored permanently
  • Processing is carried out exclusively for content delivery and for protection against technical attacks

3.6 Company portal (OPM removal companies)

This section applies exclusively to professional companies (e.g. tree care or pest control) that voluntarily register in the company portal to report removed oak processionary moth infestations. Nothing changes for users of the app and the public maps – no additional data whatsoever is collected from app users for this purpose.

When a company registers in the company portal, we process the following company details:

  • Company name and email address, plus optionally a contact person, phone number and website
  • The password is stored exclusively as a cryptographic hash, never in plain text
  • After a removal is reported, the company name and, if provided, its website are displayed publicly on the OPM map next to the respective finding
  • Company accounts and the associated data are deleted on request to wildtier-support@hablamax.de

External services

4. External Services, Map Material, and Push Services

4.1 OpenStreetMap

The app uses map material from OpenStreetMap.

Provider:

OpenStreetMap Foundation

St John's Innovation Centre, Cowley Road, Cambridge, United Kingdom

Map data and coordinates may be transmitted to OpenStreetMap servers.

Privacy information:
openstreetmap.org/copyright
OSMF Privacy Policy

4.2 Nominatim (Geocoding)

The Nominatim service is used to convert coordinates into location information. These requests are made exclusively via my server, so that no direct connection is established between your device and the Nominatim service.

4.3 Firebase Cloud Messaging (Google)

The app uses Firebase Cloud Messaging (FCM) from Google to deliver push notifications on Android devices. A device-specific push token is transmitted to Google servers. Google may process technical connection data as a data processor.

Provider:

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Irland

Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data transfer to the USA is based on the EU-US Data Privacy Framework (adequacy decision of the EU Commission of July 10, 2023). Google LLC is certified under the Data Privacy Framework.

Privacy Policy:
policies.google.com/privacy
Firebase Privacy Info:
firebase.google.com/support/privacy

4.4 Apple Push Notification Service (APNs)

The app uses the Apple Push Notification Service (APNs) to deliver push notifications on iOS devices. A device-specific device token is transmitted to Apple servers.

Provider:

Apple Distribution International Ltd.

Hollyhill Industrial Estate, Hollyhill, Cork, Irland

Parent company: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA

Data transfer to the USA is based on the EU-US Data Privacy Framework. Apple Inc. is certified under the Data Privacy Framework.

Privacy Policy:
apple.com/legal/privacy

4.5 Hosting

The app and associated website are hosted by:

Provider:

Hetzner Online GmbH

Industriestr. 25, 91710 Gunzenhausen, Deutschland

A data processing agreement pursuant to Art. 28 GDPR is in place.

Data processing takes place exclusively on servers within the European Union (location: Germany).

Privacy Policy:
hetzner.com/de/legal/privacy-policy

Sharing

5. Data Sharing

Personal data is not disclosed to third parties unless:

  • it is technically necessary (e.g. map providers)
  • disclosure is required by law

No transfer of personal data for commercial purposes takes place.

Anonymized and aggregated sighting data (without personal reference) may be shared with municipalities, research institutions, and other organizations for scientific purposes, wildlife management, or urban planning.

Retention

6. Data Retention

  • Technical log data: maximum of a few days
  • Location data: only as long as necessary, then anonymized
  • Push tokens: until deactivation or uninstallation of the app

Your rights

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the State Commissioner for Data Protection of Brandenburg (Germany).

Withdrawal

8. Withdrawal of Consent

Any consent given (e.g. for location access, background location, or push notifications) can be withdrawn at any time via the device settings or the corresponding toggles in the app.

Changes

9. Changes to This Privacy Policy

I reserve the right to amend this privacy policy in order to adapt it to legal or technical changes.

Contact

10. Contact

If you have any questions regarding data protection, please contact:

wildtier-support@hablamax.de

Privacy Policy — Wildtier-Sichtungen