Data privacy statement GridVis Connect App

1 General Information on Data Processing on This Website

1.1 Data Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Janitza electronics GmbH
Address: Vor dem Polstück 6, 35633 Lahnau
Telephone: +49 64419642-0
Email: info@janitza.de
App: GridVis Connect App
 

1.2 Data Protection Officer
If you have any questions regarding data protection, you can contact our Data Protection
Officer, Christian Scholtz of WS Digital Compliance GmbH, at the following email address:
janitza@ws-datenschutz.de
WS Digital Compliance GmbH
Dircksenstraße 51
D-10178 Berlin
https://webersohnundscholtz.de
 

1.3 Protection of Your Data
We have implemented technical and organizational measures to ensure compliance with the
provisions of the GDPR, both by ourselves and by external service providers working on our
behalf.
When we cooperate with other companies, such as email and server providers, to deliver our
services, we do so only after a comprehensive selection process. During this process, each
service provider is carefully evaluated for its suitability in terms of technical and
organizational data protection capabilities. This selection process is documented in writing,
and a data processing agreement pursuant to Art. 28(3) GDPR is concluded only if it meets
the requirements of Art. 28 GDPR.

1.4 Deletion of Personal Data
We process personal data only for as long as necessary. Once the purpose of the data
processing has been fulfilled, the data is blocked and deleted in accordance with our
applicable deletion policy, unless statutory provisions prevent deletion.

2 Local Configuration and NFC Communication

2.1 Description and Scope of Data Processing
The app is used to configure and parameterize compatible measuring devices. For this
purpose, it communicates directly with the respective measuring device via NFC.
Configuration parameters can be read from or written to the measuring device via the NFC
interface. These include, for example:
• Nominal voltages, such as 110 V or 220 V
• Transformer ratios
• Device addresses
• Device names and identifiers, such as “Keller”
• Calculation parameters and calculation logic
The measuring devices can record electrical quantities including current, voltage, power, and
energy. The app is used to configure the parameters relevant to these measurements.
The configuration information mentioned above generally relates to the technical
characteristics and settings of the measuring device. It does not automatically constitute
personal data. However, in individual cases, a connection to an identifiable natural person
may arise if the information can be attributed to such a person.
As part of the functions described, configuration data is processed locally on the mobile
device and through direct communication with the measuring device. This configuration data
is currently not transmitted to Janitza electronics GmbH or to any cloud service operated by
Janitza.
The measuring device's NFC function can be disabled using a mechanical switch.
 

2.2 Legal Basis for Data Processing
Where personal data is processed in connection with the use of the app, the legal basis
depends on the respective processing activity.
If processing is necessary for the performance of a contract or for taking steps prior to
entering into a contract, it is carried out on the basis of Art. 6(1)(b) GDPR.
 

2.3 Purpose of Data Processing
Processing serves the technical configuration and parameterization of compatible measuring
devices and the provision of the corresponding app functions.
 

2.4 Duration of Data Storage
As a general rule, data is stored for as long as the user account exists and storage is necessary
for its provision and administration.
Following deletion of the user account, the data will be deleted unless statutory retention
obligations or other legal grounds prevent deletion.
 

2.5 Options Available to the Data Subject for Erasure
Subject to the applicable legal requirements, users may request access to their stored personal
data, its rectification, and the deletion of their user account.
To exercise these rights, users may contact the controller or the designated Data Protection
Officer.

3 Data Transfers to Third Countries

In order to provide our services, we rely on support from service providers located both
within Europe and in third countries. To ensure the protection of your personal data when it is
transferred to a third country, we conclude specific data processing agreements with each
carefully selected service provider.
All service providers we use have provided sufficient evidence that data security is ensured
through appropriate technical and organizational measures. Our service providers located in
third countries meet at least one of the following criteria:
Adequate level of protection: The provider is based in a country whose level of data
protection has been recognized as adequate by the European Commission. Further
information is available at:
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-
protection/adequacy-decisions_en?prefLang=de
EU Standard Contractual Clauses: Our provider has agreed to comply with the EU Standard
Contractual Clauses to ensure secure data transfers. Further information is available at:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en
Binding Corporate Rules: Under Art. 47 GDPR, data protection during transfers to third
countries may be ensured through binding internal data protection rules. These are reviewed
and approved by the competent supervisory authorities as part of the consistency mechanism
pursuant to Art. 63 GDPR.
Consent: In addition, data transfers to a third country without an adequate level of protection
take place only if you have given your consent in accordance with Art. 49(1)(a) GDPR or if
another exception under Art. 49 GDPR applies to the transfer.
 

4 Your Rights

You have the following rights in connection with the processing of your personal data:
 

4.1 Right to Withdraw Consent (see Art. 7 GDPR)
If you have given your consent to the processing of your data, you may withdraw it at any
time. Such withdrawal affects the lawfulness of future processing of your personal data after
you have communicated your withdrawal to us.
You may withdraw your consent via the consent banner, verbally (including remotely), or in
writing by post or email.
 

4.2 Right of Access (see Art. 15 GDPR)
You have the right to obtain confirmation from us as to whether or not personal data
concerning you is being processed.
If we process your personal data, you may obtain access to that data and the following
information:
• The purposes for which the personal data is processed;
• The categories of personal data being processed;
• The recipients or categories of recipients to whom your personal data has been or will
be disclosed;
• The envisaged period for which your personal data will be stored or, if specific
information is not possible, the criteria used to determine that period;
• The existence of a right to rectification or erasure of your personal data, a right to
restriction of processing by the controller, or a right to object to such processing;
• The existence of a right to lodge a complaint with a supervisory authority;
• Any available information about the source of the data, where the personal data was
not collected from the data subject;
• The existence of automated decision-making, including profiling, as referred to in Art.
22(1) and (4) GDPR and, at least in such cases, meaningful information about the
logic involved, as well as the significance and envisaged consequences of such
processing for the data subject.
When submitting a request for access, you must provide sufficient information to establish
your identity and evidence that the information relates to you.
 

4.3 Right to Rectification or Erasure (see Arts. 16 and 17 GDPR)
You have the right to request that we, as the controller, rectify and/or complete personal data
concerning you if it is inaccurate or incomplete. We will carry out the rectification without
undue delay.
You may also request the erasure of personal data concerning you if one of the following
grounds applies:
• The personal data concerning you is no longer necessary for the purposes for which it
was collected or otherwise processed.
• You withdraw the consent on which the processing was based pursuant to Art. 6(1),
first sentence, point (a), or Art. 9(2)(a) GDPR, and there is no other legal basis for the
processing.
• You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding
legitimate grounds for the processing, or you object to the processing pursuant to Art.
21(2) GDPR.
• The personal data concerning you has been unlawfully processed.
• The personal data concerning you must be erased to comply with a legal obligation
under European Union or Member State law to which the controller is subject.
• The personal data concerning you was collected in relation to the offer of information
society services referred to in Art. 8(1) GDPR.
If we have made personal data concerning you public and are obliged to erase it pursuant to
Art. 17(1) GDPR, we will take all reasonable measures to inform other controllers processing
the personal data that you have requested the erasure of any links to, or copies or replications
of, that personal data.
The right to erasure does not apply to the extent that processing is necessary:
• For exercising the right of freedom of expression and information;
• For compliance with a legal obligation requiring processing under European Union or
Member State law to which the controller is subject, or for the performance of a task
carried out in the public interest or in the exercise of official authority vested in the
controller;
• For reasons of public interest in the area of public health in accordance with Art.
9(2)(h) and (i) and Art. 9(3) GDPR;
• For archiving purposes in the public interest, scientific or historical research purposes,
or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right
referred to above is likely to render impossible or seriously impair the achievement of
the objectives of such processing; or
• For the establishment, exercise, or defense of legal claims.
 

4.4 Right to Restriction of Processing (see Art. 18 GDPR)
You may request that we restrict the processing of personal data concerning you under the
following circumstances:
• If you contest the accuracy of the personal data concerning you, for a period enabling
us to verify the accuracy of your personal data;
• If the processing is unlawful and you oppose the erasure of the personal data and
request the restriction of its use instead;
• If we no longer need the personal data for the purposes of processing, but you require
it for the establishment, exercise, or defense of legal claims; or
• If you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet
been determined whether our legitimate grounds override yours.
Where processing of personal data concerning you has been restricted, such data may, with
the exception of storage, be processed only with your consent or for the establishment,
exercise, or defense of legal claims, for the protection of the rights of another natural or legal
person, or for reasons of important public interest of the European Union or a Member State.
If processing has been restricted under the conditions mentioned above, we will inform you
before the restriction is lifted.
 

4.5 Right to Notification (see Art. 19 GDPR)
If you have exercised your right to rectification, erasure, or restriction of data processing, we
are obliged to communicate the rectification, erasure, or restriction of processing to all
recipients to whom your personal data has been disclosed.
This obligation does not apply where such communication proves impossible or involves
disproportionate effort.
You have the right to be informed about the recipients to whom your data has been disclosed.
 

4.6 Right to Data Portability (see Art. 20 GDPR)
You have the right to receive your personal data from us in a commonly used, machine-
readable format, provided that:
• The processing is based on consent pursuant to Art. 6(1), first sentence, point (a), or
Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1), first sentence, point (b)
GDPR; and
• The processing is carried out by automated means.
When exercising your right to data portability, you have the right to have the personal data
transmitted directly from us to another controller, where technically feasible.
The right to data portability does not apply to the processing of personal data necessary for
the performance of a task carried out in the public interest or in the exercise of official
authority vested in us.
 

4.7 Right to Object to Processing (see Art. 21 GDPR)
Where we base the processing of your personal data on our legitimate interests pursuant to
Art. 6(1), first sentence, point (f) GDPR, you may object to such processing. The same applies
where we base the processing on Art. 6(1), first sentence, point (e) GDPR.
If you exercise this right to object, we ask you to explain the reasons why we should not
process your personal data in the manner described.
In the event of a justified objection, we will review the circumstances and either cease or
modify the processing of your data, or demonstrate compelling legitimate grounds for
continuing the processing.
 

4.8 How to Exercise These Rights
To exercise these rights, please contact our Data Protection Officer, Christian Scholtz, by
email at janitza@ws-datenschutz.de.
 

4.9 Right to Lodge a Complaint with the Competent Supervisory Authority (see Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a
complaint with a supervisory authority, in particular in the Member State of your habitual
residence, your place of work, or the place of the alleged infringement, if you consider that
the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform you of the
progress and outcome of the complaint, including the possibility of a judicial remedy pursuant
to Art. 78 GDPR.
 

5 Right to Amend

We reserve the right to amend this Privacy Policy in compliance with applicable legal
provisions.

Last updated: October 2026