Below you will find the information to be provided in accordance with Articles 13 and 14 of the General Data Protection Regulation ("GDPR") on the processing of your personal data by KOSTAL Industrie Elektrik GmbH & Co. KG (hereinafter "we" or "us") when you use the KOSTAL InverterApp ("App").    

A) Data controller and data protection officer

KOSTAL Industrie Elektrik GmbH & Co KG, Lange Eck 11, 58099Hagen, info-industrie@kostal.com,

Phone +49 (0) 2331 80 40 800.

Data Protection Officer of the KOSTAL Group, An der Bellmerei 10, 58513 Lüdenscheid,
datenschutz@kostal.com.

B) Information on the processing of personal data

Below you will find information about the processing of your personal data for the purposes listed in more detail and, among other things, about the legal basis for this processing. If the balancing of interests is mentioned there as the legal basis for the processing, you can request further information on the balancing of interests from us using the contact details given in section A.

I. Use of the app to display the performance data 

The KOSTAL InverterApp is used to display the inverter's performance data. To use the app, you must connect the inverter to the app via Bluetooth 

We do not collect any personal data during the connection. 

II. Analysis data

"Firebase Crashlytics"

The KOSTAL InverterApp uses "Firebase Crashlytics", a tool offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from Europe, the Middle East and Africa (EMEA) and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for all other persons. The personal data described below will be transmitted to Google as our processor in the event of a crash of the app and thus possibly also to the USA; we have concluded standard contractual clauses for this case: 

• Universally Unique Identifier (UUID) of your smartphone or tablet and
• Backgrounds that caused the app to crash, such as the function used, the version of the app, etc.
• IP address of the device.
• Firebase installations ID
• Crash traces
• Breakpad minidump formatted data
• (NDK crashes only)

We would like to point out that US companies may be obliged to disclose personal data to security authorities without you as the data subject being able to take legal action against this. 

We have no influence on this processing activity and it cannot be ruled out that US authorities (e.g. secret services) may process, analyse and permanently store your data on US servers for monitoring purposes.

Crash reports are only sent with your express consent. When using iOS apps, you can give your consent in the app settings or after a crash. With Android apps, you have the option of generally agreeing to the transmission of crash notifications to Google and app developers when setting up the mobile device. You can revoke your consent for this processing at any time by deactivating the "Crash reports" function in the settings of the iOS apps (in the magazine apps, the entry can be found in the "Communication" menu item).

For Android apps, deactivation is basically done in the Android settings. To do this, open the Settings app, select the "Google" item and then the "Usage & Diagnostics" menu item in the three-dot menu at the top right. Here you can deactivate the sending of the corresponding data. Further information can be found in the help for your Google account.

The legal basis for data transmission is consent pursuant to Art. 6 para. 1 lit. a GDPR.

The data is stored for ninety (90) days.

Further information on data protection can be found in Firebase Crashlytics' privacy policy at firebase.google.com/support/privacy and https://docs.fabric.io/apple/fabric/data-privacy.html#data-collection-policies

III. Transmission of system data from a frequency inverter

You have the option of sending the frequency inverter data displayed in the app by e-mail or sharing it via other services; we cannot access the app. If you forward such information to us, we will process the data transmitted to us in this way to process your request. You are not obliged to provide this data. However, we cannot process your request properly without this data. 

The legal basis for the processing of personal data is the balancing of interests pursuant to Art. 6 (1) (1) (f) GDPR. Our legitimate interest in this case is to process the request communicated by you. 

We store this data for the duration of the processing of your request and thereafter for the duration of the statutory retention obligations (Section 257 HGB and Section 147 AO). For commercial letters, this is currently 6 years from the end of the calendar year in which the commercial letter was received or sent. The legal basis for this further storage is compliance with our legal obligation (Art. 6 para. 1 sentence 1 lit. (c) GDPR).

C) Information on the rights of data subjects

As a data subject, you have the following rights in relation to the processing of your personal data, which you can exercise by contacting us using the contact information provided in section A :

• A right to information (Art. 15 GDPR) about which of your personal data we process. This includes further information about the data processing, such as the purpose and legal basis as well as recipients of this data. You also have the right to request a copy of this data.
• The right to obtain from us the rectification of inaccurate personal data concerning you and the completion of incomplete personal data (Art. 16 GDPR).
• A right to request the erasure of personal data concerning you in the cases provided for by law (Art. 17 GDPR), for example if the data is no longer required for the purposes for which it was collected or if it has been processed unlawfully.
• A right to demand the restriction of processing in the cases prescribed by law (Art. 18 GDPR).
• The right to receive the personal data concerning you in a structured, commonly used and machine-readable format, which we process on the basis of your consent or for the performance of a contract (see section B ) (right to data portability, Art. 20 GDPR).
• The right to withdraw consent given to us at any time. This does not affect the lawfulness of the processing carried out up to the time of revocation.
• A right to lodge a complaint with a supervisory authority (Art. 77 GDPR). A list of data protection supervisory authorities with their addresses can be found here. 

You are not necessarily entitled to the above rights without restriction in every case. The law provides for restrictions in each case. The full extent of your rights can be found in the above-mentioned articles, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

Status 23/05/2025