Privacy Policy for the “Pfeuffer Measurements” App

Effective as of: August 25, 2026
Last updated: August 25, 2026

1. Introduction

This Privacy Policy informs you about the nature, scope, and purposes of the processing of personal data when using the “Pfeuffer Measurements” mobile app (hereinafter referred to as the “App”). The App is used to record, manage locally, and, optionally, transmit measurements and planning data for cold storage projects.

Data processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

2. Data Controller

The entity responsible for data processing is:

Pfeuffer GmbH
Industriestraße 4
97342 Marktsteft
Germany

Phone: +49 9332 501 0
Email: info@pfeuffer.de
Website: https://pfeuffer.de/

3. Overview: How the App Handles Data

The app initially saves project data locally on your device.
Data will only be transmitted to us if you explicitly submit a request in the app.
There is no end-user account and no registration or sign-in process in the app.
We do not track your activity for advertising purposes, nor do we analyze your usage behavior through analytics services.

4. What data is processed?

4.1 Data You Collect Locally in the App

Depending on how the device is used, the following data may be stored locally on the device:

a) Project data / technical design data

Project Name
Room and cell dimensions (e.g., floor plan points, wall heights, obstacles)
Information on doors, windows, hatches, and other wall openings
Refrigeration and material-related specifications (e.g., insulation, surfaces, floor, extras)
Delivery Conditions (e.g., narrow passages, forklift access)
Photos and documents (e.g., PDFs) that have been uploaded or taken
Generated export documents (e.g., measurement report as a PDF, DXF)

b) Contact Information / Assignment

If a customer number is provided: Customer number
Without a customer number (guest mode): Company name, email address, phone number

c) Shipping address and location data

Shipping Address (Text Input and/or Address Suggestions)
Optional: precise GPS coordinates (latitude/longitude, accuracy and time if applicable), provided you are actively using the location feature

d) Device permissions (only when using the respective feature)

Location (to determine/support the shipping address)
Camera / Photo Library (for adding pictures)
Document Access (for adding files)
On supported iOS devices, room scanning features (RoomPlan/LiDAR) may be available

4.2 Data Transmitted When Submitting a Request

When you submit a request, the following information, in particular, is transmitted:

the project data and attachments listed in section 4.1
Contact Information or Customer Number
Shipping Address
if available: GPS coordinates (e.g., in the measurement report)
Technical metadata related to the transfer (e.g., project and export identifiers, file list/integrity hashes)

4.3 Data We Do Not Collect

In particular, the app does not collect or process:

a permanent device identifier (Device ID) for profiling purposes
App version or operating system data provided to us as standalone analytics data
Usage Profiles / Event Analytics
Advertising IDs, tracking pixels, or data sent to ad networks
Payment Information (There is no payment feature in the app)

Note: When establishing a connection to servers, connection data (e.g., IP address) may be collected by the respective infrastructure providers for technical reasons. This data is not stored by the app itself as a usage profile.

5. Purposes and Legal Bases

Purpose	Legal Basis
Create and manage projects locally on your device	Art. 6(1)(b) of the GDPR (precontractual/contractual measures) or Art. 6(1)(f) of the GDPR (legitimate interest in a fully functional offline app)
Submission of a request, including planning documents, to us	Art. 6(1)(b) of the GDPR
Optional retrieval of precise location data for address support	Art. 6(1)(a) of the GDPR (Consent via system permissions; revocable in the device settings)
Address Lookup / Reverse Geocoding Using a Map Service	Art. 6(1)(b) of the GDPR or Art. 6(1)(f) of the GDPR
Processing of inquiries, communication, quality and warranty documentation	Art. 6(1)(b) and (f) of the GDPR; to the extent that statutory retention requirements apply, Art. 6(1)(c) of the GDPR
Operation and Security of IT Systems (Hosting, Access Control for the Admin Area)	Art. 6(1)(f) of the GDPR

In particular, we have a legitimate interest in efficiently processing your inquiry and ensuring the secure operation of our infrastructure.

6. Storage: Location, Duration, Security

6.1 Storage on the Device

Project data, contact information, and files are stored locally on your device (including in the app’s storage). Deleting a project in the app removes the local data for that project. This does not automatically delete any requests that have already been sent to us.

6.2 Data Storage After Submitting a Request

After you submit your request, we store the request data in our systems, specifically:

in a database (query metadata, address, contact/customer assignment)
in a file repository (e.g., PDF, DXF, photos/documents, manifest)

Data processing is carried out via cloud infrastructure with servers located in Frankfurt am Main, Germany (European Union). See also Section 7.

6.3 Retention Period

Local app data: until you delete the project or the app data, or uninstall the app.
Submitted inquiries: The retention period varies and depends on the specific process. Personal data is stored only as long as necessary for the stated purposes (in particular, processing, documentation, and—where applicable—statutory retention requirements). Once the purpose no longer applies, the data is deleted or anonymized.
Notification emails: in accordance with the retention periods of the email and operating systems used.

Upon request, we will inform you of the retention reasons applicable to your case.

6.4 Safety

We take appropriate technical and organizational measures, including:

Encrypted transmission (HTTPS/TLS) to the services used
Restricted access to request data in the internal admin area (authorized users only)
Private storage of export files with time-limited download links for authorized users

End-to-end encryption of local app data on the device does not take place. Protect your device using standard security measures (passcode, up-to-date system updates).

7. Recipients and Data Processors

Your data will not be shared for advertising purposes or sold.

7.1 Internal Recipients

Authorized employees of Pfeuffer or support/operations service providers engaged by us, to the extent necessary to process your request.

7.2 External Service Providers (Data Processing or Necessary Transfer)

Depending on the function, the following categories of service providers, in particular, may be used:

Service / Provider	Purpose
Supabase (database, file storage, edge functions; additional authentication for internal admin access)	Storage and Management of Submitted Inquiries and Files (Frankfurt Region)
Resend	Sending technical notification emails for new or updated inquiries
Photon (Komoot)	Address autocomplete and reverse geocoding based on OpenStreetMap data

Where required by law, contracts with data processors are in place in accordance with Article 28 of the GDPR.

7.3 Government Agencies

We will disclose information to government authorities only to the extent that we are legally required to do so.

8. Transfers to Third Countries

If a service provider uses a service provider based outside the EU/EEA or transfers data there, this may only occur if an adequate level of protection exists (e.g., an adequacy decision) or appropriate safeguards (e.g., standard contractual clauses), as well as the necessary additional measures.

9. No tracking, no ads

We do not use tracking pixels, ad networks, or analytics SDKs in the app to create user profiles. Your request data is not used for personalized advertising.

10. Your Rights

Subject to the requirements of the law, you have the following rights:

Right of Access (Art. 15 of the GDPR)
Rectification (Art. 16 of the GDPR)
Erasure (Art. 17 of the GDPR)
Restriction of Processing (Art. 18 GDPR)
Data Portability (Art. 20 of the GDPR)
Objection to Processing Based on Article 6(1)(f) of the GDPR (Article 21 of the GDPR)
Withdrawal of consent with future effect (Art. 7(3) GDPR), e.g., by disabling location permissions

To exercise your rights, please contact:

Email: info@pfeuffer.de
Phone: +49 9332 501 0
Mailing Address: Pfeuffer GmbH, Industriestraße 4, 97342 Marktsteft

Note: Since the app does not provide a user account, we will manually delete any previously submitted request data upon request (provided there are no retention requirements that prevent this). Deleting local projects within the app does not replace this request.

Right to File a Complaint

You have the right to file a complaint with a data protection supervisory authority. The following authority has specific jurisdiction over the data controller based in Bavaria:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de/

11. Obligation to Provide

In principle, it is possible to use the app for purely local planning without submitting a request. To submit a request, you must provide the required information (specifically, contact information or customer number, as well as the delivery address and project details). Without this information, the request cannot be processed.

Sharing your location is optional; if you don’t have GPS, you can enter the delivery address manually.

12. Minors

The app is intended for business users. It is not intended for use by children.

13. Changes to This Privacy Policy

We may update this Privacy Policy if the app, the services we use, or the legal basis for processing data change. The most current version is available in the app or at the URL linked there.

14. Contact

Please direct any questions regarding data protection to:

Pfeuffer GmbH
Industriestraße 4, 97342 Marktsteft
Email: info@pfeuffer.de
Phone: +49 9332 501 0