Privacy Policy of the Meteo ICM App
Meteo sp. z o.o., with its registered office in Warsaw (hereinafter: “Administrator”, “We”, “Our”) is the operator of the Meteo ICM mobile application made available on Android and iOS devices (the “Application”). This Privacy Policy describes how we collect, process and protect your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and other data protection regulations.
The Application does not require creating an account or registration, which is why the mere use of the Application does not require you to provide data such as your name, e-mail address or password. The scope of personal data that we may process depending on your decisions, consents or actions taken within the Application is described below.
1. Data Administrator
The Administrator of your personal data processed in connection with the use of the Application is Meteo sp. z o.o., ul. Tyniecka 15/17/1, 02-630 Warsaw, entered in the register of entrepreneurs of the National Court Register under KRS number: 0000760177, NIP: 5213848136, REGON: 38191026700000, with share capital of PLN 43,500.
You can contact the Administrator at the above correspondence address or by e-mail at: mobile %at% meteo %.% pl
Depending on the type of service, the entities indicated in point 5 may process data on our behalf or as separate administrators to the extent determined by those entities. In particular, app store providers and advertising partners may independently determine the purposes and means of data processing within their own services. The current list of advertising partners and information about their processing purposes is available in the consent notice within the Application.
2. Data We Collect
In connection with the use of the Application, we may process:
- Location data: geographic coordinates (latitude/longitude) of the device’s position – if you consent to location access – used to present the forecast for your current location.
- Push notification tokens: device identifiers (Firebase Cloud Messaging) used to deliver notifications and weather alerts.
- Analytical and diagnostic data: information about how the Application is used, events and crashes (including device model, system version, Application version), collected in order to improve the Application’s operation and stability.
- Technical connection data: IP address, timestamps, information about the device, operating system and requests sent to servers, processed in order to deliver content, ensure security and diagnose errors.
- Advertising identifiers and advertising data: the device’s advertising identifier (AAID on Android / IDFA on iOS) and related data used to display and measure advertisements – to the extent depending on your decisions expressed in the consent notice (point 4).
- Purchase status: information about holding an active Package, provided by the app store (Google Play / Apple App Store), necessary to make premium features available and disable advertisements. Payments are handled directly by the app stores – we do not receive payment card data.
- Contact data and request-related data: e-mail address and other personal data voluntarily provided by you in connection with a complaint, question or the exercise of the rights of data subjects.
3. How We Use Your Data and Legal Bases
- Provision of free services via the Application (presentation of forecasts). Legal basis: Art. 6(1)(b) GDPR – performance of a contract for the provision of electronic services via the Application.
- Provision of paid services via the Application (making available functionalities within the Package). Legal basis: Art. 6(1)(b) GDPR – performance of a contract for making available paid functionalities of the Application in connection with a payment made by the data subject.
- Presentation of the forecast for the device’s location. Legal basis: Art. 6(1)(a) GDPR – consent of the data subject to the processing of their personal data in respect of location for the purpose of presenting the weather forecast for that location, expressed within the Application.
- Sending push notifications and alerts. Legal basis: Art. 6(1)(a) GDPR – consent of the data subject to receiving push notifications and alerts, expressed within the Application.
- Ensuring the security and stability of the Application, preventing abuse and diagnosing errors. Legal basis: Art. 6(1)(f) GDPR – the legitimate interest of the Administrator consisting in ensuring the proper and secure operation of the Application. To the extent that these actions are taken using identifiers installed on the device, processing takes place solely on the basis of the appropriate consent granted by the data subject (Art. 6(1)(a) GDPR).
- Displaying advertisements. Legal basis: Art. 6(1)(a) GDPR – consent of the data subject to the processing of their personal data for the purpose of displaying personalized advertising messages (in particular displaying personalized advertisements).
- Handling complaints, questions and other requests. Legal basis: Art. 6(1)(f) GDPR – the legitimate interest of the Administrator consisting in conducting correspondence, handling requests and complaints, and establishing, pursuing or defending claims (if this proves necessary and justified).
- Fulfilment of legal obligations, in particular those related to complaints, settlements and tax and accounting documentation, to the extent that these obligations rest on us, in particular in connection with offering paid functionalities of the Application. Legal basis: Art. 6(1)(c) GDPR – the entitlement to process personal data pursuant to legal obligations incumbent on the Administrator.
4. Advertising and Consent
In the free version of the Application, advertisements are displayed using WPartner for Apps (Wirtualna Polska Media S.A.) technology, based on the Google AdMob platform and its mediation mechanism.
On the first launch of the Application, we present a consent notice handled by the consent management mechanism we use. Through it, you independently decide whether you consent to:
- the storage of and access to information on your device (including the advertising identifier),
- the display of personalized advertisements and the measurement of their effectiveness.
If you do not consent to personalization, non-personalized advertisements may be displayed. Technologies other than those necessary for the operation of the Application, and operations requiring access to information stored on the device, are used only after obtaining your consent. Refusing consent does not limit access to the Application’s features for which the given consent is not necessary. You may change or withdraw the consents granted at any time in the privacy settings panel available in the Application. Withdrawal of consent does not affect the lawfulness of processing carried out beforehand.
5. External Services (Data Processors and Recipients)
We use the following external entities:
- Google (Google Ireland Ltd. / Google LLC) – Firebase Cloud Messaging services (push notifications), Firebase Analytics and Crashlytics (analytics and crash reporting), Google AdMob (advertising) and Google Play (distribution and payments).
- Wirtualna Polska Media S.A. (Wirtualna Polska Group) – the WPartner for Apps advertising monetization technology.
- Apple Inc. – distribution and payments via the Apple App Store (iOS version).
- ICM UW (University of Warsaw, Interdisciplinary Centre for Mathematical and Computational Modelling, ul. Krakowskie Przedmieście 26/28, 00-927 Warsaw, NIP 525-001-12-66, REGON 000001258) – provider of forecast data. In order to retrieve a forecast, the coordinates of the indicated location and the necessary technical connection data may be sent. We do not provide ICM UW with user account data, because the use of the Application does not require creating an account.
Depending on the service, these entities act as processors processing data on our behalf or as separate administrators. Detailed information about their roles and processing rules is made available in the consent notice or in the information on the processing of personal data provided by the given provider.
6. Transfer of Data to Third Countries
In connection with the use of the services of the entities indicated in point 5, your data may be transferred to the United States of America, in particular with respect to:
- Google LLC (Firebase, AdMob, Google Play) – USA,
- Apple Inc. (App Store) – USA.
With respect to recipients certified under the EU-US Data Privacy Framework, data is transferred on the basis of the European Commission’s implementing decision of 10 July 2023 finding an adequate level of data protection. In other cases, appropriate safeguards are applied, in particular the standard contractual clauses adopted by the European Commission in accordance with Art. 46(2)(c) GDPR, together with additional protective measures where required. You can obtain information about the applied data transfer mechanism and a copy of the relevant safeguards by contacting us.
7. Data Retention Period
- Location data is processed on an ongoing basis for the purpose of presenting the forecast and is not permanently stored by us in a form linked to the user longer than is necessary to provide the Service.
- Technical connection data is stored for the period necessary to deliver content, ensure security and diagnose errors, and longer only where this is necessary to establish, pursue or defend claims.
- Push notification tokens are stored until notifications are disabled, the token is removed by the user, the token is found to be invalid, or the purpose for which it was saved ceases to exist.
- Analytical and diagnostic data is stored for the period resulting from the configuration of the services used, no longer than is necessary to achieve the indicated purposes. We determine this period taking into account the type of data, the purpose of its use and the retention settings available in the given service. We periodically review the retention periods applied.
- Data processed on the basis of advertising consent is processed until it is withdrawn or the purpose of processing ceases. Withdrawal of consent prevents further processing on that basis but does not affect the lawfulness of processing carried out beforehand. Advertising technology providers store data for the periods specified in their privacy notices, also available via the consent notice in the Application.
- Data subject to the obligation to retain tax or accounting documentation is stored for the period resulting from the applicable legal provisions.
- Data related to complaints and correspondence is stored for the time necessary to handle the matter, and then until the limitation period for related claims expires, unless longer storage results from legal provisions.
8. Your Rights
On the terms and in the cases specified in the GDPR, you have the right to:
- access your personal data,
- rectify incorrect data,
- erase data (“right to be forgotten”),
- restrict processing,
- object on grounds relating to your particular situation where the basis for processing is Art. 6(1)(f) GDPR,
- data portability – where processing is carried out on the basis of consent or a contract, by automated means,
- lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
Because the Application does not maintain user accounts, in order to exercise your rights please contact us at mobile %at% meteo %.% pl . You can also exercise some of these rights yourself – in your device settings (location, notifications, advertising identifier) and in the consent notice within the Application (advertising and analytics consents).
9. Right to Withdraw Consent
If processing is carried out on the basis of consent, you have the right to withdraw it at any time – in the Application settings, device settings or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
10. Voluntary Provision of Data
Providing data is voluntary. The lack of consent to location access or notifications may make it impossible to use the corresponding features, such as automatic forecasting for your current location or push alerts. The lack of consent to advertising or analytics processing does not limit access to the Application’s features for which the given consent is not necessary.
11. Automated Decision-Making and Profiling
We do not make decisions concerning you based solely on automated processing that would produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR. If you consent to personalized advertising, advertising providers may carry out profiling for the purpose of selecting advertisements; you can prevent this by not consenting to personalization or by withdrawing consent at any time.
12. Data Security
We apply appropriate technical and organizational measures adapted to the nature of the processed data and the associated risk, including encrypted communication (TLS) and access control, in order to protect the processed data.
13. Changes to the Policy
We may update this Privacy Policy in particular in the event of changes to the Application’s functionality, the providers used or the applicable regulations. We will inform you of significant changes in the Application or in another appropriate manner before they take effect, if this is required or possible given the nature of the change. The current version of the Policy is available in the Application settings.
14. Contact
For questions regarding this Privacy Policy or the exercise of your rights, please contact us: mobile %at% meteo %.% pl