IDealWALLET|App Privacy Policy

1. General Information

The controller responsible for data processing for the IDealWALLET app is:

KAPRION Technologies GmbH
Gostritzer Straße 61
01217 Dresden

Legal Representative: Dipl.-Inf. André Röder
Phone: +49 351 8547 8390
E-Mail: info (at) kaprion.de

For questions regarding data processing, please write to our postal address or contact us via the telephone number or e-mail address provided above.

2. Purposes and Legal Bases for Data Processing

We process your personal data for the following purposes:

  • Identity management: Storage and management of digital identities.
  • Proof of authorization: Verification and validation of authorizations using digital identities.
  • Backup function: Transfer of identities between different devices for data backup.
  • Certificate management: Management and issuance of certificates for authorization verification.
  • Transaction history: Documentation of authorization verifications and proofs for traceability.

The use of the app is voluntary. Data processing is necessary for the fulfillment of the user agreement (Art. 6 para. 1 lit. b GDPR). Our General Terms and Conditions apply.

3. Categories of Personal Data

As part of the defined purposes, we process, among others, the following categories of data: 

  • Personal master data
  • Proof of identity
  • Proofs of authorization and certificates
  • Log data regarding authorization transactions, app usage, and errors
  • Timestamps and metadata regarding transactions

Depending on the configuration of the app, this data is stored exclusively locally on your device or in the associated security facility (e.g., hardware token, secure chip, etc.).

4. Recipients or Categories of Recipients of Personal Data

  • Other authorized devices as part of the identity transfer
  • Certificate issuers as part of authorization management
  • Authorized verification bodies for the verification of certificates and authorizations

5. Source of Data

Personal data is provided by the contracting party themselves or transmitted by verification bodies (e.g., public authorities).

6. Data Transfer to a Third Country

There is no transfer of your personal data to countries outside the EU or the EEA.

7. Duration of Data Storage

Your data will be stored locally on your device and in the security facility for as long as you use the app and wish to manage your digital identities. Log data regarding authorization transactions is kept for the duration of [specific time period] in accordance with legal requirements. Following the deletion of your account, all associated data will be deleted immediately, provided there are no legal retention obligations to the contrary.

8. Technical Security Measures

To ensure the security of your data, the use of a security facility (hardware token or secure chip) is mandatory. This serves the encrypted and tamper-proof storage of your sensitive data. Without such a security facility, the use of the app is not possible.

9. Data Subject Rights

Access

You have the right to request information as to whether and which personal data concerning you is processed by us. This information is generally provided free of charge. Prior to providing the information, it is necessary to verify your identity.

Rectification

You have the right to have inaccurate personal data concerning you rectified. This includes the completion of incomplete personal data concerning you.

Erasure

Under certain circumstances, you have the right to demand the immediate erasure of personal data concerning you.

Restriction

Under certain circumstances, you have the right to request a restriction of the processing of your data, particularly if you dispute the accuracy of the data, if the processing is unlawful, if the data is no longer needed for processing, or if you have objected to the data processing.

Objection

You have the right to object at any time to the processing of personal data concerning you.

Data Portability

In principle, you have the right to receive personal data concerning you in a structured, commonly used, machine-readable format.

10. Right to Lodge a Complaint with a Supervisory Authority

For complaints arising from the processing of personal data within the scope of the stated purposes, you may contact the competent data protection supervisory authority at any time.

11. Requirement to Provide Data

The provision of your personal data is required for the fulfillment of the contract. Optional data will always be marked as such when collected.

12. Automated Decision-Making and Profiling

The app uses automated processes to verify authorizations and certificates. These checks are based on predefined rules and serve exclusively for the verification of proofs of authorization. No profiling takes place.

Status: 01.10.2026