Effective: October 22, 2025

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter “Data”) within our mobile application “GO SunPilot” (hereinafter “App”).

1. Data Controller

Marcus Gossner
Buchloer Strasse 6
87600 Kaufbeuren
Phone: +49 (0) 8341 99507-61
Email: KontaktI@gossnersystems.de

2. Overview of Data Processing

This app was developed to be as data-efficient as possible. The processing of your data can be divided into the following categories:

• Technically necessary data: Data required for the download and basic functionality of the app (e.g., via app stores).

• Function-related data: Data retrieved from external services (Solcast) to provide the core function (PV forecast).

• Analysis and improvement data: Anonymized data that helps us understand and improve the app.

• Locally stored data: Data stored only on your device.

• Data for in-app purchases: Data processed by app store operators to process purchases.

These points are explained in detail below.

3. Detailed description of data processing

a) Data processing by app store operators (Apple, Google)

To download, install, and update our app, you use third-party services (Apple App Store, Google Play Store). In doing so, these providers process data as independent data controllers. This typically includes:

• Device and connection information: type of device, operating system and version, unique device IDs, IP address.

• User account information: Your Apple or Google ID.

We have no influence over this data processing. The respective operators are responsible. Please refer to their privacy policies.

b) Data exchange with the Solcast service

To display PV yield forecasts, our app accesses the application programming interface (API) of the Solcast service (a service provided by Power Factors, LLC).

• Prerequisite: You need your own user account with Solcast. The creation and management of this account are subject to Solcast’s privacy policy: https://www.solcast.com/privacy-policy

• Type of data processed: To retrieve the data, enter your personal Solcast API token and forecast URL in our app. This token and URL are sent by the app to Solcast via an encrypted HTTPS connection to retrieve your forecast data. No other data is sent from our app to Solcast.

• Data Retrieved: We retrieve only the PV yield forecasts for the systems you have registered in Solcast and display them in the app. This data is processed only temporarily for display in the app.

• Purpose: To provide the app’s core functionality (display of the PV forecast).

• Legal basis: Processing is necessary to fulfill the user agreement with you (Art. 6(1)(b) GDPR), as this is the app’s primary function.

c) Analysis of app usage for improvement

We have a legitimate interest in continuously improving our app, fixing bugs, and enhancing user-friendliness. For this purpose, we collect pseudonymized usage data.

• Type of data processed:

  • Usage events: We collect aggregated usage events. Examples include: information about the completion of the onboarding process, the time of an in-app purchase (without reference to your person or payment information), or the frequency of app usage. These events are recorded without direct personal identifiers such as name or email address.

  • IP address: For technical reasons, your IP address is processed briefly to transmit usage data to our server. However, we do not permanently store this IP address or link it to usage events to establish a personal connection. It serves exclusively to ensure network and information security (e.g., defense against DDoS attacks) and is deleted or anonymized after no later than 7 days.

• Pseudonymous nature: Since the IP address is processed only briefly, the data collected is pseudonymized. By processing the IP address separately and deleting or anonymizing it promptly, we ensure that we cannot draw any direct conclusions about your identity from the usage events.

• Purpose: Statistical analysis of user behavior to optimize the app design, prioritize new features, and ensure the stability and security of our systems.

• Legal basis: Processing is based on our legitimate interests (Art. 6(1)(f) GDPR) in improving and economically optimizing our offering, as well as in ensuring system and data security.

• Right to object: You have the right to object to this processing at any time (see section “Your rights”).

d) In-App Purchases

In our app, you have the option to purchase additional paid features via in-app purchases.

• Processing: The entire purchase process (including payment) is handled exclusively by the respective app store operators (Apple App Store, Google Play Store). We do not receive any personal payment data from you (such as credit card numbers) from these providers.

• Data sent to us: We receive only an anonymized confirmation from the store operators that a purchase has been made, in order to unlock the corresponding feature in your app.

• Responsibility: The app store operators are responsible for data processing in connection with the payment process. Their privacy policies apply.

e) Local storage on your device

The app stores configurations, such as your Solcast API token and URL, exclusively locally on your device. This data is not transferred to us or to third parties. You have full control over this data and can remove it by deleting the app data in the system settings or by uninstalling the app.

f) Contacting Us and Providing Feedback via Email

Our app offers a feature that allows you to send us feedback directly or request support.

• Process: When you use this feature, an email is drafted within the app and forwarded to the default email program installed on your device (e.g., Gmail, Apple Mail). The app itself does not send any emails. You have full control over the content and can view, edit, or cancel the process before sending the email. The email is only sent once you actively click “Send” in your email program.

• Type of data processed: When you contact us in this way, we process the data you provide to us:

  • Your email address and, if applicable, your name (as configured in your email program).

  • The content of your message.

  • Optional technical debug information: At your request, technical information (e.g., app version, device type, operating system version) can be attached to the email to assist us with error analysis. You can view this information before sending and remove it if necessary.

  • Metadata sent by your email provider (e.g., date, time).

• Purpose: The processing of this data serves exclusively to process your inquiry, provide you with support, and improve our services based on your feedback.

• Legal basis: The legal basis for processing your data after sending the email is your implied consent through the active act of contacting us (Art. 6(1)(a) GDPR). Additionally, the processing is based on our legitimate interest in the effective handling of user inquiries (Art. 6(1)(f) GDPR).

• Retention period: We store your inquiry for as long as necessary to process your request and to address any follow-up questions. Afterward, the data will be deleted unless there are legal retention obligations (e.g., for business correspondence) that prevent this.

4. Disclosure of Data

We do not generally disclose your data to third parties, with the exception of the following cases:

• Solcast: Your API token and URL are transmitted to Solcast for authentication and to retrieve your forecast data.

• App store operators: To process in-app purchases and deliver the app.

• Legal obligation: If we are legally required to do so (e.g., by order of authorities).

5. Retention Period

• Locally stored data: Remains on your device until you delete it or uninstall the app.

• Anonymized analytics data: Since this data is not personally identifiable, it is not subject to the retention periods under the GDPR. We store it for as long as it is relevant for statistical purposes.

6. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR): If we process data based on our legitimate interests (Art. 6(1)(f) GDPR), such as in the case of usage analysis, you have the right to object to the processing at any time for reasons arising from your particular situation.

To exercise your rights, please contact us using the contact details provided above. Please note that, since we store very little personal data about you, we may not be able to identify you. In this case, we can only comply with your rights if you provide us with additional information for identification purposes.

7. Right to lodge a complaint with a supervisory authority

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. A list of supervisory authorities can be found, for example, here: https://edpb.europa.eu/about-edpb/about-edpb/members_de

8. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 of the GDPR in connection with this app.

9. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes to our services. The new Privacy Policy will then apply to any subsequent use of the app.