Viovenia
DEENGet in touch

WebDAV Browser - App Privacy Policy

§ 1 General

We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations and this privacy policy. This privacy policy applies to our mobile iOS app “WebDAV Browser” for iPhone and iPad (hereinafter “APP”). It explains the nature, purpose and scope of data collection during APP use. We point out that data transmission over the Internet may be exposed to security gaps. Complete protection of the data from access by third parties is not possible.

(1) Controller (responsible entity)

The controller (responsible entity) for data processing within the framework of this APP is:

Viovenia UG (haftungsbeschränkt)
Prienzing-Siedlung 54
93497 Willmering, Germany
E-mail: info@viovenia.com
Website: www.viovenia.com
Phone: +4917681560238

The “controller (responsible entity)” is the entity that collects, processes or uses personal data (e.g. names, e-mail addresses, etc.).

(2) General storage duration of personal data

Unless otherwise specified in this privacy policy, personal data collected by this APP shall be stored until you request us to delete it, revoke your consent to storage or the purpose for the data storage no longer applies. Insofar as there is a statutory obligation to store or any other legally recognized reason for storing the data (e.g. legitimate interest or a statutory retention obligation), the personal data concerned shall not be deleted before the respective retention reason ceases to apply.

(3) Legal basis for the storage of personal data

The processing of personal data is only permitted insofar as there is an effective legal basis for the processing of such data. Insofar as we process your data, this is done regularly on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, for the purpose of fulfilling the contract in accordance with Art. 6 (1) lit. b GDPR (e.g. when using the Premium subscription or other fee-based APP functions) or due to legitimate interests pursuant to Art. 6 (1) lit. f GDPR, which are always weighed taking your interests into consideration. The relevant legal bases may be specified in a separate provision within the framework of this privacy policy.

(4) Encryption

This APP uses encryption for security purposes and to protect the transmission of sensitive content. Connections to your WebDAV servers are made via HTTPS (TLS); self-signed certificates are secured via trust-on-first-use with SHA-256 pinning. This encryption prevents the data you submit from being read by unauthorized third parties.

(5) Changes to this privacy policy

We reserve the right to change these data protection provisions at any time in accordance with statutory requirements.

§ 2 Your rights

The GDPR grants data subjects whose personal data is processed by us specific rights, of which we would like to inform you here:

(1) Revocation of your consent to data processing

Many data processing operations are only possible with your consent. These shall be requested from you before the start of data processing. You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

(2) Right of objection against data collection in particular cases and against direct advertising (Art. 21 GDPR)

INSOFAR AS DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU AS A DATA SUBJECT RESERVE THE RIGHT, AT ANY TIME, TO FILE AN OBJECTION, FOR REASONS ARISING OUT OF YOUR SPECIAL SITUATION, AGAINST THE PROCESSING OF YOUR PERSONAL DATA CONCERNED; THIS APPLIES ALSO TO PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE RELEVANT LEGAL BASIS PURSUANT TO WHICH A PROCESSING IS PERMITTED. INSOFAR AS YOU FILE AN OBJECTION, WE SHALL NO LONGER PROCESS THE AFFECTED PERSONAL DATA UNLESS WE CAN PROVIDE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH TAKE PRECEDENCE OVER YOUR INTERESTS, RIGHTS AND FREEDOMS, OR INSOFAR AS THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

INSOFAR AS YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSES OF DIRECT ADVERTISING, YOU RESERVE THE RIGHT TO FILE AN OBJECTION AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT ADVERTISING. INSOFAR AS YOU FILE AN OBJECTION, YOUR PERSONAL DATA SHALL THEN NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING.

(3) Right of appeal to a supervisory authority

In the case of violations of the GDPR, the data subject is entitled to a right of appeal to a supervisory authority. The right of appeal is without prejudice to any other administrative or judicial remedies.

(4) Information, deletion and rectification

You at any given time reserve the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing, as well as a right to rectification or deletion of this data. For further information on personal data, please contact us at any time under the address provided in the legal notice.

(5) Right to restriction of processing

You at any given time reserve the right to request the restriction of the processing of your personal data. You can contact us at any time under the address provided in the legal notice. The right to restrict processing exists in the following cases:

  • Insofar as you challenge the accuracy of your personal information stored with us, we usually need time to verify this. For the duration of the audit, you reserve the right to request the restriction of the processing of your personal data.
  • Insofar as the processing of your personal data is unlawful, you reserve the right to request the restriction of data processing instead of the deletion.
  • Insofar as we no longer require your personal information, but you need it to exercise, defend or assert a claim, you reserve the right to request that the processing of your personal information be restricted instead of deleting it.
  • Insofar as you have filed an objection pursuant to Art. 21 (1) GDPR, a weighing-up of your and our interests must be carried out. As long as it is not clear whose interests prevail, you reserve the right to demand the restriction of the processing of your personal data.

Insofar as you have restricted the processing of your personal data, this data – without prejudice to its storage – may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for important public interests of the European Union or a Member State.

(6) Right to data portability

You reserve the right to have data that we automatically process on the basis of your consent or in fulfilment of a contract transmitted to you personally or to a third party in a standard, machine-readable format. Insofar as you require the direct transmission of the data to another controller (responsible entity), this shall only be done to the extent technically feasible.

§ 3 Access rights of the APP

To provide our services through the APP, we require – in each case only if you use the corresponding feature and grant access in iOS – the access rights listed below, which allow the APP to access specific functions of your device:

  • Photo library: for camera backup and for uploading photos and videos to your own servers.
  • Camera: for the document scanner.
  • Face ID / Touch ID: for the optional app lock. Biometric evaluation is performed exclusively by iOS on your device; the APP does not receive any biometric data.
  • Local network: to reach servers on your home network (e.g. NAS devices).

Access to the device functions is required to ensure the functionality of the APP. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 (1) lit. f GDPR, your consent within the meaning of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG and – insofar as a contract has been concluded – the fulfilment of our contractual obligations (Art. 6 (1) lit. b GDPR).

The storage period for the data thus collected is regulated as follows: all content processed via these access rights remains locally on your device or is transferred directly to the servers you have configured. It is stored until you delete it yourself or uninstall the APP; this data is not transmitted to us.

§ 4 Collection of personal data within the framework of APP use

(1) General

The APP is designed to work without any first-party Viovenia servers and contains no analytics or tracking SDKs. We ourselves do not collect any personal data from you during APP use. The following data is processed exclusively locally on your device or in your personal iCloud:

  • Connection data (server address, username, settings): stored locally on the device; optionally synchronized between your devices via Apple’s CloudKit service in your personal iCloud.
  • Passwords: exclusively in Apple’s iCloud Keychain – never in the app database, never in logs, never on Viovenia servers.
  • Search index and text recognition (OCR): entirely local on your device; no content is transmitted to us or to third parties.
  • File contents: transferred only directly between your device and the WebDAV servers you have configured. You choose and operate these servers yourself; their respective operator is responsible for their data processing.

For iCloud synchronization (CloudKit, Keychain), Apple Distribution International Ltd. or Apple Inc. is the provider of the service; the data resides in your personal iCloud account, to which we have no access. The Premium subscription is handled entirely via the App Store (Apple); we do not receive any payment or account data from you. The legal basis in this respect is Art. 6 (1) lit. b GDPR.

The storage period is regulated as follows: local data remains stored until you delete it in the APP or uninstall the APP; data in your iCloud can be deleted via your Apple ID settings.

(2) Inquiry by e-mail

Insofar as you contact us (e.g. by e-mail to our support), your request including all resulting personal data (e.g. name, request) shall be stored and processed by us for the purpose of processing your request. The processing of this data is based on Art. 6 (1) lit. b GDPR, insofar as your request relates to the fulfilment of a contract or is required for the implementation of pre-contractual measures. In all other cases the processing is based on your consent (Art. 6 (1) lit. a GDPR) and/or on our legitimate interests (Art. 6 (1) lit. f GDPR), since we have a legitimate interest in the effective processing of requests addressed to us. The data sent by you to us by way of contact request remains with us until you request us to delete it, revoke your consent to storage or the purpose for data storage ceases to apply (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected. We shall not share your information without your consent.

§ 5 Data analysis

This APP does not use any analytics or tracking tools. No usage profiles are created and no usage data is transmitted to us or to third parties.

Status: July 2026