Privacy Policy

for the app “K1 Galerien Köln”
(hereinafter referred to as the “K1 App”)

Last updated: August 16, 2026

1. Controller

The controller responsible for the processing of personal data in connection with the K1 App and for its technical development is:

Michael Rogulla
Engelbertstr. 12
50674 Cologne
Germany

Phone: +49 (0)221 2719236
Email: info@michael.rogulla.de

The respective artists and event organizers are responsible for the rights to and accuracy of the content displayed in the K1 App, including information about exhibitions, artists, events and image credits. The K1 App displays, among other things, content provided by artists and galleries.

2. Purpose and scope of the app

The K1 App is a digital guide for a gallery tour in Cologne, Germany.

The app is officially offered through both the Google Play Store and the Apple App Store.

No registration or user account is required to use the K1 App. No personal information needs to be entered for normal use of the app.

The K1 App is developed using the no-code development platform Thunkable and is provided for Android and iOS.

3. Processing of personal data by the operator

The operator of the K1 App does not generally collect personal data through the app for the purpose of creating user profiles.

In particular, the K1 App does not create user accounts or personal profiles.

The K1 App does not provide functions for entering or storing names, email addresses, telephone numbers or similar personal information.

This does not affect voluntary communication with the operator, for example by email. If a user contacts the operator, the personal data provided in that communication will be processed to handle the respective request.

4. Location data

The K1 App may use the location of the mobile device when location-based functions are used.

Access to the device location requires the user's permission through the respective operating system.

Location data is used in particular to support orientation during the gallery tour and to provide location-based navigation functions.

The K1 App does not create a personal movement or location profile and does not permanently store location data on servers operated by the K1 App operator.

Route planning

If a user requests directions from their current location to a gallery, the K1 App creates a specially constructed URL for Google Maps. This URL contains the location information required for route calculation.

By opening this URL, a connection to Google is established. The information contained in the URL may be transmitted to Google and processed by Google.

The K1 App does not permanently store this location or route information on its own servers.

Users can change or revoke the location permission at any time through the settings of their mobile device. Without location permission, location-dependent functions may not be available or may only be available to a limited extent.

5. Google Maps SDK

The K1 App uses Google Maps Platform and the Google Maps SDK to display maps and provide map-related functionality within the app.

The Google Maps SDK is integrated into the Android and iOS versions of the app.

When the Google Maps SDK is used, technical information may be transmitted to and processed by Google. Depending on the platform, SDK version and specific use, this may include information about the device being used, IP address, technical usage information, diagnostic or crash information, and information relating to the use of map functions.

When location-based functions are used, location information may also be processed.

The specific processing carried out by Google is governed by Google's privacy policy and the technical terms applicable to Google Maps Platform.

Further information:

Google Privacy Policy:
https://policies.google.com/privacy?hl=en

Google Maps Platform – Security and Compliance:
https://developers.google.com/maps/security/compliance/security-compliance

We do not have complete control over the processing of personal data carried out by Google.

6. Google Maps for route planning

The route-planning function does not use the Web Viewer contained in the K1 App.

Instead, the K1 App opens a specially constructed Google Maps URL for this purpose.

When Google Maps is opened, information required for route calculation may be transmitted to Google. This may include, in particular, the starting point or current location, the destination and technical connection data.

Any subsequent processing by Google is governed by Google's privacy policy.

Google Privacy Policy:
https://policies.google.com/privacy?hl=en

7. Web Viewer

The K1 App uses the Web Viewer component provided by Thunkable.

The Web Viewer is used exclusively to display HTML pages created by the operator containing information about galleries, artists, exhibitions and other content within the app.

The Web Viewer does not display freely accessible external websites.

The HTML pages displayed in the Web Viewer contain content created or provided for the K1 App by the operator.

The Web Viewer is not used for advertising, user profiling or displaying external websites.

8. iOS tracking permission request

The iOS version of the K1 App may display a system-level tracking permission request due to technical requirements of the Web Viewer component used through Thunkable.

The K1 App uses the Web Viewer exclusively to display its own HTML content provided within the app. The K1 App does not use personalized advertising and does not create personal advertising profiles.

The operator of the K1 App does not use information collected through the app to track users across different apps or websites for advertising purposes.

The technical function and associated iOS permission request provided by Thunkable may not be configurable or removable by the operator within the no-code development environment.

9. Firebase Realtime Database

The K1 App uses the Firebase Realtime Database provided by Google.

The database is used by the app exclusively for reading data. The K1 App does not write user data or usage data to the Firebase Realtime Database.

The database is used to provide data required for the operation or content of the app.

The K1 App does not store personal user profiles or personal location profiles in this database.

Firebase Analytics is not used by the K1 App.

The processing of data by Google Firebase is additionally governed by Google's privacy policy.

Google Privacy Policy:
https://policies.google.com/privacy?hl=en

10. Other device functions

The K1 App requires access to the device's location when location-based functions are used.

The K1 App does not access personal media stored on the device, including photos, videos or personal files.

Such content is not used by the K1 App.

11. App stores

The K1 App is offered through the Google Play Store and the Apple App Store.

When the app is downloaded, installed or updated, the respective app store operator may process personal and technical data.

Depending on the provider, this may include information about the device being used, the user's account with the respective store, IP address, and information about downloads and updates.

We do not have complete control over this processing.

The respective privacy policies of the app store operators apply:

Google:
https://policies.google.com/privacy?hl=en

Apple:
https://www.apple.com/legal/privacy/

12. Thunkable

The K1 App is developed using the Thunkable no-code development platform and is provided for Android and iOS.

By using Thunkable, technical components and services provided by Thunkable may form part of the K1 App.

The processing of personal data by Thunkable is governed by Thunkable's privacy policy.

The operator of the K1 App does not have complete control over technical data processing carried out by the development and runtime environment provided by Thunkable.

Further information:

https://thunkable.com/privacy-policy

13. Disclosure and transmission of data

The operator of the K1 App does not sell personal data and does not provide personal data to third parties for advertising purposes.

When certain app functions are used, data may nevertheless be technically transmitted to external service providers. This particularly concerns:

The respective providers process data in accordance with their own privacy policies and, where they are independently responsible for the relevant processing, under their own legal responsibility.

14. International data transfers

When using services provided by Google, Thunkable or other technical service providers, personal data may be processed in countries outside the European Economic Area (EEA).

The respective providers may use appropriate legal mechanisms and safeguards for international data transfers as required by applicable data protection law.

For further information, please refer to the respective providers' privacy policies.

15. Data retention

The operator of the K1 App does not generally permanently store personal user data collected through the app.

In particular, the K1 App does not create personal user profiles or personal movement profiles.

Location data used by the K1 App is not permanently stored on servers operated by the app operator.

If a user voluntarily contacts the operator by email, the personal data contained in that communication will be processed and stored for as long as necessary to handle the request or as required by statutory retention obligations.

For data processed by external services such as Google, Firebase or Thunkable, the respective providers' retention and deletion policies apply.

16. Legal bases

Where the operator processes personal data itself, such processing is based on the applicable provisions of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Where access to location data requires consent, the access is based on the consent or device permission granted by the user.

Processing by external service providers such as Google or Thunkable may be based on a separate legal basis applicable to the respective provider.

17. Your rights

Subject to the applicable legal requirements, you have in particular the following rights:

To exercise your rights with regard to processing for which the operator of the K1 App is responsible, you may contact the responsible person named above at any time.

Where personal data is processed directly by an external provider such as Google, Apple or Thunkable, you may also have rights that can be exercised directly against that provider.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

18. Data security

We take appropriate technical and organizational measures to protect personal data for which we are responsible against loss, misuse, unauthorized access and other unauthorized processing.

For data processing carried out within services provided by external providers, their respective security measures and privacy policies also apply.

19. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy if the functions of the K1 App, the technical services used or the applicable legal requirements change.

The version of this Privacy Policy published at the time of use shall apply.

Last updated: August 16, 2026