Please note: this page is a translation provided for your convenience. Only the German version is legally binding. You will find it at geier-it.eu/datenschutz-lagerbewegung.html.
The essentials in one paragraph: „Lagerbewegung“ is purely a client app. It connects exclusively to the inventory server whose address you enter yourself when logging in. There is no server operated by the app provider, no user account with the app provider and no transfer of data to third parties. The provider of the app receives no data from your use at any time. Advertising, tracking and analytics services are not included.
1. Controller for the app
Responsible for providing the app within the meaning of the General Data Protection Regulation (GDPR):
Anton Geier – Geier-IT
Untere Bergstraße 2, 55487 Sohren, Germany
E-mail: info@geier-it.eu · Phone: +49 (0) 152 042 02 892
Reference to the legal notice with further details.
The app provider is not responsible for the data processed on the inventory server you choose; the operator of this server is – as a rule, your employer. See section 7 on this.
2. How the app works
„Lagerbewegung“ is used for managing devices and inventory. The app is an independent client for servers with a Snipe-IT API.
- On first start you enter the address of the server the app should connect to, together with your user name and your personal API token.
- After that the app communicates exclusively with this one server. There is no fixed address and no connection to systems of the app provider.
- A user account on the respective server is required. Without access, the app cannot be used productively.
Demo mode
On the login screen you can start a demo with invented sample devices via „View demo“. No personal data whatsoever is processed in doing so:
- There is no connection to a server – neither to an inventory server nor to the provider.
- All data is invented and is held exclusively in the working memory.
- Nothing is stored on the device. The demo ends when the app is closed.
The demo serves solely to try out the operation. A dedicated Snipe-IT server is required for live use.
3. Data stored on your device
| Data | Where | How long |
|---|---|---|
| Server address | encrypted system storage | until uninstallation; when you log out it is kept for the next login and can be changed there |
| User name | encrypted system storage | until logout or uninstallation |
| API token | encrypted system storage | until logout or uninstallation |
| Logged-in account: name, user name and user ID | encrypted system storage | until logout or uninstallation |
| Device images from the inventory | App cache | managed by the operating system, at the latest until uninstallation |
This data is stored in the encrypted storage of the operating system (on Android in the EncryptedSharedPreferences via the Android Keystore) so that you do not have to log in again every time you start the app. On logout, the user name, API token and account details are completely removed from the device.
The details of the logged-in account are also kept locally so that the app starts and stays logged in even without a network connection – for example in a cellar, in a warehouse or on the building site. Without a connection the app shows a notice about this; you are logged out only if the server explicitly rejects your token.
4. Data transfer to the server you choose
All business data is exchanged exclusively between your device and the server you entered,
always over a TLS-encrypted HTTPS connection. The app does not permit unencrypted connections
(http://).
What is transferred is:
- your API token for authentication with every request
- your bookings: checking out a device to your user, transferring it, returning it to stock including the selected condition
- search queries for device or serial numbers
From the server the app receives device data (device number, serial number, model, category, status, device image) as well as the information as to which user a device is currently assigned. The names of other employees may also be displayed in the process.
For technical reasons every request also transmits the IP address of your device to the server. How long the server logs this is determined by its operator.
5. Camera
For scanning QR codes and barcodes the app requests the camera permission.
- The camera image is evaluated exclusively in real time in order to recognise a code.
- The recognition runs entirely on your device (Google ML Kit Barcode Scanning, embedded locally in the app). No external connection is required for this.
- No photos or videos are taken, stored or transferred – neither to the inventory server nor to third parties.
- Only the recognised character string, i.e. the device or serial number, is sent to the server.
- The app can also be used without camera access: device and serial numbers can be entered manually.
6. What the app does not do
- No advertising. No advertising networks are integrated.
- No tracking, no analytics. No analytics, crash-reporting or statistics services are integrated.
- No disclosure to third parties. Data goes exclusively to the server that you entered yourself.
- No transmission to the app provider. Geier-IT does not operate a server for this app and receives no usage data whatsoever.
- No location, no contacts, no microphone, no access to the photo gallery.
Requested permissions at a glance
| Permission | What for |
|---|---|
INTERNET | Connection to the inventory server entered |
CAMERA | Live recognition of QR codes and barcodes on the device |
The app does not request any further permissions.
7. Responsibility for the inventory data
The actual inventory, assignment and booking data is stored on the server you enter in the app. The controller within the meaning of the GDPR for this data is the operator of this server – in a business context therefore your employer, not the provider of the app.
Requests for information and deletion regarding inventory data should therefore also be addressed to this operator. You will receive separate data protection information about this from your employer.
Note for companies deploying the app: the app makes it traceable who took over which device and when. Such data may be suitable for monitoring behaviour or performance. Where a works council exists, its introduction is regularly subject to co-determination pursuant to § 87 (1) no. 6 BetrVG.
8. Legal bases
Insofar as the app provider processes data – which concerns exclusively the local storage on your device according to section 3 – this is based on:
- Art. 6 (1) (b) GDPR – provision of the function you requested
- Art. 6 (1) (f) GDPR – legitimate interest in a functional and secure application
For the processing on the inventory server, § 26 (1) BDSG regularly applies in addition, insofar as the app is used within an employment relationship. The server operator is responsible for this (section 7).
9. Storage period
- On the device: see the table in section 3.
- On the server: according to the requirements of the respective operator and the statutory retention periods.
10. Your rights
You have the following rights vis-à-vis the respective controller:
- Information about the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to the processing (Art. 21 GDPR)
For matters concerning the app, please contact info@geier-it.eu. For inventory data on the server, please contact its operator (section 7).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the one of your place of residence or that of the controller.
11. Deleting data
- Data on the device: in the app under Settings → Log out, the user name and API token are removed. When the app is uninstalled, all local data including the server address and the image cache is deleted.
- Data on the server: an informal request to the operator of the server. Deletion takes place unless statutory retention obligations prevent it.
- With the app provider there is no data that could be deleted.
12. Changes to this policy
This privacy policy is adapted if the app or the legal situation changes. The current version is always available at this address.
13. Note on trademarks
„Lagerbewegung“ is an independently developed client for servers with a Snipe-IT API. The app has no connection to the Snipe-IT project and is neither operated nor supported by it. The product names mentioned are trademarks of their respective owners.
Last updated: 1 July 2026 · This policy applies exclusively to the „Lagerbewegung“ app. The general privacy policy applies to the website geier-it.eu.