Privacy at Henga

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

Henga connects your NAS shares to your Mac and keeps them connected. Everything you enter for that stays on your Mac. I run no server for Henga; there is no account, no analytics, no advertising and no crash reports to third parties. I receive nothing from you through the app.

What is stored on your Mac

Henga stores the address, user name and password of your server as well as your settings and connection profiles. Passwords are kept in the macOS keychain, everything else in the app’s local settings. I have no access to any of it.

To the extent I process anything at all, the legal basis is Art. 6(1)(b) GDPR: the app needs these details to do what you ask of it.

Connecting to your server

Henga only talks to the server you enter yourself, for example your NAS at home. User name, password and, if you use it, your two-factor code go there. What your server does with them is up to you as its operator.

Mac App Store

You download the app from the Mac App Store; whatever Apple processes there (for example about download and purchase) is Apple’s own responsibility.

Apple Distribution International Ltd.

Hollyhill Industrial Estate, Hollyhill, Cork, Ireland

Transfers to a country outside the EU are based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Provider’s privacy policy

Retention and deletion

The details stay until you delete them in the app or remove the app. You can also view and delete stored passwords at any time in the macOS keychain. Because I hold no data about you, you exercise your rights for the app directly by deleting the data on your Mac; for questions, reach me at the address above.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.