Devinco is both data processor and data controller. This means that the company collects, stores and processes personal information on behalf of both our own and our customers. This privacy statement describes the conditions for such processing of personal data.
Website, privacy and cookies
All Devinco’s products collect and process personal information on behalf of our customers. This means that Devinco is a data processor, and our customers are responsible for processing. For this reason, Devinco enters into a data processor agreement with each individual customer that regulates confidentiality, information security, non-conformance management, impact analysis and deletion of personal data.
The legal basis for this processing is the Norwegian law Personopplysningsloven §8.
Devinco develops its products on the principle of built-in privacy and enables data controllers to delete information stored both automatically and manually.
Location data in SiteMonitor app
The SiteMonitor app uses Location data to determine whether or not the user is on a construction site or not. The app does not send the location of the user to the server to be processed. Instead, all the building sites of the employee’s company are sent from the server to the user’s device. The employee can then himself choose for which building sites he wants to activate monitoring. What is sent to the server is only that he has entered or left the building site, including timestamps and site id. If the employee doesn’t set any building sites active in the app, then no data about logging in to sites is sent to the server.
This way, we have fully prevented the employee’s accurate location being sent to a server, or being shared with their employer. Even within the building site, their exact location is not sent to a server. The company will only know whether their employees are present at the building site or not. As it is important for Health, Security and Environment reasons that the list of people at the site is correct at all times, it is necessary to use the most accurate location available when evaluating this on the device. In addition, the app needs to use background location to make sure the user’s presence at sites is updated automatically also when the user is not actively using the app, which is basically the entire purpose of this app.
Devinco processes information about customers contact persons that is necessary for entering into an agreement and performing necessary services related to the agreement.
The legal basis for this processing is Norwegian law Personopplysningsloven § 8 letter a), b) or f).
The customer information is stored for as long as the customer relationship lasts and is deleted five years after the end of the customer relationship.