Weasy WorkApp privacy policy

Who is responsible

You get access to the WorkApp through your employer or the organisation you work for. That organisation creates your account and decides which parts of the app you see and which data goes into it. It is therefore the controller of your personal data. House of Business builds, hosts and maintains the app on behalf of that organisation and acts as processor: we process the data according to the arrangements with your organisation. Questions about how your organisation uses your data should go to your organisation. Questions about the app itself can also be sent to us at info@houseofbusiness.nl.

Which data the app processes

The app only processes data needed for the parts your organisation uses:

• Account data: your name, email address and password. Your password is stored as a code from which the password cannot be recovered. Nobody can read it, including us and your organisation.
• Profile data: mobile phone number, date of birth, job title, department, profile photo and the groups you belong to, as far as your organisation fills these in. Colleagues can see your name, profile photo, email address, phone number, job title, department and date of birth in the app's contact list.
• What you enter in the app: answers to tasks and forms, such as work orders, checklists and safety forms, including the photos you add. Your organisation's administrators can see what you fill in.
• Usage data: the time at which you open and close the app and when you start and complete a task or form. This lets your organisation see whether tasks and forms have been done. We also use the number of active users to invoice your organisation.
• Device data: the type and name of your device (which often includes your first name) and a push token, a code that lets the app deliver messages to your device.

Camera and photos

The app asks for access to your camera or photo library when you want to add a photo to a task, a form or your profile. Only the photos you choose or take are sent to the app. You can refuse this access or withdraw it later in your phone's settings. The app does not use your location or your microphone.

What the data is used for

To make the app work: signing you in, showing you your organisation's news, calendar, tasks and forms, and sending push notifications. To maintain and secure the app: detecting and fixing faults and preventing misuse. And to invoice your organisation based on the number of active users. The app contains no advertising and no analytics or crash reporting services from other companies. We do not sell your data and do not track you across other apps or websites.

Where the data is stored

The app's data, photos and technical logs are stored in Microsoft Azure, in House of Business's own environment, in data centres in the European Union. For push notifications and app updates we use Expo, a service of 650 Industries in the United States. A push notification goes through Expo to the push service of Apple (iPhone) or Google (Android). Expo, Apple and Google receive your push token and the title and text of the message, as written by your organisation. When the app updates, Expo receives technical data from your device, such as the IP address and app version. No other parties receive data, unless the law requires us to share it.

How long data is kept

Your data is kept for as long as your organisation uses the WorkApp and your account exists. If your organisation deactivates your account, you can no longer sign in. Your data is deleted as soon as your organisation or you ask for it. Completed forms and work orders may be part of your organisation's records. Your organisation decides how long these are kept.

Deleting your account and your rights

Your account is created and managed by your organisation. To have your account and data deleted, or to access, correct or restrict the processing of your data, send your request to your organisation. You can also object to the processing. If you send a request to us at info@houseofbusiness.nl, we will forward it to your organisation without delay and help handle it. You will receive a response within one month. You can update part of your profile yourself in the app. If you are not satisfied with how your data is handled, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

Traffic between the app and our servers is encrypted and the data is stored encrypted. Access to the data is limited to your organisation's administrators and the House of Business staff who need it for maintenance and support. How we approach security more broadly is described on the How we work securely page at houseofbusiness.nl.

Changes

This policy may change when the app or our services change. The date at the top shows the latest version.