Skyresponse Alarm application
Privacy policy – Alarm App
This privacy policy describes how your personal data is being collected, used and shared when using the mobile alarm application (“application”). This privacy policy also describes your rights regarding your personal data.
The purpose of the application is to put an alarming user in direct contact with a selected response center or with a colleague, by pressing an alarm symbol displayed on the phone. Personal data will only be processed as necessary for the purpose of the application, such as your location data to enable the response center or colleague to locate you in case of emergency.
The data controller for the processing activities described in this privacy policy is your employer. Your employer decides the means and purposes for the processing and will only share your personal data with trusted third parties as necessary to use the application.
If you have any questions regarding your personal data and the employer’s processing thereof, please contact your employer with your question directly.
Collection of personal data
The following categories of personal data will be collected and processed in order to deliver a fully functioning application, as described below. The personal data is collected directly from you and your mobile phone, unless otherwise specified.
Account information & phone number
To use the application you will need an account. When you use the application for the first time you will be prompted to input your mobile phone number and a personal code (given by your employer). The code you have received will, once used, link your account with any additional personal data that you have submitted for this application to your employer.
The account information, including your mobile phone number, is needed for the purposes of identifying you when you trigger an alarm and to enable direct communication between you and the response center, which both are in the legitimate interest of the employer and the legal basis for the processing of the account information and phone number.
The account information, phone number and data about the calls will be stored in encrypted format by the cloud-based alarm system for logging purposes and the information can only be accessed by especially authorized personnel. The phone number can only be accessed by the co-workers belonging to the same organization as the one using the application.
The application will request microphone access to handle audio data, as described below.
Audio data
In the application you have the option to pre-record an audio message. The message is sent to your designated point of contact as additional information when an alarm is activated from the application. The recorded audio message can be deleted by your option and will otherwise be stored until a new message is recorded.
Location data
The location data will show both your precise and approximate location, based on GPS-data, Wi-Fi connections and mobile network data. The core functionality of the application is to provide help to users in direct need of assistance. The position is tracked in background location mode, so that the emergency service is able to find the person who needs help, even if the user is unable to provide that information. Without the function of background locations enabled, which means that the location data is collected even when the application is not being used, the application will not be able to show the actual location of the person who needs help.
The location data will be used as described below:
- Location is collected in background mode and stored in the application.
- When the user triggers an alarm, location data is sent to the response center so that the operator can locate and assist the alarming user. It includes:
- Previous locations collected before the alarm
- Location when the alarm was triggered
- The location is collected as long as the alarm is active, even if the application is in background mode
- When the alarm is deactivated the application will no longer send location data to the response center, i.e location data is only sent during active alarms and only to the designated response center.
All location information is sent and stored in an encrypted format and is only made available to authorized operators who have logged in to the response center and are involved in the processing of the alarms.
The legal basis for the processing of your location data is your consent, which you provide within the application.
SMS and Alarms
The alarms are sent as data traffic and as SMS. Having redundant communication paths increase reliability significantly, which is in the legitimate interest of the employer and the legal basis for the processing.
Photos
The application requests access to stored photographs to be able to send the last photograph taken, to enable more efficient assistance by the response center. The legal basis for the processing of the photographs is your consent, which you provide within the application.
Sharing your personal data
To be able to provide you with the application we need to share your personal data with other trusted individuals and third parties. This includes, among others, our employees, consultants and suppliers who help us to provide the application
Our suppliers and subcontractors are not authorized by us to use or disclose your personal data except as necessary to perform services on our behalf or to comply with legal requirements.
Storing your personal data
We keep your personal data only as long as necessary to fulfil the purposes for which it was collected. We regularly review our need to keep data, taking into account applicable legislation.
Your personal data will be stored for as long as you keep your user account. Upon termination of the account, your data will be stored for the time decided by your employer, due to technical and administrative reasons.
Personal data processed on the basis of your consent will be deleted when your consent is withdrawn or upon expiry of the purpose for which your consent was given.
We also store data to the extent we believe it is necessary to protect our legal rights, legitimate interests and the interests of others, e.g. if we notice abuse of the application. Your data may also be stored for a longer period if required by applicable statutory retention periods.
Your rights
If you suspect, or consider, your personal data is being processed wrongfully, or that the personal data being processed is inaccurate, you should contact the employer directly and request that the data is rectified, erased or that processing is restricted (as applicable). You may also request a copy of your personal data being processed and withdraw your given consent at any time.
In certain situations, you have the right to data portability, meaning that your data is transferred directly (or via yourself) from the employer to another controller in a structured, commonly used and machine-readable format.
You also have the right to file a complaint with the supervisory authority.
Data Protection Officer (DPO) Contact:
For any questions, concerns, or requests regarding the processing of your personal data, you may contact our Data Protection Officer (DPO) at: dpo@skyresponse.com