Skyresponse Developer: Response mobile application
Privacy policy
This privacy policy describes how your personal data is being collected, used and shared when using the response application (“application”). This privacy policy also describes your rights regarding your personal data.
The purpose of the application is to receive alarm information from a response centre or directly from an alarming user and display recommended actions to the respondent using the application. As a user of the application, you will see all incoming alarms as an alarm list in your mobile phone, with both a map and navigational support to get to the alarming user.
The data controller for the processing activities described in this privacy policy is your employer. Your employer decides the means and purposes for the processing and will only share your personal data with trusted third parties as necessary to use the application.
If you have any questions regarding your personal data and the employer’s processing thereof, please contact your employer with your question directly.
Collection of personal data
The following categories of personal data will be collected and processed in order to deliver a fully functioning application, as described below. The personal data is collected directly from you and your mobile phone, unless otherwise specified.
Account information & phone number
To use the application you will need an account. When you use the application for the first time you will be prompted to input your mobile phone number and a personal code (given by your employer). The code you have received will, once used, link your account with any additional personal data that you have submitted for this application to your employer. The phone number, at which you can be reached, can be the number of the mobile phone with the application or any other phone number you may prefer to get called on.
The account information, including your mobile phone number, is needed for the purposes of identifying who is responding to an alarm and to enable direct communication between you and the alarming person. The number can also be used to enable other co-workers using the same type of application to call you during alarms and also to set up calls to other persons using the application during an alarm. These purposes are in the legitimate interest of the employer and the legal basis for the processing of the account information and phone number.
The account information, phone number and data about the calls will be stored in encrypted format by the cloud-based alarm system for logging purposes and the information can only be accessed by especially authorized personnel. The phone number can only be accessed by the co-workers belonging to the same organization as the one using the application.
The application will request microphone access to handle phone calls, as described above.
Location data
The location data will show both your precise and approximate location, based on GPS-data, Wi-Fi connections and mobile network data. The core functionality of the application is to provide help to alarming users in direct need of assistance. The location data is therefore collected for alarms to be treated in the most optimal way, e.g. by assigning the alarm to the respondent that is closest to the alarming user.
Location data is also used to show other co-workers where the respondent with the application is located, to facilitate collaboration between respondents.
The application can collect location data in background mode, which means that the location data is collected even when the application is not being used. The user can use the app without allowing background location permission. The app provides active choice for users: using in background mode or not. However, retrieving location in foreground mode only, i.e. when the application is active, would not allow response centre operators and other application respondents to see who is closest to the alarming user.
The location data collected in background mode will be used as described below:
- Location is collected in background mode and stored in the application.
- When an alarm is triggered, your location data is matched with the alarm’s location data, so that system or a response center operator can assign the best respondent.
The location data is always sent in an encrypted format and is only made available to persons involved in the processing of the alarms as respondents in the same organization using the application.
The legal basis for the processing of your location data is your consent, which you provide within the application.
NFC tags
The application can read NFC tags to report that the respondent using the application is present at an alarming object.
This information, the presence reports, is stored in encrypted format by the cloud-based alarm system. The reports can only be accessed by especially authorized personnel.
Camera
The application requests access to the camera to be able to use the associated camera flash to signal high priority alarms. The camera is not used in any other way by the application; hence no personal data is processed.
Sharing your personal data
To be able to provide you with the application we need to share your personal data with other trusted individuals and third parties. This includes, among others, our employees, consultants and suppliers who help us to provide the application
Our suppliers and subcontractors are not authorized by us to use or disclose your personal data except as necessary to perform services on our behalf or to comply with legal requirements.
Storing your personal data
We keep your personal data only as long as necessary to fulfil the purposes for which it was collected. We regularly review our need to keep data, taking into account applicable legislation.
Your personal data will be stored for as long as you keep your user account. Upon termination of the account, your data will be stored for the time decided by your employer, due to technical and administrative reasons.
Personal data processed on the basis of your consent will be deleted when your consent is withdrawn or upon expiry of the purpose for which your consent was given.
We also store data to the extent we believe it is necessary to protect our legal rights, legitimate interests and the interests of others, e.g. if we notice abuse of the application. Your data may also be stored for a longer period if required by applicable statutory retention periods.
Your rights
If you suspect, or consider, your personal data is being processed wrongfully, or that the personal data being processed is inaccurate, you should contact the employer directly and request that the data is rectified, erased or that processing is restricted (as applicable). You may also request a copy of your personal data being processed and withdraw your given consent at any time.
In certain situations, you have the right to data portability, meaning that your data is transferred directly (or via yourself) from the employer to another controller in a structured, commonly used and machine-readable format.
You also have the right to file a complaint with the supervisory authority.