InOut (hereinafter, the Application) is an application owned by Técnicas y Servicios de Ingeniería y Control del Norte S.L. (hereinafter, Tesicnor) whose purpose is to allow the owners of a company (hereinafter, the Client) to control the flow of entries and exits of subcontracted personnel in their facilities (hereinafter, the Brigade), as well as to have precise information on the location of the Brigade for the purposes of safety and prevention of occupational hazards, all in coordination with T-Doc.

Tesicnor, as developer and owner of the Application, makes it available to the Client so that the latter may collect and process the data that the Brigade provides, generates or to which it has access through the Application for the aforementioned safety and occupational risk prevention purposes. Tesicnor, as data processor, will only process the data in accordance with the Client’s instructions, the latter being the recipient and sole party responsible for the processing of the Brigade’s personal and non-personal data collected through the Application.

In relation to the collection of your data, we inform you that in the event that it is not necessary to provide all the data requested, those fields that must be completed will be identified with an asterisk, the rest being completely voluntary. Likewise, when it is necessary to use a specific functionality of your terminal, you will be asked for permission to use it and in the case of location, for example, you will be additionally informed when the data collection starts and when it is no longer necessary to continue sharing it.

Likewise, we indicate that when the legal basis for the processing is your consent, it will be free and informed, so you will always be asked for your agreement or refusal to the processing once you have received all the information about it. Once you have given your consent, you may withdraw it at any time without this affecting the lawfulness of the processing prior to the withdrawal. Likewise, the fact of not granting your consent will not affect the rest of the processing.

1.1. IDENTIFICATION AND CONTACT DETAILS OF THE OWNER OF THE APPLICATION

Identity: Técnicas y Servicios de Ingeniería y Control del Norte S.L.
Postal address: Polígono Industrial Mocholí, Nave 13 E, Calle Río Elorz – 31110, Noáin TAX
IDENTIFICATION NUMBER: B31763899
Telephone: 948214040 / FAX: 948214041

Email: contacto@tesicnor.com.

1.2. TREATMENTS

Treatment

Categoría y forma de captación

Legal basis -General Data
Protection Regulation

Conservation
period

Identify you as an authorised user and allow you access to the Application. As well as linking your activity in the Application with your profile. We inform you that the alias and password of the brigade are generated from the identification data provided by the contractor company to the Client through the T-Doc business activity coordination platform.

Through the login form: Identification data;

6.1.b) The processing is necessary for the performance of a contract.

Your data will be retained for the duration of the relationship and/or the service, and after the end of the service for as long as there is legal liability in relation to the processing.

Information on the location of the Brigade at the Client’s premises. The Application registers the location after the brigade activates the «Check in» button, and stops registering this location when the «Check out» button is pressed or in the event that the location is registered as being outside the perimeter of the Client’s premises.

While the location is being transmitted, the Application generates a message on the brigade’s terminal informing them of the communication.

Location information is sent to the Client so that the Client can monitor in real time where all subcontractors are located for the purpose of managing the performance of the work entrusted and ensuring the safety of such personnel in case of risk or danger.

Geolocation system: Continuous capture of the user’s real location both during the use of the Application and when it is used in the background as long as it is within the Client’s facilities.

6.1.b) The processing is necessary for the performance of a contract.

6.1(a) The data subject gave consent to the processing.

Connection and synchronisation of the Application. The Application sends the location information to the backend where it is stored and processed for real-time viewing by the Client via the InOut website.

Only the location data of the brigades within the boundaries of the Customer’s premises are stored and communicated.

This processing is essential for the data to be sent to the website in real time and to be viewed by the Customer.

Connection to mobile data or wireless network.

6.1.b) The processing is necessary for the performance of a contract.

1.3. ADDRESSEES

1.3.1. Will my data be communicated or transferred to third parties?

As indicated in the heading of this policy, we inform you that the data generated through the use of the Application is collected and processed on behalf of the Client, i.e. the company that owns the facilities where you, as a Brigade, are going to carry out the work entrusted to you. The Client, as the data controller, will receive and process the data that you, as a Brigade, generate and provide through the Application.

In general, unless legally obliged to do so, your data will not be communicated or transferred to any third party without your express consent. In any case, some communications and/or transfers of data to third parties may be imposed by certain regulations. Other communications and/or transfers will be a necessary consequence of the provision of the service, in which case we express our commitment to formalise with said third parties, where appropriate, the mandatory data processing agreement required by current legislation.

1.3.2. Providers of services related to the Application

Supplier identification

Activity carried out

OVH HISPANO SL

Data storage.

Application backend hosting.

Hosting of the InOut Web site

1.4. RIGHTS

1.4.1. What are my data protection rights? General information

With regard to the personal data collected for processing, we inform you that you have the possibility of exercising your rights of access, rectification, deletion and portability against the data controller (the Client). We also inform you that in certain circumstances you have the right to request the limitation or opposition to the processing of your data.

If you would like more information on the aforementioned rights, we invite you to read on or visit the infographic produced by the Spanish Data Protection Agency, which can be accessed via the following hyperlink.

1.4.2. How and where can I exercise them?

We will be happy to deal with any queries or complaints you may have regarding data protection and to pass them on to the data controller so that they can deal with them as soon as possible. You may address your complaint or exercise your rights to the Client through the channels that the latter has enabled for this purpose and through any of the contact channels indicated in the section «Identification and contact details of the owner of the Application» of this policy. In the event of sending your claim or exercise of rights to Tesicnor, we inform you that we will transmit them to the Client so that they can deal with them and contact you, it being the Client’s responsibility to deal with the communications and exercise of rights.

Similarly, you can also contact the supervisory authority you consider appropriate to lodge your complaint (for example, in the country where you have your habitual residence, place of work or where you consider that the alleged infringement has occurred). For the appropriate purposes, we inform you that in Spain the Supervisory Authority is the Spanish Data Protection Agency, and you may exercise your rights through the forms that this entity has set up for this purpose and which are available at its electronic headquarters.