Privacy Policy

1. Controller Information

The owner and operator of the 4sf application is:

• Full Name: GASETI inženiring d.o.o.
• Headquarters: Brezovica pri Ljubljani, Slovenia
• Contact Email: info@gaseti.si

2. What Personal Data Do We Collect?

The 4sf application collects only the data strictly necessary for the seamless execution and proof of field services provided:

• User Account Data: First and last name of the field worker, email address, and access password.
• Working Hours Data: Start and end times of individual services or daily activities in stores.
• Location Data (GPS): During operation, the application logs the device's geographic location at the start, during, and at the end of service execution to confirm that the service is being performed at the agreed location (in store).
• Photos and Reports: Photos of the condition after service completion taken by the field team using the camera or uploaded from the device, along with answers to specific report questions.
• Technical Data: Device information (model, operating system) and IP address for ensuring application security and diagnosing technical errors.

3. Purpose and Legal Basis for Data Processing

We process personal data for the following purposes:

• Contract Execution and Client Reporting (Article 6(1)(b) GDPR): Data regarding performed work, timestamps, report answers, and photos are collected to provide the client with immediate visibility into activities and proof of completed service.
• Legitimate Interest for Compliance Verification (Article 6(1)(f) GDPR): Location logging (GPS) at the start and end of work is essential to ensure service quality and prove to the client that the service is actually performed at the agreed location in accordance with the contract.
• Billing and Cost Control: Data serves as the official basis for the financial billing of performed work and cost control for the client.

4. Who Has Access to the Data (Data Recipients)?

Access to data collected via the 4sf application is strictly restricted:

• Administrator of GASETI d.o.o.: Reviews all submitted reports and photos prior to their final publication.
• Service Client: Through a dedicated web portal, the client has access to approved specific reports, timestamps, work execution locations, and a photo gallery to analyze the completed work.
• Technical Maintainers: Hosting providers and IT support vendors (contracted data processors) who ensure the secure operation of the application's infrastructure and are bound by strict confidentiality obligations.

We never sell or forward data to third parties for marketing purposes.

5. Data Retention

We retain personal data and field reports only for as long as necessary to fulfill the purposes for which they were collected (e.g., for the duration of the contractual relationship with the client and the period during which legal claims arising from the performed work are possible), or until the deletion of the user account, unless applicable law (e.g., accounting regulations) requires longer retention.

6. Data Security

GASETI d.o.o. implements appropriate technical and organizational measures to protect collected data against loss, destruction, tampering, unauthorized access, or unauthorized disclosure. All data transfers between the mobile application, server, and client web portal are encrypted.

7. Your Rights (Data Subject Rights under GDPR)

As a field worker or application user, you have the following rights regarding your personal data:

• The right to access your data and export reports.
• The right to rectify inaccurate data.
• The right to erasure ("right to be forgotten") if the data is no longer needed for the purposes for which it was collected.
• The right to restriction of processing and the right to data portability.
• The right to object to processing based on legitimate interest.

You can exercise all these rights by contacting us at our official email address: info@gaseti.si. If you believe your rights have been violated, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec RS).

8. Changes to the Privacy Policy

We reserve the right to periodically update this Privacy Policy in the event of technological updates to the 4sf application or statutory changes. You will be notified in a timely manner within the application regarding any material changes.