Privacy Policy

This privacy policy applies to the Hanz mobile application and https://admin.hanz-app.de.
Here you will learn what personal data is collected when using the Hanz app and for what purposes it is processed.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
GBR Karahodza & Salaheddine
Lerchenstraße 49, 70176 Stuttgart, Germany
Email: ali.salaheddine@hanz-app.de

2. Data Collected

To use our application, we collect and process the following personal data:

2.1 Cookies

When logging in, we use technically necessary cookies for authentication and session management. These cookies are deleted when you log out.

2.2 IP Address & Browser Information

All access to our application is logged. The following data is collected:

IP address
Date and time
Browser request
Referrer sent by the browser
User agent sent by the browser
Operating system sent by the browser

This data is stored for security reasons for a period of 30 days.

2.3 Account Data

When creating an employee account, the following personal data is stored:

Name
Email address
Role within the company

This data can only be viewed by other employees of the same company. Employees with the role of Manager or Supervisor can create, delete, and edit accounts.

2.4 Projects & Tasks

When creating projects and tasks, the following data may be stored:

Name
Description
Location
Images
Recorded voice notes
Quotes/Specifications
Responsible employees

This data is only visible to employees of the same company. Employees can add, edit, and delete this data.

2.5 API Calls

To prevent misuse, we log the number of API calls made by each account. This data is deleted after 12 months.

3. Purpose of Data Processing

We process your data for the following purposes:

Provision and management of the application: To create user accounts and manage features such as projects and tasks.
Security and protection against misuse: To protect against abuse related to excessive use of the API.
User management: To manage user access rights and data within a company.

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

Performance of a contract (Art. 6 para. 1 lit. b GDPR): Processing is necessary to perform the contract concluded with users of the web application.
Legitimate interest (Art. 6 para. 1 lit. f GDPR): We have a legitimate interest in ensuring the functionality and security of our application.

5. Data Retention and Deletion

Data is only stored for as long as necessary to achieve the intended purposes:

Account data: Stored as long as the account is active. If the account is deleted, all associated data is erased.
API call data: Deleted after 12 months.
IP addresses and log data: Deleted after 30 days.

6. Your Rights

You have the right to exercise the following rights at any time under the GDPR:

Right of access to the personal data we store.
Right to rectification of inaccurate or incomplete data.
Right to erasure of your personal data, unless there is a legal obligation to retain it.
Right to restriction of processing in certain cases.
Right to object to the processing of your personal data.
Right to data portability: You may receive the data you have provided to us in a structured, commonly used, and machine-readable format.

To exercise any of these rights, you can contact us at: ali.salaheddine@hanz-app.de.

7. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, for example through SSL encryption.

8. Changes to This Privacy Policy

We reserve the right to amend this privacy policy if necessary. Changes will be published immediately on this page. Please check this page regularly to stay informed.

9. Contact

If you have any questions about the processing of your personal data or wish to exercise your rights, you can contact us at the following address:

GBR Karahodza & Salaheddine
Lerchenstraße 49, 70176 Stuttgart, Germany
Email: ali.salaheddine@hanz-app.de