Privacy Notice Support Security App

Last updated: January, 2025

Intro

Support Security Time Work z.o.o. (“SSTW” or “we”) welcomes you. This Privacy Notice (“Privacy Notice”) applies to our application (“App”) available in the App Store / Google Play.

The Privacy Notice describes how your personal data is collected, stored, and used and what happens when you use the App.

Content

About us

Name	Support Security Time Work z.o.o.
NIP (Tax Identification Number)	0001055108
Address	Ul. Grzybowska 87 , 00-844 Warszawa, pow. Warszawa, gm. Warszawa, woj. Mazowieckie
Email	support@sstwork.com – for general inquiries
	privacy@sstwork.com – for privacy inquiries

About you

You become our user when you use the App (“User”). We divide the Users into categories so you can easily find details about the processing of your personal data.

Type of User	Description
Partner	The User who is registered as a Partner in the App.
Intermediary	The User who is designated as Intermediary in the App.
Manager	The User who is designated as Manager in the App.
Foreman	The User who is designated as Foreman in the App.
Worker	The User who is designated as Worker in the App.
Please note! We do not knowingly process the personal data of Users under 18. If you are such a User or the legal representative of such a User, please contact us.

We process the personal data when you register, sign in, restore, create the Users and otherwise use the App.

Personal data

Sources of data

We receive your data when you use the App and interact with it, depending on your actions in the App.

You can change your personal data by exercising your right to rectification or by the App functionality. Please note that the same lawful basis and storage terms apply to the changed data.

We may also (although we do not necessarily do so) receive data from third parties. It depends on your settings and the features you use.

Lawful bases for processing

To process your personal data, we rely on the following lawful bases:

• performance of the contract — for the processing necessary for the negotiating on, conclusion, and performance of a contract (mainly, the Terms of Service) with you
• legitimate interest — for the processing aimed at the development of our services, taking into consideration your interests, rights, and expectations
• legal obligation — for the processing as required by applicable laws (for example, to comply with tax or KYC/AML regulations) or if requested by a law enforcement agency, court, supervisory authority, or another state-authorised public body
• consent — for additional specific purposes.

Partner’s data

The Partner may create any type of User: Intermediary, Manager, Foreman or Worker and insert its personal data.

Data	Reasons for processing	Lawful basis
First name.	To register you.	Performance of the contract.
Last name.
Email.
Country.
Phone number.
Company name.	To display and store the data in the App.	Performance of the contract.
Tax Identification Number.
Company address.
Type of work.
Place of work.
Scope of work.
Documents.
Photos.
The number of intermediaries.
The number of managers.
The number of foremans.
The number of workers.
Email.	To verify you.	Performance of the contract.
Phone number.
Password. Please note! We do not store your password as is. We hash it.	To protect your account.	Performance of the contract.
Email.	To log you in.	Performance of the contract.
Password.
Amount of payment.	To provide payment for the SSTW subscription.	Performance of the contract.
Payment method.
Payment confirmation.	To confirm the success of the payment and for accounting purposes.	Legal obligation.
Data storage
Data that is processed on the basis of the performance of the contract.	Stored for 3 years after completing using the App.
Data that is processed on the basis of legal obligation.	Stored for a minimum of 5 years after receiving.

Intermediary’s data

A Partner may create this type of User. The data processed is inserted by the Partner or by the Intermediary itself. The Intermediary may create such types of Users: Manager, Foreman and Worker.

Data	Reasons for processing	Lawful basis
First name.	To register you.	Performance of the contract.
Last name.
Email.
Country.
Phone number.
Role.
Company name.	To display and store the data in the App.	Performance of the contract.
Documents.
Photos.
The number of managers.
The number of foremans.
The number of workers.
Email.	To verify you.	Performance of the contract.
Phone number.
Password. Please note! We do not store your password as is. We hash it.	To protect your account.	Performance of the contract.
Data storage
Data that is processed on the basis of the performance of the contract.	Stored for 3 years after completing using the App.

Manager’s data

A Partner or Intermediary may create this type of User. The data processed is inserted by the Partner, Intermediary or the Manager itself. The Manager may create such types of Users: Foreman and Worker.

Data	Reasons for processing	Lawful basis
First name.	To register you.	Performance of the contract.
Last name.
Email.
Country.
Phone number.
Role.
Documents.	To display and store the data in the App.	Performance of the contract.
Photos.
The number of foremans.
The number of workers.
Email.	To verify you.	Performance of the contract.
Phone number.
Password. Please note! We do not store your password as is. We hash it.	To protect your account.	Performance of the contract.
Data storage
Data that is processed on the basis of the performance of the contract.	Stored for 3 years after completing using the App.

Foreman’s data

A Partner, Intermediary or Manager may create this type of User. The data processed is inserted by the Partner, Intermediary, Manager or by the Foreman itself. The Manager may create the Worker.

Data	Reasons for processing	Lawful basis
First name.	To register you.	Performance of the contract.
Last name.
Email.
Country.
Phone number.
Role.
Documents.	To display and store the data in the App.	Performance of the contract.
Photos.
The number of workers.
Email.	To verify you.	Performance of the contract.
Phone number.
Password. Please note! We do not store your password as is. We hash it.	To protect your account.	Performance of the contract.
Data storage
Data that is processed on the basis of the performance of the contract.	Stored for 3 years after completing using the App.

Worker’s data

A Partner, Intermediary, Manager or Foreman may create this type of User. The data processed is inserted by the Partner, Intermediary, Manager, Foreman or by the Worker itself. The Manager may create the Worker.

Data	Reasons for processing	Lawful basis
First name.	To register you.	Performance of the contract.
Last name.
Email.
Country.
Phone number.
Role.
Email.	To verify you.	Performance of the contract.
Phone number.
Password. Please note! We do not store your password as is. We hash it.	To protect your account.	Performance of the contract.
Email.	To log you in.	Performance of the contract.
Password.
Type of job.	To display and store the data and to open other App features.	Performance of the contract.
Required worked hours per month.
Confirmed work hours.
Non-confirmed work hours.
Documents.
Photos.
Hourly rate.
The Partner, Intermediary, Manager or Foreman that is linked to a Worker.
Geolocation.	To verify that you are at the workplace.	Consent
Status of availability at the workplace.	To display your availability at the workplace.	Performance of the contract.
Data from the timer	To calculate working hours.	Performance of the contract.
Data storage
Data that is processed on the basis of the performance of the contract.	Stored for 3 years after completing using the App.
Data that is processed based on consent.	Stored for the period of App usage, if you do not withdraw consent.

Data received from third parties

We may receive some personal data from third parties.

The respective documents of the third parties determine the amount of data collected, the purposes, and the lawful basis for processing.

Third party	Description	Link to the privacy document
Apple Pay	We may receive some data for the confirmation of your payments. For example:the unique identifier of the transactionpayment amounttime and date of the transactiondetails about the seller.	Apple Pay & Privacy
Google Pay		Google Payment Privacy Notice
PayPal	We may receive some data for the confirmation of your payments. For example:name of the payeremail of the payerthe unique identifier of the transactionpayment amounttime and date of the transactioncurrency of the paymentstatus of the payment.	Paypal Privacy Statement

Data sharing with third parties

We can share your personal data with third parties without harming you and in full compliance with applicable law. In addition, we have implemented organisational and technical measures to ensure the security of personal data during data transfer to third parties.

Third parties	Description
Analytics tools.	We use analytics tools to understand and promote our business.
Providers of the services our team uses.	We use different CRM systems, messengers, emails and other services to provide you with our services.
Payment providers.	We use various payment providers to receive payments.
Contractors, services providers on App.	We cooperate with service providers and contractors to provide you with their services, operate, develop and improve the features and functionality of the App, fulfil your support requests, complete payment transactions, etс.
State authorities, courts, law enforcement agencies, etc.	We may be obliged to transfer some of your data to tax authorities, courts, law enforcement agencies, and other governmental bodies:to comply with a government request, court order, or applicable lawto prevent unlawful use of the Appto protect against claims of third partiesto help prevent or investigate fraud.
To get a detailed list of the third-party recipients of your personal data, contact us.

To share your data, we rely on the following lawful bases, depending on the case: consent, compliance with the law, and performance of a contract.

Data protection

We apply a variety of security measures appropriate to the risks.

Organisational measures
Staff training.	Keeping records of operations related to processing personal data and access to it.
Non-disclosure agreements (NDA).	Action plan in case of unauthorised access to personal data.

Physical measures
Video monitoring.	Limited access to premises.

Technical measures
Two-factor authentication.	Backups.
Firewalls.	Encryption technologies.

Data subjects rights

European Economic Area residents

As a data subject, you have the right to interact with its data directly or through a request to us. This section describes these rights and how you can exercise them:

Right	Description
The right to access.	You can request an explanation of the processing of your personal data.
The right to rectification.	You can change the data if it is inaccurate or incomplete.
The right to erasure.	You can request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
The right to restrict the processing.	You may prohibit us from processing your personal data wholly or partially.
The right to data portability.	You can request all the data you provided to us and request to transfer data to another controller.
The right to object.	You may object to the processing of your personal data.
The right to withdraw consent.	You can withdraw your consent at any time.
The right to file a complaint.	If your request was not satisfied, you could file a complaint to the regulatory body.
To exercise your rights, contact us. If your request is not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.UK residents enjoy the same rights but may lodge a complaint at the other Authority in the UK – Information Commissioner’s Office.You can contact them at 0303 123 1113 or go online at www.ico.org.uk/concerns.

Privacy Notice updates

This Privacy Notice is developed according to the General Data Protection Regulation, other applicable privacy laws, and best privacy practices.

Existing laws and requirements for processing personal data are subject to change. In this case, we will publish a new version of the Privacy Notice on the App.

Suppose material changes to the Privacy Notice or the App affect your data privacy rights. In that case, we will notify you by displaying information on the App or by email and, if necessary, ask for your consent.