This policy explains how the GPV for Bel Portugal app handles the personal data of the people who use it. The app is a work tool provided by Bel for the teams that visit points of sale. It is not open to the public: accounts are created by Bel and there is no sign-up inside the app.
1. Data controller
Bel Portugal is the controller of the personal data collected through the app.
The app is developed, published and maintained by Destino Principal, Lda (Webteam Portugal), which provides it to Bel Portugal as a service (SaaS). Destino Principal acts as Bel's processor and handles the data only on Bel's instructions.
2. Data collected, when and why
| Data | When it is collected | Purpose and legal basis |
|---|---|---|
| Name, email address and user identifier | At sign-in and during use | Authenticate the user and link each record to the person who made it. Performance of the employment contract. |
| Precise device location | At clock-in and clock-out, and when a store visit is opened and closed | Confirm where the record was made. Compliance with the legal obligation to record working time. |
| Photos taken in the store | When the user attaches them to a report | Document the condition of the point of sale. Bel's legitimate interest in commercial management. |
| Text written by the user | In report notes | Record what was observed in the store. Bel's legitimate interest in commercial management. |
| Error and technical diagnostic logs | When an error occurs, without any action from the user | Detect and fix faults. Legitimate interest in the security and continuity of the service. These logs may include the user identifier. |
The app does not collect data for advertising, does not build behavioural profiles and does not sell data to third parties.
3. Location
Location is requested only at the moments listed above, and only while the app is open and in use. The app does not track the user in the background and does not record routes.
Location permission can be withdrawn at any time in the phone settings. Without it, clock-in, clock-out and visit records can no longer be confirmed on site.
4. Recipients of the data
The data is sent to Bel's systems, operated by Destino Principal (Webteam Portugal). The following are also involved:
- hosting and file storage providers located in the European Union;
- an error monitoring service located in the European Union;
- the map and location services of the phone's operating system (Google on Android, Apple on iOS), which receive the approximate position of the device in order to draw the map on the clock-in screen, subject to their own privacy policies.
The data may be disclosed to public authorities where there is a legal obligation to do so.
5. Data stored on the phone
The app works without a network connection. The ongoing visit, reports waiting to be sent and photos not yet uploaded are stored on the device, encrypted, and are deleted once they have been sent successfully. If the phone is lost or stolen, contact your manager and support immediately.
6. Retention periods
- Account data: for as long as the employee has access to the app and, afterwards, only as long as needed to identify the records below.
- Clock-in and clock-out records and their location: for the period required by employment law for working time records.
- Visit reports and photos: for the period set by Bel for commercial follow-up.
- Error and diagnostic logs: 90 days.
Once these periods end, the data is deleted or anonymised.
7. Accounts and data deletion
Accounts are created and deactivated by Bel. There is no sign-up and no account deletion inside the app. An employee who wishes to access, correct or request the deletion of their data should contact Bel at the address given in section 10. Some data cannot be deleted while the legal obligation to keep it lasts.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access your data, correct it, request its deletion or restriction, object to its processing, request its portability and lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).
9. Security
Communications between the app and Bel's systems are encrypted (HTTPS). Data stored on the phone is encrypted. Access to the data is limited to authorised accounts and is logged.
10. Contacts
- Questions about your personal data and exercising your rights: [email protected]
- Technical support for the app: [email protected]
11. Changes
When this policy changes, the date at the top of the page is updated. Relevant changes are communicated to users through Bel.
This is a translation. In case of any discrepancy, the Portuguese version prevails.