# Privacy Policy

## General Information

The following information provides an overview of how we handle your personal data when you use our services. Personal data includes all data that can be used to personally identify you. Further information on data protection can be found in this privacy policy.

## Data Collection When Using Our Services

### Responsibility Responsibility for data collection lies with the operator of this company. Our contact details can be found in the legal notice on our website.

### Data Collection Your data is collected on the one hand through the information you provide to us, e.g. when using our services or by filling out forms. For SAG-Akte this can include account and organisation data, construction-site master data, employee master data such as names and personnel numbers, weather-related downtime reports, assigned downtime hours, optional proof photos, generated PDFs and CSV exports. On the other hand, our IT systems automatically collect technical data (e.g. internet browser, operating system, IP address or time of request) when you visit our website or submit a site report.

### Purpose of Data Use The collected data serves to provide and improve our services, document weather-related downtime, generate evidence records and payroll-office exports, process payments and maintain account security. We do not calculate wages, reimbursement amounts or payroll claims in SAG-Akte.

### Site Submission Links A construction-site submission link can be opened without an administrator login. The link is protected by a token generated for the site. Foremen and other submitters can enter downtime date, time range and reason and may upload one proof photo. Employee lists and payroll data are not exposed through these public submission links.

### Weather Data If site coordinates are available, we request weather snapshots from Open-Meteo in order to document the weather situation for the selected site and time. The weather snapshot is stored with the report so that later exports can be reproduced.

### Payments and File Storage Seasonal SAG-Akte access is paid through Mollie. Optional proof photos are stored directly in the application database for the MVP. PDF generation uses Typst processing to create the downloadable evidence record.

### Customer Responsibility The customer remains responsible for the lawfulness, correctness and necessity of employee data, site data, downtime entries and uploaded proof photos entered into SAG-Akte.

### Your Rights You have the right to information, correction, blocking or deletion of your personal data. For inquiries about your data, please contact us at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

## Data Protection When Using Our Services

We take the protection of your data seriously and treat your personal data confidentially in accordance with legal regulations.

The provision of personal data when using our services is voluntary. This data will not be passed on to third parties without your express consent.

Please note that data transmission over the Internet may have security risks. Complete protection of data from access by third parties is not possible.

## Cookies

Our website partially uses cookies to make our offering more user-friendly, effective and secure. Cookies are small text files that your browser stores. Most of the cookies we use are “session cookies” that are automatically deleted after your visit. You can set your browser to inform you about cookies and only allow them on a case-by-case basis.

## Server Log Files

Our server automatically collects and stores information in server log files that your browser transmits to us. These include browser type and version, operating system used, referrer URL, hostname of the accessing computer and time of the server request.

## Revocation of Your Consent to Data Processing

You can revoke your consent to data processing at any time. An informal notification by email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected.

## Right to Complain to the Competent Supervisory Authority

In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority.

## Right to Data Portability

You have the right to receive data that we process automatically in a machine-readable format or to have it transmitted to third parties.

## Right to Information, Deletion, Blocking

You have the right to free information about your stored data as well as to correction, blocking or deletion of this data at any time.

For further questions about personal data, please contact us by email at franz@bett.ag.