Privacy Notice for Safeture App Users within AFRY

Introduction

At AFRY, we prioritize your privacy and are committed to protecting your personal data. This privacy notice explains how we collect, use your personal information when you use the Safeture app as a traveler within AFRY. Our practices comply with the General Data Protection Regulation (GDPR) and we take appropriate technical and organizational information security measures to safeguard your personal data against loss and misuse, as well as unauthorized access.

Purpose of Data Processing

  1. Use of service for Travel Support and Assistance
  2. Purpose: To provide support and assistance before and during your international business travels.

    Data Collected:
    Contact information (name, email address, phone number),
    Home Country,
    IP-address,
    User device information (IMSI, OS, Phone model, Session Identifiers),
    Travel details (itinerary, travel dates, destinations, accommodation).

    Legal Basis: Legitimate interest in ensuring your safety and providing necessary support and to give user detailed information of destination, as well as keeping users updated regarding near-by real time incidents.

    Data Sharing: We share your contact and travel details with our support teams (Safeture & Falck Global Assistance) and relevant security service provider (Max security) to ensure users receive necessary information and assistance.

    Data Retention: Your data will be retained for the duration of your travel and for a period of 180 days thereafter to address any post-travel issues.

  3. When user initiates need of medical/security assistance
  4. Purpose: in case of user active push on emergency button, FGA establishes user location and reaches out to the user (or escalates to line manager/ POC, if user is out of reach).

    Data Collected: Location data (e.g., exact position (update every 30 sec.). In case of escalation: POC contacts or Line manager contacts.

    Legal Basis: Legitimate interest in ensuring user safety during incidents ant threatening security situations, and to be able to give user timely and correct active response, when needed. Falck operator will request user approval on a case-by-case basis, when reaching out.

    Data Sharing: Location data and contact information may be shared with security service provider (Max-security) and emergency responders to facilitate prompt assistance in case of an incident or a serious incident occurs.

    Data Retention: Location data will be retained for the duration of your travel and for a period of 180 days thereafter for security analysis and reporting.

  5. Risk intelligence and Security or Incident Notifications
  6. Purpose: To warn and/or support user if the user is in an area where a risk or unpleasant event is occurring or is likely to occur.

    Data Collected: Could be made via Safeture-system or manually by operator (Falck Global Assistance). Collected data is user contact information, travel itinerary and location data (e.g. location/ travel destination), depending on user setting (location accuracy and/ or travel itinerary).

    Legal Basis: Legitimate interest in ensuring users safety while on business trips providing timely alerts and warnings. Falck operator will request approval on a case-bycase basis, if users are contacted and additional data needs to be collected (e.g. Health status).

    Data Sharing: AFRY shares your location data, travel itinerary and contact information with alert service provider (Falck Global Assistance) to ensure your safety and to be able to assist. In case of a serious threatening situation, Max Security will access the same information to support timely, if they are to be activated.

    Data Retention: Data related to alerts will be retained for the duration of your travel and for a period of 180 days thereafter for analysis and improvement of our alert services.

  7. Travel Risk Management Training
  8. Purpose: To ensure all AFRY international business travelers have the basic knowledge regarding international traveling, by supporting individual training in twelve separate modules.

    Data collected: Contact information (name, email address, phone number).

    Legal basis: Legitimate interest as employer to invite and to following up required and recommended training, related to potential risks any business traveler could face, on duty while traveling.

    Data sharing: Via the system AFRY administrators can send individual or group invite to training, as well as overview users progress status and achievements in respective training module.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Contact Information

If you have any questions or concerns about this privacy notice or our data processing practices, please contact AFRY at:

AFRY AB
Att: Data Privacy Manager
SE-169 99 Stockholm, Sweden
Email: privacy@afry.com