This document is the official Privacy Policy of JOBSI application

Privacy Policy

GDPR / Data Processing Agreement (DPA)

1. General Provisions

This Privacy Policy and Data Processing Agreement (the "Agreement") governs the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Application Owner and Service Provider:

• Aspector, s.r.o.
• VAT: CZ26506661
• Email: docs@aspector.cz

(hereinafter referred to as the "Provider", "Data Processor")

Client of the Application (agency, company, user):

(hereinafter referred to as the "Client", "Data Controller")

2. Roles of the Parties under GDPR

2.1 Data Controller

The Client acts as the Data Controller and:

• determines the purposes and means of processing personal data;
• decides which personal data are entered into the system;
• bears full responsibility for the legality of personal data processing.

2.2 Data Processor

The Provider (Aspector, s.r.o.) acts solely as a Data Processor and:

• provides technical infrastructure and software (SaaS);
• processes personal data only on documented instructions from the Client;
• does not determine the purposes or content of personal data.

3. Categories of Processed Personal Data

Within the scope of using the application, the Client may process, in particular:

• first and last names;
• date of birth;
• nationality;
• contact details;
• identification and employment documents;
• information related to work assignments, accommodation, transport;
• any other data entered by the Client.

⚠️ The Provider does not control, verify, or define the scope of personal data stored by the Client.

4. Lawfulness of Processing and Consent

4.1 Client Obligations

The Client is fully responsible for:

• ensuring a valid legal basis for processing personal data;
• obtaining explicit and informed consent from data subjects where required;
• informing data subjects about:
  • the purposes of processing;
  • retention periods;
  • their rights under GDPR;
  • the use of third-party software (JOBSI).

4.2 Limitation of Provider Liability

The Provider shall not be liable for any failure of the Client to obtain valid consent or comply with GDPR obligations as Data Controller.

5. Data Processing by the Provider

The Provider processes personal data solely for the purpose of providing the service, including:

• data storage;
• data display within the application;
• execution of application functionalities;
• backup and recovery operations.

The Provider:

• does not sell, share, or exploit personal data;
• does not process data for its own purposes;
• does not make automated or manual decisions affecting data subjects.

6. Security Measures

The Provider implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to:

• encryption of data in transit;
• role-based access control;
• activity logging;
• regular backups;
• secured server infrastructure;
• ongoing system maintenance and security updates.

⚠️ The Provider cannot guarantee absolute security against all threats, which is consistent with GDPR requirements and industry standards.

7. Data Retention and Deletion

• Personal data are stored for the duration of the Client's use of the service.
• Data may be deleted or exported upon Client request.
• Upon termination of the contractual relationship, data will be deleted within a reasonable timeframe unless legal obligations require otherwise.

8. Rights of Data Subjects

The Client, as Data Controller, is responsible for fulfilling data subject rights, including:

• access;
• rectification;
• erasure;
• restriction of processing;
• data portability.

The Provider shall provide reasonable technical assistance where feasible.

9. Liability

• The Client bears full responsibility for compliance with GDPR and applicable data protection laws.
• The Provider is liable only for fulfilling its obligations as a Data Processor under this Agreement.

10. Location Data and GPS Tracking (JOBSI Drive Mobile Application)

10.1 Scope of Application

This section applies to the JOBSI Drive mobile application, which is used for vehicle GPS tracking and fleet management.

10.2 Types of Location Data Collected

The JOBSI Drive application may collect the following location-related data:

• GPS coordinates (latitude and longitude);
• speed and direction of movement;
• timestamps of location data;
• route history and trip information;
• vehicle identification data.

10.3 Purpose of Location Data Collection

Location data is collected and processed for the following purposes:

• real-time vehicle tracking and fleet management;
• route optimization and trip logging;
• fuel consumption calculation;
• work time tracking and reporting;
• safety and security monitoring.

10.4 User Consent and Permissions

• Location tracking requires explicit user consent through device permissions;
• Users can enable or disable location tracking at any time through device settings;
• The application requests location permission only when necessary for its core functionality;
• Background location access is used only when the user has explicitly enabled tracking.

10.5 Data Transmission and Storage

• Location data is transmitted securely using encrypted connections (HTTPS/TLS);
• Data is stored on secure servers and associated with the Client's account;
• Location data is retained according to the Client's data retention settings;
• The Provider does not share location data with third parties.

10.6 User Rights Regarding Location Data

Users have the right to:

• access their location data history;
• request deletion of location data;
• disable location tracking at any time;
• export their location data.

⚠️ The Client (employer) is responsible for informing employees about location tracking and obtaining necessary consent in accordance with local labor laws.

11. Privacy Policy Contact

For privacy policy and GDPR-related inquiries, please contact:

📧 docs@aspector.cz

12. Final Provisions

By using the application, the Client confirms that:

• they have read and understood this Privacy Policy;
• they acknowledge their role as Data Controller;
• they accept the terms of personal data processing described herein.

---

Privacy Policy for JOBSI Application | Last updated: January 2025