This page explains what personal data TryggTap handles in the driver app, in the web dashboard and on this site: why, how long it is kept, and how you can see it or have it removed.
Who is responsible
TryggTap is a service for vehicle checks that companies use for their own fleets. It is run by Hussein Majid Hussein Al-Ameri, a sole trader business (enskild firma) in Sweden.
If you use the app or the dashboard at work, your employer, the company that gave you your account, decides what is recorded and why. Your employer is the data controller. TryggTap handles the data on your employer’s behalf, under a data processing agreement and only on their instructions.
If you write to us through the form on this site, we are the controller for what you send.
What the app records
When you use the TryggTap app, the following is stored:
- Your name and username, which your employer sets up. You sign in with your username and a password. The password is only ever stored in a form that cannot be read back.
- Your phone number and email address, if you or your employer add them. Your supervisor uses them to reach you about a check. You can change or remove them yourself under Settings in the app.
- Your checks: which vehicle, when, your answers, the checkpoints you scanned on the vehicle, notes you wrote and damage you reported. The time is recorded both by our server and by your phone.
- Photos you take in the app, of damage or of the vehicle. Information embedded in a photo, such as its GPS position, is removed. The photos are of vehicles, but one may happen to show a person.
- One position when you send a check, if you have allowed the app to use your location. It shows where the check was done. The app does not record your position at any other time: not while you go round the vehicle, not in the background and not when the app is closed. If you do not allow it, the check is sent anyway, without a position.
- When you sign in: the network address and the kind of device or browser, for security, for example to notice a password being used from somewhere unexpected. This is kept for 90 days.
- A log of who did what and when, for example that a check was sent or that contact details were changed. The log cannot be changed afterwards.
On the phone itself, the app keeps your sign-in in the phone’s protected storage, and any checks not yet sent until they have been sent. It also keeps the list of vehicles and checklists, so that it works without signal.
The app talks only to TryggTap’s own server and its photo storage, both at Hetzner in Germany. It contains no advertising and no analytics or tracking tools. It does not read your contacts, your photo library or your other apps, and it uses the camera only when you take a photo yourself. Nothing is sold or passed on for marketing.
Apple and Google, who distribute the app, handle information about downloads under their own privacy policies. If you have chosen to share crash reports with app developers in your phone’s settings, they may pass anonymous crash reports on to us.
What the dashboard holds
In the dashboard, supervisors and other staff at your employer see the checks, damage reports and photos. For anyone who signs in to the dashboard, the same kinds of information are stored as for the app: name, username, contact details, sign-ins and a log of changes. Assessments and comments made in the dashboard are stored with the name of the person who made them.
Why
The information is used to:
- record checks when vehicles are picked up and dropped off,
- report and follow up damage,
- show who was responsible for which vehicle, and when,
- manage accounts and keep the service secure.
A record of checks protects both the company and the driver who did their check: it shows when damage happened and who had the vehicle at the time.
The legal basis is your employer’s legitimate interest (Article 6(1)(f) of the GDPR), not consent. Your employer makes that assessment.
Where it is kept, and who handles it
- Everything is stored on servers in Germany, inside the EU, with Hetzner Online GmbH, our sub-processor for servers, the database, photo storage and encrypted backups. Nothing is transferred to a country outside the EU or EEA.
- Traffic between the app or your browser and the server is encrypted.
- Each company’s data is kept apart from every other company’s.
- At TryggTap only the owner has access, and uses it only to run the service, keep it secure and give support, or when your employer asks.
- Your employer can send a report on a check to someone else, an insurer for example. That is your employer’s decision.
How long it is kept
- Checks, damage reports, photos and the log are kept as evidence for as long as your employer uses TryggTap, because they are needed to settle disputes about damage and insurance claims.
- Your name stays on your checks for as long as you work there. Once you have left and have not been active in the service for the period your employer has chosen, normally 24 months, your name, username and contact details are removed automatically. The checks remain, showing “Former employee” and a code instead of your name.
- What remains as it was written: free text you typed, photos that happen to show a person, and the position of each check you sent.
- The network address and device recorded at sign-in are deleted after 90 days.
- Backups are encrypted and kept for 30 days, locked so that nobody can delete them early. When something is removed, every copy is gone within 33 days.
- When your employer’s agreement with TryggTap ends, the data is returned and deleted as the agreement sets out.
Your rights
- See your checks: your own checks are in the app.
- Get a copy of everything held about you: ask your employer. From the dashboard they can export everything about you in one file.
- Correct it: you change your contact details yourself in the app. For anything else, ask your employer.
- Have it erased: your email address and phone number can be removed at any time, by you in the app or by your employer. Your name is removed from every record once you have left, if you ask, or automatically after the period above. While you still work there your name stays on your checks, and the checks, photos and times themselves are not deleted on request. They are the evidence of who did which check, and the law allows keeping it for establishing, exercising or defending legal claims (Article 17(3)(e) of the GDPR).
- Restrict the processing while a question about it is being settled, or object to it: ask your employer.
- Complain to the Swedish Authority for Privacy Protection (IMY), at imy.se, or to the authority where you live or work.
Start with your employer: they are responsible for the data and can do most of this straight away from the dashboard. You can also write to us through the form on this site. We pass your request on to your employer without delay.
The contact form on this site
If you write to us through the form, we keep your name, your email address, your company, the size of your fleet and your message, and use them only to reply to you. Your network address is not stored. This site sets no cookies and loads nothing from anyone else.
Your message is emailed to our inbox, which is run by Google (Google Workspace). Google may handle email outside the EU, with the safeguards set out in Google’s data processing terms. Nothing from the app or the dashboard is ever sent that way. A message that looks automated is not emailed: it stays only on our server, and is deleted after 30 days.
The copy on our server is deleted after 90 days. We delete the email once it is no longer needed, or straight away if you ask. The legal basis is our legitimate interest in answering what you wrote. To see, correct, erase or restrict what you sent, or to object, write to us through the form.
Changes
If what TryggTap records changes, we update this page and the date at the top.
Contact
Hussein Majid Hussein Al-Ameri, Sweden. Write to us through the form on this site.