1. Who is responsible?
Patrolly is provided by eGalactic e.U., Alxingergasse 105/39, 1100 Wien, Austria, email: kontakt@egalactic.com.
Patrolly is used by security companies (our customers) for their employees. For employee data in the app, the security company as the employer is the controller under the GDPR; eGalactic e.U. processes this data as a processor (Art. 28 GDPR) on its instructions. For our customers' contract data, eGalactic e.U. is the controller.
2. What data do we process?
✓Account: name, username or email, password (stored only as an encrypted hash), language, optionally a profile photo uploaded by the employer.
✓Shifts: assigned sites, times and checkpoints.
✓Patrols: scanned checkpoint, NFC tag ID, time, location (GPS) at the moment of the scan, condition, comment and photos you add yourself.
✓Incident reports: category, description, photos, time and location.
✓Technical data: device identifier at sign-in, IP address and time of requests in server logs (for security and troubleshooting).
3. Why?
Only to document and verify security patrols for the employer and its clients (Art. 6(1)(b) and (f) GDPR, or on behalf of the employer). We do not use the data for advertising, do not sell it and do not build profiles.
4. App permissions
✓Location (only while using the app): read once when you scan a checkpoint. No background tracking.
✓Camera and photos: only when you add a photo to a checkpoint or an incident yourself.
✓NFC: to read the tags at checkpoints.
5. No ads, no tracking
The app contains no advertising, no third-party analytics or tracking, and no sharing with data brokers.
6. Where is the data stored, who receives it?
Data is stored on servers of Hetzner Online GmbH in data centers in the EU (processor). Transfers are encrypted (HTTPS). Authorized people at your employer have access and, where needed for operation and support, eGalactic e.U.
7. How long?
Data is kept while your employer uses Patrolly and it is needed for documentation, or deleted on the employer's instructions. After the contract ends, data is deleted unless legal retention duties apply. Server logs are deleted after a short time.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. Please contact your employer first, or us at kontakt@egalactic.com. You can also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).
9. Deleting your account
Accounts are created by the employer. You can request deletion of your account and data from your employer or by email to kontakt@egalactic.com.
10. Website and cookies
The website patrolly.app sets no tracking or advertising cookies. Only technically necessary information is stored in your browser: the chosen language, your cookie choice and – for signed-in users – the sign-in token. Fonts are loaded from our own server, not from third parties. You can change your cookie choice at any time under “Cookie settings” at the bottom of the page.