Privacy Policy

Protecting your personal data is very important to us. Below we inform you in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) about the processing of your data on this website.

Controller

ON DUTY AI Solutions GmbH Werdertorgasse 15/9, 1010 Vienna, Austria Email: office@onduty.tech

What data we process

When you access the website, technically necessary data (e.g. IP address, date and time of access, browser type) is processed by our hosting provider to ensure the delivery and security of the website.

When you use our forms (demo request or case study request), we process the data you provide: name, company, business email address, phone number (optional) and your details regarding interests and requests.

Purposes and legal bases

• Handling your request, scheduling and contact (Art. 6(1)(b) and (f) GDPR)
• Provision, operation and security of the website (Art. 6(1)(f) GDPR)
• Sending requested content, e.g. the case study (Art. 6(1)(b) GDPR)

Recipients and processors

To provide the website and handle your requests, we use carefully selected service providers as processors:

• Framer B.V. — hosting and delivery of the website
• Make (automation platform) — processing and forwarding of form submissions
• Apollo.io — contact and customer management (CRM)

Where data is transferred to third countries (e.g. the USA), this is based on appropriate safeguards under the GDPR (in particular EU Standard Contractual Clauses).

Storage period

We store your personal data only for as long as is necessary for the stated purposes or as required by statutory retention obligations.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, please contact office@onduty.tech. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Cookies

This website uses technically necessary cookies required for operation. Any further cookies (e.g. for statistics or marketing) are only used with your consent, which you can withdraw at any time.

Privacy in the OnDuty Mobile App

The following information supplements the sections above and relates solely to the processing of personal data in the OnDuty mobile app (iOS and Android), which is used by security companies and their staff for guard and duty operations.

Responsibility and roles

ON DUTY AI Solutions GmbH is the controller for registration, account management, provision and technical diagnostics of the app. For the operational data collected during duty (e.g. location during a shift, duty and incident data), the deploying security company (our customer) is generally the controller; OnDuty processes this data as a processor pursuant to Art. 28 GDPR solely on the customer's instructions.

What data the app processes

• Account and identity data: name, business email address, employer or site assignment, role, employee ID and login credentials
• Location data: GPS position during active duties and patrols (Revierdienst) including timestamps — also in the background while a duty is active
• Duty and incident data: check-in and check-out (duty times), shift and route logs, incident reports, notes, photos and signatures
• Device and diagnostic data: device model, operating system, app version, IP address, push token, as well as crash and usage data

Device permissions

The app only requests the permissions required for the respective feature. You can withdraw granted permissions at any time in your device settings; individual features may then no longer be available.

• Location (including background): proof of patrols and presence during active duties
• Camera and photos: documentation of incidents and site conditions
• Notifications (push): duty, task and alarm notifications
• Additional permissions (microphone, biometric unlock, local storage): optional features such as voice notes, Face ID/Touch ID login and local caching

Purposes and legal bases

• Provision, registration and operation of the app and account management (Art. 6(1)(b) GDPR)
• Carrying out guard and duty operations, dispatch, proof of patrols and incident documentation on behalf of the responsible customer (Art. 6(1)(b) and (f) GDPR)
• Ensuring security, stability and error analysis of the app (Art. 6(1)(f) GDPR)
• Optional analytics and diagnostics features solely on the basis of your consent where consent is required (Art. 6(1)(a) GDPR)

Recipients and processors

To operate, deliver and maintain the app, we use carefully selected service providers as processors:

• Expo (Expo/EAS) — app builds, over-the-air updates and push infrastructure
• Apple (APNs) and Google (Firebase Cloud Messaging) — delivery of push notifications
• Analytics and error-diagnostics services (e.g. PostHog, Sentry) — usage and crash analysis to improve the app
• Hosting and backend provider — operation of servers and database (provider and region to be added)

Where data is transferred to third countries (e.g. the USA), this is based on appropriate safeguards under the GDPR (in particular EU Standard Contractual Clauses).

Storage period

We store the data only for as long as is necessary for the stated purposes or as required by statutory or contractual retention obligations (specific periods, e.g. for duty and route logs and incident documentation, to be added). On the instructions of the responsible customer, operational data is deleted or returned to them.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. If your request concerns operational duty data, please address it to the deploying security company as controller; we support them as processor. For account- and app-related data you can reach us at office@onduty.tech. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

Availability and app stores

The OnDuty app is provided via the Apple App Store and Google Play (availability to be confirmed). When downloading and using the app, the respective platform operators (Apple, Google) independently process data in accordance with their own privacy policies.