Privacy Policy

Olles Bilrekond Terminal
Last updated: 25 September 2026

This policy explains how Olles Bilrekond AB (“we”, “us”) handles personal data in the Olles Bilrekond Terminal app for iOS and Android. The app is a tool for staff who operate workshops in the Olles Bilrekond chain. It is not a customer booking app.

This policy is provided for the Apple App Store and Google Play. It applies together with the EU General Data Protection Regulation (GDPR) and Swedish law.

1. Who is responsible

We are the controller of personal data processed in the app.

2. Who can use the app

Only employees with an account created by their workplace can sign in. You cannot register yourself in the app. The app is not directed at children.

3. Data we process

• Staff account. Name, Swedish personal identity number, a PIN (stored only as a secure hash), phone number, email address, and the workshop you are assigned to. The personal identity number is used only to sign you in.
• Time records. When you clock in and clock out, and at which workshop.
• Workshop jobs. Customer name, phone number, email address, vehicle, registration number, booked service, time, price, and notes. Dealer bookings may also show the name and phone number of the person who booked the car.
• Location, only while the app is in use. Precise location is requested so Tap to Pay on iPhone can accept a card payment. We do not track location in the background or use it for advertising.
• Payments. Card payments are processed by Stripe. We do not store the full card number. Stripe receives the payment details needed to complete the charge.
• Notifications. A push token for this device, for operational notices such as payment status.
• Technical data. Requests needed to run the app, including authentication tokens stored on the device. We do not sell this data and we do not use it for cross-app tracking.

4. Why we process it

• To let authorised staff sign in and run the workshop day.
• To record working time.
• To show and update bookings, including starting and completing a job.
• To take card payments at the workshop.
• To keep accounting, tax, and employment records where the law requires it.

The legal bases are contract, legal obligation, and our legitimate interest in operating the workshops securely. We do not use app data for advertising profiles.

5. Sharing

We do not sell personal data. We share data only with processors who help us run the service: the company that hosts our servers; Stripe, for card payments and Tap to Pay; Apple and Google, to distribute the app and deliver push notifications; SMS or email providers, when we send a PIN or a service message.

Some of these providers may process data outside the EU/EEA. Where they do, we rely on an adequacy decision or standard contractual clauses. Staff at a workshop can see the bookings for that workshop. Customers and the public cannot sign in to this app.

6. How long we keep data

Account and time-clock data are kept for as long as you are employed and afterwards for as long as employment, tax, or accounting rules require. Booking and payment records are kept for the period required by Swedish accounting law, normally seven years. Push tokens and session tokens are kept only while they are needed to operate the app.

7. Account and data deletion

You cannot delete a staff account inside the app, because the account is issued by your workplace. To ask us to close the account and delete personal data that we are not required to keep, email [email protected] with the subject “Delete Terminal account”. Include your name and the workshop you work at. We will respond within 30 days. We may refuse or limit deletion when we must keep records for accounting, tax, or employment law. Uninstalling the app removes tokens stored on the device. It does not delete the staff account on our servers.

8. Your rights

You may ask us to confirm whether we process your data and for a copy of it; correct inaccurate data; delete data as described above; restrict or object to certain processing; and receive data you provided in a portable format, where the law gives that right.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), www.imy.se.

9. Security

Sign-in uses a personal identity number and a PIN. Sessions on the phone are stored in the device’s secure storage and can remain active for up to 30 days. Traffic to our servers uses standard HTTPS. The app does not add its own encryption beyond that.

10. Store disclosures

For Apple App Privacy and Google Play Data safety, the categories that apply are contact details, user identifiers, precise location while the app is in use, and financial information handled by Stripe during a payment. Data is linked to the staff member or the booking it belongs to. It is not used for tracking as Apple and Google define that term, and it is not used for advertising.

11. Changes

If we change this policy, we will update the date at the top and publish the new version at this address.

12. Contact