loko/streetup/home/templates/home/privacy.html

{% load static %}
<!DOCTYPE html>
<html lang="fr">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>StreetUp</title>
    <link rel="icon" href="{% static 'common/favicon.ico' %}/" sizes="any">

    <!-- Bootstrap 5.3.3 (local) -->
    <link href="{% static 'common/bootstrap.min.css' %}" rel="stylesheet">
    <!-- Bootstrap Icons 1.11.3 (local) -->
    <link href="{% static 'common/bootstrap-icons.min.css' %}" rel="stylesheet">
    <!-- Bootstrap Table 1.23.5 (local) -->
    <link href="{% static 'common/bootstrap-table.min.css' %}" rel="stylesheet">

    <link rel="stylesheet" href="{% static 'common/base_style.css' %}">
</head>
<body>


<div class="container">

<h1 class="h1">Privacy Policy</h1>

Effective date: 26 september 2025 <br>
App: Streetup App (“the App”) <br>
Publisher / Data Controller: StreetUp <br>
Contact: privacy@streetup.be <br>
 <br>
<h3 class="h3 mt-2">1) Overview</h3>

This Privacy Policy explains what personal data we process when you use the App, why we process it, how we keep it secure, and your rights. We store data on a secure server and do not share it with third parties, except as strictly necessary to operate the service or comply with the law. <br>
 <br>
<h3 class="h3 mt-2">2) Scope</h3>

This Policy covers the App and its related services available at https://[subdomain].streetup.be. It does not cover third-party sites you may access via external links. <br>
 <br>
<h3 class="h3 mt-2">3) Data we collect</h3>

We collect only what is necessary to provide and maintain the App. <br>
 <br>
Account & Authentication <br>
Identifiers (e.g., name, email/username, role, organization), hashed credentials, access tokens. <br>
 <br>
Operational Content <br>
Records you create or update in the App (e.g., intervention data, notes, attachments, timestamps). <br>
 <br>
Device & App Diagnostics (strictly necessary) <br>
Device model, OS version, app version, crash logs, basic performance metrics. <br>
 <br>
Usage Logs (strictly necessary for security & troubleshooting) <br>
Actions within the App, IP address, dates/times. <br>
 <br>
Location (only if a feature requires it and you permit it) <br>
e.g., to locate nearby assets; you can disable this in the device settings. <br>
 <br>
We do not collect special category data unless you intentionally include it in free-text fields. <br>
 <br>
<h3 class="h3 mt-2">4) Purposes & Legal Bases (GDPR)</h3>

Provide and maintain the service (account access, core features) — Art. 6(1)(b) performance of a contract <br>
 <br>
Security, fraud prevention, diagnostics — Art. 6(1)(f) legitimate interests <br>
 <br>
Customer support & incident response — Art. 6(1)(b)/(f) <br>
 <br>
Compliance with legal obligations — Art. 6(1)(c) <br>
 <br>
Optional features (e.g., location) — Art. 6(1)(a) consent (you can withdraw anytime via device/app settings) <br>
 <br>
We do not use personal data for advertising or sell your data. <br>
 <br>
<h3 class="h3 mt-2">5) Data Retention</h3>

We keep data only as long as necessary for the purposes above: <br>
 <br>
Account and operational records: for the duration of your account/contract and as required by applicable law or archiving rules. <br>
 <br>
Security/diagnostic logs: typically up to [e.g., 12 months], unless needed for investigations or legal claims. <br>
When retention periods expire, data is deleted or irreversibly anonymized. <br>
 <br>
<h3 class="h3 mt-2">6) Security</h3>

Data is stored on a secure server with industry-standard protections: <br>
 <br>
Encryption in transit (TLS) and at rest (where applicable), <br>
 <br>
Access controls based on roles and least privilege, <br>
 <br>
Audit logging and regular updates/patching, <br>
 <br>
Backups and recovery procedures. <br>
No system is perfectly secure, but we continuously improve our safeguards. <br>
 <br>
<h3 class="h3 mt-2">7) Sharing & Processors</h3>

We do not share personal data with other parties for their own purposes. <br>
We may engage vetted processors (e.g., hosting, error reporting) strictly to operate the App under data-processing agreements. We may disclose data if required by law or to protect rights, safety, and security. <br>
 <br>
<h3 class="h3 mt-2">8) International Transfers</h3>

If data is transferred outside the EEA/UK, we use lawful safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and additional measures where needed. <br>
 <br>
<h3 class="h3 mt-2">9) Your Rights (GDPR/EU)</h3>

You can request: <br>
 <br>
Access to your data <br>
 <br>
Rectification (correction) <br>
 <br>
Erasure (“right to be forgotten”) <br>
 <br>
Restriction of processing <br>
 <br>
Portability of data you provided <br>
 <br>
Objection to processing based on legitimate interests <br>
For consent-based features, you can withdraw consent at any time (e.g., disable location). <br>
To exercise your rights, contact us at [privacy@streetup.be]. You can also lodge a complaint with your local supervisory authority (in Belgium: Autorité de protection des données / Gegevensbeschermingsautoriteit). <br>
 <br>
<h3 class="h3 mt-2">10) Children’s Privacy</h3>

The App is not directed to children under 16. If you believe a child has provided personal data, contact us and we will take appropriate steps. <br>
 <br>
<h3 class="h3 mt-2">11) Changes to This Policy</h3>

We may update this Policy to reflect operational, legal, or regulatory changes. We will post the updated version with a new effective date, and, where required, notify you in-app. <br>
 <br>
<h3 class="h3 mt-2">12) Contact</h3>

For questions or requests regarding this Policy or your data rights: <br>
StreetUp <br>
Email: privacy@streetup.be <br>
 <br>
</div>

</body>
</html>