Guard Solutions ("we", "us", "our") operates the GS App mobile application and the GS Admin web platform. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our services.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).
1.Data We Collect
Account & Identity Data
- Full name, initials, and employee identifier
- Email address and phone number
- Login credentials (password is stored hashed, never in plain text)
Shift & Patrol Data
- Shift assignments, schedules, and check-in/check-out timestamps
- Patrol checkpoint scans (NFC, QR code, GPS geofence, BLE beacon) with timestamps
- Patrol delegation records (who delegated to whom, and when)
- Patrol cancellation reasons
- Event reports and alarm reports filed during shifts
- Shift summary notes entered by the guard
Location Data
We collect location data only at specific moments — not continuously. Location is recorded when:
- You check in to or check out of a shift
- You scan a GPS geofence checkpoint during a patrol
- You file an event or alarm report (optional location field)
Biometric Data
If you enable biometric login (Face ID or fingerprint), authentication is handled entirely by your device's operating system. We do not receive, store, or transmit any biometric data. We only receive a success/failure result from the device.
Device & Technical Data
- Push notification token (via OneSignal) for delivering shift notifications
- Device type and operating system version (for compatibility and support)
- App version
Photos
You may optionally attach photos to event reports or alarm reports. Photos are uploaded only when you explicitly choose to attach them. We do not access your camera or photo library without your action.
2.How We Use Your Data
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Authenticate your identity | Credentials, biometric result | Contract performance (Art. 6(1)(b)) |
| Manage shift schedules | Name, shift data, availability | Contract performance (Art. 6(1)(b)) |
| Record patrol activity & generate reports | Checkpoint scans, timestamps, location, reports | Legitimate interest (Art. 6(1)(f)) |
| Deliver push notifications | Device token | Contract performance (Art. 6(1)(b)) |
| Provide audit trails for clients | Guard identity, timestamps, actions | Legitimate interest (Art. 6(1)(f)) |
| App support and troubleshooting | Device info, app version | Legitimate interest (Art. 6(1)(f)) |
3.Data Sharing
We share personal data only with:
- Your employer — shift reports and patrol data are shared with the Guard Solutions admin team who manages your assignments.
- Clients — auto-generated shift reports (containing guard names, timestamps, and patrol activity) are provided to the clients whose sites you patrol. This is a core part of the security service.
- Service providers — we use third-party services to operate the app:
- OneSignal — push notification delivery
- Google Maps Platform — map display and geofence verification
- Railway / Vercel — hosting infrastructure
- MongoDB Atlas — database hosting
4.Data Retention
- Account data — retained while your account is active. Deleted within 30 days of account deletion.
- Shift reports & patrol data — retained for up to 5 years for audit and compliance purposes, as required by security industry regulations.
- Push notification tokens — deleted when you uninstall the app or revoke notification permissions.
5.Your Rights (GDPR)
As a data subject in the EU/EEA, you have the right to:
Access
Request a copy of the personal data we hold about you
Rectification
Correct inaccurate or incomplete data
Erasure
Request deletion of your data (subject to legal retention)
Restriction
Restrict processing in certain circumstances
Data Portability
Receive your data in a machine-readable format
Object
Object to processing based on legitimate interest
To exercise any of these rights, contact us at support@secureservicegroup.dk.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk.
6.Data Security
We protect your data through:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Hashed passwords (never stored in plain text)
- Secure token-based authentication with automatic session expiry
- Role-based access control — guards see only their own data
- Biometric authentication handled on-device (data never leaves your phone)
7.International Transfers
Some of our service providers (hosting, push notifications) may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) or adequacy decisions.
8.Children
Our services are intended for professional use by employed security guards. We do not knowingly collect data from anyone under the age of 18.
9.Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. For significant changes, we will notify you via the app.
10.Contact
For questions about this Privacy Policy or how we handle your data:
Guard Solutions