1. Introduction

This Privacy Notice describes how Robit Plc (hereinafter “Robit”) processes the personal data of users of the Robit Plus mobile application (“App”). Robit acts as the data controller for such personal data.
Robit is committed to protecting your privacy and complying with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR).

2. Data Controller and Contact Person

Data Controller
Robit Plc
(Business ID: 0825627-0)
Viikkiniityntie 9
33880 Lempäälä
Tel.: +358 3 3140 3400
Mikko Kuusilehto
c/o Robit Plc
Tel.: +358 40 65 87 822
Email: mikko.kuusilehto@robitgroup.com

3. What the App Does

Robit Plus is a field reporting application for employees and operators of Robit’s customers. It enables fieldworkers to create, store, and upload equipment and maintenance reports for sites managed by Robit’s customers. The App is designed for offline use; reports are stored locally on the device and uploaded to Robit’s systems when the user initiates a sync.

4. Data Collected

The App collects the following categories of personal data:

• Account and identity data — the user’s name and account identifier, obtained from the authentication provider at login, used to attribute reports to the correct user.
• Authentication credentials — session tokens required to maintain the authenticated session, and a locally stored PIN for offline access. The PIN is never transmitted; it is stored only as a one-way hash on the device.
• Work report data — information entered by the user when creating a report, such as the reporting person, assigned operator, site and location details, equipment details, measurements, and descriptive text. This data is linked to the user’s identity and is the primary data uploaded to Robit’s systems.
• Site and configuration data — reference data downloaded from Robit’s systems (such as site names, locations, and equipment lists) used to populate selection options in the App. This data is not personal in nature.

The App does not collect:

• Location data
• Camera or microphone data
• Contacts or calendar data
• Browsing history or search history
• Financial or payment information
• Health or fitness data
• Any data for advertising or marketing purposes

5. Legal Basis for Processing

Processing is based on the performance of a contract between the user’s employer and Robit, and on Robit’s legitimate interest in providing and operating the App as part of its services.

6. How Data Is Stored

Work reports and site configuration are stored in a local database on the device to enable offline use.
Authentication tokens are stored in the device’s platform-provided secure storage.
The PIN is stored only as a one-way cryptographic hash and is never transmitted to any server.

7. How Data Is Transmitted and Shared

When the user initiates an upload, unsynchronised work reports are transmitted over HTTPS to Robit’s backend systems. Authentication is handled through Robit’s identity provider. No data is transmitted to third-party analytics, advertising, or tracking services.

Data collected by the App is shared only with:

• Robit’s backend systems — to store and process submitted work reports.
• Robit group companies — to the extent necessary for service provision.

8. Data Retention

Robit retains personal data for as long as necessary to fulfil the purposes described in this notice and to meet any applicable legal obligations. Work reports are retained for as long as the customer relationship between the user’s employer and Robit is in effect, unless a shorter or longer period is required by law.
Uninstalling the App removes all locally stored data from the device.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain confirmation of whether Robit processes your personal data and to access that data.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to be forgotten — to request erasure of your data where there is no longer a legal ground for processing it.
• Restriction of processing — to request that processing be restricted in certain circumstances.
• Right to data portability — to receive your data in a machine-readable format and transfer it to another controller.
• Right to object — to object to processing based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, contact the data controller at the address provided in Section 2.
You also have the right to lodge a complaint with the competent supervisory authority. In Finland, this is the Data Protection Ombudsman (tietosuoja.fi).

10. Children’s Privacy

The App is intended solely for use by adults in a professional context. Robit does not knowingly collect personal data from children under 16.

11. Changes to This Privacy Notice

Robit may update this Privacy Notice from time to time. The current version is always available on Robit’s website.