Privacy policy

Who processes your data

The controller for data collected through this website and application is the company named in the legal notice.

If you use the application as a member of a customer organisation (a contractor or a subcontractor), your own company, or the company that invited you, is the controller of the project data. Belin acts as a processor and handles that data on their instructions, under a data processing agreement.

What data we process

Account data: name, email address, company and role.

Project data: daily reports, quantities, site photos, headcount, incidents, extra hours, change orders and the signatures on the acceptance protocol.

Compliance documents you upload: A1 certificates, exemption certificates, qualification records and similar, together with their expiry dates.

Technical data: server logs required to operate and secure the service.

Purposes and legal bases

Performance of a contract (Article 6(1)(b) GDPR): without this data the application cannot do its job, which is to document the site and produce the closing paperwork.

Compliance with a legal obligation (Article 6(1)(c) GDPR): the contracting party is obliged to verify certain records of its subcontractors, so holding those documents rests on that obligation.

Legitimate interests (Article 6(1)(f) GDPR): system security, prevention of misuse, and preserving the evidential value of the records.

Cookies

We set strictly necessary cookies only: a session cookie that keeps you signed in, and a cookie that remembers your chosen language.

We use no analytics, tracking or advertising cookies. That is also why there is no consent banner: there would be nothing to ask consent for.

Who receives the data

Data is shared only with processors required to run the service:

Supabase (database and file storage), servers in the European Union, Frankfurt.

Vercel (application hosting).

Resend (email delivery, such as sign-in links and notifications).

Data processing agreements are in place with all of them. Data is stored in the European Union.

How long we keep it

Project data is kept for the duration of the customer relationship, and afterwards for as long as statutory retention periods for business records require.

Project documentation remains available to the customer for export even if they stop using the service.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection.

Send your request to the address in the legal notice. You also have the right to lodge a complaint with a data protection supervisory authority.