Privacy Policy

IDALABS Privacy Policy - as of 2025-01-10

Privacy made in Germany

The IDA App

The IDA App is part of the IDA ERP product family. The app covers mobile use cases in manufacturing industries, such as assembly activities. The extent to which the app is used by the user is therefore subject to the employer's right to direct (data controller under the GDPR) who commissions IDALABS with the technical processing of the data. The rights and obligations of the ERP customer toward IDALABS, as well as further details on ensuring data protection, are governed by a corresponding data processing agreement under the GDPR between the data controller and the processor.

This agreement also specifies the duration of data storage, which usually corresponds to the duration of the employment relationship or the effectiveness of the employer's right to direct and is typically regulated in the employment contract between the employer - as ERP user and data controller - and the employee as user of this app.

Use of the IDA App is not possible without first creating a user account in the IDA ERP system. Therefore, use - and thus processing of personal data - is not possible outside the scope of the respective data processing agreement.

The IDA App processes data that users maintain or access for employees, customers, suppliers, products, and vehicles. The goal is digital control and documentation of customer orders in the mutual interest of both parties. Data entry and output are voluntary, and each user independently decides the amount and format of the data. The user can use code names and terms and can pseudonymize their identity. Automated decision-making does not take place.

The processed data is available in the form of written records, photos, or audio data.

The IDA App transmits images, voice data, and texts to share the elements recorded in the app with the ERP system when the user selects the corresponding function in the app.

A core function of the IDA App is the exchange of information between employees of a company. Therefore, the app should be granted access to the following smartphone services in order to fulfill the legal and contractual documentation obligations of the ERP user:

• Name
• Email address
• Personal identifiers and user IDs
• Address
• Phone number
• App search history
• Device ID or other personal identifiers
• Files and documents
• Photos and videos
• In-app messages
• Calendar appointments
• User-generated content
• Voice or audio recordings
• Precise and approximate location
• Search history in the app

These data are processed exclusively within the app or the ERP system for the purpose of legitimate business processing. There is no systematic transfer of data to third parties.

Third parties outside the user's employing company do not provide content in the app.

Data is not transferred to countries outside the European Union within the responsibility of the app provider.

Data security

The data is transmitted encrypted over a secure connection.

Authentication in the app is handled via a user account in the ERP system, either with a token or a personal password administered by the employer or client.

Right of access, withdrawal, and deletion of data

Requests regarding access, withdrawal, and deletion of data must be addressed to the data controller, who may commission IDALABS with the technical implementation of the request.