Privacy Policy
This privacy policy describes how we process personal data when you use the CrewPrimer app (iOS, Android and web). The app is an operations tool that your employer (the restaurant / takeaway business) has chosen to use, and which you access with a login issued by your manager.
1. Data controller
Bogo Sandwich Shoppen ApS
Danish company reg. no. (CVR) 44104709
Vandmanden 5, 5a
9200 Aalborg SV, Denmark
E-mail: support@crewprimer.com
When your employer uses CrewPrimer to manage its staff, the employer is the independent data controller for the information the company registers about you (e.g. name, shifts and completed tasks). Bogo Sandwich Shoppen ApS provides the platform and in that respect processes the information as a data processor on behalf of your employer – and as data controller for the operation of the platform itself (login, security and support).
2. What information do we process?
| Information | Purpose | Legal basis |
|---|---|---|
| Name, e-mail, role (manager/employee), workplace/location | Creating your user account and login | Contract/employment (GDPR art. 6(1)(b)) and legitimate interest (6(1)(f)) |
| Password (stored only as a salted hash) | Secure access to the app | Legitimate interest – security |
| ID photo (optional – you choose to upload it) | Shown on your digital staff ID card after approval by your manager | Consent (6(1)(a)) – can be withdrawn by deleting the photo or your account |
| Entries in checklists, cleaning plans and equipment logs (name and time) | Documentation of completed tasks and maintenance at the workplace | Legitimate interest (6(1)(f)) – the employer's operation and quality follow-up |
| Photos attached to checklists and equipment logs | Documentation of completed work | Legitimate interest |
| Chat messages and shared photos in the internal messaging feature | Communication between colleagues at the workplace | Legitimate interest |
| Answers to surveys from your manager | Feedback and well-being at the workplace | Legitimate interest |
| Push token (technical ID of your device) | Delivery of notifications – only if you have enabled them | Consent (managed in the app and in your phone's settings) |
| Login log (time, IP address, result) | Security, abuse prevention and troubleshooting | Legitimate interest – security |
| Shift information from Smartplan (name, shift times) – only if your employer has enabled the integration | Showing today's shifts | Contract/employment |
We do not collect location data, contacts, payment information or data for marketing, and the app contains no advertising or tracking SDKs.
3. Who do we share information with?
- Your employer and its designated managers see your entries, messages and – after approval – your ID photo.
- Hosting and operations providers (data processors) that host the platform and database on our behalf, bound by data processing agreements.
- Notification provider for delivering push messages (receives only the push token and the message content).
- E-mail provider for sending one-time codes when you reset your password (receives your e-mail address and the code).
- Smartplan – only if your employer has connected its shift schedule to the app.
We never sell your information and do not use it for advertising. If data is transferred outside the EU/EEA, this is done on the basis of the EU Commission's standard contractual clauses or equivalent safeguards.
4. How long do we keep the information?
- User account, ID photo, chat messages and survey answers: until you delete your account or your employer removes you.
- Checklist and equipment entries: kept as operational history for your employer for a maximum of 2 years. On account deletion your name on these entries is anonymised immediately.
- Login log: deleted automatically after 12 months.
- Password reset codes: expire after 15 minutes and are deleted afterwards.
- Backups: overwritten continuously and deleted no later than 30 days after data has been deleted in the system.
5. Deleting your account
You can delete your account directly in the app at any time: Home → Profile (top right) → Delete my account. This immediately deletes your login, your ID photo, your survey answers and your personal notifications. Your name on checklist and maintenance entries and in the chat is replaced with "Deleted user". You can also write to support@crewprimer.com if you need help.
6. Your rights
You have the right to access, rectification and erasure of your personal data, the right to restriction of processing, the right to data portability and the right to object to processing based on legitimate interest. Where you have given consent (e.g. ID photo or notifications), you can withdraw it at any time. Contact us at support@crewprimer.com. If your request concerns information registered by your employer, we may refer you to the employer.
You can lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk, or with the supervisory authority in your own EU country.
7. Security
All communication between the app and our servers is encrypted (HTTPS/TLS). Passwords are stored exclusively as salted hashes. Access to data is role-based, login is protected against repeated attempts, and all administrative actions are logged. Backups are taken daily.
8. Children
The app is a work tool and is not aimed at children under 15. Accounts are created exclusively by employers for their staff.
9. Changes
We may update this policy, e.g. when adding new features. Significant changes are announced in the app. The current version is always available at crewprimer.com/privacy (Danish version: crewprimer.com/da/privatliv).