App privacy policy
This policy applies to the mobile apps that Davi Styling B.V. publishes in Apple's App Store and in Google Play: the staff app and the app for Tap to Pay payments.
1. Who we are
Davi Styling B.V., Laan van Westroijen 10, 4003 AZ Tiel, the Netherlands, publishes the apps and is the point of contact for privacy questions. The apps are intended for staff of the group's hotels. The hotel you work for creates your account and decides which parts of the app you see.
2. Which data and why
| Data | Purpose |
|---|---|
| Account details: name, username or email address, department, job role and permissions | Signing in and showing you the parts that belong to your work. |
| Data on your device: the session that keeps you signed in, the server address, your language and display settings and, if you use one, a PIN in your device's secure storage | Staying signed in and getting back to work quickly. |
| What you enter yourself: requests, comments, messages to colleagues, inspections, meter readings, stock movements and photos | Carrying out and following up the work in the hotel. Colleagues who work on the same task can see this data. |
| Camera | Only when you take a photo or scan a barcode yourself. The app never uses the camera in the background. |
| Photos from your photo library | Only the photos you choose to add to a request or inspection. |
| Notification address for push messages | If you allow notifications: letting you know that something is waiting for you. |
| Technical data in the server logs: time, IP address and the request | Security, preventing misuse and solving faults. |
Text in requests may be translated automatically, so that colleagues who speak another language can read it.
3. Tap to Pay payments
With the payment app, a staff member accepts a card payment by holding the customer's card or phone against an Android phone. Reading the card and processing the payment are done by Adyen's software inside the app. The card number and PIN go to Adyen directly and encrypted; we do not receive or store them.
For each payment we keep only the amount, the time, the status, Adyen's payment reference, the card brand (for example Visa or Mastercard) and the booking or order the payment belongs to. Adyen also processes payment data for its own legal duties, such as fraud prevention; see Adyen's privacy policy on adyen.com.
4. What the apps do not do
- No access to your device's location (GPS).
- No access to your contacts or microphone.
- No advertising and no third-party analytics or tracking services.
- We do not sell data and do not use it for profiling.
5. Where the data is kept and who processes it
The data from the apps is kept on servers managed by the hotel itself. We also work with these processors:
- Adyen (the Netherlands): processing card payments.
- Microsoft: email through Microsoft 365, signing in with a Microsoft account where the hotel offers it, and automatic translation.
- Anthropic: automatic translation of text in requests.
- Apple and Google: distributing the apps and delivering push messages.
Microsoft and Anthropic may also process data outside the European Union, including in the United States.
6. Legal basis
We process staff data because it is necessary for the work and the employment contract, and because of the hotel's legitimate interest in running its business properly and safely. We process payment data to perform the agreement with the customer and because the law requires us to keep accounts.
7. How long we keep data
- Account: for as long as you work for the hotel. After that the account is deactivated and we delete the data that is no longer needed.
- Requests, inspections and photos: for as long as they are needed for the maintenance and history of the building and its equipment.
- Payment and accounting data: seven years, because of the statutory retention obligation.
- Data on your device: until you sign out or remove the app.
- Server logs: no longer than needed for security and solving faults.
8. Deleting your account and data
Your account is managed by the hotel you work for. To have your account and its data deleted, email developer@davistyling.com with your name and the hotel, or ask your manager. We delete your account and personal data within 30 days, except data we are required by law to keep. Data on your device is removed when you sign out or remove the app.
9. Security
All connections between the app and the server are encrypted (HTTPS). Your PIN is kept in your device's secure storage. Staff only see the data that belongs to their role.
10. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to object, and to data portability. Send your request to developer@davistyling.com; we respond within one month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
The apps are not intended for children under 16.
11. Contact and changes
Davi Styling B.V., Laan van Westroijen 10, 4003 AZ Tiel, the Netherlands · KvK 51240599 · developer@davistyling.com
If the apps start processing other data, we will update this policy. The date of the latest version is shown at the top.