Data Protection
Privacy
Introduction
Welcome to "Team Schedule" (the "Service"). This privacy policy outlines how we collect, use, and protect your personal data when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
Data Controller
Devsym GmbH is the data controller for your personal data. Our contact information is:
Company Name: Devsym GmbH
Address: Kastanienweg 3a, 82319 Starnberg, Germany
Email: info@devsym.de
Information We Collect
We store the following personal information in our database or storage:
- User's Name: To display names in the user interface.
- Email Addresses: For communication purposes and to display in the user interface.
- User's Entra ID Object ID: To identify the user in Microsoft Graph.
We do not store any passwords or other credentials (e.g. Access Tokens).
Data Residency
We store and process all data in Microsoft Azure in the Germany West Central region. Microsoft Azure is a secure cloud platform with various global complicance certifications.
Learn more about Microsoft Azure compliance: Azure Compliance
Use of Collected Information
We use the collected information for the following purposes:
- Service Provision: To provide and maintain the Service.
- Communication: To communicate with users regarding updates, support, and other relevant information.
Access to Microsoft Graph Scopes
To use all Team Schedule features, the app requests the following Microsoft Graph Scopes. All scopes are being requested as delegated permissions, meaning that the app can only access data on behalf of the signed-in user.
- User.ReadBasic.All (delegated):
Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo.
Learn more - People.Read (delegated):
Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).
Learn more - Calendars.ReadBasic (delegated):
Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions.
Learn more
This access is used to enhance the functionality of the Service and provide a seamless experience.
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. All data is securely stored in Microsoft Azure in Germany.
Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. After we receive a deletion request, we will delete the data within 30 days.
Your Rights
You have the following rights regarding your personal data:
- Access: You have the right to request access to your personal data.
- Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
- Erasure: You have the right to request the deletion of your personal data under certain circumstances.
- Restriction: You have the right to request the restriction of processing of your personal data under certain circumstances.
- Objection: You have the right to object to the processing of your personal data under certain circumstances.
Changes to This Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page. You are advised to review this policy periodically for any changes.
Contact Us
If you have any questions or concerns about this privacy policy, please contact us at support@devsym.de.
