- info@3ot.be
- Ma - Za: 08:00 – 18:00
- BTW: BE0790347486
- +32 4 96 37 73 28
Bronbemaling app privacy policy
1. Who we are
This privacy policy explains how the 3OT Bronbemaling app (Android, iOS and web; app ID be.threeot.bronbemaling) collects, uses and shares personal data.
The app lets customers of 3OT monitor their groundwater dewatering (bronbemaling) installations: device status, sensor readings such as water level and vacuum, and alerts. It is for business users only. Accounts are created by 3OT; you cannot sign up in the app.
The data controller is:
- 3OT NV
- Valkenaard 14, 2242 Zandhoven (Pulderbos), Belgium
- Company number (KBO/BCE): 0790.347.486, VAT BE0790347486
- Privacy contact: info@3ot.be, +32 496 37 73 28
Sources: 3ot.be contact page, KBO Public Search.
We process personal data in line with the EU General Data Protection Regulation (GDPR) and Belgian data protection law.
2. Data we collect
We collect only what the app needs to sign you in, show your installations and alert you. We do not collect your location, contacts, photos, files or advertising ID. The app has no ads and no analytics or tracking SDKs.
Data | Examples | Where it comes from |
|---|---|---|
Account data | Email address, name, user ID, the company (customer) you belong to, your role (user or administrator) | 3OT’s login portal when you sign in; 3OT when your account is set up |
Sign-in tokens | Access and refresh tokens | Login portal; stored encrypted on your device only |
Push notification data | Firebase Cloud Messaging token, a short device description, when the token was registered and last seen | Your device, when you allow notifications |
Installation data | Device names, status and telemetry | 3OT’s IoT platform (ThingsBoard) for the installations linked to your company |
Diagnostic logs | Error messages, stack traces, app version, OS version, device model (e.g. “Samsung SM-S911B”), a random install ID and session ID, timestamps; when signed in also your user ID and email | The app, automatically, in release builds |
Server logs | IP address, requested endpoint, time, response status | Our API servers, for every request |
The install ID is a random number created by the app on first launch. It is not your device’s hardware ID or advertising ID, and it is deleted when you uninstall the app.
Installation data is about machines on a work site, not about you. It becomes personal data only where it can be linked to a named person, for example a site contact.
3. Why we use it
We use your data only for the purposes below. We never sell it, use it for advertising or build marketing profiles.
Purpose | Data used | Legal basis (GDPR art. 6) |
|---|---|---|
Sign you in and show only your company’s installations | Account data, sign-in tokens | Performance of the contract between 3OT and your employer, and our legitimate interest in giving its staff secure access |
Send alerts about your installations | Push notification data, account data | Legitimate interest in warning you about problems on site; you can turn notifications off at any time |
Show readings, charts and status | Installation data | Performance of the contract |
Find and fix bugs and outages | Diagnostic and server logs | Legitimate interest in a reliable, secure app |
Protect the service against misuse | Server logs, account data | Legitimate interest in security |
Meet legal obligations | Any of the above, when required | Legal obligation |
Where we rely on legitimate interest, we have weighed it against your rights. You can object at any time (see section 8).
4. Who we share it with
We share data only with the parties below, and only what each needs.
Party | Type | What they receive | Why |
|---|---|---|---|
Google (Firebase Cloud Messaging) | Processor | Push token, notification title and message | Deliver push notifications to your device |
Apple (Push Notification service) | Processor, iOS only | Push token, notification content (via Firebase) | Deliver notifications on iPhone and iPad |
Administrators at 3OT | Internal | Account data, push data, logs | Manage accounts, support you, fix problems |
Other users at your company | Same customer | Installation data (not your personal data) | Everyone in your company sees the same installations |
Authorities | Third party | Only what the law requires | Legal obligation or court order |
Everything else runs on 3OT’s own servers: the API, database, monitoring and logs, the login portal (portal.otss.3ot.be) and the IoT platform (thingsboard.otss.3ot.be). No external hosting or cloud provider receives your data.
Google’s handling of data is described in the Firebase privacy information.
5. Transfers outside the EU
We store your data on 3OT’s own servers in Belgium. Push notifications are the exception: Google and Apple may process push tokens and notification content in the United States.
Both companies take part in the EU–US Data Privacy Framework and also offer the European Commission’s Standard Contractual Clauses. To limit what leaves the EU, notifications contain only an alert title and message about an installation, never your email or other account data.
6. How long we keep it
We have no fixed storage periods. Instead, we keep each type of data only as long as the criteria below allow, and we delete it sooner if you ask (see below).
Data | How long we keep it |
|---|---|
Account data | As long as your account is active. We delete it when you or your employer ask, and at the latest 30 days after 3OT’s contract with your company ends. |
Sign-in tokens | Until you sign out or uninstall the app. They are stored on your device only. |
Push notification data | Until you sign out (the app then unregisters the token), or until Google reports the token as no longer valid. Invalid tokens are deleted automatically. |
Diagnostic and server logs | Not stored long-term. Logs are kept only in the memory of our monitoring system, which has a fixed maximum size: older entries are overwritten automatically, and all logs are cleared when it restarts. |
Installation data | As agreed in the contract with your company. It is not tied to your account. |
Deleting your account
Accounts are created and managed by 3OT. To have your account and its data deleted, email info@3ot.be from the address linked to your account, or ask your company’s contact at 3OT. We delete it within 30 days and confirm by email. Logs that contain your user ID are cleared automatically, as described above.
7. How we protect it
We use technical and organisational measures to protect your data against loss, misuse and unauthorised access:
- All traffic between the app and our servers is encrypted with HTTPS (TLS).
- You sign in through 3OT’s login portal using OpenID Connect with PKCE. The app never sees or stores your password.
- Sign-in tokens are stored in the device’s secure storage (Android Keystore, iOS Keychain).
- Every API request is checked against your account, so you only see your own company’s installations.
- Diagnostic logs leave out the device name and other details that identify you, and every field is size-limited.
- Only authorised 3OT staff can access servers and logs.
No system is completely secure. If a data breach puts your rights at risk, we will tell you and the Belgian Data Protection Authority as the GDPR requires.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and get a copy
- Correct data that is wrong or incomplete
- Delete your data (see “Deleting your account” in section 6)
- Restrict how we use your data
- Object to processing based on our legitimate interest
- Data portability: receive your data in a common, machine-readable format
To use any of these rights, email info@3ot.be. We may ask you to confirm your identity. We answer within one month, free of charge.
If you think we handle your data wrongly, please contact us first. You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be.
9. App permissions
The app asks for only two permissions:
- Internet: to sign in and load your installations.
- Notifications: to show alerts. You can refuse or turn this off at any time in your phone’s settings; the app keeps working without alerts.
The app does not use your location, camera, microphone, contacts or storage.
10. Children
The app is a business tool for professional users aged 18 and over. It is not meant for children, and we do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy when the app or the law changes. The date at the top shows the latest version. For important changes we will tell you in the app or by email before they take effect.
12. Contact
Questions about this policy or your data? Contact us at:
3OT NV, Valkenaard 14, 2242 Zandhoven (Pulderbos), Belgium Email: info@3ot.be · Technical support: support@3ot.be · Phone: +32 496 37 73 28