BG Wind App Privacy Policy
Updated: 23 October 2026
Who is responsible?
BG Wind GmbH, Silder Moor 1, 18196 Dummerstorf OT Kavelstorf, Deutschland. For privacy questions and requests, contact info@bgwind.de. This policy covers the BG Wind mobile app and the workplace services opened through it.
Purposes and legal bases
Necessary employment-related processing is based on Section 26(1) of the German Federal Data Protection Act (BDSG), where applicable. Processing needed to perform a contract or respond to a contractual request is based on Article 6(1)(b) GDPR; compliance with legal obligations on Article 6(1)(c). Account security, abuse prevention and necessary technical operation rely on Article 6(1)(f), with the legitimate interests of protecting accounts and providing a reliable workplace service. Optional processing that requires consent relies on Article 6(1)(a); consent may be withdrawn for the future. An operating-system permission does not by itself replace the applicable legal basis. These functions do not make solely automated decisions with legal or similarly significant effects about employees.
Account and workplace information
The app is for authorised users with an existing account managed by BG Wind. Sign-in uses your email address and a one-time email code. Depending on your permissions, we process your name, account identifiers, employer, team and workplace information to provide your account and authorised tools. Employee information may be obtained from our Factorial system. There is no public self-registration in the app.
Cafeteria, notes and workplace tools
We process the meal selections, dates and collection records you submit to fulfil cafeteria orders. Private notes are saved for your account and synchronised with our server. If you use workplace tools, the information you submit, including support messages, documents or inspection records, is processed for that tool and may be available to authorised colleagues. Do not enter personal information that is unnecessary for your work.
Chat and shared attachments
The chat service processes messages, sender and recipient identifiers, group membership, timestamps and delivery/read information to provide individual and group conversations. Photos, files and voice recordings you send are stored for access by authorised participants. Profile names and photos may be visible in conversations. BG Wind uses its configured chat service, including Nextcloud Talk. Chat content is not end-to-end encrypted by this app: authorised server services can process it for delivery, translation and operation.
Automatic translations
Chat text is translated when a conversation is opened, according to the reading account’s language. Tasks, knowledge and other supported content may be translated in the background after creation or changes. These content translations use BG Wind’s own translation server. Results may be cached for reuse; selected private translation caches are encrypted with server-managed keys. Originals remain authoritative and automatic translations can contain mistakes. Fixed interface translations are stored in the application. Selecting an interface language does not send displayed employee content to an external translation service.
Tasks, knowledge and calendar
Depending on your access rights, the app processes project and task titles, descriptions, assignments, comments, attachments, due dates and completion status, as well as knowledge articles and reading acknowledgements. These records are available to authorised project members or the intended audience. Calendar functions process the event information you access or submit through the configured workplace service. Access is assigned by BG Wind; using these features does not make their content public.
Scanner, working time and approvals
Submitted QR codes can identify a workplace action, cafeteria collection, website sign-in approval or a working-time action. We process the account, recognised code, timestamps and confirmation result needed for the selected action. Working-time views retrieve relevant booking and balance information, including working hours and leave balances, from the configured employee service such as Factorial. Pulling down to refresh requests current data. Website sign-in approvals process the requesting session and your approval or rejection. Scanning does not require continuous location tracking.
Push notifications and app updates
If enabled, we process a device push token, account/session association, device platform and language to deliver chat, task, knowledge and update notifications. Notification delivery may include the sender’s first name and an event description; chat message bodies are not included in the current notification payload. Google and Apple process the delivery identifiers and payload required for their push services. Notifications may be visible on a locked screen depending on your device settings. App update checks transmit technical request information and version/build information needed to determine whether an update is available.
Aggregated chat usage statistics
Authorised administrators can view daily counts of text messages sent through the BG Wind chat interface and newly generated chat text translations, grouped by sender account language or translation target language. These statistics support service operation and language provision. The statistics table contains dates, language codes, event categories and counts, not message text, employee IDs or conversation IDs. Cached translations shown again are not counted as newly generated translations. Other operational chat records remain separate from these counters.
Photos and camera
Camera access is used for QR scanning and when you choose to take a profile photo or a chat photo. Photos and files you choose to send in chat are uploaded and made available to the conversation participants. Profile photos you save are uploaded to BG Wind. Photo background removal runs on the device. QR camera frames are processed on the device; recognised QR content is sent to our server when you submit a scan. Profile photos may appear on internal displays and, for designated public company contacts, on the company website. Microphone access is requested when you record a voice message. A voice recording you send is uploaded as a chat attachment; it is not recorded continuously in the background.
Biometric sign-in and local storage
After a successful sign-in, the app stores an access credential in device secure storage so you can return without entering an email code each time. Access may end when the session expires, you sign out, access is revoked or another device replaces the session for the same device category. Optional biometric authentication uses the operating system dialog; BG Wind does not receive your fingerprint or biometric face template. The app also stores preferences, downloaded language dictionaries and cached images or attachments on the device. You can manage biometric authentication and sign out in settings.
Service providers and diagnostics
BG Wind uses hosting and email services, Factorial for relevant employee and working-time functions, and configured workplace services such as Nextcloud Talk and the task service. Push delivery uses Google Firebase Cloud Messaging and, on Apple devices, Apple Push Notification service. Android QR scanning and photo background removal use Google ML Kit; Google documents processing of device/app information, installation identifiers, feature usage and diagnostics by these SDKs. There is no advertising in the app. Servers may process IP addresses, request information and access logs for operation, security and troubleshooting. Embedded workplace pages may also record access and activity.
Security
Connections to the BG Wind app API use HTTPS. Selected private server records, including notes and profile images, are encrypted at rest with server-managed keys. This is not end-to-end encryption and not every server database or local cache is separately encrypted. Authorised server services can process the information needed to provide the service.
Retention and deletion
Data is kept for the purposes described here and applicable business and legal retention requirements. Different records have different retention periods. You can delete notes and your profile photo, and edit or delete your own chat messages where the function is available. Removing a conversation from your list does not delete it for other participants. Recipients may already have downloaded attachments or retained copies. Signing out or uninstalling the app does not itself delete server records. To request deletion of app access and associated personal data, email info@bgwind.de from your registered address with the subject BG Wind app data deletion. We verify identity before acting. Employment, time-recording, accounting or other records that must be retained may remain; we explain applicable exceptions in response to your request.
Recipients and international services
Access is limited by the relevant account, conversation, project or administrative permissions. Infrastructure, email, employee-service and push providers receive the data required for their respective service. Using international providers such as Google and Apple can involve processing outside the European Economic Area. Information about the providers, applicable processing locations and transfer safeguards for your service can be requested from info@bgwind.de. No sale of personal data or use of the app for cross-company advertising tracking is intended.
Your choices and rights
You may request access, correction, erasure, restriction or portability of your personal data where the applicable requirements are met. You may object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it for the future without affecting earlier lawful processing. Contact info@bgwind.de. You may lodge a complaint with a data protection supervisory authority, including the supervisory authority in Mecklenburg-Vorpommern. Refusing an optional device permission prevents the feature requiring it, not unrelated app functions.
Public test workspace
The explicitly labelled Test workspace uses fictional data. Its profile photos, notes and sample orders are held in memory and discarded when the workspace is closed or the app restarts. They are not submitted to company systems. No employee authentication token is issued. Production project pages, website login approvals and time bookings are unavailable in this workspace. Language preferences can still be saved on the device and public language dictionaries may be downloaded. On-device image-processing SDK diagnostics described above may still apply.