Your personal data is in safe at Fynch Mobility
One wrong data breach and your data is on the street. You don’t want that, of course. Makes sense. Not everyone needs to know everything about you. How does the data security work when using the Fynch Mobility app to keep track of your business kilometers, commutes and work-from-home days? How does Fynch store your data? And with whom is the collected information shared? Find out how Fynch handles your privacy and how your personal data is carefully stored and processed.
Privacy first at Fynch
At Fynch, your privacy is our top priority. Therefore, as a user, you determine what data you do or do not share with your employer. Nothing is automatically recorded or shared without your permission. You also decide how you use the Fynch mobility app and how long your data is stored.
How does Fynch Mobility protect my personal data?
We have divided the protection of personal data into three categories:
- For the employee
- For the employer
- Internally at Fynch Mobility
1. For the employee and the self-employed
All data registered in the app is only accessible to you. Do you use the app to submit declarations to your employer? Then Fynch only shares information when you submit a declaration via the app. Trips you label as private are never accessible to third parties.
As a self-employed person you share your data only with yourself.
Do you use automatic trip registration or start-stop registration? No need to worry, in both cases these trips are automatically set to private. This prevents this data from incorrectly entering into a declaration file. If it does concern business or commuting kilometers, you can easily convert this in the Fynch App.
As a user, you choose the settings for processing and (internal) sharing different types of information and further security of the platform.
More about our app and how it works can be found here.
What data is shared in a declaration?
- Date of each work-from-home day
- Trip purpose per trip, i.e., commuting or business kilometers (not private)
- Date of the trip
- Traveled distance per trip
- Means of transport per trip
- CO2 emissions per trip
- Distance per trip
- Calculated reimbursement per trip
Besides declarations, data is never shared with anyone other than yourself unless you give permission. For example, when participating in a particular project or challenge.
In short: you are the owner of your data and fully in control of this data at all times.
2. For the employer
From 2024 onwards, companies with more than 100 employees must report mobility-related CO2 emissions. Fynch supports companies in this task. The CO2 reporting shows at the corporate level the kilometers traveled using transport and the purpose of travel. This data cannot be traced back to the individual. The individual share of the employee (you) in CO2 emissions is therefore unknown.
Not only employers with more than 100 people working with Fynch will have access to a management monitor. The monitor is also available to SMEs. Here, too, insight into CO2 emissions and transportation mode choice is provided at the company level. Data from you as an individual participant (and other colleagues) are not reflected in this.
Is the Fynch App an employee tracking system within the meaning of the GDPR?
No, employers cannot use the Fynch app to monitor or control. Also according to the GDPR (General Data Protection Regulation), the Fynch app is not an employee tracking system for these reasons:
- Automatic trip recording is optional, as employees you can turn this off at any time.
- The data recorded in the Fynch app is not readily available to the employer. Only when submitting a declaration, only the data relevant to the declaration of home office days, commuting and business trips are shared with the employer.
3. Internally at Fynch Mobility
Fynch works with a certified Information Security Management System (ISMS). This makes it possible to secure your data in detail. We do this in the following ways, among others:
- Your stored data (data-at-rest) is encrypted. This encryption also applies to the data sent between the Fynch app and the Fynch system (data-in-transit).
- Fynch Mobility works with the need-to-know principle. This allows you to set restricted access. Consider, for example, mandatory user access controls and authorization procedures. This ensures that only authorized people are granted access to information or systems.
Fynch Mobility is certified in accordance with ISO 27001:2017
With an ISO 27001 certification, we show that we comply with all information security requirements.
More information about this ISO standard can be found here.
