1. Data controller
Bit ON Consultores S.L., with tax ID (NIF) B-61680591 and registered office at Calle Mandri, 66, 08022 Barcelona (España). Contact: info@biton.es.
2. Scope of this policy
This policy refers to this informational website and to the BitGPI app for Android and iOS. The data that each customer organisation manages in the web application and the app (its assets, locations, documents and users) is processed by Biton on behalf of that organisation, as data processor, in accordance with the corresponding contract and data processing agreement. For that data, the controller is your organisation.
3. Data processed by this website
This website has no forms, registration or private area. We only process personal data in the following cases:
Enquiries by email or phone: if you write to us at info@biton.es or admin@bitgpi.es, or call us, we process your name, your contact details and whatever you tell us in order to reply to you and, if you ask, to prepare a demo or a proposal.
Technical browsing data: like any website, the server logs technical data about visits (IP address, browser, page and time) in order to serve the website, keep it secure and detect abuse.
4. Data processed by the app
The app is only used by people who have been given access by their organisation. It processes the following data:
| Data | Purpose |
|---|---|
| Account: name, email, username, role and organisation | Signing in and applying your permissions. |
| Profile photo (optional) | Displaying it on your profile. |
| Assets, locations, photos, documents and notes you record | Managing your organisation’s inventory. |
| Technical device and crash data (model, system, app version, error trace) | Detecting and fixing app errors. |
| Data stored on the device (session, preferences and, in offline mode, assets pending sync) | Keeping you signed in and working without coverage. |
5. App permissions
Camera: to read barcodes and QR codes and to take photos of assets. It is only used when you request it.
Photos or gallery: to choose an existing photo and attach it to an asset or to your profile.
Bluetooth and nearby devices (Android only): to connect Zebra RFID readers. It is not used to determine your location.
The app does not access your GPS location, your contacts or the microphone, does not show advertising and does not track you across other apps or websites.
6. Web analytics
This website does not use analytics or tracking tools. If we add them in the future, we will ask for your permission first and update this policy.
7. Legal basis
Enquiries: your consent when you write to us and, if the enquiry concerns a possible contract, the taking of pre-contractual steps (Art. 6(1)(a) and 6(1)(b) GDPR).
App: performance of the contract between Biton and your organisation, which is who gives you access (Art. 6(1)(b) and 28 GDPR), and our legitimate interest in the app working without errors (Art. 6(1)(f) GDPR).
Technical browsing data: our legitimate interest in keeping the website secure and running (Art. 6(1)(f) GDPR).
8. Retention period
Enquiries: for as long as necessary to deal with them and, afterwards, blocked for the limitation periods of any potential legal liabilities.
App: for as long as your account is active and your organisation so decides. You can request deletion of your account as explained in Account and data deletion.
Technical browsing and crash data: the limited period set by the providers for their logs.
9. Recipients
We do not sell or transfer your data. We only disclose it when required by law (for example, to public authorities or to courts and tribunals).
The following have access to data, as data processors and solely to provide their service to us: the website and platform hosting provider (Amazon Web Services EMEA SARL), the app error diagnostics service (Sentry, by Functional Software, Inc.) and the email provider. When you open a map in the app, the map provider receives your IP address in order to serve the map images.
10. International transfers
Some providers (such as Amazon Web Services or Sentry) belong to groups headquartered in the United States and may process data outside the European Economic Area. These transfers are covered by the EU-U.S. Data Privacy Framework (dataprivacyframework.gov) and by the standard contractual clauses approved by the European Commission.
11. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and the right not to be subject to automated individual decision-making, and you can withdraw any consent you have given at any time.
To exercise them, write to us at info@biton.es or by post to Calle Mandri, 66, 08022 Barcelona (España), with the reference “Data protection” and stating which right you are exercising. For app data, you can also contact your organisation. If you are not satisfied with our response, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (aepd.es).
If we have reasonable doubts about your identity, we may ask you for additional information to confirm it. You may act through a representative, providing proof of representation. We will reply within one month, which may be extended by two further months if the request is complex; in that case we will let you know within the first month.
12. Security
We apply technical and organisational measures appropriate to the risk. The website is served over HTTPS only, with strict security headers and no third-party content; the app communicates with the platform over encrypted connections and only with authorised users.
13. Minors
This website and the app are intended for professional use and are not aimed at children under 14. If you are under that age, please do not send us any personal data.
14. What cookies are
Cookies are small files that a website stores in your browser to remember information about your visit. This policy also covers similar technologies, such as the browser’s local storage (localStorage).
15. What this website uses
This website does not set any first-party or third-party cookies, does not use analytics and does not load external content. It only uses the browser’s local storage for one technical preference:
| Name | Owner | Type | Purpose | Duration |
|---|---|---|---|---|
| bitgpi-lang (localStorage) | First-party | Technical | Remember the language you choose in the selector. | Until you delete it |
16. Why you do not see a cookie banner
Because it is not needed: the only thing we store in your browser is a technical preference that you choose yourself, and the law (Art. 22.2 LSSI-CE) does not require consent for it. If we add analytics or other cookies that require consent in the future, we will ask for your permission before setting them and update this policy.
17. How to delete or block cookies in your browser
You can delete or block cookies and local storage in your browser settings: Chrome, Firefox, Safari and Edge. If you block them, the website will still work, but it will not remember your language.
18. Changes to this policy
We may update this policy to reflect legal changes or changes to the website or the app. The date of the last update appears at the top of this page.