Captur
Privacy Policy
App: CapTur | Data Controller: Soidem Data Technologies | Last updated: 16 June 2026
At CapTur we respect your privacy and are committed to protecting the personal data we process, in accordance with Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).
1. Data Controller
Soidem Data Technologies, S.L. — Tax ID (NIF): B16979106 — C/ de Mallorca, 277, 2nd floor, door 2, Eixample, 08037 Barcelona (Spain). Data protection contact: info@soidemdt.com.
2. Data We Collect
- Identification: employee name and email.
- Clock-in/out: exact date and time of entries and exits.
- Location (GPS): coordinates captured only at the moment of clocking in/out.
- Images: photo taken with the camera at clock-in, for verification.
3. Purpose of Processing
Recording and monitoring employees' working hours, in compliance with Spanish Royal Decree-Law 8/2019 (mandatory time recording).
4. Legal Basis
Compliance with a legal obligation of the employer (Art. 6.1.c GDPR) and performance of the employment relationship (Art. 6.1.b GDPR).
5. Device Permissions
- Location (GPS): only at clock-in. No background tracking.
- Camera: only for the verification photo. No gallery access or video recording.
6. Storage and Security
Data stored securely on Supabase servers located in the European Union. We apply appropriate technical and organizational measures (encryption in transit, access control). No data permanently stored on the device.
7. Data Processor
We use Supabase as our infrastructure provider (database hosting and authentication), acting as a data processor with access limited to what is necessary to provide the service, bound by contract under Art. 28 GDPR.
8. Sharing with Third Parties
Data is not sold or shared for commercial purposes. It is only shared with essential service providers (such as hosting) or public authorities where legally required.
9. Access to Data
Only the company administrator can access the full history of clock-ins, locations, and photos.
10. Retention
While the account is active. After deactivation, deleted within 30 days, unless legally required.
11. Minors
CapTur is a workplace tool, intended exclusively for persons with legal capacity to work. It is not intended for children under 16, and we do not knowingly collect their data.
12. Automated Decisions
No automated decision-making or profiling with legal effects on the user is carried out. Data is used solely for working-time records.
13. Your Rights
Access, rectification, erasure, portability, restriction, and objection. Write to info@soidemdt.com or use the Data Deletion page. We will respond within the legal period of one month.
14. Applicable Regulation (European Union)
Processing complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD), under the principles of lawfulness, data minimization, purpose limitation, and security.
15. International Transfers
Data is hosted on servers within the European Economic Area (EEA). No international transfers outside the EU are carried out. Should this become necessary, GDPR safeguards (standard contractual clauses) would apply.
16. Right to Lodge a Complaint
If you believe processing does not comply, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
17. Changes
We may update this policy; the last-updated date will be shown.
18. Contact
Soidem Data Technologies — C/ de Mallorca, 277, 2nd floor, door 2, 08037 Barcelona — soidemdt.com