CSG Mobility app privacy policy

Last updated: June 2026

This Privacy Policy applies specifically to the CSG-Movilidad mobile app, available on Google Play and the App Store, and describes how CONSIGA PROJECTS, S.L. collects, uses, retains and protects the personal data of the app's users, including location and geolocation data, images and audio recordings.

1. Data controller

• Controller: CONSIGA PROJECTS, S.L.
• Tax ID (CIF): B27772821
• Postal address: Avda. Madrid, 40 - bajo, 36204 Vigo (Pontevedra), Spain
• Contact email: info@consiga.es

2. General information about the app

The CSG-Movilidad app is intended for the operational management of mobility services, routes, itineraries, journey tracking and incidents linked to the professional activity of authorised users.

Using the app may require processing the personal data needed for it to work properly and for the associated services to be provided.

3. Personal data we process

The app may process the following categories of personal data:

• Identification data: first name, surname, phone number and email address.
• Professional data: company, occupation, position or role.
• Operational data: assigned routes, itineraries, notes and incidents.
• Service control data: journey tracking, times and service status.
• Location and geolocation data from the device.
• Media: photographs and images captured with the camera or chosen from the device's gallery.
• Audio recordings: voice notes recorded through the device's microphone.

4. Use of the device's location

The app requests access to the device's location in order to enable features related to route management, itineraries and operational journey tracking.

Specifically, location data may be used to:

• Record geographic positions linked to mobility services.
• Manage assigned routes and itineraries.
• Enable operational tracking of journeys.
• Display information related to the user's location.
• Record incidents or events linked to a geographic position.
• Improve the coordination and traceability of the service provided.

Location is only collected once the user has expressly granted the corresponding permission through the device's operating system (Android or iOS).

Where the app uses background location access, such access is used solely to maintain continuous operational tracking during journeys or active services linked to the user's professional activity.

The app does not use location data for advertising purposes and does not sell location data to third parties.

5. Use of the camera and microphone

The app may request access to the device's camera, photo gallery and microphone for the following purposes:

• Camera and photo gallery: capturing or choosing images to attach to services, expenses, delivery notes and other records of professional activity. The camera is also used to read QR codes when clocking in and out.
• Microphone: recording voice notes linked to tasks and opportunities.

The camera, gallery and microphone are only accessed when the user activates the corresponding feature and has granted permission through the device's operating system. This data is not used for advertising purposes and is not sold to third parties.

6. Purposes of the processing

The personal data processed through the app is used for the following purposes:

• Enabling the CSG-Movilidad app to work.
• Managing authorised users and assigned services.
• Coordinating routes, itineraries and journeys.
• Carrying out operational tracking of mobility services.
• Recording incidents, notes or service status.
• Maintaining the security, traceability and operational control of journeys.
• Providing technical and operational support to the user.

7. Legal basis for the processing

Depending on the case, the legal basis for processing personal data may be:

• The user's consent, particularly for access to device permissions such as location, camera and microphone.
• The performance of a contractual, professional or service relationship.
• The controller's legitimate interest in the operational management, security and traceability of the service.
• Compliance with applicable legal obligations.

8. Data retention

Personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy and, where applicable, for the periods required by the applicable legislation.

Data linked to routes, itineraries, journeys or active services will be retained for as long as necessary to manage the service and to address any legal or contractual liabilities.

Once the applicable retention periods have elapsed, the data will be securely deleted or blocked where legally required.

9. Disclosure of data to third parties

Personal data will not be sold to third parties.

Data may only be disclosed where necessary to provide the service or where there is a legal obligation to do so. In particular, it may be disclosed to:

• Companies within the corporate group or entities involved in providing the service.
• Technology providers needed for the app to run, be hosted, maintained or supported, including Bugsnag (error reporting and app diagnostics) and Google Maps / Google LLC (map display and geolocation services), which act as processors under their respective privacy policies.
• Public authorities, courts, tribunals or competent bodies where there is a legal obligation.

In all cases, data will be disclosed in accordance with the data protection legislation in force.

10. International data transfers

As a general rule, no international transfers of personal data outside the European Economic Area are envisaged.

Should it become necessary to use providers located outside the European Economic Area (such as Google's services, where applicable), those transfers will be carried out under the safeguards required by the General Data Protection Regulation.

11. Device permissions

In order to work, the app may request certain device permissions, particularly those relating to location, camera and microphone.

The permissions that may be requested include:

• Access to approximate location.
• Access to precise location.
• Access to location in the background, linked to geolocation services, where the active feature requires it.
• Access to the camera and photo gallery, to capture and attach images and to read QR codes.
• Access to the microphone, to record voice notes.
• Internet access.

Users may grant, refuse or withdraw permissions at any time from their device's operating system settings (Android or iOS). Withdrawing certain permissions may affect how some of the app's features work.

12. Users' rights

Users may exercise the following data protection rights:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.

To exercise these rights, users may contact the controller in writing at info@consiga.es. The request must clearly state which right is being exercised and allow the requesting user to be identified.

Users may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) through its website: www.aepd.es

13. Information security

CONSIGA PROJECTS, S.L. applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or improper destruction.

Users should nonetheless bear in mind that no technology is entirely infallible, so the reasonable measures available will be taken to safeguard the security of the information processed.

14. Minors

The CSG-Movilidad app is not intended for minors. It is designed for authorised users within the scope of a professional, contractual or operational activity.

15. Changes to this Privacy Policy

CONSIGA PROJECTS, S.L. may update this Privacy Policy to reflect legal, technical, operational or functional changes to the app.

The version in force will always be available on this page.