GT Field Privacy Policy


Effective date:
2 September 2026

Version: 1.0

This Privacy Policy explains how Globe Tracker ApS (“Globe Tracker”, “we”, “us”, or “our”) handles personal data when authorized installers, technicians, and other business users use the GT Field mobile application (the “App”, “GT Field”).

GT Field is a business application used to pair and unpair Globe Tracker devices and customer assets, review field-operation status, and access support resources. It is not intended for personal or household use.

1. Who is responsible for your data

Globe Tracker ApS is responsible for personal data used to operate accounts, authenticate users, secure the App, and provide support.

Where you use the GT Field on behalf of an employer, customer, depot, or other organization, that organization may be the controller of operational data submitted through the App, while Globe Tracker processes that data as a service provider or processor under the applicable customer agreement. Contact your organization if you have questions about instructions it gives Globe Tracker or about data it controls.

 2. Data we process

Depending on your account and how you use the GT Field, we process the following categories.

Account and identity data
Name, username, email address, user identifier, role or user type, and depot or organizational assignment.
Authentication information, including access, ID, and refresh tokens. Password entry and identity verification occur through Globe Tracker’s identity provider; the GT Field app does not store your password.

Field-operation data
Device identifiers and serial numbers.
Asset serial numbers and configuration selections, such as asset type, manufacturer, controller, and tags.
Container identification numbers, including identifiers obtained by optical character recognition (OCR) or entered manually.
Customer and depot identifiers.
Pairing and unpairing records, status, timestamps, workflow activities, results, and error details.
If an unpair reason is provided, we may store that reason with the unpair record.
A snapshot of the initiating user’s identity may be associated with an operation for accountability and audit purposes.
This operational information may relate to an identifiable user because it records who initiated or performed an operation.

Globe Tracker devices may themselves produce operational GPS or location readings as part of pairing validation and device monitoring. That is data from the hardware device, not location collected from your phone. The App does not request location permission from your mobile device and does not collect your phone’s precise or approximate location.

Camera, QR-code, and container-identification data
The App requests camera access when you choose to:

  • scan a device QR code; or

  • capture an image of a container so the App can read the container identification using OCR.

For QR scanning, the App reads the first line of the QR code as a device identifier.

For container identification, the image is used only to identify the container ID. After identification, the image is discarded immediately. We do not store, upload, or retain the photograph or video. We may store the identified container ID as field-operation data.

The App does not access your photo library. You may enter device and container identifiers manually instead of using the camera.

Technical, security, and support data
When GT Field communicates with Globe Tracker services, we and our service providers may process technical data such as IP address, request time, app version, device or operating-system information, authentication events, diagnostic details, and server logs. We use this data to deliver the service, maintain security, investigate failures, prevent misuse, and support users.

If you contact support, we process your contact details and the content of your request. Choosing an email or telephone link in the App opens your device’s corresponding app; the external provider’s own privacy terms then apply.

The Help control opens Globe Tracker’s Document Center in your device’s web browser (https://portal.globetracker.com/document-center). That site is separate from GT Field. It has its own privacy notice and may request permissions in the browser, including location, if the website is built to do so. GT Field does not receive that browser location data and does not request location permission for the App.

3. Data GT Field does not collect

  • The App does not request location permission and does not collect your phone’s location. This refers to GT Field itself. If you open Help and visit the Document Center in a browser, that website may ask for location in the browser. That request comes from the website, not from the App, and is governed by the Document Center’s own terms.

  • The App does not retain photographs or video. A container image captured for OCR is discarded immediately after the container ID is identified.

  • The App does not access contacts, calendars, health data, or the advertising identifier.

  • The App does not include advertising, behavioral-tracking, or third-party product-analytics SDKs.

If a later release adds a permission, SDK, or new personal-data field, we will update this policy and, where required, the app-store privacy disclosures.

 4. How we use data

  • GT Field does not request location permission and does not collect your phone’s location.

  • GT Field does not retain photographs or video. A container image captured for OCR is discarded immediately after the container ID is identified.

  • GT Field does not access contacts, calendars, health data, or the advertising identifier.

  • GT Field does not include advertising, behavioral-tracking, or third-party product-analytics SDKs.

If a later release adds a permission, SDK, or new personal-data field, we will update this policy and, where required, the app-store privacy disclosures.

We process data to:

  • authenticate users and maintain secure sessions;

  • provide authorized access based on customer, role, and depot assignments;

  • validate devices, assets, and container identification and perform pairing or unpairing operations;

  • display operation history, progress, results, and errors;

  • maintain audit trails and protect customers, users, and Globe Tracker systems;

  • diagnose incidents, provide support, and improve service reliability;

  • install and deliver App updates;

  • comply with legal, regulatory, contractual, and security obligations; and

  • establish, exercise, or defend legal claims.

We do not sell personal data. We do not use App data for third-party advertising or cross-app behavioral tracking.

5. Legal bases (EEA, UK, and similar laws)

Where the EU GDPR, UK GDPR, or a similar law applies, we process personal data on the following bases:

  • Contract. We process account, authentication, and field-operation data as needed to provide the App and related services to you or your organization under the applicable agreement.

  • Legitimate interests. We process security, diagnostic, audit, and support data to operate a secure business service, prevent misuse, keep records of field operations, and help users. We balance these interests against your rights.

  • Legal obligation. We process data where we must meet applicable legal, regulatory, accounting, or security requirements.

  • Consent. Where a device permission is optional and consent is required, we rely on that consent. You can withdraw camera permission in your device settings. QR scanning and camera-based container identification will then be unavailable; manual entry remains available.

When Globe Tracker acts as a processor, it processes operational data on the documented instructions of the relevant customer or controller.

6. How we disclose data

We may disclose data only as needed to:

  • your employer, customer, depot, or other organization that authorizes your account and field work;

  • authorized Globe Tracker personnel who need access for service delivery, security, or support;

  • vendors in the categories below, under appropriate contractual safeguards;

  • customer-directed integrations or recipients where required to complete the service;

  • public authorities or other parties where required by law or necessary to protect rights, safety, systems, and users; or

  • a successor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable safeguards.

Vendor categories we use to operate GT Field include:

  • Identity and authentication (currently Keycloak), to sign users in and issue tokens;

  • Cloud hosting and application infrastructure, to run Globe Tracker APIs, databases, and related services;

  • Mobile app distribution platforms (Apple App Store and Google Play), when you download or update the App;

  • Software-update delivery to deliver App updates;

  • Security, logging, and monitoring, to protect systems and investigate incidents;

  • Customer support tools, to handle support requests; and

  • Communications providers you choose to open from the App (for example email or telephone), which then process that communication under their own terms.

Service providers may process only the data needed to perform their services and must protect it under contract.

7. International transfers

Globe Tracker is established in Denmark and primarily hosts customer production data in EU data centers. Some vendors, support functions, or customer-directed integrations may process data in other countries, including the United States. Where required, we use appropriate transfer safeguards, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, or another legally recognized mechanism.

 8. Retention and deletion

We retain account and operational data while the account and the related customer relationship are active, and for as long as needed to provide the service, maintain security and audit records, and meet legal or contractual obligations.

When an account is closed, or when a valid deletion request is completed, we delete or de-identify personal data associated with that account, except where we must keep information for legal, security, fraud-prevention, audit, dispute, or backup purposes, and only for as long as those purposes require.

Images captured for container identification are discarded immediately after the container ID is identified and are not retained.

Authentication tokens stored on the mobile device are removed when you sign out. Platform backups or device-level behavior may be governed by your device and operating-system settings.

To request deletion or account deactivation, contact your organization’s administrator or support@globetracker.com.

 9. Security

We use administrative, technical, and organizational measures designed to protect personal data. These include encrypted network connections, encrypted production storage, access controls, customer-data separation, restricted production access, audit logging, and security monitoring. Authentication tokens are stored in the device’s protected secure storage on supported mobile platforms.

No system is completely secure, and we cannot guarantee absolute security. Please protect your device and account, use only authorized accounts, and report suspected misuse to support@globetracker.com.

 10. Your rights and choices

EEA, UK, and similar laws. Depending on your location and our role, you may have rights to access personal data about you; correct inaccurate or incomplete data; request deletion or restriction; object to processing based on legitimate interests; receive portable data where applicable; withdraw consent without affecting earlier lawful processing; and complain to a competent data-protection authority.

Start by contacting your organization’s administrator if it controls the data. You may also contact Globe Tracker at support@globetracker.com. We may need to verify your identity and coordinate with the relevant customer before completing a request.

United States (including California). If you are a consumer under the California Consumer Privacy Act (CCPA), as amended by the CPRA, or a similar US state privacy law, you may have the right to:

  • know and access personal information we hold about you;

  • request correction of inaccurate personal information;

  • request deletion of personal information;

  • opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising; and

  • not be discriminated against for exercising these rights.

Globe Tracker does not sell personal information and does not share it for cross-context behavioral advertising. We do not use App data for third-party advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law, beyond what is needed to provide the App and keep it secure.

To exercise these rights, contact support@globetracker.com or your organization’s administrator. We may need to verify your identity and, where your organization controls the data, coordinate with that organization. Authorized agents may submit requests where the law allows, subject to verification.

 11. Children

GT Field is intended for authorized business users and is not directed to children. We do not knowingly collect personal data through the App from children under 16. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

 12. Changes to this policy

We may update this Privacy Policy when the App, our data practices, or legal requirements change. We will post the revised version at the location linked from the App or app-store listing and update the effective date. Where required, we will provide additional notice.

 13. Contact

Questions, requests, or privacy concerns may be sent to:

Globe Tracker ApS
Linnésgade 25, 4th floor, left
DK-1361 Copenhagen K
Denmark
Email: support@globetracker.com