1. How the application works

TesLab is a client of the information system of a testing laboratory or a maintenance company. When signing in, the user specifies the address of the server of their own organisation, and all working data is stored and processed on that server. The server belongs to the customer organisation or is hosted at its choice, so that organisation determines the purposes and the scope of the processed data and acts as the data controller. The developer of the application does not receive access to the users' working data and operates no data collection server of its own.

2. What data the application processes

• Credentials (login and password or a digital signature certificate). Sent only to the server specified by the user and used to sign in.
• Profile details received from the organisation's server: name, position, work phone number, email address. Used by the application sections and to show the author of a record.
• Working data of the organisation entered by the user: requests, test reports, service tickets, measurements, attached files and photographs.
• Camera. Used only on the user's action: scanning QR codes of equipment and documents, taking photographs attached to records. A photograph is sent to the organisation's server only if the user attaches it to a record.
• Microphone. Used only during a call in the built-in telephony: the voice is transmitted to the telephone exchange of the organisation. The application does not record calls.
• Location. Requested only on the user's action while filling in a test report, to mark the place where the work was carried out. The application does not collect location in the background.
• Notifications. The push token of the device (RuStore, Google or Huawei) together with the device model and operating system version, required to deliver notifications about work events.
• Technical connection data: server address, application version, network state. Error messages stay in the local console of the device and are not sent anywhere.

3. Data that never leaves the device

The password used for fingerprint, face or PIN sign-in is kept in the protected storage of the device and is transmitted neither to the developer nor to the organisation. Biometric samples are not available to the application: they are verified by the operating system, which returns only the result of the check. A local copy of working data is stored on the device to allow work without a network connection.

4. Who the data is shared with

Working data and credentials are transmitted only to the server of the organisation whose address the user has entered. The only external recipient is the push service of the device (RuStore, Google or Huawei) acting as a transport for notifications. The developer does not sell user data and does not share it with third parties for advertising purposes. The application contains no advertising networks and no analytics services.

5. How to delete the data

The "Полная очистка" (Full cleanup) item in the "Сервер" (Server) window of the application erases local data, settings and stored sign-in keys from the device. Uninstalling the application removes them as well. User accounts are created by the administrator of the user's organisation, therefore requests for access to personal data, its correction or deletion should be addressed to that administrator or to the developer at support@teslab.ru.

6. Rights of the user and feedback

The user is entitled to obtain information about the processing of their personal data, to request its correction, blocking or deletion, and to withdraw consent to the processing. Requests are accepted at support@teslab.ru and by phone +7 (499) 403 3110.

7. Full documents

The complete privacy policy and the personal data processing agreement are published in Russian: Политика конфиденциальности and Соглашение об обработке персональных данных.