Legal
Privacy Policy
Last updated [DATE] · Version 1.0
1. Who is responsible for your data
Anwesend is provided by Aralel GmbH, Aachen, Germany.
Where Anwesend is used by an organisation to record its members' attendance, that organisation is the data controller and Aralel GmbH acts as a processor on its instructions under Art. 28 GDPR. Questions about why your attendance is recorded, who sees it, and how long it is kept should go to your organisation first. Questions about how the software itself works can come to us.
2. What Anwesend collects
| Data | Purpose |
|---|---|
| WiFi network identifier (SSID and BSSID) of the network your device is connected to | Determining whether you are connected to a network your organisation has registered |
| Connection and disconnection timestamps | Constructing attendance sessions |
| Coarse device position, evaluated against your organisation's registered site boundaries | Confirming a network match is plausible and detecting spoofed networks |
| Periodic signals confirming the app is running | Distinguishing a genuine absence from a phone that stopped reporting |
| Mobile carrier and connection type (4G/5G), where permitted | Telling a killed app apart from a genuine departure. Optional — declined without loss of core function. |
| Device manufacturer, model, and operating system version | Diagnosing reliability problems specific to certain devices |
| Email address | Your account |
Background location, specifically
Android requires location permission to read the name of a connected WiFi network. Anwesend requests location access including while the app is closed or not in use, because a working day lasts several hours during which you are not looking at the app.
Anwesend does not record your GPS coordinates, your movement, or your position history. Location is used in two ways only: to read the identifier of the network you are connected to, and to check whether that network match is geographically plausible against a site boundary your organisation has registered. No position is stored beyond a yes-or-no answer to that check.
Networks that are not registered
Anwesend evaluates the network you are connected to against the list your organisation has registered. Connections to any other network — your home, a café, a friend's flat — produce no record. The identifier is discarded and nothing about that connection is transmitted or stored.
3. What Anwesend never collects
- Position, route, or movement history
- Contents of any communication, browsing, or app usage
- Contacts, photos, files, microphone, or camera
- Any activity on your device outside the connection events described above
- Any data from networks your organisation has not registered
4. Legal basis
Processing rests on the legal basis established by your organisation as controller — in an employment context in Germany this will typically be § 26 BDSG together with a works agreement (Betriebsvereinbarung) under § 87 BetrVG, rather than consent, since consent given in an employment relationship is rarely freely given. Your organisation must be able to tell you which basis applies to you.
Permissions you grant on your device are separate from that legal basis and can be withdrawn at any time in Android settings.
5. Google user data
If you connect your calendar, Anwesend requests the narrowest available Google Calendar permission, which grants access only to calendars Anwesend itself creates. Anwesend cannot read, modify, or see any calendar that existed before it, and cannot see any event it did not write.
Anwesend's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used solely to write your attendance record to a calendar Anwesend created, is never sold, never used for advertising, and never used to train machine learning models.
You can disconnect the calendar at any time in the app or by revoking access in your Google account. Deleting the Anwesend calendar removes every record it wrote.
6. Who else sees this data
- Your organisation's administrators — attendance records for the people they administer
- You — everything recorded about you, with no admin-only view
- Hosting infrastructure — [PROVIDER], operating within the EU under a data processing agreement
- Google — only if you connect a calendar, and only the calendar entries Anwesend writes
Data is not sold, rented, or shared with advertisers, data brokers, or analytics companies. There is no advertising SDK in the app.
7. How long it is kept
| Data | Retention |
|---|---|
| Raw connection signals | 90 days maximum |
| Attendance records | Set by your organisation; shown to you in the app |
| Correction requests and their outcomes | Same period as the record they relate to |
| Account details | Until the account is deleted |
Anwesend attendance records are reference material, not a statutory working-time record, so no legal retention obligation requires us to keep them. Deleting your account removes your personal data within 30 days.
8. Your rights
Under the GDPR you have the right to access your data (Art. 15), correct it (Art. 16), have it erased (Art. 17), restrict its processing (Art. 18), receive it in a portable format (Art. 20), and object to processing (Art. 21).
Anwesend builds several of these directly into the app: your full record is visible without asking, export is one action, and the correction request flow is the practical form of Art. 16. For erasure or objection, contact your organisation as controller. If they do not respond, contact us and we will act on their instruction or explain why we cannot.
You may also complain to a supervisory authority. For Aralel GmbH that is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
9. Security
Data is encrypted in transit. Calendar credentials are encrypted at rest. Access to production data is limited to personnel who need it and is logged.
10. Children
Anwesend is not directed at children and is not offered to users under 18. Where an institution wishes to record student attendance, that requires a separate legal assessment and, for minors, appropriate guardian involvement — it is not covered by this policy.
11. Changes
Material changes will be announced in the app at least 30 days before taking effect. The version and date at the top of this page always reflect the current text.
12. Contact
Aralel GmbH · Josefstr 66, Aachen, Germany
privacy@aralel.com