EVOapp Privacy Policy
This Privacy Policy applies to the EVOapp owned and operated by Evolution AB and its group entities (Evolution or We). This Privacy Policy describes how Evolution collects and uses personal data collected through the EVOapp. It also describes individual rights regarding the use of, access, and how to update, correct, or remove personal information. We recommend that you read this Privacy Policy to ensure you are fully informed.
For additional details regarding how Evolution processes your employment related personal data, please refer to the Employee Privacy Handbook available on EvoSpace
How do we collect your personal data?
We process your personal data to provide you with the functionality of EVOapp - specifically enabling you to view work schedules, request changes, and manage days off, and chat functionality.
Below is a breakdown of the personal data processed, the purposes, and our legal grounds:
Category of Personal Data | Purpose of Processing | Lawful Basis |
Authentication Credentials (e.g., email, session token) | To verify your identity and grant secure access to your account. | Contract Performance / Employment Relationship |
Work Schedule & Leave Data | To enable shift viewing, schedule change requests, and time-off planning. | Contract Performance / Employment Relationship |
App Preferences (e.g., light/dark theme) | To save your user preferences within the interface. | Legitimate Interest – optimizing user experience |
Device & System Logs (push token, session token, crash reports) | To ensure application security, send operational push notifications, and troubleshoot technical errors. | Legitimate Interest – maintaining IT security and app performance. |
Chat Content | To enable communication features within the app. | Legitimate Interest – enabling workplace collaboration. |
Whistleblowing report | To process, investigate and act upon reports of unlawful behavior or policy breaches via reporting channels/ | Legal obligation and Legitimate Interest – EU/national whistleblowing laws and investigating breaches and maintingin legal/ethical compliance. |
Note on Data We Do NOT Collect: EVOapp does not collect precise GPS geolocation, contact lists, advertising identifiers, or cross-app behavioral tracking.
Providing your authentication credentials and work schedule preferences is necessary to access and use EVOapp. While downloading and using EVOapp on your personal mobile device is voluntary, failing to provide authentication credentials will prevent you from utilizing EVOapp features (e.g., self-service shift changes). Alternative non-mobile methods to manage schedules remain accessible via standard workplace tools.
International Data Transfers and Safeguards
Because Evolution operates globally, personal data processed via EVOapp may be shared within the Evolution Group or with contracted third-party IT service providers located outside the European Economic Area (EEA).
Whenever data is transferred outside the EEA to a country not covered by an EU Adequacy Decision, we ensure adequate safeguards are in place by implementing Standard Contractual Clauses (SCCs) approved by the European Commission, along with necessary supplementary security measures. You may request a copy of these transfer safeguards by contacting dataprivacy@evolution.com.
Security of Your Personal Data
We maintain appropriate technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure. Access to your personal data is restricted to authorized personnel and service providers on a strict need-to-know basis.
Retention of Personal Data
We retain personal data processed through EVOapp only for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., statutory employment, accounting, or reporting obligations).
- App Session Data & Logs: Retained temporarily for security and troubleshooting, then routinely purged or anonymized.
- Whistleblowing Reports: retained for the duration of the investigation and subsequent legal processing.
- Employment-related Data: Retained in accordance with local employment retention laws. Upon termination of employment, non-regulated application data is permanently deleted or anonymized.
What rights do you have?
Subject to legal conditions, you have the following rights regarding your personal data:
- Right of Access: Request copies of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when processing is no longer necessary.
- Right to Restrict Processing: Request restricted processing under certain circumstances.
- Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
- Right to Object: You have the absolute right to object at any time to processing based on our legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact the Data Protection and Privacy team at dataprivacy@evolution.com.
If you believe our processing of your personal data violates applicable privacy laws, you have the right to lodge a complaint with a supervisory authority. You can contact the Data Protection Authority in your local EU Member State.
Automated Decision Making and Profiling
EVOapp does not employ automated decision-making or profiling that produces legal or similarly significant effects on you.
Updates to Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legal requirements or app features. Any updates will be published here. We encourage you to review this page periodically.
Contact us
If you have any questiona bout this Privacy Policy, you can contact Evolution Data Protection and Privacy team at dataprivacy@evolution.com.