Privacy Policy for HN Staff

 

Last updated: July 22, 2026

1. Introduction

HN Staff is an internal business application operated by HN Groupe sp. z o.o.

The app is intended for authorized employees and staff members of HN Groupe and its business locations. It supports internal operations such as stock requests, inventory management, item picking, shortage reporting, product identification and daily revenue reporting.

This Privacy Policy explains what information is collected through HN Staff, why it is collected, how it is used and how users may exercise their privacy rights.

2. Data Controller

The data controller responsible for personal data processed through HN Staff is:

HN Groupe sp. z o.o.
Wybrzeże Władysława IV 17B
72-600 Świnoujście
Poland

NIP: 8551602816

Email: info@hngroupe.com

3. Information We Collect

HN Staff may collect and process the following categories of information:

Account and contact information

  • First and last name or employee display name
  • Email address
  • User account identifier, including Firebase User ID
  • Assigned role, branch and access permissions
  • Account activation status

Operational information

  • Stock and supply requests
  • Requested product names and quantities
  • Item-picking confirmations
  • Missing-item reports
  • Notes entered by users
  • Inventory information
  • Barcode-related product information
  • Date, time and identity of the employee submitting or updating records

Financial and business information

  • Daily branch revenue reports
  • Cash, card and delivery-platform revenue amounts
  • POS report amounts
  • Business expenses and cancelled-order amounts
  • Differences and notes related to daily revenue reports

This information relates to business operations and is not used to assess an employee’s creditworthiness.

Photos

Users with appropriate permissions may upload or take photos of products, packaging or inventory items.

HN Staff does not intentionally collect private personal photos unrelated to business operations.

4. How We Collect Information

Information is collected when:

  • An authorized user signs in to HN Staff
  • An administrator creates or configures a user account
  • A user enters, submits or updates information in the app
  • A user uploads or takes a product photo
  • The app transmits operational data to its cloud services

5. Purposes of Processing

We use the collected information only for legitimate internal business purposes, including:

  • Authenticating users
  • Managing access permissions and user roles
  • Assigning users to branches or reporting units
  • Processing stock and supply requests
  • Managing item picking and shortage reports
  • Managing inventory and product information
  • Recording daily branch revenue
  • Identifying who submitted or modified a business record
  • Maintaining the security, reliability and integrity of the app
  • Preventing unauthorized access or misuse
  • Providing technical and administrative support

We do not use personal data for advertising or third-party marketing.

6. Legal Basis

Where the General Data Protection Regulation applies, personal data may be processed on the basis of:

  • Performance of an employment, cooperation or service relationship
  • Compliance with legal obligations
  • The legitimate interests of HN Groupe in managing its internal operations, inventory, employees, branches and business records
  • Consent, where consent is specifically required by law

7. Firebase and Service Providers

HN Staff uses Google Firebase services to provide authentication, database storage and file storage.

These services may include:

  • Firebase Authentication
  • Cloud Firestore
  • Firebase Storage
  • Firebase Core services

Google generally acts as a data processor when processing Firebase customer data on behalf of the app operator.

Data may be processed on infrastructure operated by Google or its service providers in accordance with applicable contractual and data-protection safeguards.

8. Data Sharing

We do not sell personal data.

Information may be shared only with:

  • Authorized HN Groupe administrators
  • Authorized managers or staff members where necessary for their duties
  • Google Firebase and other technical service providers required to operate the app
  • Public authorities where disclosure is required by law

We do not share data with advertising networks or data brokers.

9. Tracking and Advertising

HN Staff does not:

  • Display third-party advertising
  • Use personal data for targeted advertising
  • Track users across third-party apps or websites
  • Sell user profiles or behavioral data
  • Use advertising identifiers for marketing purposes

10. Data Retention

Personal and operational data is retained only for as long as reasonably necessary for:

  • Internal business operations
  • Accounting and reporting
  • Security and audit purposes
  • Compliance with applicable legal obligations
  • Resolving disputes or investigating misuse

When an employee no longer requires access, their account may be disabled.

Some business records may continue to be retained where required for operational, accounting or legal reasons.

11. Data Security

HN Groupe uses reasonable technical and organizational measures to protect information against unauthorized access, loss, alteration or disclosure.

These measures may include:

  • Firebase Authentication
  • Access based on assigned roles
  • Restricted administrator permissions
  • Secure HTTPS connections
  • Firestore and Storage security rules
  • Account deactivation procedures

However, no electronic storage or transmission method can be guaranteed to be completely secure.

12. User Rights

Depending on applicable law, users may have the right to:

  • Request access to their personal data
  • Request correction of inaccurate data
  • Request deletion of personal data
  • Request restriction of processing
  • Object to certain processing
  • Request data portability, where applicable
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a competent data-protection authority

Requests can be submitted using the contact details below.

Deletion of personal information does not necessarily require deletion of business or accounting records that HN Groupe is legally required to retain.

13. Account Deactivation and Deletion

HN Staff accounts are created and managed by HN Groupe administrators.

A user may request account deactivation or deletion by contacting HN Groupe.

Where immediate deletion is not legally or operationally possible, access may first be disabled and retained data will be handled in accordance with applicable retention obligations.

14. Children

HN Staff is an internal workplace application and is not intended for children.

We do not knowingly create HN Staff accounts for children or intentionally collect personal data from children through the app.

15. International Data Transfers

Where data is transferred outside the European Economic Area, such transfers will be handled using appropriate legal safeguards, which may include adequacy decisions or Standard Contractual Clauses.

Firebase provides contractual safeguards for certain international transfers of customer personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy when:

  • The app’s functionality changes
  • New data categories are introduced
  • Service providers change
  • Legal or regulatory requirements change

The updated policy will be published on this webpage with a revised “Last updated” date.

17. Contact

For questions, requests or complaints concerning this Privacy Policy or personal data, contact:

HN Groupe sp. z o.o.
Wybrzeże Władysława IV 17B
72-600 Świnoujście, Poland

info@hngroupe.com