Privacy at Dynamo

Dynamo's Privacy Policy describes how Dynamo processes your personal data

Collection & Use of Personal information

The purpose of Dynamo is to provide users with the data to make decisions that protect life and enable rapid responses to emergency situations on site. Provision of your personal data to Dynamo through the app is completely voluntary. To the extent that you participate, we rely on your active consent to process the personal data you provide us, in accordance with this Privacy Statement. You can withdraw your consent and opt-out of Dynamo at any time by contacting GDynamoSupport@bp.com. Your personal data will only be used as part of Dynamo functionality for the purposes of onboarding, configuration of critical factors that will ensure our ability to function are stable, and for your health and safety.

What type of personal data does Dynamo process?

The personal information processed through Dynamo include:

Profile data (name, phone number, email address, role, image, organisation, device, site) - For notifications, and correct identification. General communication, surveys and technical support
Shift Schedule - Used to define when Dynamo will track the user’s location when on site (when location is enabled)
Emergency contacts - For emergency response and incident management
Location - Dynamo is a location-based service. Some of the features use your precise location and need to store your location history. You provide your location through the permission settings on your phone. Your location information is associated with a timestamp, without the timestamp we would not be able to provide the features that are part of our services. Dynamo uses your precise location for tracking Red Zone breaches, lone working, journey management and for emergency incident response.

If, for whatever reason, you let someone else use your phone you can disable location sharing to keep their location private as well as prevent any misunderstandings about your own location.
Your location is only processed and stored by Dynamo during your work hours (as configured by the Shift Schedule). Dynamo makes every effort to ensure we do not store your location outside of your work hours. If the shift schedule is incorrect and Dynamo inadvertently stores your location outside of your work hours you can request that your out-of-hours location be removed from the system at any time by contacting GDynamoSupport@bp.com.
Trips - For journey management, emergency response and analytics
Incidents - For emergency response and lessons learned
Chat history - For emergency response and analytics
Motion - Your motion data is used to detect a potential emergency (e.g. A fall)
Profile Associations - Mapping table to list 3rd party id information for a team member. Eg. Fitbit Id and Fatigue Science id – used for correct identification between Dynamo and your external services (e.g. FitBit)
Sleep - Raw sleep data from devices including Fitbit and AppleWatch - Used to calculate Dynamo Fatigue Score
Fitbit Water Consumption - Raw water consumption data - Used to calculate DynamoHydration Score
Hydration Score - Dynamo inferred hydration value – Used to notify and offer suggestions
Fatigue Score - Dynamo inferred fatigue value – Used to notify and offer suggestions

What lawful basis is used to process your data?

Not all information fields in the app are mandatory. The information we collect through the mandatory fields, is the information we need to perform the contract of services with you. For examples, in our trips module, this will be your name, email address, phone number, primary and secondary emergency contact, shift schedule, trip details (journey for, travel type, host, start point, destination). It’s your choice whether you enter information in the remaining fields.If you choose to do so, we will process this in our legitimate interests of your safety, wellbeing and keeping you safe when on site or travelling to and from work locations.

Dynamo collects information from devices and apps you connect to Dynamo. For example, you may connect your Fitbit watch or HidrateSpark account to Dynamo and information from these devices and apps will be passed along toDynamo.

Processing wellbeing information

Dynamo may collect or infer information related to your well-being. For example, certain information may be inferred from sources such as sleep data, liquid intake, activity or other measurements. Before you can upload well-being information to Dynamo, you must give your explicit consent to the processing of that health information by Dynamo. You can withdraw your consent to Dynamo processing your health information at any time by contacting GDynamoSupport@bp.com. Dynamo processes data into a score.

Detailed personal well-being data can only be viewed by you through your personal FitBit and Hidratespark accounts. Please note that part of the processing may be subject to FitBit and Hidratespark’s own privacy statement available on their websites. We encourage you to read these, as bp cannot accept liability for the processing activities they are a controller of.

As we are part of the bp group, we may disclose your personal data to other bp entities that may be located outside of the EEA. Where this is the case, your personal data shall remain at all-time protected under bp’s comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal information is protected in accordance with applicable data protection laws.

Who has access to your data?

Access to your personal sleep and liquid intake data will be limited to yourself. Access to other personal data, such as location, fatigue and hydration scores will be limited to the select Dynamo team members and your supervisor and/or HSE personnel. When on site during shift hours, your colleagues using the Dynamo app will be able to see your live location – this is to enable improved communication and improved incident response in an emergency. We reserve the right to disclose your personal information as required by law, or when disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on bp.

We will not sell or otherwise transfer your personal data to third parties. We may transfer your Personal Data to:

our contractors and sub-contractors, acting as our Processors and Sub-Processors in accordance with our instructions, for the provision of the Service;
authorities or legal advisors in cases where criminal or improper behaviour is suspected; and
authorities or legal advisors if required by us according to law or regulation.

Retention period

Your data shall only be kept for as long as necessary:

Profile data - Deleted one year after that team member has left the system
Location data - Deleted after duration of shift if on site
Trip data - Anonymised after one year
Incidents - Deleted after one year
Chat history - Deleted after sixty days
Motion - Not stored, stays in mobile memory
Fitbit Sleep data - Anonymised after seven days
Fitbit Water Consumption - Anonymised after seven days
Hydration Score - Anonymised after three months
Fatigue Score - Anonymised after three months

If you choose to delete your account, please note that while most ofyour information will be deleted/irreversibly anonymized within 30 days, it maytake up to 90 days to delete all of your information due to data stored in ourbackup systems. This is due to the complexity of deleting specific account datafrom the frequent (usually daily) system backups. We may also preserve data forlegal reasons or to prevent harm, including as described in the Collection& Use of the Personal Information section.

Rights of Access, Rectification & Erasure

In accordance with our internal policies, you may ask us to provide you with access to any personal data we process about you. You are also entitled to request for any incomplete or inaccurate personal data which relates to you to be corrected. You also have the right to request to disable certain features and functionality within Dynamo.
To exercise any of your data privacy rights, please contact GDynamoSupport@bp.com. If you are in the EU, you also have the right to raise a privacy concern with the Data Protection Authority established in the relevant EU country.

Site Traffic Information & Cookies

We may place cookies on your device which log data about your visit. Cookies are small text files that are widely used to make sites work efficiently and to improve and tailor the visitor's user experience, as well as to provide information back to the site's operators.These can be "session cookies" (which are deleted when you close your browser) and/or "persistent cookies" (which remain on your computer for a longer period of time).

Dynamo may use cookies for:

Performance monitoring to ensure pages load quickly and consistently
User authentication and session ID
Time-out after periods of inactivity
Enabling security features
Site traffic analysis to better understand site usage

The majority of cookies do not identify the individual user, but only the device that is being used to view the site or use the Dynamo app. By using Dynamo you are agreeing to our use of cookies for these purposes.

To delete or stop cookies being placed on your device when accessing Dynamo from a browser, refer to the help menu on your internet browser. In a few cases, blocking cookies may reduce the functionality of some sites or prevent access to them depending on your chosen browser options. For further information on cookies, visit www.aboutcookies.org.

Changes to the Privacy Statement

We may update this Privacy Statement from time to time as we add new features, as we improve our current offerings and as technologies and laws change. You can determine when this Privacy Policy was last revised by referring to the “Last updated” legend at the bottom of this page. Any changes will become effective upon our posting of the revised Privacy Policy.

We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. This notice will be provided by email or by posting notice of the changes on the Dynamo websites and apps that link to this Privacy Policy.

This privacy statement was last updated on 2^nd September 2022.

Contact Dynamo

Privacy at Dynamo