Privacy Policy for Sawmill Mobile
Last updated: 9 September 2026
1. Data controller
Solvate IT
Lagergasse 23/2
8010 Graz
Austria
Email: support@solvate.at
Telephone: +43 (0)316 / 232059-0
2. What this app is
Sawmill Mobile is an application for timber-industry businesses. It is not a freely available service: signing in requires a provider ID and credentials issued by the business itself. The app records timber collections and transports and sends them to the system named in section 1. Solvate IT is the data controller; the business that issued your credentials has access to the work recorded for it (see section 8).
3. What data is processed
On registration and sign-in
- First and last name
- Username
- The business's provider ID
- Password
While using the app
- Recorded work: collections, assortments, quantities, transports and their timestamps
- Location data: the position of a timber stack, and the position on arrival and departure of a transport
- Photos you attach to a collection or a load
- Replies to forms your business sends to the app
About the device
- A device identifier generated by the app
- Operating system version, device model and app version
4. Location data
Location is captured only at the moment you yourself tap the action that captures it — setting a timber stack's position, for instance, or confirming an arrival. There is no background collection and no movement tracking. An approximate location is sufficient if that is all you grant.
5. Photos
Only the file you take or select yourself is read. The rest of your gallery is neither read, searched nor transmitted. A photo stays on the device until the server confirms receipt, and is removed from the device afterwards.
Who can see a photo follows the transaction it is attached to: the parties to that collection or transport — the forest owner whose delivery it is, and the driver of the associated transport order — together with the administration of the business. This is deliberate: the photo of the timber stack is the record the driver checks before loading. No other app user can see it, and it is never displayed publicly.
6. What stays on the device
So that the app works without a mobile network, it stores on the device: your sign-in details and session tokens in the device's protected storage, the work your account is allowed to see, changes not yet transmitted, and photos not yet confirmed.
Your password itself is not stored. What is kept is a value derived from it, which can only be verified and not read back. It is what allows the app to be opened without a network connection.
7. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Carrying out and evidencing collections and transports | Art. 6(1)(b) (contract) or (f) (legitimate interest in an auditable record of the transaction) |
| Location and photos as evidence for the transaction | Art. 6(1)(b) or (f) |
| Account administration and sign-in | Art. 6(1)(b) |
| Device registration, security, blocking lost devices | Art. 6(1)(f) |
8. Recipients
Solvate IT is the data controller (see section 1). The business whose provider ID you entered when signing in has access to the work recorded for it, and uses that data to carry out and evidence the transactions you are involved in.
There are no other recipients. Your data is not transmitted to any other company or business.
When a map is shown in the app, the map tiles are loaded from Google Maps (Google Ireland Limited). No account details and none of the work you have recorded are transmitted in doing so.
The app contains no advertising, analytics or crash reporting services. There is no tracking and no data is sold.
9. Transmission and storage
Transmission is exclusively over HTTPS (TLS). How long data is kept follows the commercial and tax retention periods that apply to the transaction in question.
10. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). To exercise them, contact support@solvate.at.
Right to complain: you may lodge a complaint with a supervisory authority — in Austria the Datenschutzbehörde (dsb.gv.at), in Germany the state authority responsible for your place of residence.
11. Deleting your account and data
How to request deletion of your account and your data is set out on the Deleting your account page.
12. Device permissions
Location, camera and photos, notifications, vibration, internet and network state, and briefly keeping the device awake during a transfer. Every permission can be changed at any time in the system settings.
13. Changes
Material changes are shown in the app and must be confirmed at the next sign-in.