PRIVACY POLICY
Grupa HSE Manager
Effective Date: 5 September 2026
Last Updated: 5 September 2026
Introduction
Grupa HSE Manager is committed to protecting the privacy, confidentiality and security of personal information entrusted to the platform. This Privacy Policy explains how personal information is collected, used, stored, protected, shared and managed when individuals and organisations use the Grupa HSE Manager website, software application and related services.
Grupa HSE Manager provides organisations with a digital environment for managing Health, Safety and Environmental activities, workforce information, sites, teams, vehicles, qualifications, competency records, inspections, risk assessments, incidents, corrective actions, operational records, reports and supporting evidence. Because organisations may use the platform to manage information relating to employees, workers, contractors, visitors, drivers, supervisors and other individuals, the protection of personal information is an important part of how Grupa HSE Manager operates.
This Privacy Policy applies to users worldwide. Where the laws of a country or region provide additional privacy rights or protections, those rights and protections will apply to individuals who are entitled to them. Nothing in this Privacy Policy is intended to reduce, limit or remove any privacy right provided by applicable law.
Scope of This Privacy Policy
This Privacy Policy applies to personal information processed through the Grupa HSE Manager website, application, company accounts, organisational workspaces, user registration, account management, workforce and competency management, document and evidence storage, project and site management, incident and near miss management, inspection and audit activities, risk assessments, Permit to Work activities, training records, PPE management, environmental management, journey and vehicle management, corrective actions, safety meetings, leadership activities, dashboards, reporting functions, customer support, system communications and security activities.
The Privacy Policy applies regardless of whether the service is accessed using a desktop computer, laptop, tablet, mobile telephone or another supported device.
Our Role in Protecting Personal Information
The role of Grupa HSE Manager in relation to personal information depends on how that information enters the platform and who determines the reason for its collection and use.
When an organisation creates a Grupa HSE Manager company workspace and enters information relating to employees, workers, contractors, drivers, visitors or other persons, that organisation normally determines why the information is being collected and how it will be used. In those circumstances, the customer organisation is primarily responsible for the information placed in its workspace, while Grupa HSE Manager processes and stores that information for the purpose of providing the software service and carrying out the authorised instructions of the customer organisation.
Customer organisations are responsible for ensuring that they have an appropriate and lawful reason for collecting, entering, using, retaining and managing personal information within the platform.
Grupa HSE Manager is directly responsible for personal information that it collects for the purpose of creating and managing user accounts, providing access to the service, managing customer relationships, responding to enquiries, providing support, protecting accounts, maintaining service security, sending service communications, improving platform reliability, managing privacy requests and complying with legal obligations.
Personal Information We May Collect
The personal information collected by Grupa HSE Manager depends on how the platform is used. Account information may include a person’s name, email address, telephone number, organisation name, job title, department, user role, username, account status, language preference, country, region and authentication information.
Customer organisations may also enter workforce information relating to personnel under their responsibility. This information may include a worker’s name, employee identification details, job title, worker level, team assignment, site assignment, supervisor, employment status, photograph, contact information, qualifications, training history, competency records, professional certificates, medical fitness certificate status, driving licence information, defensive driving training records, work related approvals and the expiry dates of qualifications or certificates.
The platform may also contain information connected with Health, Safety and Environmental management. This may include incident records, near miss information, injury information, investigation records, corrective actions, risk assessment participation, inspection findings, audit findings, safety observations, permit approvals, training participation, competency assessments, emergency drill participation, toolbox talk participation, safety meeting attendance, leadership site visit records, PPE records and work readiness information.
Certain information may be considered sensitive under applicable privacy laws. This may include occupational health information, medical fitness information, identification documents, photographs, location information and information relating to workplace injuries. Grupa HSE Manager processes such information only where it is required for legitimate service purposes and in accordance with customer instructions, contractual obligations and applicable law.
Customer organisations are responsible for ensuring that sensitive information entered into the platform is relevant, necessary and lawfully collected for legitimate Health, Safety and Environmental management purposes.
Documents, Photographs and Supporting Evidence
Grupa HSE Manager allows authorised users to upload or capture documents, photographs and supporting records as part of Health, Safety and Environmental activities. These records may include certificates, training documents, medical fitness certificates, driving licences, identification records, inspection photographs, incident evidence, risk assessment records, permit documentation, corrective action evidence, audit evidence, environmental records, vehicle records, worker competency evidence, company HSE policies, project risk assessments and other supporting documents.
Because uploaded records may contain personal or confidential information, access to such information is controlled according to the customer organisation, the user’s authorised role and the permissions assigned within the platform.
Camera Access
Grupa HSE Manager may allow authorised users to use a device camera to capture photographic evidence of Health, Safety and Environmental activities. Camera access is used only when a user chooses to activate a feature that requires photography and grants the necessary device or browser permission.
Photographs captured through the application may be associated with information relating to the relevant site, activity, date, time or operational record. Camera access and photographic evidence are used for Health, Safety and Environmental management and are not used for unrelated advertising purposes.
Location Information
Certain functions within Grupa HSE Manager may use location information where location is relevant to the Health, Safety and Environmental activity being recorded. Location information may include the site location, stored site coordinates, latitude, longitude and location information supplied by a user’s device where permission has been granted.
Location information may be attached to photographs, site records, inspection activities or other operational evidence where the feature requires confirmation of the location at which the activity took place.
Grupa HSE Manager does not use workplace location information for unrelated advertising purposes. Where device permission is required to obtain location information, the user must grant that permission through the applicable device or browser controls.
Technical and Security Information
When users access Grupa HSE Manager, certain technical information may be collected automatically for the purpose of operating, protecting and maintaining the service. This information may include Internet Protocol addresses, browser information, device type, operating system, login dates and times, session information, account access activity, security events, failed login attempts, application activity and technical error information.
This information is used to support account security, detect suspicious activity, maintain platform reliability, investigate errors, prevent misuse and improve the safe operation of the service.
How Personal Information Is Collected
Personal information may be collected directly from users during registration, from authorised company administrators, from employers or customer organisations, from authorised HSE personnel, from information entered into operational forms, from uploaded documents, from photographs captured through the application, from location services where permission has been granted, from customer support communications, from legitimate business communications and from technical information generated when the service is used.
Where a customer organisation connects the platform to another authorised service, information may also be received from that service in accordance with the customer’s instructions and the permissions granted.
Grupa HSE Manager does not purchase workforce records for customer workspaces from data brokers.
How Personal Information Is Used
Grupa HSE Manager uses personal information to provide, operate, support and secure the service. Personal information may be used to create and manage accounts, authenticate users, manage company workspaces, manage sites and projects, manage workers and teams, administer competency and qualification requirements, manage drivers and vehicles, record HSE activities, manage incidents and near misses, conduct inspections and audits, maintain risk assessments, manage permits, track corrective actions, manage training records, administer PPE records, support environmental management, manage journey and vehicle activities, maintain operational evidence and generate reports.
Personal information may also be used to calculate operational statistics, display compliance information, identify missing or expired records, provide reminders and alerts, send platform notifications, maintain platform security, provide customer support, prevent misuse, investigate security incidents, maintain service reliability, comply with legal obligations, protect the rights and safety of users and organisations and improve the overall operation of the platform.
Legal Basis for Processing Personal Information
Where applicable privacy law requires a lawful basis for processing personal information, Grupa HSE Manager processes personal information only where there is a valid reason for doing so.
Processing may be necessary to provide the service requested by a customer or user and to perform obligations connected with the service relationship. Processing may also be necessary for legitimate business purposes such as maintaining platform security, preventing misuse, providing customer support, improving reliability and managing the business, provided that those interests do not improperly override the rights and freedoms of individuals.
Personal information may also be processed where necessary to comply with legal obligations, lawful requests, court orders or regulatory requirements. Where consent is required by law, the relevant information will be processed based on valid consent and that consent may be withdrawn where applicable.
In limited circumstances, information may be processed where necessary to protect the life, health or safety of an individual. Where Grupa HSE Manager processes workforce or operational information on behalf of a customer organisation, the customer organisation is responsible for establishing the appropriate lawful basis for that processing.
Sensitive Personal Information
Grupa HSE Manager is designed for Health, Safety and Environmental management and may therefore contain information that may be considered sensitive under applicable law. Sensitive information may include occupational health records, medical fitness information, workplace injury information, identification documents, photographs, location information and related records.
Sensitive information will only be processed where there is an appropriate lawful reason and where it is relevant to the Health, Safety and Environmental purpose for which it was collected.
Customer organisations remain responsible for ensuring that any sensitive information entered into the platform is necessary, appropriate and legally permitted.
Grupa HSE Manager does not use sensitive Health, Safety and Environmental information for unrelated advertising or profiling purposes.
Company Workspace Privacy
Each customer organisation operates within its own authorised Grupa HSE Manager workspace. Company users are limited to the organisation and functions they are authorised to access.
Information belonging to one customer organisation is not intended to be accessible to users of another customer organisation.
Access to company information is determined by authorised user roles and permissions.
User Roles and Access Control
Customer organisations are responsible for assigning appropriate user roles within their Grupa HSE Manager workspace. Access may vary according to whether the user is an Grupa HSE Manager, HSE Officer, Inspector, Site Supervisor, Team Leader, administrator or another authorised user.
Users are expected to access only the information necessary for their assigned responsibilities. Customer organisations should promptly remove or amend access when a user leaves the organisation, changes duties or no longer requires access.
Users must not share passwords or account credentials with unauthorised persons.
Information Security
Grupa HSE Manager uses reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, loss, misuse, alteration, destruction and improper use.
Security measures may include protected authentication, controlled access, user permissions, secure transmission, protected file storage, monitoring, backup procedures and other appropriate safeguards.
Security practices are reviewed and improved as the platform develops and as risks change.
Although Grupa HSE Manager takes reasonable measures to protect personal information, no internet based service can guarantee absolute security. The platform therefore maintains safeguards appropriate to the nature, sensitivity and intended use of the information processed.
Password and Account Security
Users are responsible for maintaining the confidentiality of their account credentials and must not disclose passwords to other persons.
Where a user believes that an account may have been accessed without permission, the user should change the password immediately and inform the relevant organisation administrator or Grupa HSE Manager support.
Grupa HSE Manager may temporarily restrict or suspend access to an account where unusual, unauthorised or potentially harmful activity is detected.
Sharing of Personal Information
Grupa HSE Manager does not disclose personal information without a legitimate business, contractual or legal reason.
Information may be made available to authorised users within a customer organisation according to their assigned roles and permissions.
Grupa HSE Manager may also use trusted service providers that support hosting, secure storage, communications, security, payments where applicable, customer support and other functions required to operate the platform. Such service providers are expected to process information only for authorised purposes and to apply appropriate protections.
Personal information may be disclosed where required by law, regulation, court order or lawful request from an authorised public authority. Information may also be disclosed where reasonably necessary to investigate fraud, security incidents, misuse of the platform or threats to the rights, property or safety of individuals or organisations.
If Grupa HSE Manager undergoes a merger, acquisition, restructuring or transfer of business assets, personal information may form part of the transferred business information, subject to applicable privacy obligations.
Sale and Advertising Use of Customer Data
Grupa HSE Manager does not sell customer workforce information or customer Health, Safety and Environmental operational records for money.
Customer HSE information is not provided to third parties for unrelated advertising purposes. Grupa HSE Manager does not use workforce medical information, incident records, competency information, uploaded evidence or other customer controlled HSE records to create advertising profiles.
Where applicable law provides individuals with a right to opt out of the sale or sharing of personal information for advertising purposes, Grupa HSE Manager will respect those rights.
Marketing Communications
Grupa HSE Manager may communicate with existing or prospective customers about services, product developments, events, offers or related business matters where such communication is permitted by law.
Individuals may stop receiving optional marketing communications by using the unsubscribe option made available in the relevant communication or through the official contact channels.
Stopping marketing communications will not prevent Grupa HSE Manager from sending important service communications concerning accounts, security, billing, privacy or the operation of the platform.
Customer workforce records and operational HSE information are not used for unrelated direct marketing.
Service Communications
Users may receive communications that are necessary for the operation of Grupa HSE Manager. These may include account verification notices, password reset messages, security alerts, system notifications, assigned action notifications, approval notices, expiry reminders, compliance reminders, service announcements, privacy notices and administrative communications.
Where such communications are necessary to operate or secure the service, they may not be optional.
Cookies and Similar Technologies
The Grupa HSE Manager website and application may use cookies or similar technologies where necessary for login, account security, session management, preferences and the proper operation of the service.
Where optional cookies or similar technologies are used, consent will be obtained where required by law.
Users may manage cookies through their browser or device settings. However, disabling cookies that are necessary for authentication or service operation may prevent certain functions from working properly.
Automated Calculations and Recommendations
Grupa HSE Manager may automatically analyse information already recorded within a customer organisation’s workspace in order to display Company Compliance Levels, statistics, Needs Attention notices, expiry warnings, missing requirement alerts, recommended actions, worker readiness information, team approval status and vehicle status.
These functions are designed to assist Health, Safety and Environmental management and to help authorised users identify areas requiring attention.
They are not intended to independently make employment, disciplinary, medical or legal decisions about individuals. Final operational and management decisions remain the responsibility of authorised persons within the customer organisation.
Accuracy of Information
Grupa HSE Manager provides tools that allow authorised users to review, update and correct records.
Customer organisations are responsible for ensuring that personal and operational information entered into their workspace remains accurate, relevant and current.
Individuals who believe that information about them is inaccurate may request correction through their organisation or, where appropriate, through Grupa HSE Manager.
Retention of Personal Information
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, contractual, operational, workplace safety, insurance and regulatory requirements.
Information entered into a customer workspace may be retained for the duration of the customer’s use of the service and in accordance with the customer’s lawful instructions.
Certain Health, Safety and Environmental records may need to be retained for extended periods because of applicable workplace safety, employment, insurance, investigation, audit or legal requirements.
Account information may be retained while an account is active and for a reasonable period after account closure where necessary for security, accounting, legal compliance, fraud prevention, dispute resolution or other legitimate purposes.
Information removed from active use may remain temporarily in protected backup systems until it is replaced or securely removed through the normal backup process. Backup information remains subject to appropriate security controls.
Account Closure and Deletion
An authorised customer administrator may request closure of an organisation’s account in accordance with the applicable service arrangements.
Individuals may also request deletion of personal information where they have the legal right to do so.
Deletion may not be possible where information must be retained in order to comply with law, establish or defend legal claims, maintain necessary business records, investigate security incidents, prevent fraud, meet workplace safety obligations, protect the rights of other individuals or comply with lawful instructions from the customer organisation that controls the information.
Where Grupa HSE Manager processes personal information on behalf of a customer organisation, individuals may be directed to that organisation for requests relating to information controlled by the organisation.
International Data Transfers
Grupa HSE Manager may serve organisations and users located in different countries. As a result, personal information may be processed or stored in a country other than the country in which the user is located.
Where personal information is transferred internationally, Grupa HSE Manager will use appropriate safeguards required by applicable law. These safeguards may include recognised contractual protections, approved transfer mechanisms, legally recognised arrangements or other lawful methods for protecting transferred information.
Regardless of where information is processed, Grupa HSE Manager requires personal information to be handled in accordance with appropriate privacy and security standards.
Privacy Rights
Depending on the country or region in which an individual is located, applicable law may provide rights concerning personal information.
These rights may include the right to know whether personal information is being processed, the right to understand how information is used, the right to access personal information, the right to receive a copy of information, the right to correct inaccurate information, the right to request deletion, the right to request restriction of processing, the right to object to certain processing, the right to withdraw consent where processing is based on consent, the right to request data portability where applicable, the right to object to direct marketing and the right to raise a complaint with an appropriate privacy or data protection authority.
Certain jurisdictions may also provide rights relating to sensitive personal information, automated decision making, the sale or sharing of personal information and targeted advertising.
The availability and scope of these rights depend on applicable law and may be subject to legal exceptions.
European Economic Area
Where European data protection law applies, individuals may have rights of access, correction, deletion, restriction, objection and data portability.
Where processing is based on consent, individuals may withdraw that consent. Where processing is based on legitimate interests, individuals may object where permitted by law.
Individuals also have the right to object to the use of personal information for direct marketing.
Complaints may be submitted to the appropriate data protection authority in the individual’s country of residence or establishment.
United Kingdom
Where United Kingdom data protection law applies, individuals may have rights to be informed, access personal information, request correction, request deletion in appropriate circumstances, restrict processing, request data portability, object to certain processing and exercise applicable rights concerning automated decision making.
Individuals may also withdraw consent where relevant and may submit a complaint to the Information Commissioner’s Office or another competent authority.
United States
Residents of certain states in the United States may have specific rights under applicable state privacy law.
These rights may include the right to know what personal information is collected, the right to understand the purposes for which information is used, the right to request access, correction or deletion, the right to data portability and the right to opt out of certain sales, sharing or targeted advertising activities.
Certain laws may also provide rights relating to sensitive personal information and protection against unlawful discrimination for exercising privacy rights.
Grupa HSE Manager does not sell customer Health, Safety and Environmental records for money and does not use customer workforce information for unrelated cross context behavioural advertising.
Canada
Where Canadian privacy law applies, individuals may have the right to know what personal information is held about them, understand how that information is used, request access, challenge the accuracy of the information, request correction, withdraw consent where legally permitted and raise concerns about compliance with applicable privacy requirements.
Individuals may also submit complaints to the appropriate Canadian privacy authority where permitted.
Australia
Where Australian privacy law applies, individuals may have rights relating to transparency, access to personal information, correction of personal information, information about how data is collected and used, information concerning overseas disclosures and the ability to make a privacy complaint.
Grupa HSE Manager will respond to valid requests in accordance with applicable Australian privacy requirements.
Ghana
Where Ghanaian data protection law applies, Grupa HSE Manager respects the rights provided under applicable law and is committed to handling personal information fairly, lawfully and for legitimate purposes.
Individuals may exercise applicable rights regarding personal information held about them and may raise concerns with the relevant data protection authority.
Nigeria
Where Nigerian data protection law applies, individuals may have rights relating to information, access, correction, objection, restriction, deletion, portability and certain automated decisions.
Individuals may also submit complaints to the appropriate data protection authority.
Kenya
Where Kenyan data protection law applies, individuals may have rights to be informed about the use of their personal information, access information, object to certain processing, request correction of inaccurate or misleading information and request deletion where provided by law.
Individuals may also raise concerns with the appropriate data protection authority.
South Africa
Where South African data protection law applies, personal information will be processed lawfully and reasonably.
Individuals may have rights relating to access, correction, objection and protection of their personal information and may submit complaints to the appropriate regulatory authority.
Brazil
Where Brazilian data protection law applies, individuals may have rights relating to confirmation of processing, access, correction, deletion where applicable, information about sharing, portability, withdrawal of consent and the review of certain automated processing.
Individuals may also contact the relevant Brazilian data protection authority.
Users in Other Countries
Grupa HSE Manager applies this Privacy Policy to users worldwide.
Where the law of a country provides mandatory privacy protections that are not specifically described in this Privacy Policy, those protections will apply where the law is applicable to the service.
Local legal requirements will take priority where they provide rights or protections that cannot lawfully be limited.
Exercising Privacy Rights
Individuals may submit privacy requests through the official Grupa HSE Manager contact or support channels available through the website or application.
The official website is https://afriosh.net/.
A privacy request should contain enough information to allow Grupa HSE Manager to understand the request and identify the relevant account or information.
Where reasonably necessary, additional information may be requested to confirm the identity and authority of the person making the request. Any information collected for identity verification will only be used for the purpose of dealing with the request and meeting related legal obligations.
Grupa HSE Manager will respond to valid privacy requests within the period required by applicable law.
Where a request relates to information controlled by a customer organisation, Grupa HSE Manager may refer the request to that organisation or assist the organisation in responding.
Authorised Representatives
Where permitted by applicable law, an individual may authorise another person to make a privacy request on their behalf.
Grupa HSE Manager may require reasonable evidence confirming that the representative has authority to act for the individual concerned.
Privacy Complaints
Individuals who have concerns about the way their personal information is handled may submit a complaint through the official Grupa HSE Manager contact or support channels.
Complaints will be reviewed and handled fairly and appropriately.
Where applicable, individuals may also submit a complaint directly to the privacy or data protection authority responsible for their country or region.
Submitting a privacy complaint will not affect the individual’s right to use the service or exercise any other legal rights.
Children and Young People
Grupa HSE Manager is primarily a professional and organisational Health, Safety and Environmental management platform and is not designed as a consumer service directed at children.
Grupa HSE Manager does not knowingly invite children to create independent customer accounts where this is prohibited by law.
Where a customer organisation lawfully employs, trains or manages young workers and enters information relating to them, that customer organisation is responsible for ensuring that the collection and use of such information complies with all applicable laws concerning children and young persons.
Additional privacy protections will be applied where required by law.
Third Party Websites and Services
Grupa HSE Manager may contain links to websites, applications or services operated by independent third parties.
This Privacy Policy does not govern the privacy practices of independent third parties.
Users should review the privacy information provided by any external service before providing personal information through it.
Grupa HSE Manager is not responsible for privacy practices that are outside its control.
Customer Responsibilities
Customer organisations using Grupa HSE Manager are responsible for managing personal information within their own operations in a lawful and responsible manner.
Each customer organisation is responsible for providing appropriate privacy information to workers and other persons whose information is entered into the platform, ensuring that information is collected lawfully, limiting collection to information that is necessary, assigning appropriate user access, removing access when it is no longer required, maintaining accurate information, responding to relevant privacy requests, establishing suitable retention practices, protecting user credentials and complying with applicable employment, workplace safety and privacy laws.
User Responsibilities
Users of Grupa HSE Manager must use the platform responsibly and only for authorised purposes.
Users must not access information without authority, disclose another person’s information without a legitimate reason, upload information they are not authorised to process, share account credentials, attempt to bypass security controls or use personal information for unrelated or unlawful purposes.
Users must also take appropriate care when downloading or distributing information from the platform and must report suspected misuse, unauthorised access or security concerns promptly.
Data Breaches and Security Incidents
If Grupa HSE Manager becomes aware of a security incident involving personal information, appropriate steps will be taken to investigate, contain and address the incident.
Where required by applicable law, affected customer organisations, individuals, regulators or other authorities will be notified.
Any notification will be made in accordance with applicable legal requirements and the circumstances of the incident.
Government and Law Enforcement Requests
Grupa HSE Manager does not disclose personal information to government or law enforcement authorities merely because access has been requested.
Information will only be disclosed where there is a lawful basis for doing so.
Where legally permitted, requests may be reviewed to determine whether they are valid, appropriately authorised and reasonably limited.
Only information that is reasonably necessary to satisfy a lawful requirement will be disclosed.
Confidentiality of Customer Information
Customer information is treated as confidential.
Grupa HSE Manager personnel and authorised service providers may access customer information only where such access is necessary to provide support, maintain the service, protect security, investigate technical problems, comply with legal obligations or carry out authorised customer instructions.
Access is limited according to operational need and appropriate permissions.
Ownership and Control of Customer Workspace Information
Customer organisations retain control over the information they enter into their Grupa HSE Manager workspace, subject to the applicable service agreement and legal requirements.
Grupa HSE Manager does not claim ownership of customer workforce records, uploaded Health, Safety and Environmental documents or operational evidence merely because the information is stored within the platform.
Customer information is processed for the purpose of providing, maintaining and supporting the service.
Data Minimisation
Grupa HSE Manager seeks to collect and process only personal information that is reasonably necessary for legitimate service purposes.
Customer organisations should also avoid entering information that is unnecessary for the Health, Safety and Environmental activity being managed.
Sensitive personal information should only be recorded where there is a legitimate operational, legal or safety related need.
Purpose Limitation
Personal information collected for Health, Safety and Environmental management will not be used for unrelated purposes without an appropriate lawful reason.
Where a proposed new use of personal information materially differs from the purpose for which the information was originally collected, appropriate notice and consent will be obtained where required by applicable law.
Confidential HSE Evidence
Photographs, certificates, incident evidence, medical fitness records, worker documents, inspection evidence and similar records may contain confidential or sensitive information.
These records are intended to remain within authorised organisational workflows.
Grupa HSE Manager does not intentionally publish such information for unrestricted public access or public search engine discovery.
Search Engine Protection
Private company workspaces, user information, operational records and protected documents are not intended to be publicly indexed by internet search engines.
Grupa HSE Manager uses reasonable measures designed to keep authenticated application content outside normal public search engine discovery.
Public website pages that are intended for general visitors may remain visible to search engines.
Reports and Downloads
Authorised users may generate, preview and download reports or documents from Grupa HSE Manager.
Reports and downloaded records may contain personal, operational or confidential information.
Once information has been downloaded to a device, email account, storage service or other external location, the customer organisation and the authorised user are responsible for protecting that copy.
Downloaded reports and documents must not be distributed to unauthorised persons.
Notifications
Grupa HSE Manager may generate notifications concerning operational Health, Safety and Environmental matters.
Notifications may relate to expired documents, missing qualifications, approvals, corrective actions, worker readiness, vehicle requirements, training, inspections, incidents, assigned responsibilities or other operational matters.
Customer organisations are responsible for ensuring that recipients of these notifications are authorised to receive the information contained in them.
Changes in Ownership or Business Structure
If the ownership or control of Grupa HSE Manager changes through a merger, acquisition, restructuring or transfer of business assets, personal information may form part of the transferred business information.
Any such transfer will remain subject to applicable privacy law.
Where required by law, affected users or customers will be informed of material changes concerning how their personal information will be handled.
Changes to This Privacy Policy
Grupa HSE Manager may update this Privacy Policy from time to time to reflect changes to the service, privacy practices, legal obligations, security practices, platform functions or the way personal information is processed.
The latest version of this Privacy Policy will be published through the official Grupa HSE Manager website or application.
The effective date and last updated date will identify the current version.
Where a change materially affects an individual’s privacy rights or the way personal information is used, additional notice will be provided where required by applicable law.
Contacting Grupa HSE Manager About Privacy
Questions, concerns, privacy requests and complaints concerning personal information may be submitted through the official Grupa HSE Manager contact or support channels available through the platform or website.
Grupa HSE Manager
Website: https://afriosh.net/
Users who belong to a customer organisation may also contact their organisation’s Grupa HSE Manager, company administrator or other authorised privacy contact concerning information maintained within that organisation’s workspace.
Where Grupa HSE Manager processes information on behalf of a customer organisation, Grupa HSE Manager will cooperate with that organisation as reasonably necessary to address valid privacy requests.
Regulatory Complaints
Individuals may have the right to contact the privacy or data protection authority responsible for their country or region if they believe their personal information has been handled unlawfully.
Grupa HSE Manager encourages privacy concerns to be raised through the official support or contact channels so that they can be reviewed and addressed appropriately.
This does not limit or prevent an individual’s legal right to contact a regulator directly.
Our Privacy Commitment
Grupa HSE Manager is built to help organisations manage Health, Safety and Environmental information with greater confidence, visibility and control.
Protecting the information entrusted to the platform forms part of that responsibility.
Grupa HSE Manager is committed to respecting personal privacy, protecting confidential company information, limiting access to authorised users, using personal information only for legitimate purposes, maintaining appropriate security safeguards, respecting applicable privacy rights, responding responsibly to privacy concerns and supporting customer organisations in protecting workforce information.
The platform is designed to maintain transparency, confidentiality and responsible handling of information while supporting organisations in managing the records they rely on to protect people, operations and the workplace.
Your HSE information deserves the same level of care as the people it helps protect.