1. Who we are

Command Console (the “Application”) is developed and published by:

In this policy, “we”, “us” and “our” refer to the company named above.

2. Scope

This policy explains how data is handled when you use:

• the Command Console application on Windows, Linux, Android, iOS and macOS, including editions published under other names and brands for individual customers; and
• the associated server (“cloud”) services the Application connects to in order to sign you in and to retrieve device configurations, techniques and related content.

Command Console is a
professional tool
intended for authorised personnel who install, configure and maintain
traffic equipment such as variable message signs, LED displays,
radars and signal controllers. It is not a consumer application
and is not directed at anyone under 16.

3. Our role

• We act as a controller for user account data,
  sign-in records, permissions, and the technical logs the
  Application produces.
• We act as a processor for the device data and
  configurations you enter on behalf of your employer or client.
  In that case the controller is the organisation that issued your
  account, and we process that data on its instructions and under
  a contract with it.

4. What data we collect

4.1 Account data

• your username;
• your password, used solely to authenticate you against our server;
• the licence or organisation you belong to, and the permissions
  assigned to you;
• a record of your last successful sign-in, so the Application can
  continue to work without an internet connection.

Accounts are created and assigned by DMV administrator.
Users do not self-register through the Application.

4.2 Device and configuration data

• device serial number, device type (software and configuration
  identifiers), and firmware version;
• parameter values, tables, scenarios, displayed content, and
  media files (fonts, images, animations, sounds) that you send
  to a device or read from it;
• complete device settings packages (DDS) and your list of
  saved favourites;
• connection details: the device’s IP address and port, serial
  port identifier, Bluetooth identifier, and the telephone number
  of the device’s SIM card where SMS communication is used;
• measurement data recorded by the device, such as traffic counter
  and radar readings, when you retrieve it through the Application.

This data describes equipment, not individuals.
The Application does not collect number plates, vehicle images,
or any other data by which a road user could be identified.

4.3 Location data

The Application may access the location of your device
(phone, tablet or computer) for two purposes:

1. Recording where a traffic device is installed.
   When you ask the Application to record a device’s position,
   it reads the current GPS coordinates and sends them to the
   server as the location of that device.
   This happens only when you request it.
2. Bluetooth scanning (Android only).
   Android requires a location permission before any application
   can scan for nearby Bluetooth devices. Here the permission is
   used for the technical purpose of connecting to your equipment.

The Application does not track your movements,
does not read your location in the background, and does not keep
a history of where you have been.

4.4 Logs

• On your device.
  The Application maintains technical logs and a local database
  (SQLite) holding device data, parameters and settings, so that
  it can operate without an internet connection.
• Session logs.
  In editions where this feature is enabled, the Application
  records which changes you sent to which device, when, from
  which account, and over which communication channel, and
  periodically uploads those logs to our server.

4.5 Technical data

Application version, platform, edition, connection type and error
messages, used for diagnostics and to deliver the correct updates
and techniques.

4.6 What we do not collect

• We use no behavioural analytics, advertising or cross-app tracking software.
• We do not collect your contacts, calendar, photos, microphone or camera.
• We do not collect biometric data or any special category of personal data.
• We do not sell personal data and do not share it with third parties for marketing.

5. Permissions and why they are needed

You may deny any of these permissions in your operating system settings.
The corresponding connection method will then be unavailable, but the
rest of the Application will continue to work.

6. Who we share data with

We share data only with the following parties, and only as needed
to operate the Application:

• Our hosting provider, AWS services, with servers located
  in US / Oregon, which stores the account and equipment
  data described above on our behalf under a data processing agreement.
• The organisation that issued your account.
  Its administrators can see equipment data and the record of
  changes made under their licence.
• Mobile network operators, where you use SMS
  communication with equipment.
• Public authorities, only where we are legally
  required to disclose.

We do not share personal data with any other third party, and we
do not share it with anyone for advertising or marketing purposes.

7. Data retention and deletion

To request deletion of your account data, write to support@dmv.rs, or contact your organisation’s administrator where the account was issued by your organisation. We action such requests within 30 days. Where we are required to retain certain records for security or legal reasons, we retain only what is necessary for that purpose and delete the rest.

8. Security

• All communication between the Application and our servers uses HTTPS.
• Access to functionality is restricted per user account through
  a permissions system; some editions additionally protect
  advanced modes with a separate password.
• Data held locally by the Application is protected by the security
  mechanisms of your operating system.
• Access to our servers is limited to authorised personnel.

No method of electronic transmission or storage is completely secure,
and we cannot guarantee absolute security. In the event of a personal
data breach we act in accordance with applicable law and, where required,
notify the affected parties.

9. Children

The Application is not intended for anyone under the age of 16,
and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. The current version is
always available at https://www.dmv.rs/privacy and within the Application.

Where changes are significant, we notify users in the Application
at their next sign-in.

11. Contact

DMV d.o.o. · Kraljevića Marka bb · support@dmv.rs · +381 18 459 1552