Privacy notice
Effective from the day the system is first used on your project. Available in English; Nederlands and Deutsch follow in v1.1.
What this system does
MusterPoint records when personnel move between locations on a construction or installation project: a shore base, vessels and remote work sites. A skipper or gatekeeper scans the QR code on each worker's lanyard badge to log the move. The system then knows where each person is and can produce an emergency muster list in seconds.
What personal data we process
- Full name and badge ID
- Employer or agency name
- The time and zone of each scan during the project
- Optionally, a portrait photo for the badge (provided by the worker's employer)
We do not collect location outside of the project zones, biometric data, contact details, payroll information or device identifiers tied to individuals.
Why we process it (legal basis)
The legal basis is legitimate interest: a real-time muster list is required to comply with maritime and construction-site safety obligations, including evacuation procedures in case of fire, person overboard, or evacuation.
How long we keep it
- Scan history: 90 days by default, configurable per project up to 365 days
- The raw CSV used to import a roster: 30 days, then deleted
- Person records: archived (not deleted) when the project closes; purged after retention period
Where the data lives
All personal data is stored within the European Union: database and authentication in Frankfurt (Supabase, AWS eu-central-1); web application hosting in Frankfurt (Vercel fra1); error monitoring through Sentry's EU data centre. No data is transferred outside the EU.
Your rights
- Access — request a copy of your scan history from the site supervisor.
- Rectification — name or company corrections via your agency.
- Erasure — when the project closes, person records can be anonymised. The underlying scan log is preserved as an audit record but names are replaced with
redacted. - Complaint — to the national data-protection authority of your country.
Workers do not log in
Workers are subjects of the records but never users of the system. There are no accounts, no passwords and no app to install for the person being scanned.
Contact
For privacy questions, contact your project administrator. For software-level concerns or to report a data incident, email privacy@musterpoint.app.