The Laser*ONE apps are provided by Laser Line d.o.o., Tribje 17, 52470 Umag, Croatia, OIB 26680017138. Phone +385 52 725 600, email laserline@laserline.hr.
Our Data Protection Officer is Ivica Glavočić, dpo@laserline.hr, +385 52 725 600.
Who is responsible for your data depends on how your organisation uses Laser*ONE:
| Your organisation's setup | Controller | Laser Line's role |
|---|---|---|
| Laser Line manages the devices and the Laser*ONE service on your organisation's behalf | Laser Line d.o.o. | Controller |
| Your organisation administers its own devices in Laser*ONE (its own administrator accounts) | Your organisation (usually your employer) | Processor, acting only on your organisation's instructions under a data processing agreement |
| Your organisation runs Laser*ONE on its own server | Your organisation | Laser Line does not receive the data collected by the app |
If you are not sure which applies to you, ask your employer or contact us. We will forward any request we receive as a processor to the responsible organisation and help it respond.
This policy covers the Laser*ONE apps for Android and iOS (app ID hr.laserline.agent). It also covers the Laser*ONE server they connect to. Our website has its own privacy statement.
Laser*ONE is a business tool. Organisations install it on devices they own or manage, usually for their employees. It shows the organisation's apps and links, and keeps devices up to date. It also lets the organisation's administrators see the state of each device.
The app has no user accounts. A device is connected to an organisation with a licence key, a QR code or an invitation link. When it is used with the store review demo code, the app collects nothing.
The app collects information about the device, not about what you do in other apps. Everything listed is linked to the device. Nothing is collected for advertising.
| Data | What exactly | Android | iOS |
|---|---|---|---|
| Device identifier | A code made from the device model plus a one-way hash of the system's device ID. The original ID is never sent. | Yes | Yes |
| Device information | Manufacturer, model, operating system version, security patch level, time zone, language, battery level, storage and memory, uptime | Yes | Yes (no patch level, storage or uptime) |
| Network information | Local IP addresses, connection type (Wi-Fi or mobile), mobile carrier name, and whether Bluetooth, Wi-Fi, NFC, location services and airplane mode are on | Yes | IP addresses and connection type only |
| Wi-Fi network name | The name of the Wi-Fi network the device is connected to | Only if you allowed location | No |
| Installed apps | Name, package name and version of apps you can open from the home screen. Pre-installed system apps are left out. | Yes | No |
| Precise location | Latitude, longitude, accuracy and time of the latest position. Sent about every 15 minutes, and only when the device has moved or an hour has passed. | Only if you allowed it | No |
| Usage counts | Per day: how many times the app was started, how often each tile in the app was tapped, and at which hour. No web addresses, names or exact times. Online time is calculated from the app's regular connection signal. | Yes | Yes |
| Error and crash reports | The text of the app's last error or crash | Yes | Yes |
| Required-app status | Whether apps your organisation requires (for example Tailscale) are installed, and how often the reminder was postponed | Yes | Yes |
| VPN access request | Role, tag, location, contact name, phone number and notes that you type in when you ask for VPN access, plus the device's VPN address | Only if you send a request | Only if you send a request |
We do not collect: your name or email (except in a VPN access request), passwords, contacts, photos, files, messages, browsing history, screenshots, keystrokes, the IMEI, serial number or MAC address, or what you do inside other apps. We do not keep a history of your locations, only the latest position.
If you share the app's log yourself, you choose where it goes. The log contains the device identifier, your organisation's name and the server address.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Connecting the device to your organisation and delivering its apps, links, messages and updates | Device identifier, device information | Performance of the contract with your organisation (Art. 6(1)(b)) and the organisation's legitimate interest in managing its devices (Art. 6(1)(f)) |
| Showing administrators the state of each device so they can support it, keep it secure and up to date | Device and network information, installed apps, required-app status | Legitimate interest in managing and securing company devices (Art. 6(1) (f)) |
| Finding lost or stolen devices | Precise location, Wi-Fi network name | Your consent (Art. 6(1)(a)), given in the app. You can withdraw it at any time. |
| Processing your VPN access request | The details you type in the request form | Performance of the contract with your organisation (Art. 6(1)(b)) |
| Fixing errors and improving the app; usage reports for your organisation | Error and crash reports, usage counts | Legitimate interest in a working, useful service (Art. 6(1)(f)) |
| Keeping the service secure | Device identifier, server logs with IP addresses | Legitimate interest in security (Art. 6(1)(f)) |
We do not use the data for advertising, profiling, selling or automated decisions about you. Usage counts describe how the app is used on a device. They are not used to measure an individual's work performance.
| Permission | Why | Platform |
|---|---|---|
| Camera | Only to scan the QR code when the device is first set up. No photos or video are stored or sent. | Android, iOS |
| Location (precise) | To report the device's position to your organisation's administrators, for example to find a lost device. Asked only after an in-app explanation. Works while the Laser*ONE service runs, shown by its permanent notification, also with the screen off. After a restart it resumes when you next open the app. You can refuse or turn it off at any time in the app or in the system settings. | Android |
| Notifications | To show messages from your organisation and app installation prompts | Android |
| Install apps | To install and update apps your organisation provides. You confirm each installation unless the device is fully managed by your organisation. | Android |
| Run in background and start at boot | To keep the device connected to your organisation, shown by a permanent notification | Android |
| Network, Wi-Fi and Bluetooth status | To report whether these are switched on and how the device is connected | Android |
| Device administrator | Used only when your organisation fully manages the device (device owner mode), for silent app updates and kiosk mode. It requests no device policies, such as wiping or locking. | Android |
The app does not use accessibility services, does not read app usage statistics and cannot see what you do in other apps.
The app contains no advertising, analytics or tracking tools from third parties. We do not sell data or share it for advertising.
Storage. Data is stored on Laser Line's own servers in Croatia and does not leave the European Union. If your organisation runs Laser*ONE on its own server, the data is stored there. All communication between the app and the server is encrypted (TLS).
| Data | Kept for |
|---|---|
| Device record: device and network information, installed apps, latest location, last error | While the device is connected to the organisation. Deleted when the device is unpaired or removed, or after 12 months without a connection. |
| Location | Only the latest position is kept; each new one replaces the previous one. Deleted when you stop sharing location, or with the device record. |
| Usage counts | Daily details for 90 days, monthly totals for 24 months |
| VPN access requests | 12 months after the request is closed |
| Messages from your organisation | Until they expire, by default 30 days |
| App update history | The last 50 entries per device, deleted with the device record |
| Server logs with IP addresses | 30 days |
If the device cannot reach the server, the app keeps unsent usage counts on the device for up to 90 days.
Communication is encrypted with TLS. The device identifier is sent only as a one-way hash. Administrator access requires two-factor authentication, and each organisation's administrators can only access their own devices. Server access is limited to authorised Laser Line staff.
Under the GDPR you have the right to:
To use these rights, write to dpo@laserline.hr. If your organisation is the controller (section 1), you can also contact it directly. We reply within one month.
Delete the data from your device yourself: in the app's settings, tap Unpair this device. If your organisation has protected this with a password, ask its administrator. Unpairing removes the app's data from the device and asks the server to delete the device record. Uninstalling the app stops all collection; the server record is then deleted after 12 months without a connection, or earlier on request.
Stop location only: in the app, open Settings → Location and tap Stop sharing. This also deletes the last saved position. You can also turn off the location permission in the system settings. The app keeps working without it.
Complaints: you can complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or to the authority in your own EU country, for example the Informacijski pooblaščenec in Slovenia (ip-rs.si).
Laser*ONE is meant for business use and is not aimed at children under 16. We do not knowingly collect data about children.
We will publish any change on this page and update the date below. If a change affects how we use your data in a significant way, we will also tell you in the app.
Laser Line d.o.o., Tribje 17, 52470 Umag, Croatia · dpo@laserline.hr · +385 52 725 600
Effective date: 01.01.2026