TotalEnergies EP Mozambique Area 1, Lda.
Privacy Policy
Welcome to the Safe360 Application. By logging onto or visiting the Application, you acknowledge that you have read, understood and accepted, without limitation or reservation, our Privacy Policy (the “Policy”) and General Terms of Use. Please note that other general terms of use and other personal data and cookies policies apply to other TotalEnergies Group websites, and we recommend that you read them carefully.
This policy explains how personal data is collected, used, stored, disclosed and protected when using the Platform, which is available through web and mobile applications.
TotalEnergies EP Mozambique Area 1, Lda. is the “Data Controller” with regard to managing the Application. This processing is carried out in accordance with applicable law.
1. Purpose and Basis for the Data Collected, and Storage Period
The HSE Observation Tool is designed to support the reporting, management, monitoring and analysis of HSE observations, good practices, anomalies, Life Saving Checks and corrective actions.
We may collect information such as your name, company, business email address, employee or contractor identification number, observations submitted, actions assigned, and related HSSE information. Where necessary, photographs may also be uploaded to support observations and Life Saving Checks, which may incidentally include personal data.
Personal data collected through the Platform is used to:
- manage HSE observations and Life Saving Checks;
- assign and monitor corrective actions;
- improve HSE performance and risk management;
- generate dashboards, reports and key performance indicators;
- comply with health, safety and regulatory obligations; and
- maintain the security and proper functioning of the Platform.
For purposes of the Constitution of the Republic of Mozambique, Law 3/2017, of 9 January and other applicable legislation in force, you consent to let us process your personal data so that we can provide you access to the Application’s services and make your browsing easier.
Your personal data is not subsequently processed for purposes other than those described above. Your data is stored for a maximum of 15 years.
2. Data Recipients
Your personal data are liable to be disclosed to certain departments of the Data Controller or companies within the TotalEnergies Group, as well as to certain partners or subcontractors.
3. Data Transfers
All data transfers to countries outside Mozambique are carried out in accordance with the applicable regulations and in such a way as to ensure adequate protection of the data.
Under the terms governing the services provided on the Application, your data, such as your IP address and pages visited, may be transferred to recipients that are partners of the TotalEnergies Group, or any TotalEnergies Group company outside the country.
In order to ensure the adequate protection of personal data originating in the European Economic Area and which may be transferred to TotalEnergies Group entities established outside the European Economic Area, “Binding Corporate Rules” (BCR) have been adopted.
For personal data transfers which are not covered by the BCR and bound for countries outside the European Economic Area, other measures have been established to ensure adequate data protection.
If you wish to obtain more information about our BCR, please click here. For all information on the other measures established to ensure adequate protection, please write to the contact address mentioned below.
4. Security and Confidentiality of Your Data
For purposes Law 3/2017, of January 9 and other applicable legislation in force, the data controller will implement the appropriate measures to maintain the security and confidentiality of your personal data, particularly to prevent it from being altered, damaged or accessed by unauthorized third parties.
5. Local Data Storage on the Mobile Application
5.1. Principles
All the Data Collected is stored locally on your device, strictly to allow you to log in, complete your work offline, and sync it once you are back online.
5.2. Types of Local Data Stored and Device Permissions
The data stored locally on your device when you use the application may be grouped as follows: data required to keep you signed in, data required to let you work offline and sync later, and data linked to the device permissions you grant.
5.2.1. What data is stored on your device?
Data Stored by the Application
| Storage Type | Description | Storage Period |
|---|---|---|
| Secure session storage (encrypted, device Keychain/Keystore) | Your access token, refresh token, display name, and the site selected when entering via an access code | Refresh token valid for 7 days; all cleared when you log out |
| Local offline database (on-device only) | Draft entries not yet completed; submissions and photos queued to sync once the device is back online; cached reference data (sites, activities, checklists) to allow the application to work without an internet connection | Kept until the entry is submitted and synced, or deleted by you; cleared if the application is uninstalled |
| Microsoft Entra ID sign-in cache (native OS secure storage, managed by Microsoft) | Present only if you choose “Sign in with Microsoft” | Cleared when you sign out of the application |
Device Permissions Requested
| Permission | Purpose |
|---|---|
| Camera | To capture evidence photographs for Observations and Life Saving Checks, and to scan an access QR code |
| Photo Library | To attach an existing photograph as evidence |
These are device-level permissions, not stored data: no photograph leaves your device unless you explicitly attach it to a submission.
5.2.2. How to clear locally stored data
You can clear all data stored locally by the application at any time by signing out (which clears your session and any Microsoft sign-in cache) or by uninstalling the application (which also removes the local offline database). Please note that signing out or uninstalling the application before a submission has finished syncing may result in the loss of that unsynced entry.
5.3. Right to Delete Your Account and Data
In addition to contacting us at the address above, you may request the deletion of your account directly from within the Application, via Settings. Deleting your account removes your login credentials and personal profile information from the Application.
Please note that Observations, Life Saving Checks and related HSSE records you have already submitted are not deleted together with your account: these are retained by the Data Controller for the period indicated in Section 1 above, as required for health, safety and regulatory purposes, and will be disassociated from your personal profile where this does not compromise the integrity of the HSSE record.
Any draft entries stored only on your device that you have not yet submitted are permanently deleted when you delete your account or uninstall the Application, and cannot be recovered.
Your Rights / Contact
In accordance with the regulations in force, you have the right to access, rectify, delete, and object to the processing of your personal data.
You can request the communication of your personal data as well as the limitation or portability of your personal data.
You can exercise these rights and consult us regarding the processing of your personal data by contacting us at the following address:
ITS Department TotalEnergies EP Mozambique Area 1, Lda.
Avenida Julius Nyerere 3412, Maputo, Mozambique
If you feel, after contacting us, that your rights have not been respected, you can lodge a complaint with the competent supervisory authority.