Privacy & cookies
How the TENAZ Crane Portal handles personal data and browser storage.
Who is responsible?
The TENAZ organisation that provides this portal is responsible for the processing of personal data within it. Questions or privacy requests can be submitted to your manager or the portal administrator.
What data is processed?
Account and security
- Name, email address, role and last login time.
- Hashed identifiers for failed login attempts.
- Temporary password reset information when requested.
Portal use
- Tickets, comments, timeline updates and uploaded attachments.
- Changes recorded in the activity log, including the responsible user.
- Personal settings such as reminders, language and dark mode.
Purpose and access
The data is used for crane integrity management, maintenance follow-up, document and stock management, notifications, accountability and portal security. Processing supports operational and safety-related business processes and the organisation’s legitimate interest in secure asset management.
Access is role-based. Only authorised users and service providers required for hosting or email delivery may process the data. Data is not sold or used for advertising.
Cookies and browser storage
These items are functional and are not used to follow users across websites.
| Item | Purpose | Retention |
|---|---|---|
| Session cookie | Login, session security and form protection. | Until the browser session ends. |
| tenaz_language | Remembers the selected NL or EN language. | One year. |
| localStorage | Remembers filters, charts, collapsed sections and help preferences on the device. | Until the user clears browser data. |
| sessionStorage | Restores the scroll position after a page update. | Until the browser tab is closed. |
| IndexedDB | Temporarily stores attachments selected offline in a user-specific upload queue on this device. | Until the upload succeeds, the user removes the item, or the device data is cleared. |
Retention and security
Failed-login identifiers are automatically removed after 30 days. Password reset links are valid for one hour and old reset records are cleaned up. Operational records and activity logs are retained for as long as needed for maintenance, safety, accountability or legal obligations, after which they must be deleted or anonymised according to the organisation’s retention policy.
The portal uses role-based access, protected sessions, password hashing, login throttling and an activity log. Users remain responsible for protecting their login details and for uploading only relevant information.
Your privacy rights
Depending on the situation, you may request access, correction, restriction or deletion of your personal data, or object to processing. Submit a request to your manager or the portal administrator. The organisation may need to retain certain information because of safety, accountability or legal obligations.
More information is available from the Dutch Data Protection Authority.