Terms of service

The Italian text is the binding one. This page translates it as a courtesy: the original is the Termini di servizio.

These Terms govern the use of CantiereGo, the service provided by A176lab S.r.l., Via Madonna dell’Altomare 23, 91011 Alcamo (TP), VAT no. 02812750814 (“A176lab”). Whoever registers a workspace accepts them for the company they represent; whoever joins by invitation accepts them for the use of their own account.

1. Definitions

• Platform: the CantiereGo web app, at app.cantierego.it, and the services that make it work.
• Client: the company or professional that registers a workspace and uses the Platform for its business.
• Workspace: the area of the Platform reserved to a Client, with its sites, employers, workers, members and attendance, kept apart from other clients’ areas.
• Member: a person the Client invites into its workspace with a role.
• Worker: a person whose data the Client records to manage their badge and attendance; the Client can invite them to use the wallet, that is, to open their own badge and punch in and out from their phone.
• Plans: the service tiers described in Article 4.

2. Subject matter

A176lab makes the Platform available to the Client. Today the Platform lets the Client:

• manage sites, employers and workers, with their site assignments, including by importing them from an Excel file;
• record the compliance facts (training, medical fitness for the job, and the employers’ patente a crediti and DURC), from which the compliance engine computes the state of every worker’s badge: green, red or suspended;
• print the card with its QR code and offer the public verification page, which an inspector opens without an account;
• record attendance at the gate, from a delegated kiosk and from the worker’s wallet, offline too;
• keep the attendance register, settle the anomalies, prepare the monthly sheets of attendance hours and send them to the payroll consultant.

The interface is in Italian and English. The service includes the features available on the Platform at the time of use: A176lab may improve or change them, and these Terms promise no future feature.

3. Registration and accounts

• Registering takes true details and a valid email address, which must be confirmed: until it is confirmed, the account cannot sign in with its password.
• Whoever registers the workspace becomes its first member with the Owner role, the app’s role that holds every permission; a workspace always has at least one member with that role.
• The Client invites members by email or by text message and chooses each one’s role; it can also invite workers to use the wallet. The Client answers for the use its members make of the Platform and revokes the access of anyone no longer entitled to it.
• Every account is personal, and its credentials must be kept safe. Access can be protected with a second factor (a code from an authenticator app, with recovery codes), which we recommend turning on.

4. Plans, prices and payments

A subject is each site, worker, employer or vehicle a document is attached to. The Telegram bot is available on every plan.

Starter is free, with no time limit. Professional and Enterprise are paid, and the Client activates them on its own in the app, from its workspace’s “Plan and billing” page, at the monthly list prices published on the Pricing page, VAT excluded; VAT applies at the ordinary rate of 22 %. A paid plan can be bought only by a business or a professional with an Italian VAT number, after entering the complete billing details in the workspace: registered name, VAT number, tax code, address and SDI recipient code or certified email (PEC). For every payment A176lab issues the electronic invoice through the Italian exchange system (Sistema di Interscambio); the document Stripe makes available in the app is a courtesy copy and is not valid for tax purposes.

Payment is by card or SEPA Direct Debit through Stripe (Stripe Payments Europe, Ltd.), on whose pages the Client enters the payment method: card details and the IBAN never reach A176lab. The subscription is monthly, paid in advance at the start of each period, and renews automatically at the end of each period until the Client cancels it. A promotion code issued by A176lab, if any, is entered on the payment page and the discount appears on the invoice.

The Client may upgrade to a higher plan at any time: the upgrade takes effect at once, and the difference for the rest of the current period, prorated by the day and shown before confirmation, is charged at once. A downgrade and a cancellation take effect from the end of the current period, until which the Client keeps the plan it paid for; a cancellation can be undone in the app before that date. No refund is due for a period already paid. A plan change is not possible while the subscription’s latest invoice remains unpaid. A cancellation does not close the workspace, which returns to the Starter plan; closing the workspace (Article 11) cancels the subscription from the end of the current period.

If a renewal fails, Stripe retries the charge several times over the following days and the Client is notified by email; the plan stays active during the retries. If the retries run out without a payment, the subscription ends and the workspace returns to the Starter plan with its limits. In every move to a plan with lower limits — by cancellation, by a downgrade, by a failed payment, at the end of a granted plan or when a granted limit is lowered — nothing is deleted: the sites, workers, employers, vehicles and documents already registered all stay, readable and exportable. If the workspace exceeds the new plan’s limits on sites, workers, employers or vehicles, or uses WhatsApp where the new plan does not include it, the Client has thirty days, from the day the plan changes, to get back within the limits or buy a suitable plan; for those thirty days everything keeps working, and A176lab notifies every owner of the workspace by email on the day the period starts, seven days before it ends and on the day the suspension takes effect. Once the thirty days have passed, the Platform suspends, for each kind, the rows beyond the limit, newest first: a suspended worker has a suspended badge and their punches are refused on every channel; a suspended site takes no punches and no new operations: no new assignments, companies, gate links or inspector accesses, no new documents; a suspended employer takes no new workers, no new site participations and no new documents, while its workers keep their badges and their sites; a suspended vehicle takes no new assignments, no rental contract and no new documents; where the plan does not include WhatsApp, the workspace’s WhatsApp activations are suspended, while each account’s link to the bot stays. Suspended rows stay readable and exportable. The suspension is lifted at once, oldest row first, when the Client archives or deactivates a row of the same kind that is not suspended, within the plan’s limits, when it buys a suitable plan or when A176lab grants a higher plan or limit. If a later change lowers another limit, or the same one again, or removes WhatsApp, a new period of thirty days runs from the day of that change, with the same notices; rows already suspended stay suspended. Documents are never suspended and start no such period: beyond the per-subject limit the Platform refuses only new documents. The Platform also enforces every plan’s limits at creation: once a limit is reached, it refuses a new site, worker, employer, vehicle or document, by import or by restore too, and, where the plan does not include WhatsApp, a new WhatsApp activation for the workspace; archived sites, deactivated workers and archived employers and vehicles do not count.

A refund, if any, is granted by A176lab through a credit note and returned to the payment method used. Notices about the subscription (activation, plan changes, failed payments, termination) reach every owner of the workspace by email; Stripe sends the receipt of every payment. A176lab may activate a plan with no charge for a fixed period, by written agreement; when it ends the workspace returns to the Starter plan unless a plan is bought. A change of prices or limits follows Article 12 and does not apply to a running subscription before the first renewal after the notice. A reduction of a plan’s limits decided by A176lab (Article 12) suspends nothing: a workspace that exceeds the new limit when the reduction applies keeps what it has registered that day and the features it uses, and cannot add more unless it buys a plan with a higher limit.

5. The Client’s obligations

The Client undertakes to:

• enter into the Platform only data that is accurate, relevant and lawfully collected;
• give the workers the privacy notice on the processing of their data (Article 13 GDPR) and the information on how the tools are used and on the checks, which Article 4(3) of Law no. 300 of 20 May 1970 (the Statuto dei lavoratori) requires; in the attendance settings the app provides a draft notice to have reviewed by the Client’s own adviser;
• before turning on the position check on a site, verify with its own adviser whether a trade-union agreement or an authorisation of the Ispettorato Nazionale del Lavoro is needed (Article 4(1) of the same law) and complete the data protection impact assessment (Article 35 GDPR), for which the app provides a template; the wallet shows workers the geolocation notice before the first punch with a position;
• keep the compliance facts up to date (the expiry of the courses and of the fitness judgement, the employers’ patente a crediti and DURC): the badge’s state is computed from those facts, and a wrong fact gives a wrong verdict;
• of the medical fitness visit, record only the dates, the outcome and the reference of the judgement, and never write a diagnosis or other health information in the note;
• hand every printed card only to the worker it belongs to, and take it back, or revoke its badge, when it must no longer be used; deactivating a worker revokes their badge;
• keep the links of the delegated kiosks safe and revoke them when a tablet must stop using them;
• not use the Platform for unlawful purposes, and not attempt to breach its security or to access other clients’ data.

6. Processing of data on the Client’s behalf

This Article is the act by which the Client, as data controller (titolare del trattamento), appoints A176lab as processor (responsabile del trattamento) of the personal data it enters into the Platform or collects through it, under Article 28 of Regulation (EU) 2016/679 (GDPR); by accepting the Terms, the parties agree to it with no other document. The account data, of which A176lab is the controller, is described in the Privacy notice.

6.1 Subject matter and duration

The subject matter of the processing is the provision of the Platform to the Client. The processing lasts as long as the contract, plus the time needed to return and delete the data (6.9).

6.2 Nature and purpose

A176lab stores, organises, consults and processes the data, for instance to compute the badges’ state and the attendance hours; discloses it to the recipients the Client names, such as the payroll consultant the app sends the timesheets to; and deletes it. It does so for the sole purpose of providing the Client with the Platform’s features.

6.3 Types of data and categories of data subjects

The data subjects are the workers, employed or self-employed, whom the Client records, the members of the workspace and the payroll consultant the Client names. The data is: personal and contact details; employment data (employer, job title, hire and end dates, sites and roles); the compliance facts, that is, for the courses and for the medical fitness judgement, the dates, a reference and any note from the office; the photo; the badge and its history; the punches, with the IP address, the device type, the reason and the identity document of a punch recorded without the badge or by hand, the office’s notes and, when sent, the distance from the site and the accuracy of the fix, never the coordinates; the workspace’s activity log. The Platform asks for no biometric data and no health records.

6.4 Instructions

A176lab processes the data only on the Client’s documented instructions, unless required to do so by Union or Member State law to which A176lab is subject; in that case it informs the Client of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest. The documented instructions are this Article, the settings and the operations the Client and its members make on the Platform, and the written instructions the Client sends to info@cantierego.it. If it considers that an instruction infringes the GDPR or other data protection rules, A176lab tells the Client at once. The data is not transferred outside the European Union, except as section 7 of the Privacy notice describes.

6.5 Confidentiality

The people A176lab authorises to process the data are bound to confidentiality and access it only as far as the service requires.

6.6 Security

A176lab takes the measures of Article 32 GDPR described in section 9 of the Privacy notice: encryption in transit and at rest, separation of each client’s data in the database, roles and permissions, the activity log, backups with a restore test, no coordinate kept. It updates them as the state of the art moves.

6.7 Sub-processors

The Client gives a general authorisation to the sub-processors listed in section 6 of the Privacy notice. A176lab tells the Client by email of the addition or replacement of a sub-processor at least thirty days in advance; within that period the Client may object and, if the parties find no solution, withdraw at no cost. A176lab imposes on the sub-processors data protection obligations equivalent to those of this Article and remains liable to the Client for their work.

6.8 Assistance

A176lab assists the Client:

• in answering requests from workers and other data subjects: the Platform lets the Client consult and correct the data and export the attendance and the timesheets, and the wallet shows workers their own punches and lets them download them; A176lab forwards to the Client, without answering in its place, the requests it receives directly;
• with the obligations of Articles 32 to 36 GDPR (security, notification of breaches, the impact assessment, for which the app provides a template, and prior consultation), with the information available to it;
• by informing it without undue delay after becoming aware of a personal data breach, with the information available and the measures taken.

6.9 End of the processing

When the contract ends, A176lab returns the data to the Client through the export Article 11.1 provides, which the owners can request for at least thirty days after the workspace’s closure, and deletes it within forty days of the closure, unless the law requires it to be kept. Deleted data leaves the backups on their cycle, after about seventy days (section 5 of the Privacy notice).

6.10 Audits

A176lab makes available to the Client the information needed to demonstrate compliance with this Article, and allows audits, including inspections, conducted by the Client or by an auditor it mandates, with reasonable notice and without compromising the Platform’s security or the confidentiality of other clients’ data.

7. Regulatory compliance

The Platform helps the Client manage the identification card, the compliance of employers and workers and the attendance, but does not guarantee compliance with the law: the Client remains responsible for it towards the workers, the owners who commission the works and the authorities, and a badge’s verdict depends on the facts the Client records. The site’s pages, the Regulations page included, and the texts the app provides are not legal advice.

8. Availability

A176lab undertakes to keep the Platform available and working with professional diligence, without guaranteeing a service level or an availability percentage. Scheduled maintenance that requires an interruption is announced by email in advance. Without a network, punches at the gate, from the kiosk and from the wallet stay queued on the device and are sent when the connection returns. Backups and the restore test are described in sections 5 and 9 of the Privacy notice.

9. Intellectual property

The Platform, its software, design, texts and the CantiereGo brand belong to A176lab S.r.l. and may not be copied, modified or distributed without its written consent. The Client receives the right to use the Platform for the duration of the contract. The data the Client enters remains its own: A176lab uses it only to provide the service, as Article 6 provides.

10. Limitation of liability

To the extent the law allows, A176lab is not liable for indirect or consequential damage or for loss of profit, nor for the consequences of inaccurate data the Client entered or of the Client’s failures towards the workers and the authorities. For any other damage, A176lab’s liability is limited to what the Client paid for the Platform in the twelve months before the event that caused it. These limitations do not apply in case of wilful misconduct or gross negligence (Article 1229 of the Italian Civil Code) nor in the other cases in which the law does not allow them.

11. Withdrawal and termination

The Client may stop using the Platform at any time and close its workspace, on its own in the app or by writing to info@cantierego.it; a paid plan ends at the end of the current period (Article 4). A176lab may suspend access to the workspace, with written notice, in case of non-payment or breach of these Terms, and without notice when needed to stop an abuse or to protect the security of the Platform or of the data. On termination, Articles 6.9 and 11.1 apply: the data is exported, retrievable for at least thirty days and deleted by the fortieth day after the closure.

11.1 Switching provider and data retrieval

The Client may at any time switch to another provider or to its own infrastructure, taking its workspace’s data with it, or stop using the Platform and have that data deleted, as Chapter VI of Regulation (EU) 2023/2854, the Data Act, provides. To that end:

a) Notice and transition. Switching provider requires no notice. The Client decides when to close the workspace: until then the Platform keeps working as before, and the Client exports the data and transfers it on the timeline it chooses, with no transition period imposed by A176lab. During that time A176lab keeps the service running with the professional diligence of Article 8 and the security measures of Article 6.6, assists the Client in the switch with the information available to it and informs it of known risks to the continuity of the service. A paid plan ends at the end of the current period (Article 4).

b) Export. An owner of the workspace, that is, one of its members with the Owner role (Article 3), may request at any time, during a suspension of access (Article 11) too, one a day per workspace, a complete archive of the workspace’s data in structured, commonly used and machine-readable formats (JSON, CSV and XLSX), with the photos, the timesheets sent and the original files of the documents. The archive includes a workbook with the active registry in the shape of CantiereGo’s import template, which any tool can read and which can be imported again. The archive is usually prepared within minutes and can be downloaded for fourteen days after it is prepared, and in any case not after the workspace’s deletion has begun. The export is requested and downloaded with the account’s credentials, from the Platform or from its programming interface, publicly described by the OpenAPI document at app.cantierego.it/api/v1/openapi.json and offered free of charge and on the same terms to every client, with no request to A176lab.

c) Format and exportable data. The archive’s content is described, file by file and field by field, on the public page cantierego.it/en/export-format, which A176lab keeps up to date as the register of the structures and formats of the exportable data: the JSON schema of every file, the format’s version and the rule by which it changes, every category of data the archive contains and those left out of it, each with its reason — credentials, such as access codes and tokens, data used only for the internal functioning of the service, and billing, whose invoices are downloaded separately —, and the known limits of the transfer. Every archive carries the schemas of the version it was written with.

d) Health data. Fitness-for-work judgements with their outcome, medical decisions and any medical documents recorded are not in the workspace’s archive, which carries, of a judgement without an outcome, what the office reads of it. They are in the medical archive, in the same format, requested separately by whoever holds named access to the fitness judgements, for the employers that access covers, and which only its requester can download. On a suspended or closed workspace only an owner who holds that access requests it, and on a closed one an owner can name themselves; a holder of the access who is not an owner requests and downloads it while the workspace is active.

e) Retrieval and deletion. The workspace is closed by an owner in the app, or by A176lab on a written request to info@cantierego.it; every owner with an active email address receives by email the day on which the deletion begins and the day by which it is complete. From the closure, for at least thirty days, the owners can still read the data, request an export every day and download it, and reopen the workspace. Once the thirty days have passed the deletion begins, and the workspace can no longer be reopened; it is complete by the fortieth day after the closure, unless a hold for a dispute or an inspection, or the deletion of a document still in progress, suspends it for as long as it stands, or the law requires some data to be kept (Article 6.9). Every workspace keeps the dates its owners received by email at the closure.

f) No charge, no obstacle. Switching provider, exporting, retrieving and deleting the data are free of charge: A176lab applies no switching, exit or data retrieval charges and no penalty for closing, and has never applied any. A176lab puts no commercial, technical, contractual or organisational obstacle in the way of switching provider or of transferring the data.

g) Scope. CantiereGo is offered to the public under the published plans (Article 4), is not custom-built for a single client and is not a trial version: none of the exceptions of Article 31 of the Regulation applies to these Terms.

12. Changes

A176lab may change these Terms by publishing a new version, with the date from which it applies, shown at the top of the page, and tells registered users by email. A material change applies thirty days after the notice: continuing to use the Platform after that date counts as acceptance, and a Client that does not accept it may withdraw before then, at no cost.

13. Governing law and jurisdiction

These Terms are governed by Italian law. Any dispute falls under the exclusive jurisdiction of the courts of Trapani (Foro di Trapani), unless the law mandatorily provides otherwise for consumers.

14. Contact

For any communication about these Terms, write to info@cantierego.it. A176lab S.r.l., Via Madonna dell’Altomare 23, 91011 Alcamo (TP), VAT no. 02812750814.