Privacy notice

This is a translation. In case of doubt, the German version applies.

Controller

[Company, address, contact]

Data protection officer

[Name, contact]

What data we process

Name, email address, password (stored only in encrypted form), role, preferred language, time of acceptance of the terms of use, time of last login, logged-in devices (browser and operating system), and a log of logins and changes including IP address.

Purpose and legal basis

Provision of the employee portal as part of the employment relationship (Art. 6(1)(b) GDPR, § 26 BDSG) [to be checked by the company].

Storage period

Failed login attempts: 30 days. Log of logins and changes: 2 years. Chat posts: 1 year. Personal messages: 2 years. Unconfirmed registrations: deleted 30 days after the confirmation link expires. "Stay logged in": until logout, at most 90 days after last use (administrators 7 days). User accounts: until the end of employment [adjust].

Chat and messages

Chat posts are visible to everyone with access to the respective room (depending on role). Personal messages are visible only to sender and recipients; with "read receipt", the time the message was opened and confirmed is stored. Images are downsized and stored without metadata (e.g. location). Email notices about new messages only contain sender and subject, not the content; they can be turned off in the profile. Retention: chat posts 1 year, personal messages 2 years, then automatic deletion [adjust]. Users can delete their own posts and messages at any time.

Hosting

Strato, location Germany

Cookies

Only technically necessary cookies are used: a session cookie for login and a cookie that stores the selected language.

Your rights

Access, rectification, erasure, restriction of processing, objection, and the right to lodge a complaint with a data protection supervisory authority.