Privacy and the data processing agreement
The privacy notice, the terms and the data processing agreement are public pages. The company is the data controller for the employee data in the portal, and we are the data processor.
- Applies to: Administrator
In the portal: Public pages: privacy, terms and data processing agreement
Where do you find them?
The pages are open to everyone and are also linked from the login page in the portal.
Who is who?
When the company uses the portal for information about its own employees, the company is the data controller and we are the data processor. You decide what is recorded and for how long it is kept. See “Retention and deletion”.
What should you do?
Read the privacy notice and the data processing agreement.
Give the employees information about what is recorded about them. The company is itself responsible for this.
Do not enter diagnoses, information about criminal offences or national identity numbers in free-text fields. The portal has no fields for such things.
Set deadlines for sick leave and former employees under Deletion routines.
What the portal stores
User account, access log, error log, and what the company itself enters about employees, absence, hours, courses, HSE and documents. Absence, sick leave, timesheets and employee records can only be handled by administrators.
Common problems
- The documents are marked as drafts. They are not final until a lawyer has reviewed them. It says so on each page.
- An employee asks for access to their data. Requests about employee data go to the employer. We help you reply.