Data processing agreement

Subject

Leftclick AG (processor) processes personal data of the customer's employees on behalf of the customer (controller) in order to provide weetime. This agreement applies for the term of the subscription.

Types of data and data subjects

The customer's employees: names, contact details, working time, absences, balances, badge identifiers (hashed) and change logs.

Instructions

The processor processes the data only on documented instructions of the customer, given in particular through the configuration of weetime.

Confidentiality and security

Everyone with access is bound to confidentiality. Data is separated per customer, encrypted in transit and protected by role-based permissions and two-factor authentication. Support access requires the customer's approval and is logged.

Sub-processors

{{TODO-LEGAL: list of sub-processors with location}}. We inform the customer of changes in advance; the customer may object for good cause.

Assistance and notifications

The processor assists the customer with requests from data subjects and reports personal data breaches without undue delay.

Return and deletion

After the contract ends the customer can export its data. It is then deleted within the agreed periods.