Privacy Policy
Last updated: 17 December 2025
1. Data Controller
[YOUR COMPANY NAME]
[Your Address]
[City, Postal Code]
Slovenia
Email: privacy@example.com
2. Data We Collect
We collect and process the following categories of personal data:
- Account Information: Email address, name (if provided), and authentication data through Clerk.
- Shift Data: Your shift group assignment, overtime records, and leave balances.
- Usage Data: Information about how you use our service (only if you consent to analytics cookies).
3. Purpose and Legal Basis
We process your data for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| User authentication | Contract performance (Art. 6(1)(b)) |
| Shift schedule management | Contract performance (Art. 6(1)(b)) |
| Analytics (if consented) | Consent (Art. 6(1)(a)) |
4. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, your data will be removed within 30 days, except where we are legally required to retain it.
5. Your Rights
Under GDPR and Slovenian data protection law (ZVOP-2), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Export your data (data portability)
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at privacy@example.com.
6. Cookies
We use strictly necessary cookies for authentication. Analytics cookies are only used with your explicit consent. You can manage your preferences via the cookie banner.
7. Third-Party Services
We use the following third-party services:
- Clerk - Authentication (Privacy Policy)
- PostHog - Analytics (only if consented) (Privacy Policy)
8. Complaints
If you believe your data protection rights have been violated, you may file a complaint with the Information Commissioner of the Republic of Slovenia:
Informacijski pooblaščenec
Dunajska cesta 22, 1000 Ljubljana
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si