Privacy policy

This section describes processing in the HorarioWeb application. The sections above describe the public website only.

Party to the contract. Laboratorio Web Soluciones, S.L. (tax ID B13704515), Avd. de Burgos 56, 3B, 26007 Logroño, Spain, info@horarioweb.es. This is the company that contracts with the client company.

Roles. The client company is the controller of its workforce data. Laboratorio Web is the processor. We do not decide why that data is used: we process it to provide working-time records, under the data processing agreement.

Data. Company name. Name and email of the administrator and of invited people. Time entries: clock-in, clock-out, breaks, and work modality. Corrections and history: the original entry is kept and a correction is a new record, with the person who made it. Exported reports. Technical data of the access session: IP address and browser. The time entry itself does not store the IP address.

Purpose and basis. To provide the working-time record service. The processor's basis is the contract with the client company (Article 28 GDPR). The client company relies on the legal duty in Article 34.9 of the Spanish Workers' Statute.

Retention. While the account is active and, at minimum, four years from each working day. If the company asks to close the account, we block access and delete the entries once that period has passed. The company can request an export before then.

Who can access. We do not sell workforce data or use it for advertising. Access is limited to the client company, its users, and the Labour Inspectorate when it requires the records.

We keep the company name, the administrator's email, and two aggregate figures (active employees and number of entries) in our CRM, TalentoHQ, to manage the commercial relationship. That transfer does not include time entries or the name or email of the workforce.

Sub-processors.

• Hetzner Online GmbH (Nuremberg, Germany): hosting of the application and the database.
• Amazon Web Services EMEA SARL, Amazon SES, region eu-central-1 (Frankfurt, Germany): transactional email for verification, invitations, and password resets.

Both are in the European Union. Through these sub-processors, working-time records do not leave the EU. A change of sub-processor is published in a new version of this policy and of the agreement, and requires a new acceptance.

Workforce rights. A person who works for the client company exercises their rights before that company. We help the client respond. The response period is one month. A complaint can be lodged with the Spanish Data Protection Agency (AEPD): www.aepd.es.

The data controller responsible for your personal data is:

Company name

Laboratorio Web Soluciones, S.L.

Tax ID (CIF)

B13704515

Registered address

Avd. de Burgos, 56, 3B, 26007 Logroño (La Rioja), Spain

Commercial registry

Commercial Registry of La Rioja, Volume 890, Folio 128, Sheet LO-20257, Entry 1

Representative

Ms Mayte Navarro Torres

Email

info@horarioweb.es

On the public website, Laboratorio Web processes personal data for the following purposes:

• Contact form: To manage inquiries submitted through the contact form. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Site measurement: To understand, on our own server and without cookies, visits to the public pages, signup, login, and contact. We store a masked IP address, the browser, the landing page, and campaign parameters. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Session cookie: To keep the session of a person using the application. It is a technical cookie and does not require consent.

Categories of personal data collected on the website: name, email address, company, approximate company size, primary need, self-reported source (optional), inquiry message, and technical visit data.

Website recipients: The contact message is sent through Amazon SES (Frankfurt, Germany, European Union). The public website loads typefaces from Google (United States): that request sends the visitor's IP address to Google. The signed-in application does not use that service. We do not sell this data.

Processing of working-time records is described in the next section.

Under the General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request the deletion of your data when it is no longer necessary.
• Restriction: Restrict the processing of your data in certain circumstances.
• Portability: Receive your data in a structured, commonly used and machine-readable format.
• Objection: Object to the processing of your data on grounds relating to your particular situation.

Where processing is based on consent, you also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your data is not being processed in accordance with applicable regulations: www.aepd.es.

The application uses one technical session cookie to recognise who has signed in. It does not require consent. We do not use analytics or advertising cookies.

Measurement of public pages happens on our server, without storing a cookie on the device, and with the IP address masked.

You can block cookies in the browser. Without the session cookie it is not possible to stay signed in.

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected:

• Contact data: Retained for the duration of the business relationship and during applicable legal limitation periods.
• Public-website browsing data: Retained for a maximum of 13 months.
• Working-time records: The periods are set out in the service section.

Once these periods have elapsed, your data will be deleted or irreversibly anonymised.

To exercise any of your rights, you may contact us at the following email address: info@horarioweb.es.

Please include in your request your full name, email address, and a description of the right you wish to exercise. We will respond to your request within a maximum period of one month.

If you are not satisfied with our response, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

We reserve the right to update this privacy policy to adapt it to legislative or case law developments. In the event of significant changes, we will inform you through our website.