Privacy notice

Who is responsible

ThinkPeople, the staffing agency that runs this app, decides what it keeps and why. It is the controller of the data described here.

What the app keeps

• Workers: your name, and the e-mail address and phone number ThinkPeople entered for you, if any; the language you read the app in; whether you asked to stop the daily reminder; for each day, the hours, start time and note you submit, the client company’s answer and ThinkPeople’s decision; notes ThinkPeople’s staff keep about your work, never about your health; the employee number ThinkPeople’s payroll knows you by, if one is recorded (never your CNP); and the records ThinkPeople needs to pay you and to invoice the client.
• For workers, also the phones signed in to their account: a label such as “Android · Chrome”, and when each was first and last used.
• Client company staff: your name, e-mail address and language, whether your daily digest is switched off, and the days you confirm or answer.
• The people ThinkPeople contacts at a client company: your name, your role (operations, accounts, site supervisor or signatory), your work e-mail address and phone number, the work site you answer for, whether you receive invoices, and your user account, if you have one. Only work details are kept, and ThinkPeople deletes them when it learns you have left the client company.
• ThinkPeople staff: your name, e-mail address and language, your two-factor settings, and what you do in the app.
• Everyone: sign-in attempts, with the e-mail address or phone number typed and the IP address; a record of each sign-in, saying only when and how you signed in (password, code or two-factor), with no IP address or browser; a record of each message the app sends you, saying only which message, when, how (e-mail or SMS) and whether it could be sent, never what it said; and a record of each change made in the app and of who made it.

Why, and on what basis

• To record the hours worked, agree them with the client company, pay workers and invoice clients: this is needed for the employment or service contract, and for ThinkPeople’s legal duty to keep working-time and accounting records.
• To keep accounts secure, find faults, and send the reminders and messages the app needs: this is ThinkPeople’s legitimate interest.
• To reach the right person at a client company about hours, invoices or a work site: this is ThinkPeople’s legitimate interest in carrying out its contract with that company.

None of this relies on your consent, so the app does not ask for it.

Who sees it

• The client company where a worker is placed sees the worker’s name and, for each day, the hours, start time and note, but not the worker’s pay. Invoices sent to the client name the workers whose hours they bill.
• ThinkPeople’s staff see all of it.
• Services that run the app for ThinkPeople also handle it: the hosting provider, the e-mail service that delivers the app’s messages and, where one is set up, an error-reporting service, which receives the page address and the browser type when something fails.

How long it is kept

Hours, pay records and invoices are kept for as long as the law requires ThinkPeople to keep payroll and accounting records. Sign-in codes are deleted a day after they expire, sign-in attempts after a day, unused enrolment codes and password-reset links a week after they expire, the record of the messages the app sends after 90 days, and the record of each sign-in after 12 months. ThinkPeople is setting the other periods with its accountant.

Your rights

You may ask ThinkPeople for a copy of your data, to correct it, to erase it or restrict its use where the law allows, and to object to a use based on its legitimate interest. ThinkPeople answers within one month. To stop the daily reminder, ask ThinkPeople; client company staff can switch the daily digest off themselves, on their account page.

To ask about your data, see it or have it corrected, contact ThinkPeople:

You may also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).

On your phone or computer

The app keeps a sign-in cookie, your language choice and its own files in the browser, so that it opens quickly. On a worker’s phone it also keeps the status of the last day opened on Today, so that the offline page can show it, until the worker logs out or the session ends.