Introduction

This document describes the types, methods, and purposes of processing personal data, managed by PlanDela d.o.o., recorded, stored, and processed for the purposes of their own sales and support business processes. The privacy policy adheres to the provisions of the General Data Protection Regulation (GDPR).

Personal data recorded, stored, and processed within the Shiftplan Solution is subject to the respective data processing agreement between the subscriber and PlanDela company. In this case, the Controller of said personal data is the subscriber, while PlanDela d.o.o. acts solely as the Processor. The privacy policy for the ShiftPlan Solution is available in a separate document.

Controller Information

The controller of personal data is the company PlanDela d.o.o., Cesta Ljubljanske brigade 23a, 1000 Ljubljana. For inquiries, requests, and questions regarding personal data, you can contact the Data Protection Officer at the controller via the dedicated email address gdpr@shiftplan.io.

Types and Purposes of Data Collection

We collect, store, and process personal data for sales and support processes and to ensure security in the operation of information systems. The sources of personal data along with the type and purpose of data collection from each source are listed below. Data is retained only for the necessary duration to achieve the collection purpose.

Website

The public website at www.shiftplan.io (or www.plandela.si) is intended for product and company presentation.

Recorded data: IP address, website address, browser, other parameters of web queries.

The website does not use cookies or other methods for individual visitor tracking!

Purpose: ensuring information security, visitor statistics.

Email

The majority of business communication is conducted via email for both sales and support processes. Below are the main email addresses, along with information and the purpose of each source.

info@shiftplan.io

Inquiries and information about products and the company.

Recorded data: email address, name, company or organization, job title

Purpose: maintaining business correspondence, conducting sales procedures

support@shiftplan.io

Support for using the ShiftPlan solution.

Recorded data: email address, name, company or organization, job title

Purpose: providing support for using the ShiftPlan solution.

Phone Calls

Dedicated phone numbers are used for capturing sales and support requests. Relevant data necessary to conduct the process is recorded during phone call receptions, depending on the provided feedback.

Recorded data: phone number, name, company or organization, job title

Purpose: conducting sales or support processes.

Social Media

The company is active on social media managed by external companies. Privacy terms are published within each specific social media platform. We do not process personal data recorded within individual social media platforms.

Facebook (www.facebook.com/plandela)

Recorded data: likes, posts, and comments on posts along with publicly available profile information

Purpose: posting news and notifications, collecting user responses and opinions, advertising

Twitter (www.twitter.com/plandela)

Recorded data: likes, posts, and comments on posts along with publicly available profile information

Purpose: posting news and notifications, collecting user responses and opinions, advertising

LinkedIn (www.linkedin.com/showcase/plandela)

Recorded data: likes, posts, and comments on posts along with publicly available profile information

Purpose: posting news and notifications, collecting user responses and opinions, advertising

YouTube (www.youtube.com/channel/UCtsOJZo-Xg3RQLcVd0dr3dQ)

Recorded data: comments on posts along with publicly available profile information

Purpose: posting videos related to the company and solution, collecting user responses and opinions, advertising

Rights of the Individual Whose Personal Data Is Concerned

In relation to your personal data, you have the following rights, which you can exercise by sending a request to the email address gdpr@shiftplan.io:

• Access to your personal data and information regarding our use and processing of your personal data;
• Correction or deletion of your personal data;
• Limitation of the use of your personal data;
• Inquiry about personal data you have provided;
• Objection to the processing of your personal data for specific purposes;
• Withdrawal of consent to our use of your personal data, where we rely on your consent.

Security of Personal Data

We protect personal data within the company and with processors with the utmost care, using appropriate physical and organizational measures to safeguard information in compliance with ISO/IEC 27001:2013 standards.

You can inquire about the current measures for protecting your personal data by sending an email to gdpr@shiftplan.io.

Sharing and Transfer of Personal Data

We use collected personal data solely for the purposes mentioned above and only within our company. We do not provide or manage personal data in any capacity to other legal or natural persons or state authorities unless there is a legal basis for it.

For the collection, storage, and processing of personal data within our company, in certain cases, we use services of contracted processors (e.g., server infrastructure, cloud software). In these instances, we ensure that data does not leave the EU area and take care of appropriate protection and legal regulation of safeguarding