Privacy policy

WorksiteCore is operated by FVE OLTENIA S.R.L., CUI 45884977, J16/750/2022, cu sediul în Str. Mihail Bîrca nr. 3, Craiova, Dolj, România. The company is the controller for account, billing, platform security and public-site data.

For employee, attendance, worksite, document and activity data entered by a customer, the customer determines the purposes and means and WorksiteCore acts as processor. The customer administrator controls users, access, exports and deletion.

We process data required to provide and secure the service, and data entered by authorised users.

• identity, contact and professional-role data;
• company, subscription, invoice and payment-status data;
• projects, worksites, teams, tasks, attendance, photos and uploaded documents;
• IP address, browser data, access logs, audit events and session identifiers;
• language, interface and consent preferences;
• for Android application distribution: APK version, event type, device category, browser and a pseudonymous identifier; these statistics do not retain raw IP addresses, full user-agent strings or GPS location;
• aggregated public-page usage data only after analytics consent.

Accounts, authentication, contracted features, support and billing are processed to perform the contract or take pre-contractual steps. Tax and accounting records are processed to comply with law.

Security, abuse prevention and defence of legal rights rely on legitimate interests with minimisation safeguards. Google Analytics relies exclusively on consent and refusal does not restrict the service.

Visits to the Android application page, APK downloads and application opens are counted for distribution, integrity and operational support based on legitimate interests. The visitor identifier is cryptographically derived from technical data and does not expose the raw IP address to administrators.

On the first public visit, we derive only the approximate country locally from the IP address to propose the interface language. We do not use precise location, send the IP address to an external service for this operation, or store the result separately; a manually selected language always takes priority.

Location verification is disabled by default and can only be enabled by a customer administrator. The phone requests location once when check-in or check-out is recorded; WorksiteCore calculates distance and accuracy but does not retain the employee’s raw coordinates on its servers or continuously track movement. If the phone is offline, the event coordinates remain temporarily in the application’s local device storage only until synchronisation or deletion of the local event.

If the company uses a supervisor phone as a mobile reference, those reference coordinates are temporary and are deleted within 30 days. The identity photo is separate and optional, does not use facial recognition, and is deleted after the configured period of no more than 30 days.

The customer, as employer and controller, is responsible for the legal basis, necessity, proportionality, advance employee notice, representative consultation where applicable, and assessment of less intrusive methods. A missing, weak or uncertain GPS signal is sent for human review and does not automatically create a sanction or change pay.

The country where the worksite is physically located determines the local rules that apply to workforce verification; interface language, account country and billing country do not change that rule. Employment law, collective agreements, consultation duties and impact-assessment requirements may differ even between countries applying GDPR.

Before enabling GPS or identity photos, the customer administrator confirms for every country where the features are used that the applicable purpose and legal basis were documented, workers were informed, required consultations and assessments were completed, and human review was established. The acknowledgement is audit-recorded but is not legal advice or a legal authorisation from WorksiteCore.

Authorised personnel and providers for hosting, email, invoicing, security and support may access only the data required for their role. Core infrastructure is currently hosted in the European Union. We do not sell personal data.

If analytics is accepted, Google Ireland Limited may receive technical data. Transfers outside the EEA use the safeguards declared by the provider, including standard contractual clauses where applicable.

Account and operational data are retained for the contract term and are then deleted or anonymised subject to closure procedures and legal duties. Financial records follow statutory periods. Security and audit logs have purpose-based limits.

Technical consent evidence is retained for three years. The consent cookie expires after 180 days, when the policy changes, or when the preference is replaced.

Android application distribution events are retained for 24 months and are then deleted automatically.

Subject to GDPR conditions, you may request access, correction, erasure, restriction, portability or object to legitimate-interest processing. Contact contact@worksitecore.com. Consent can be withdrawn at any time through Cookie settings.

You may also lodge a complaint with the competent data-protection or privacy authority in the country where you live, work or consider that an infringement occurred. In Romania, the authority is ANSPDCP at www.dataprotection.ro.

We use tenant and role isolation, encrypted transport, audit records, backups and restricted access. WorksiteCore does not make solely automated decisions producing legal effects and does not use customer data for behavioural advertising.

Privacy: contact@worksitecore.com. Operational support: office@worksitecore.com. Material changes are published here and optional consent is requested again when its purposes change.