Payroll and HR Mobile App - Privacy Policy
1. About DHRP Payroll and HR App
DHRP HR & Payroll (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. It is a tool serving the HR executives to monitor time and leaves and any other employee relevant information.
This Privacy Policy explains how DHRP HR & Payroll collect, uses, discloses, and safeguards information in connection with our mobile payroll and HR application (the “App”). By using the App, you acknowledge and agree to the practices described in this Privacy Policy.
2. Contact details
- Suite 2, Level 3, 480 Collins Street, Melbourne, VIC, 3000
- Level 33, Australia Square, 264 George Street, Sydney NSW 2000
- Office 2, Second Floor, Main Saeed Building Adj to Soil Survey of Pakistan, Lahore, 38000, Pakistan
Please direct any privacy inquiries to support@dhrp.com.au
3. General
HR & Payroll App values its users’ privacy and is committed to protecting their personal information. This Privacy Policy describes how we handle personal information in relation to the usage of our Services.
Our Services are only available to people aged 14 (fourteen) or older. As a result, no data relating to those under the age of 14 (fourteen) will be handled.
This Privacy Policy uses the terms “personal data,” “data subject,” “processing,” “controller,” and “processor” as defined in the General Data Protection Regulation.
- This Privacy Policy applies to the processing of personal data of DHRP website visitors ("Website Visitors"), independent individual users of our Services ("Individual Customers"),
- Companies, organisations, institutions, groups of people, or the like that track the time of their employees allocated to their HR & Payroll app account or other individuals for whom they have purchased licenses to use our Services ("Enterprise Customers").
Individual and enterprise customers are referred to collectively as “Customers” in this document.
4. Data processed as the controller
HR & Payroll, as a data controller, processes the following data to provide and improve the Services:
- When you use the App, we process certain automatically produced technical data to ensure its performance and to prevent and defend against targeted attacks. This includes, for example, the software and hardware utilised, the end device’s IP address, the time and length of use, problem reports, and linked devices (together referred to as “device data”).
- We also handle the used and most often used functions. We utilise this information to assess and improve our functions.
- Your email address is gathered upon registration and is used for user identification and to contact you, such as to reset your password.
- When a profile is created, users are given a “Profile ID” and a “User ID.” We process these to allocate datasets to you.
- If you want to get notifications from our app on your device, device tokens will be generated and saved. To enable these notifications, your operating system receives device tokens and message content.
- To enable subscriptions through our App, we process payment data (see point 9 below) as well as other billing-related information (address, VAT, etc.).
- Correspondence, such as when signing a contract or providing help.
- Individual Customers Only: Name, profile picture (if available), and language.
- Enterprise Customers Only: Information about licenses and allocated license users.
- We don’t track the UUID or identifier of devices; however, we gather information about the device OS, whether it is Android or iOS.
5. Data processed as a processor on behalf of the Customer
We process data on behalf of Enterprise Customers solely. Name, profile image (if available), and language of allocated license users.
- All content entered, provided, collected, or processed in any other form via the Services and the available functions, including, but not limited to, tracked time, breaks, teams, projects, tasks, expenses, notes, keywords, rates/hourly rates, invoices, automation, signatures, attachments, images, and other uploads, provided that this data is provided by the Customer. This includes all data and information made available by individually adjustable App permissions.
- If access to the location of the end device is granted, it can be utilised to automate time tracking. Depending on the various approvals or rights granted, automated time tracking can begin or stop when you enter or leave a certain region (geofence detection) or connect or disengage from a Wi-Fi network (Wi-Fi detection). However, the location is only used if the App has a specific “automation” set up or engaged. The usage of location data can thus be halted at any moment by deactivating the related function/automation in the App or in the operating system’s settings.
- We use location info in attendance and check-in and check-out. We receive information from user-enabled, connected, or integrated third-party applications. You should carefully read the privacy settings and notices of those third-party services to determine what information may be shared with us or transmitted to our Services.
- Furthermore, the personal data of users may be processed if other users disclose it within the context of our Services, such as by entering it into their projects or tasks or as their employer.
DHRP HR & Payroll processes these data only on behalf of the particular controller; the legal basis for processing (contract performance, consent, legitimate interests, etc.) is thus decided by the respective controller.
6. Messaging
When this function is enabled, notifications (“push notifications”) are sent to the user’s smartphone to keep them updated on App events. The App’s authorisation for such alerts can be adjusted or revoked at any time in the settings of your operating system. Notifications cannot be issued after deactivation.
We will also send you notifications that are required to fulfil the contract, such as confirmation of your registration or password reset.
7. Recipients
We do not sell or disclose your personal information with third parties unless specified in this Privacy Policy or the Data Processing Agreement or as required by law or regulation.
Depending on the settings in the App, your data might be shared with other users, teams, project participants, and so on.
We agree to transfer personal data to third countries only if a sufficient level of data protection is assured, standard contractual provisions have been agreed upon, binding internal data protection policies or other suitable guarantees exist, or you have consented to the transfer.
8. Sign-in via Microsoft
Sign-in with Microsoft allows you to connect your Microsoft account to our services. This integration generates a unique ID for you and provides us with your email address and profile image from Microsoft.
9. Privacy and Security
We do not handle your data for automated decision-making, including profiling, in line with the Australian Privacy Principle (‘APP’) of the Privacy Act, which results in judgments that have legal consequences for you or significantly affect you in a similar way.
By choosing the individual options or supplying your information, you voluntarily consent to the processing and transmission of your information, and you can cancel or adjust this consent at any time with effect for the future by modifying these settings or removing specific details.
We exclusively collaborate with the most reliable service providers and data processors. Your information is pseudonymised in our database. We use the Secure Sockets Layer (SSL) protocol to encrypt any information transmitted between you and our Services.
Unfortunately, no data transfer or storage system is completely secure. If you have reason to believe that your interactions with us are no longer secure, please inform us right away. If we find a data breach, we will notify you as quickly as feasible.
10. Cookies (website only)
Cookies are used on some Internet pages. Cookies are harmless to your computer and contain no viruses. Cookies help to improve the offer’s use, effectiveness, and safety. Cookies are little text files that your browser saves and stores on your computer. Some cookies used are known as “session cookies”.
They are automatically removed at the conclusion of your visit. Other cookies are saved on your computer for a longer period of time or until you erase them. These cookies enable us to recognise your browser on subsequent visits. You can configure your browser so that you are notified about cookie settings and only allow cookies in specific instances, exclude cookie acceptance for specific cases or in general, and enable automatic cookie erasure when you close the browser. If you disable cookies, the website’s functioning may be hampered.
11. Your rights
You have the right at any time to access your stored personal data and information. You have the right to access information about the origin, recipients, and purpose of data processing. If legal requirements are met, you may also request the correction, transfer, restriction, blocking, or deletion of incorrect or unlawfully processed data.
Additionally, you can withdraw your consent to processing your personal data at any time, with effect for the future.
You also have the right to object to the processing of your personal data based on your legitimate interests if your specific situation justifies doing so. Furthermore, you may object to the processing of your data for direct marketing purposes at any time without providing a reason.
To exercise your rights, please contact us via email at support@dhrp.com.au or by postal mail at the address provided in Section 2. Some rights can also be exercised directly by adjusting your settings as described above or by deleting specific details.
If you believe that our processing of your personal data violates applicable laws or infringes on your data protection rights, you have the right to file a complaint with the relevant supervisory authority.
