Privacy Policy

Last updated: January 25, 2026

1. Introduction

Brandenburg Data Consulting ("we", "our", or "us") operates the Attendly HR Management System. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and German Federal Data Protection Act (BDSG).

2. Data Controller

Brandenburg Data Consulting

Germany

info@brandenburgdataconsulting.de

3. Data We Collect

Personal Information

Name, email address, phone number
Employee ID, job title, department
Profile photo (optional)
Emergency contact information

Employment Data

Hire date, employment status
Attendance records (check-in/check-out times)
Leave requests and balances
Time tracking entries

Technical Data

IP address, browser type, device information
Login timestamps and session data
Cookies and usage analytics

4. Legal Basis for Processing

Contract Performance (Art. 6(1)(b) GDPR): Processing necessary for employment relationship management.

Legal Obligation (Art. 6(1)(c) GDPR): Compliance with labor laws (ArbZG), tax regulations, and social security requirements.

Legitimate Interest (Art. 6(1)(f) GDPR): Security, fraud prevention, and service improvement.

Consent (Art. 6(1)(a) GDPR): For optional features like analytics cookies.

5. Data Retention

Data Type	Retention Period
Employment records	Duration of employment + 10 years
Attendance & time tracking	2 years after creation
Leave records	5 years after creation
Audit logs	3 years
Session/login data	90 days

6. Your Rights (GDPR)

Right of Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your data

Right to Portability

Export your data in a portable format

Right to Restrict Processing

Limit how we use your data

Right to Object

Object to certain processing activities

To exercise any of these rights, please contact us at info@brandenburgdataconsulting.de or use the "My Data" section in your account settings.

7. Cookies

We use the following types of cookies:

Essential cookies: Required for authentication and security. Cannot be disabled.
Analytics cookies: Help us understand usage patterns. Optional, with your consent.
Preference cookies: Remember your settings. Optional.

You can manage your cookie preferences at any time through the cookie settings banner or browser settings.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption in transit (TLS/SSL) and at rest
Secure password hashing (bcrypt)
Role-based access control (RBAC)
Regular security audits and monitoring
Account lockout after failed login attempts
Comprehensive audit logging

9. International Data Transfers

Your data is processed and stored within the European Union. If any data transfer outside the EU/EEA is necessary, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) in compliance with GDPR Chapter V.

10. Contact & Complaints

For any questions about this Privacy Policy or to exercise your data protection rights, please contact:

Data Protection Officer

Brandenburg Data Consulting

info@brandenburgdataconsulting.de

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work, or place of the alleged infringement.

11. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.