Data Processing Agreement
Our data processing agreement is published in German only, and the German text is the binding one. What follows is a summary in English, not a legal translation.
Read the Auftragsverarbeitungs-Vertrag →
What the agreement covers
Fourteen sections: subject matter and duration, processing on documented instructions, staff confidentiality, security measures, subprocessors, help with requests from data subjects, breach notification, help with your own compliance duties, international transfers, what happens when the agreement ends, audits and inspections, liability, governing law, and how to reach us.
The short version
You remain the controller; we process personal data on your documented instruction for as long as your subscription runs. The categories are identification data, employment data such as schedules, absence balances and attendance, and whatever else your team enters. Personal data is stored in Switzerland and the European Union; where a subprocessor occasionally processes data elsewhere, we rely on the standard contractual clauses recognised by the Swiss FDPIC and the European Commission. Once you delete a company or an account, we delete or anonymise the data within three days and confirm it in writing on request. You can audit our compliance once a year with thirty days' notice.
Questions
Write to support@shiftavo.com.
Where to go next
- Privacy Policy — What data Shiftavo collects, why, who processes it and what rights you hold under the Swiss DSG and the GDPR — for account holders and their employees.
- Terms of Service — The terms governing your use of Shiftavo: the service, accounts, pricing and billing, cancellation, liability and Swiss governing law — for account holders.