Privacy Policy of Crossdomain
Solutions Pvt. Ltd
At Crossdomain Solutions Private Limited, also known as 'PeopleWorks,' and hereafter referred to as 'PeopleWorks,' 'we,' or 'the Company,' we recognize that you are entrusting us with sensitive information, and we believe it's your right to understand our practices concerning the data we may collect and utilize when you engage with our services or interact with us in any way. PeopleWorks is a cloud-based web platform designed to facilitate human resources management and payroll processing for organizations. This offering also includes PeopleWorks Mobile Apps. Additionally, PeopleWorks operates the websites peopleworks.in and peopleworks.ind.in, along with the associated web application. Users can be categorized as either an entity, such as an employer that has entered into an agreement with PeopleWorks or its partners providing PeopleWorks services ('Customer'), or as end users, such as employees of the Customer or individuals using the Website and Services ('end users'). Collectively, we refer to Customers and end users as 'users' or 'you.
This Privacy Policy outlines PeopleWorks' guidelines and protocols regarding the acquisition, utilization, accessibility, correction, and disclosure of your personal information through https://www.peopleworks.ind.in, and Mobile Apps. Please note that this privacy policy does not pertain to any personal information gathered by PeopleWorks on behalf of its clients or under their guidance. When you access the web application, you will encounter the privacy policy of the employer or prospective employer who is a client of PeopleWorks, which will elucidate how they manage your personal information and the rights associated with such data. In some instances, our clients may request us to modify, revise, or remove your personal information on their behalf, and we will undertake such actions in compliance with our contractual terms with our clients.
Your personal information encompasses data that is reasonably accessible to us, either on its own or when combined with other information, and is related to you (referred to as 'Personal Information'). This Privacy Policy also extends to any of your Personal Information that is furnished to us and is employed in conjunction with the promotion of our services, features, or content (referred to as the 'Services') to our clients, and/or the assistance we may provide you with in relation to the delivery of our Services and Mobile Apps.
This Privacy Policy does not apply to any third-party applications or software that can be accessed from the website or web application, the Services or the Mobile Apps, such as external applicant tracking systems, social media websites or partner websites (“Third Party Services”).
By using our Services, you acknowledge you have read and understood this privacy policy
Information we collect and how
we use it
Personal Information
We generally collect and process the following types of Personal Information:
Personal Information which is being gathered through the Service consists of any personal details provided consciously and voluntarily by our customer (Employer), end user or the Customer’s administrator or through your use of the PeopleWorks platform. This may include your name (first and last), nickname, birthdate, gender, nationality, job title, phone number(s), date you first started working for your employer, department you work in, employee ID/ national security number, address, country, city, postcode, family status, spouse’s and other dependents name, gender and birth date, your bank account details (bank name, account number, branch address), details regarding your salary and work (pay period, payment frequency, base salary, gross salary, overtime, bonuses, commissions, statutory payments such as sick, maternity/paternity leave, salary payment currency, credential regarding the right to work in your jurisdiction, tax code, emergency contact details (name, relation, phone number(s), email address(es), city, country, post code), termination date, termination reason, probation end date, status in the system and in the workplace, IP address and other unique identifiers, user’s information relating to tax declarations, information the customer chooses to collect and other information user may choose to provide to PeopleWorks and to its employee.
Location Information We access and monitor your location while using the Geo Location feature in our mobile application and also in the background [while not using the mobile app], but only based on explicit consent given by you to do so. The location access and monitoring is for capturing timekeeping, location tracking, marking attendance and to calculate distance travelled, using the Geo Location feature in our Mobile application. Your employer, through whom you are granted access to the Peopleworks mobile app, will have access to your Location details that are tracked using Geo location feature in the mobile application. we do not share these details with anyone else. You can however choose not to give your consent for capturing the location. In such a case, we do not access and monitor your location.
Attendance Logs In the event that our Customer (Employer) decides to employ the optional Attendance Management feature, we will store and process biometric device logs of users to calculate attendance and payroll in accordance with the Customer's configured rules. The data gathered includes employee or attendance IDs and timestamps of punch-ins and punch-outs
Contact Information When you indicate a desire to receive more details about the Services, the Site, or Mobile Apps, PeopleWorks may request you to furnish personal contact details, including your name, email address, and phone number. By doing so, you grant your agreement and consent, and you recognize that this information is employed to engage with you by responding to your inquiries, comments, and requests
Device Information While using the Mobile Apps, we may request access to your device's camera and photo storage. This permission enables you to capture and upload images, and this access will only be utilized based on your preferences. You have the option to revoke this access at the device level whenever you choose. We never access your device's camera and photo storage without your explicit consent.
Data Collected as a Service Provider As a service provider, PeopleWorks systems only gather information in accordance with the specific requirements of the Customer (employer). Our Master Subscription Agreement governs the provision, access, and utilization of the Services and Mobile Apps, including the handling of Personal Information and data submitted through Service accounts.
The control of the Platform and the associated client data is in the hands of the Customer, which could be your employer. If you have any inquiries regarding the settings of a particular Platform, the processing of Personal Information within the Platform, or its privacy practices, please reach out to the Customer administrator responsible for the Platform you are using.
Customer data is handled by PeopleWorks in accordance with the Customer's instructions, the relevant terms outlined in the Master Service Agreement, the functionality used by the Customer, and as mandated by applicable laws. PeopleWorks acts as a processor of Customer data, while the Customer assumes the role of the controller.
Sharing of your Information
Third Party Services
From time to time, you may have the option to access other Third-Party Services or websites through the Site, such as by clicking on links to these Third-Party Services from within the Site. It's important to note that we do not assume responsibility for the privacy policies and practices of these Third-Party Services. It is your responsibility to review and comprehend the privacy policies of these Third-Party Services.
Sharing Information with Our Service Providers
You consent and acknowledge that we may share your information with third parties who render services to us. These third parties are authorized to use your Personal Information solely for the purpose of providing these services to us. These services may encompass (i) email services for sending marketing communications, (ii) mapping services, (iii) customer service or support, and (iv) the provisioning of cloud computing infrastructure.
Sharing Information with Our Sub-Processors
We engage and contract with individuals and other entities that carry out specific tasks on our behalf and are under our supervision. These may include email service providers for sending emails on our behalf, mapping service providers, and customer support providers (referred to as our 'Sub-Processors'). To deliver our Services to you, we may need to share Personal Information with our Sub-Processors. In most cases, our Sub-Processors are not granted any rights to utilize Personal Information or other shared information beyond what is essential to assist us. The transfer of data to subsequent third parties is governed by onward transfer agreements established between PeopleWorks and each Sub-Processor. You can find a list of PeopleWorks Sub-Processors processing Personal Information of individuals
|
Name |
Purpose |
|
Freshdesk |
For email support and communication to customers related to support requests |
|
Google Cloud |
For rendering google maps in the browser to mark employee location associated with their attendance. |
|
Microsoft Azure |
For hosting PeopleWorks Software |
Information Disclosed Pursuant to Business Transfers
In certain situations, we may opt to purchase or sell assets, and in such transactions, user information is typically among the transferred business assets. Furthermore, if we were to be acquired, or if a significant portion of our assets were to be acquired, or if we were to go out of business or file for bankruptcy, user information would be one of the assets transferred or acquired by a third party. You acknowledge that such transfers could take place, and any entity acquiring us or our assets may continue to utilize your Personal Information in accordance with the terms specified in this Privacy Policy. In the event of any changes in the legal ownership or usage of your Personal Information, you will receive notification through email and/or a prominent notice on our website. You will also be informed about the choices you have concerning your Personal Information.
Information Disclosed for Our Protection and the Protection of Others
In specific situations, we may find it necessary to divulge Personal Information in response to legitimate requests from public authorities, which may include meeting national security or law enforcement requirements. We also retain the right to access, examine, retain, and reveal any information that we reasonably believe is essential to
(i) comply with applicable laws, regulations, legal proceedings, or governmental demands,
(ii) enforce this Privacy Policy, including the investigation of potential violations thereof,
(iii) identify, prevent, or resolve fraud, security, or technical issues,
(iv) respond to user support inquiries, or
(v) safeguard our rights, assets, or safety.
This may entail sharing information with other companies and organizations to protect against fraud and prevent spam/malware. We ensure that all third parties uphold the security of your Personal Information and handle it in compliance with relevant laws. We prohibit third-party service providers and Sub-Processors with whom we share your Personal Information from using it for their own purposes, and only permit them to process your Personal Information for specified purposes in accordance with our instructions. Unless we have obtained your consent to do otherwise, we will only share your Personal Information as outlined in this Privacy Policy. You will be informed when your Personal Information is shared with third parties, and you will have the ability to opt out of such sharing.
Data Retention
Customers have the option to seek information about data storage and retention through an 'Audit' by reaching out to us. PeopleWorks will diligently strive to address the Audit within a reasonable timeframe, taking into account relevant legal requirements and the safeguarding of PeopleWorks proprietary information. To maintain the confidentiality of PeopleWorks trade secrets, it may be necessary for the Customer's personnel to enter into non-disclosure agreements.
PeopleWorks will store data that it handles on behalf of its customers for the duration necessary to deliver the Service to its Customers and to meet its legal commitments, settle disputes, and enforce its contracts. Data within PeopleWorks is backed up for the purpose of system continuity, and each backup file may be retained for up to 3 days.
After a termination of services by a customer, an automated process will begin that permanently deletes the data in the next cycle. Once begun, this process cannot be reversed and data will be permanently deleted.
You agree, consent and acknowledge that PeopleWorks collects and retains metadata and statistical information concerning the use of the service which are not subject to the deletion procedures in this policy and may be retained by PeopleWorks for no more than required to conduct its business. Some data may be retained also on our third-party service providers’ servers in accordance with their retention policies. You will not be identifiable from this retained metadata or statistical information.
Customer may retain Personal Information and other Data about an end user which the Controller owns and the end user may have no access to. If you have any questions about the right of the Customer to retain and process your Personal Information you should raise this directly with the Customer. You hereby agree not to assert any claim against PeopleWorks this regard and waive any rights regarding such Data and Personal Information including the right to view and control such Data and Information.
Where do we store your Data?
The Data we collect is hosted on the Azure Cloud in Central India which provides advanced security features and is compliant with ISO 27001 and other privacy and security standards. PeopleWorks headquarters is based in India from where we provide customer support services, but no customer data is stored, except for customer call data.
Therefore, in providing your Personal Information to PeopleWorks, your Personal Information will be sent to the Central and South India,
Security and storage of information
We take great care in implementing, enforcing and maintaining the security of the Service, and our users’ Personal Information. PeopleWorks implements, enforces and maintains security policies to prevent the unauthorized or accidental access to or destruction, loss, modification, use or disclosure of personal data and monitor compliance of such policies on an ongoing basis. PeopleWorks is certified under the ISO 27001:2013.
PeopleWorks limits access to personal data to those of its personnel who:
(i) require access in order for PeopleWorks to fulfil its obligations under this Privacy Policy and agreements executed with PeopleWorks and
(ii) have been appropriately and periodically trained on the requirements applicable to the processing, care and handling of the Personal Information
(iii) are under confidentiality obligations as required under applicable law. PeopleWorks takes steps to ensure that its staff who have access to personal data are honest, reliable, competent and periodically properly trained.
PeopleWorks shall act in accordance with its policies to promptly notify Customer in the event that any personal data processed by PeopleWorks on behalf of Customer is lost, stolen, or where there has been any unauthorized access to it subject to applicable law and instructions from any agency or authority. Furthermore, PeopleWorks undertakes to co-operate with Customer in investigating and remedying any such security breach. In any security breach involves Personal Information, PeopleWorks shall promptly take remedial measures, including without limitation, reasonable measures to restore the security of the Personal Information and limit unauthorized or illegal dissemination of the Personal Information or any part thereof.
The Service may, from time to time, contain links to external sites. We are not responsible for the operation, privacy policies or the content of such sites.
Your Rights associated with
your information
You may have the right under applicable local law to request access, change or delete certain personal data that we hold in relation to you, or to object to or restrict the processing of certain personal information, receive personal information in a usable electronic format and transmit it to a third party (also known as the right of data portability), and lodge a complaint with a local data protection authority.
We will contact you if we need additional information from you in order to honour your requests.
If you want to update the information that we hold about you or if you no longer desire our Service, you may correct, delete inaccuracies, or modify the information we hold by sending an inquiry to our info@peopleworks.in Given the nature of the services that we provide we may have shared your personal information with employers and other third parties. You may need to make requests to such third parties in accordance with the instructions in their privacy policies if you require them to update the records that they hold about you. If you want to discuss or exercise any of your rights under this policy, please contact our info@peopleworks.in.
Changes to the privacy policy
The terms of this Privacy Policy will govern the use of the Service and any information collected in connection therewith, however, PeopleWorks may amend or update this Privacy Policy from time to time. The most current version of this Privacy Policy will always be posted at: https://www.peopledomain.co.in/privacy_policy.html Unless otherwise agreed with the Customer. Otherwise, all other changes to this Privacy Policy are effective as of the stated “Last Revised” date and your continued use of Services will constitute your active acceptance of, and agreement to be bound by, the changes to the Privacy Policy.
If you have any questions (or comments) concerning this Privacy Policy, you are welcome to send us an email or otherwise contact us at info@peopleworks.in and we will make an effort to reply within a reasonable timeframe, and not over 30 business days.