Roles
For workforce attendance, scan-in/out, employee, contractor, and operational records, the client organisation is usually the controller and GYAMDIAS LTD acts as processor unless agreed otherwise.
For billing, account administration, website analytics, security, and direct customer relationship management, GYAMDIAS LTD may act as controller.
Processing purpose
Processing is carried out to provide the subscription service, workforce attendance system, scan logs, reporting, support, hosting, security, package control, and related account administration.
Processor obligations
We will process client personal data according to documented instructions, apply appropriate security measures, support lawful requests where reasonably possible, and restrict access to authorised personnel and approved service providers.
Sub-processors
We may use hosting, payment, email, support, analytics, security, backup, and infrastructure providers to deliver the service.
Security
Security measures may include access controls, account permissions, encrypted transport, audit records, backups, monitoring, and operational controls appropriate to the service.
Assistance and deletion
At the end of the service, client data may be returned, exported, deleted, anonymised, or retained only where legally required or contractually agreed.