Legal
Data processing agreement
How personal data is processed between you (controller) and Oravita BV (processor).
Roles
When using ShiftRecovery, the employer is the data controller and Oravita BV (www.oravita.nl) acts as the processor. This summary accompanies the full data processing agreement we sign with customers.
Subject and duration
Oravita BV processes data solely to deliver the agreed service, for the term of the agreement and on your instructions.
Aggregation and data minimisation
The core of ShiftRecovery: data is aggregated into team-level risk before the employer sees it. Groups below the minimum size are suppressed so individuals cannot be identified.
Sub-processors and security
We engage sub-processors only under a data processing agreement and with appropriate technical and organisational measures, including encryption and access control.
Rights and return
We support you with data subject requests and with deletion or return of data after the agreement ends. We never sell data.
Contact
Questions about the data processing agreement? Contact us at www.oravita.nl.