Legal

Privacy policy

How ShiftRecovery processes personal data, on what basis, and the rights you have (GDPR).

Version 1.0Last updated 9 June 2026Operated by Oravita BV www.oravita.nl

Who we are

ShiftRecovery is a SaaS platform provided and operated by Oravita BV (www.oravita.nl). For this website and our own contact details, Oravita BV is the data controller under the GDPR.

For data processed inside a customer's platform, Oravita BV acts as a processor on behalf of the employer. ShiftRecovery works exclusively with aggregated team-level data and processes no medical data.

What data we process

Website usage: aggregated, cookieless statistics such as page views and Core Web Vitals, with no cross-site tracking.

Contact and enquiries: the details you enter yourself, such as name, work email, organisation and your message.

Platform data: risk indicators aggregated to team level only. Individual employees are not identifiable to the employer.

Why and on what basis

We process data to deliver and secure the service, to respond to your enquiry, and to improve our website.

The legal basis is the performance of a contract, our legitimate interest in a well-functioning service, or your consent for non-essential cookies.

We do not sell your data

Oravita BV never sells or rents personal data. We do not use your data for advertising profiles, cross-site tracking or resale to third parties.

Sub-processors and sharing

We share data only with processors that help us deliver the service, such as our hosting partner (Vercel) and our CRM (HubSpot). We sign data processing agreements with them and limit data to what is necessary.

We disclose data to authorities only where the law requires us to.

Retention

We keep data no longer than necessary for the purposes for which it was collected, or as long as the law requires.

Your rights

You have the right to access, rectification, erasure, restriction, objection and portability of your data. You can also lodge a complaint with the Dutch Data Protection Authority.

Security

Privacy is built in by design: team-level aggregation, data minimisation, and encryption of data in transit and at rest.

Contact

Questions about this policy or your data? Contact us via the contact page or at www.oravita.nl.