Legal
Privacy policy
How ShiftRecovery processes personal data, on what basis, and the rights you have (GDPR).
Who we are
ShiftRecovery is a SaaS platform provided and operated by Oravita BV (www.oravita.nl). For this website and our own contact details, Oravita BV is the data controller under the GDPR.
For data processed inside a customer's platform, Oravita BV acts as a processor on behalf of the employer. ShiftRecovery works exclusively with aggregated team-level data and processes no medical data.
What data we process
Website usage: aggregated, cookieless statistics such as page views and Core Web Vitals, with no cross-site tracking.
Contact and enquiries: the details you enter yourself, such as name, work email, organisation and your message.
Platform data: risk indicators aggregated to team level only. Individual employees are not identifiable to the employer.
Why and on what basis
We process data to deliver and secure the service, to respond to your enquiry, and to improve our website.
The legal basis is the performance of a contract, our legitimate interest in a well-functioning service, or your consent for non-essential cookies.
We do not sell your data
Oravita BV never sells or rents personal data. We do not use your data for advertising profiles, cross-site tracking or resale to third parties.
Sub-processors and sharing
We share data only with processors that help us deliver the service, such as our hosting partner (Vercel) and our CRM (HubSpot). We sign data processing agreements with them and limit data to what is necessary.
We disclose data to authorities only where the law requires us to.
Retention
We keep data no longer than necessary for the purposes for which it was collected, or as long as the law requires.
Your rights
You have the right to access, rectification, erasure, restriction, objection and portability of your data. You can also lodge a complaint with the Dutch Data Protection Authority.
Security
Privacy is built in by design: team-level aggregation, data minimisation, and encryption of data in transit and at rest.
Contact
Questions about this policy or your data? Contact us via the contact page or at www.oravita.nl.