Your Data Rights and Account Deletion

Plain-language summary

You can view and edit several types of information directly in the app, export time records and delete your account. To exercise other GDPR rights, contact support@fejlgoblin.ovh.

Your rights

Under GDPR, you may have rights to:

• access your personal data;
• correct inaccurate data;
• deletion in certain situations;
• restriction of processing in certain situations;
• data portability where conditions are met;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• complain to Datatilsynet.

These rights are not always absolute. Security, audit, backup or legal requirements may mean that something is not deleted immediately or in full form.

View and correct data

You can normally view and correct:

• profile data;
• preferences;
• job and pay settings;
• tax/municipality settings;
• certain notes, categories and manual time records.

Authoritative clock events should not be changed arbitrarily because their value is historical record-keeping. If something is wrong, correction, notes, review flags or an admin/support procedure may be needed.

Export

At public launch, the app must support ordinary time-data export and full personal-data export.

Ordinary time-data exports must not include GPS/IP by default. GPS/IP may be included only if you actively choose it. If you choose to include GPS and/or IP in an export, the app must require password verification before creating the export.

Export choices:

• include GPS/location coordinates;
• include IP/client metadata;
• include both GPS and IP data.

You are responsible for storing and sharing exports securely.

Account deletion

You must be able to delete your account yourself in the app, and you must also be able to ask support for deletion help.

Account deletion has a 7-day grace period. During the grace period, deletion may be handled/reversed according to the implemented procedure. After the grace period, normal user data is hard-deleted from the active database, or anonymised where necessary.

Account deletion normally deletes:

• profile data;
• email address;
• password hash;
• sessions;
• time records;
• breaks;
• manual corrections;
• pay profiles;
• tax settings;
• agreement/job settings;
• calculation snapshots;
• exact GPS coordinates;
• exact IP/client metadata;
• stored export files, if the app stores any;
• other normal user data.

Audit/security logs may in specific cases keep minimal anonymised references, especially if an admin action or security event needs complete logging. Ordinary personal data must be deleted where it is no longer necessary.

Export any data you want to keep before deletion. After the 7-day grace period, account deletion normally cannot be undone.

GPS/IP deletion without account deletion

You must be able to delete exact GPS coordinates and exact IP/client metadata without deleting the time record itself or the account.

When GPS is deleted, the app must delete the exact coordinates. The app may keep only a minimal non-identifying status, for example that GPS data was deleted.

When IP is deleted, the exact IP address must be deleted completely unless a minimal anonymised security/audit reference is necessary.

This feature must be implemented and tested before the public documents may be used as a production promise.

Backups

Deleted or anonymised data may remain in encrypted backups for up to 12 months. If a backup is restored, deletion and anonymisation actions must be replayed so deleted data does not return to active operation.

Response time

A rights request should normally be answered within one month. If the request is complex, the deadline may be extended in certain cases, but you must be informed.

Contact

Rights requests: support@fejlgoblin.ovh Support: support@fejlgoblin.ovh