Privacy Policy — WorkLogTracker
Developed and operated by RMTracker S.L.
1. Who processes your data and under what conditions
WorkLogTracker it is a tool that companies use to fulfill their obligation to record the working hours of their staff. This makes it necessary to... two treatments different with different responsibilities, and it is advisable to distinguish them because this determines who you should contact in order to exercise your rights.
| Data | Responsible | Paper of RMTracker S.L. |
|---|---|---|
| Transfers, work assignments, schedules, incidents, and employee data | The employer company that hires the service | Responsible for processing (Article 28 of GDPR) |
| Account of the person hiring, invoicing and support | RMTracker S.L. | Data controller |
If you are a hard-working person and want to exercise your rights regarding your employment contracts or your work shares, your employer is the one you should contact. RMTracker S.L. it will provide the assistance required by GDPR to a data controller.
| Title | RMTracker S.L. |
|---|---|
| Trademark | RMTracker Solutions |
| Tax Identification Number / National Identity Number | B88803085 |
| Legal form | Limited Liability Company |
| Registered address | Avenida de Andalucía 36, Local 2, 29793 Torrox (Málaga), España |
| Registration details | registered in Registro Mercantil de Málaga, section 8, sheet MA-199810, registration 1st, of July 9, 2026 (BORME no. 134, of July 15, 2026) |
| Activity (CNAE) | 6210 — IT services |
| info@rmtrackersolutions.com · legal@rmtrackersolutions.com | |
| Phone | +34 601 635 964 |
The complete identification data are also in the Legal notice of RMTracker Solutions.
2. What data is processed
| Category | Specific data | For what purpose |
|---|---|---|
| Identification | Name and surname, email, phone if provided, preferred language | Create the account and allow access |
| Work relationship | Employee code, position, role in the company, workplace, assigned schedule | Organize registration and permissions within the company |
| Work identifiers | NIF or NIE and social security affiliation number | Issue the official time sheet. Only the person themselves and those who prepare payroll or attend an inspection can see it |
| Working hours | Date and time of entry, breaks and departure, associated center, observations | Comply with Article 34.9 of the Workers' Statute |
| Location | Coordinates and precision at the specific moment of registration | Check that the registration was made at the assigned center |
| Work parts | Description of tasks, materials, expenses, mileage, photographs and customer signature with their name and document | Document the work performed and its delivery |
| Incidents and corrections | Automatic notifications, correction requests and their resolution | Correct errors in the record leaving a record of who and when |
| Traceability | Record relevant actions on the data | Demonstrate the integrity of the record |
| Billing | Subscription and payment data, managed by the gateway | Charge for the service and issue invoice |
Regarding location, clearly
The application does not perform continuous tracking. The location is only queried when the person clicks to check in, and only to verify the distance to the workplace. Between one check-in and the next, the application does not query the device's position. If location permission is denied, the check-in is recorded equally, without coordinates.
Data of special categories
WorkLogTracker is not designed to process health, biometric or any other category of Article 9 of the GDPR. Fingerprint or facial recognition is not used for check-in. Free notes from a check-in or report should not be used to record information about anyone's health.
3. Legal basis
| Treatment | Legal basis |
|---|---|
| Record of working hours and its conservation | Employer's legal obligation (Article 6.1.c GDPR, in relation to Article 34.9 of the Workers Statute and Royal Decree-Law 8/2019) |
| Work parts, schedules and organization | Execution of the employment contract and employer's legitimate interest in organizing the activity (Article 6.1.b and 6.1.f GDPR) |
| Location at the time of registration | Employer's legitimate interest in verifying the place of performance, limited to the time of registration and with prior notice to employees (Article 6.1.f GDPR and Article 90) LOPDGDD) |
| Account, subscription and support | Execution of the contract with the client (Article 6.1.b GDPR) |
| Billing and accounting obligations | Legal obligation (Article 6.1.c GDPR) |
The article 90 of the LOPDGDD requires informing employees and their representatives, in an express and prior manner, about the use of geolocation systems. That information must be given to the employer, who decides to implement the system.
4. How long are they kept
- Record of working hours: four years, the period imposed by labor regulations for having it available to employees, their representatives and the Labor Inspectorate.
- Work parts and incidents: while the relationship with the client lasts and after during the periods of prescription of actions that may arise.
- Billing data: during the periods required by mercantile and tax regulations.
- Account: while the subscription is active. Upon termination, the data is deleted or blocked unless those that must be retained due to legal obligations remain.
Entries cannot be deleted or altered from the application: an error is corrected by adding an approved correction, which is recorded along with the original entry. This is deliberate, because a record that could be rewritten would not serve as evidence.
Who else intervenes
To provide the service, the following providers are used, who act as principal or sub-principal and with whom the contract required by Article 28 of the GDPR exists:
| Provider | For what | Location of processing |
|---|---|---|
| Supabase | Database hosting, authentication and file storage | European Union (Ireland region) |
| Stripe Payments Europe, Ltd. | Subscription payment and receipt issuance | European Union, with possible international transfers covered by the standard clauses of their data processing agreement |
The card details are entered directly into the payment gateway and do not reach at any time the servers of WorkLogTracker.
Outside these cases, data is not disclosed to third parties unless there is a legal obligation or a requirement from the competent authority.
6. Automated decisions
The application generates notifications automatically: for example, when an attendance is made outside the assigned center's range or when a shift remains open for too long. These notifications do not produce any effect on their own: they are a signal for someone to review and decide. Automated decisions with legal or similarly significant effects, as defined in Article 22 of the GDPR, are not taken.
7. Your rights
You can exercise the rights of access, rectification, erasure, limitation of processing, portability and opposition, as well as withdraw consent when the processing is based on it.
- If you are an employee and it concerns your attendance records, parts or schedules, contact your company, which is responsible.
- If you are a customer and it concerns your account or your invoicing, write to legal@rmtrackersolutions.com.
Identity verification may be required. The request will be processed within one month, extendable according to Article 12 of the GDPR.
If you believe that your data has not been processed correctly, you can file a complaint with the Agencia Española de Protección de Datos (C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).
8. Security
Access to data is limited by company and role through row-level security in the database: a person only has access to the data of the company they belong to, and within it only those that their role allows. Passwords are stored encrypted by the authentication provider, communications travel encrypted and relevant actions are recorded.
Workplace identifiers, as personal data whose knowledge is not required by the rest of the staff, are stored separately from the rest of the record and are only accessible to the person themselves and to those who manage payroll or attend an inspection.
9. Minors
The service is aimed at companies and their employees. It is not intended for individuals under the age of sixteen.
10. Changes to this policy
Any changes will be published on this page with their effective date. If the change is significant, customers will be notified through the contact methods listed in their account.
legal@rmtrackersolutions.com.