JOBTIME PRIVACY POLICY
Last updated: 27 August 2026
1. DATA CONTROLLER
EUROPEAN DIGITAL STORES, S.L. («EDS»), with registered address at Calle José Echegaray, 8, Edificio Alvia, 3, Of. 7 y 8, 28232 Las Rozas de Madrid (Madrid), Spain, is the company that develops and provides the JobTime service (a web and mobile application for recording and managing working time, the «Application») and the website jobtimeapp.com.
Personal data is processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).
Contact for any privacy matter: info@jobtimeapp.com
2. ROLES: YOUR EMPLOYER AND EDS
JobTime is a tool that companies make available to their employees to record working time. Accordingly:
- When the Application is used within an employment relationship, the employer is the data controller of its employees’ work-related data (clock-ins, working time, absences, documents, location data), and EDS acts as data processor under Article 28 GDPR, following that company’s instructions.
- EDS is the data controller for its customers’ account data (sign-up, administration, billing and support) and for data of website visitors and anyone who contacts EDS.
3. WHAT DATA WE PROCESS
- Account and identification data: name and surname, identity document, email address, phone number, company, department and role.
- Working time records (clock-ins): clock-in, clock-out and break entries, with their date, time and origin (the device used to clock in).
- Working time management: schedules, calendars, holidays, absences, leave and hours worked.
- Employment documents: documents uploaded to the Application by the company or by the user (for example payslips, contracts or other employment documentation) and, where applicable, the associated electronic signature evidence.
- Location data: as described in section 4.
- Technical data: IP address, device and session identifiers and technical logs required for the security and operation of the service.
4. LOCATION DATA (INCLUDING BACKGROUND COLLECTION)
The Application may collect the location of the employee’s device as follows:
- At the moment of clocking in or out (start, end or break), to associate the entry with a location.
- During the working day, including while the app is in the background: only while the employee has an active clock-in or working session, the Application may record the device location periodically for working time registration purposes and to verify presence within the work areas defined by the employer. When the clock-in or working session ends, location collection stops.
- Always with the employee’s knowledge: location collection requires the employee to expressly grant the location permissions on their device (including, where applicable, the background location permission, which the operating system requests separately) and takes place within the employment relationship; the employer must inform its employees about this feature. The operating system also displays its standard location-usage indicators.
- The employee may revoke the location permissions at any time in the device settings, without prejudice to any working time registration obligations imposed by their employer.
Location data is processed on behalf of the employer (data controller) for the sole purposes of working time registration and presence verification within work areas, and is never used for advertising purposes or sold to third parties.
5. PURPOSES AND LEGAL BASES
- Provision of the service (account, clock-ins, working time, documents, location): performance of the contract with the customer (Art. 6(1)(b) GDPR) and, as regards employees’ data, processing on behalf of the employer, which relies on compliance with its legal working time registration obligations and on the management of the employment relationship.
- Enquiries and support: performance of the contract and legitimate interest in responding to those who contact us (Art. 6(1)(b) and 6(1)(f) GDPR).
- Service security (technical logs, fraud and abuse prevention): legitimate interest (Art. 6(1)(f) GDPR) and compliance with legal obligations.
- Service communications (operational notices about the Application): performance of the contract. Commercial communications, if any, are based on consent, which may be withdrawn at any time.
6. DATA RETENTION
Data is kept while the account is active and the contractual relationship with the customer remains in force. Working time records and employment documentation are kept for the periods required by applicable employment law. Once those periods expire, data is deleted or anonymised with appropriate security measures; until then it may be kept blocked for the sole purpose of meeting legal liabilities.
7. RECIPIENTS OF THE DATA
Personal data is never sold to third parties. Data is only accessed, as processors or sub-processors and under contracts that include the safeguards required by the GDPR, by:
- Infrastructure providers (hosting, communications and technical services required to operate the Application).
- Payment service providers, to manage customer payments.
Beyond these cases, data will only be disclosed to third parties where there is a legal obligation. If an international data transfer were ever necessary, it would be carried out with the safeguards provided for in Chapter V of the GDPR (adequacy decisions or standard contractual clauses).
8. YOUR RIGHTS
Anyone may exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw their consent at any time, by writing to info@jobtimeapp.com with adequate proof of identity.
Where data is processed on behalf of your employer (for example clock-ins or location data), EDS will forward the request to that company, which is the controller responsible for answering it, and will cooperate with it as necessary.
You also have the right to lodge a complaint with the supervisory authority (in Spain, the Spanish Data Protection Agency, www.aepd.es) if you consider that the processing does not comply with the applicable law.
9. COOKIES
The Application only uses cookies and equivalent technologies of a strictly necessary, technical nature: session management, security and basic preferences (such as language). No advertising or commercial tracking cookies are used. For the corporate website, please also see its cookie policy.
10. SECURITY
EDS applies appropriate technical and organisational measures in accordance with Articles 5 and 32 GDPR, including encryption of communications, role-based access control and activity logging, in order to guarantee the confidentiality, integrity and availability of the data.
11. MINORS
JobTime is a service intended for the workplace and is not directed at children under sixteen years of age.
12. CHANGES TO THIS POLICY
EDS may update this Privacy Policy due to legislative or case-law requirements or service needs. The current version will always be published on this page, showing its last update date.