Privacy Policy
How Digital Log SRL collects, uses and protects personal data across this website and the WorkForce platform, and the rights you have over your data under GDPR.
Last updated 16 September 2026
Who we are
Digital Log SRL, an Italian company, operates this website and the WorkForce platform. For any privacy question or request, use our Contact page — we aim to respond within 30 days, in line with GDPR.
Scope of this policy
This policy covers visitors to this website, demo and contact-form submissions, and organizations (tenants) using WorkForce and their employees. Each tenant is the data controller for the HR and attendance data it enters about its own employees; Digital Log SRL acts as processor for that data, and as controller for account and website data. The service is not directed at children.
Data we collect
Account details (name, work email, role); HR and organizational data your employer enters about you (schedule, leave, timesheets); attendance events, including server-authoritative timestamps and, where enabled, GPS/QR/NFC punch data; device and diagnostic information from the mobile apps; and standard web server logs and contact-form submissions from this site.
How we use your data
To provide and secure the service, authenticate users, enforce role-based permissions, maintain the audit trail your organization relies on, and respond to support requests — and, only with consent, to send product updates. We never sell personal data.
Legal basis (GDPR)
We process employee and account data to perform the contract between Digital Log SRL and your employer (Art. 6(1)(b)); for security, fraud prevention and product improvement under legitimate interest (Art. 6(1)(f)); and for statutory HR/attendance recordkeeping under legal obligation (Art. 6(1)(c)) where applicable.
Sharing & sub-processors
We share data only with infrastructure and hosting providers bound by data processing agreements, and only to the extent needed to run the service. We do not sell or rent personal data, and disclose it beyond our sub-processors only when required by law.
Data retention
Tenant data is retained for the life of your organization's subscription and for a limited period afterward to allow recovery, after which it is deleted or anonymized — except where a longer retention period is required by law, such as statutory attendance or payroll records.
Your rights
Under GDPR you may request access to, correction of, or erasure of your personal data, object to or restrict its processing, and ask for a copy in a portable format. Where your employer is the controller for your HR data, some requests may need to go through them. You may also lodge a complaint with your national data protection authority (in Italy, the Garante per la protezione dei dati personali).
Security
The platform is built around server-authoritative timestamps, an append-only audit trail, encryption in transit, and role-based access enforced on every request — not just in the interface.
Cookies, changes & contact
This site uses only cookies strictly necessary for it to function (such as remembering your language and theme) and, where enabled, privacy-respecting analytics — no third-party advertising trackers. We'll update this page's date whenever this policy changes and notify tenant administrators of material changes. For any question, reach us through our Contact page.