Privacy Policy

GDPR Compliance (European Union)

Under the General Data Protection Regulation (GDPR), we ensure the following rights and protections for EU residents:

Your Rights Under GDPR

• Right to Information: You have the right to know what personal data we collect and how we use it
• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limitation of data processing
• Right to Data Portability: You can request transfer of your data
• Right to Object: You can object to certain types of data processing

Legal Basis for Processing

• Legitimate Interest: To provide our attendance calculation service
• Consent: For marketing communications (where applicable)
• Legal Obligation: To comply with applicable laws

Data Protection Measures

• Data minimization - we only collect necessary data
• Purpose limitation - data is used only for stated purposes
• Storage limitation - data is retained only as long as necessary
• Security measures including encryption and access controls

CCPA Compliance (California)

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

Your Rights Under CCPA

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt-out of the sale of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Categories of Personal Information

• Identifiers (email, IP address)
• Internet or network activity information
• Geolocation data (general location based on IP)

Do Not Sell My Personal Information

We do not sell personal information to third parties. We may share information with service providers for business purposes only.

LGPD Compliance (Brazil)

Under Brazil's Lei Geral de Proteção de Dados (LGPD), we ensure the following protections for Brazilian residents:

Your Rights Under LGPD

• Confirmation and Access: Right to confirm processing and access your data
• Correction: Right to correct incomplete or inaccurate data
• Anonymization or Deletion: Right to anonymize or delete unnecessary data
• Portability: Right to data portability to another provider
• Information: Right to information about data sharing
• Revocation of Consent: Right to revoke consent at any time

Legal Basis for Processing

• Consent of the data subject
• Legitimate interest of the controller
• Execution of contract or preliminary procedures
• Compliance with legal obligation

Data Protection Principles

• Purpose - processing for legitimate, specific purposes
• Adequacy - processing compatible with stated purposes
• Necessity - limited to minimum necessary
• Free access - guarantee of information to data subjects
• Data quality - accuracy and relevance
• Transparency - clear information about processing
• Security - technical and administrative measures

PIPEDA Compliance (Canada)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we adhere to the following principles:

Fair Information Principles

• Accountability: We are responsible for personal information under our control
• Identifying Purposes: We identify purposes for collection before or at time of collection
• Consent: We obtain knowledge and consent for collection, use, or disclosure
• Limiting Collection: We limit collection to what is necessary for identified purposes
• Limiting Use, Disclosure, and Retention: We use information only for identified purposes
• Accuracy: We keep personal information accurate, complete, and up-to-date
• Safeguards: We protect personal information with appropriate security measures
• Openness: We make information about our policies readily available
• Individual Access: We provide access to personal information upon request
• Challenging Compliance: We address complaints about compliance

Breach Notification

In case of a privacy breach that poses a real risk of significant harm, we will:

• Notify the Privacy Commissioner of Canada
• Notify affected individuals
• Keep records of all breaches

APPI Compliance (Japan)

Under Japan's Act on the Protection of Personal Information (APPI), we ensure the following protections:

Basic Principles

• Proper Acquisition: Personal information is acquired through proper means
• Purpose Specification: Purposes of use are specified as clearly as possible
• Limitation of Use: Personal information is used within the scope of specified purposes
• Proper Management: Personal information is managed properly and safely
• Transparency: Handling of personal information is conducted transparently

Individual Rights

• Right to Disclosure: Right to request disclosure of personal information
• Right to Correction: Right to request correction of personal information
• Right to Suspension: Right to request suspension of use or deletion
• Right to Notification: Right to be notified of third-party provision

Cross-Border Data Transfer

When transferring personal data outside Japan, we ensure:

• Adequate protection measures are in place
• Consent is obtained where required
• Appropriate safeguards are implemented

Sensitive Personal Information

We do not collect sensitive personal information such as:

• Race, creed, or social status
• Medical history or health information
• Criminal records

Data Protection Officer

For privacy-related inquiries, you can contact our Data Protection Officer at:

Email: privacy@attendancepro.online

How to Exercise Your Rights

To exercise any of your privacy rights under applicable laws, please:

• Send an email to contact@attendancepro.online
• Include your full name and contact information
• Specify which right you wish to exercise
• Provide any additional information that may help us process your request

We will respond to your request within the timeframes required by applicable law (typically 30 days).

Complaints and Supervisory Authorities

If you believe we have not adequately addressed your privacy concerns, you may file a complaint with the relevant supervisory authority in your jurisdiction:

• EU: Your local Data Protection Authority
• California: California Attorney General's Office
• Brazil: Autoridade Nacional de Proteção de Dados (ANPD)
• Canada: Office of the Privacy Commissioner of Canada
• Japan: Personal Information Protection Commission