Privacy policy

Who we are

DBY Portal is the internal human resources portal of DBY Portal. It is used only by the company's employees, with accounts created by the HR department. There is no public sign-up.

The data controller is DBY Portal, as the employer. For any question about your data, write to hr@dbytechnologies.ro.

What data the portal processes

• account data: name, work email, phone number, department, job title, employee number;
• employment data you or HR enter: time-off requests and balances, shift schedules, requests, tickets, suggestions, expense claims, training and the documents you upload;
• security data: sign-in history and the two-step verification code sent by email.

They are processed to manage the employment relationship – time off, schedules, approvals, internal communication – and to meet the employer's legal obligations.

What the mobile app adds

The app opens the same portal, with the same account. In addition to the web portal, it processes only:

• a notification token given by the phone, if you turn on notifications. It is used only to deliver them and is deleted when you turn notifications off, sign out, or uninstall the app;
• the camera and photo library, only when you choose to attach a photo or document to a request. The app does not access them otherwise.

The app does not collect location, contacts or other data from the phone, contains no advertising and no third-party analytics or tracking, and does not share data with advertisers or data brokers.

Notifications

Notifications are delivered through the phone's service: Google Firebase Cloud Messaging on Android and Apple Push Notification service on iPhone. They contain only a short title, a line of text and the link to the page in the portal – never salaries, personal identification numbers or reasons for time off. Details are shown only after you open the link, signed in.

What stays on the phone

The app does not store portal pages on the phone. Files you open from the app (for example a PDF) are shown and then deleted on iPhone; on Android they are saved to the phone's Downloads folder, like any downloaded file. The sign-in session is not included in the phone's cloud backups.

Who else sees the data

Data stays on the company's server and is visible only to the people who need it for their role (for example your manager for time-off approval, or HR). It is not sold and not shared for marketing. The notification providers above receive only the content described under "Notifications".

Security

All traffic between the app and the server is encrypted (HTTPS). Access is protected by password and, where enabled, two-step verification.

Retention and your rights

Data is kept for as long as the employment relationship lasts and afterwards for the periods required by law. You can download the data the portal holds about you from My Profile → My data, in one file.

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing and to data portability. Because accounts are created and closed by the employer, requests to delete the account or data are sent to HR, at hr@dbytechnologies.ro. You may also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro).