Privacy Policy

1. Data controller

• Identity: HappyAndroids (happyandroids.com)
• Email: info@openjornada.es

2. Data we collect

Depending on how you interact with us, we may collect the following data:

2.1. Contact form

• Name
• Email address
• Company name
• Approximate number of employees
• Message or inquiry

2.2. OpenJornada Cloud Service

For cloud service clients, we act as data processors. The data processed includes:

• Administrator data: name, email, encrypted password
• Employee data: name, email, time records
• Clock-in/clock-out and break records
• Technical metadata (IP, browser, device)

2.3. Browsing data

• IP address
• Browser and device type
• Pages visited and time spent
• Cookies (see Cookie Policy)

3. Purpose of processing

4. Retention period

• Contact form: Data will be retained as long as necessary to respond to your inquiry and, subsequently, during the statute of limitations for any potential liabilities.
• Client data: During the term of the contractual relationship and subsequently during the legally required retention periods.
• Time records: Minimum 4 years, in accordance with Article 34.9 of the Workers' Statute (Estatuto de los Trabajadores).
• Cookies: As indicated in the Cookie Policy.

5. Data recipients

Your data may be disclosed to:

• Service providers: Companies that provide us with services necessary for our activities (hosting, email, etc.), with whom we have signed data processing agreements.
• Public administrations: Where a legal obligation exists (Tax Agency / Agencia Tributaria, Labor Inspection / Inspeccion de Trabajo, etc.).
• We do not sell your data: We never sell or rent personal data to third parties.

International transfers

Some of our providers may be located outside the European Economic Area. In these cases, we ensure that adequate safeguards exist (Standard Contractual Clauses, adequacy decisions, etc.) in accordance with the GDPR.

6. Data subject rights

You can exercise the following rights by sending an email to info@openjornada.es:

• Access: Know what personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request the deletion of your data when they are no longer necessary.
• Objection: Object to the processing of your data under certain circumstances.
• Restriction: Request that processing be restricted in certain cases.
• Portability: Receive your data in a structured, commonly used format.

You also have the right to file a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos / AEPD).

7. OpenJornada as data processor

When a company contracts the OpenJornada Cloud service to manage the time records of its employees:

• The client company is the data controller for the data of its employees.
• OpenJornada acts as the data processor, processing data only in accordance with the client company's instructions.
• A data processing agreement is formalized in accordance with Article 28 of the GDPR.

Employees who wish to exercise their rights over time record data should contact their employer (data controller).

8. Security measures

We implement technical and organizational measures to protect your data:

• Data encryption in transit (HTTPS/TLS)
• Password encryption with secure algorithms
• Periodic backups
• Role-based access control
• Monitoring and intrusion detection
• Regular security updates

9. Amendments

We reserve the right to modify this privacy policy to adapt it to legislative developments or changes in our services. Modifications will take effect from their publication on this page. We recommend reviewing this policy periodically.