Privacy Statement for Oasys Application
This privacy statement serves to clarify what data Oasys (“we”) processes of its users (“you” “data subject”), its intended use, and the parties with whom it may be shared. Additionally, it outlines your rights pertaining to your data and provides contact details for any further inquiries or concerns.
This privacy statement uses the terms "personal data" interchangeably to refer to any data related to you. Similarly, the actions of handling, collecting, protecting, and storing this data are collectively referred to as "processing."
Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.
How Oasys use your Personal Data
Oasys is authorised by its Clients (referred hereafter as your “Employer” or our “Client”) to collect or otherwise have access to your personal data to manage various aspects related to employee engagement and HR functions. Specifically, it includes tracking employees' annual leave entitlements, facilitating the application and approval process for leave requests, maintaining accurate records of leave balances, and ensuring efficient scheduling within teams.
Categories of Personal Data that Oasys processes as a data processor
· Employee Data: name, email address, position, and phone number.
· Emergency Contact Data: Names, addresses, and phone numbers of emergency contacts.
· Leave Applications: Start dates, end dates, and types of leave requested by employees.
Sensitive / Special Categories of Personal Data
Oasys adheres to a stringent policy of refraining from collecting any sensitive data. The platform's architecture and features are engineered to operate effectively without necessitating the collection of sensitive data.
Lawful basis of processing your Personal Data
The lawful basis for processing personal data is determined by each Client that utilises the Oasys application. As data controllers, the Clients are responsible for ensuring that their processing activities comply with relevant data protection laws and regulations. Oasys processes the data as a data processor on behalf of its Clients as described in this notice.
As users of the Oasys application, you have rights being:
1) the right to access their personal data held by the Client the right to rectify any inaccuracies, the right to request the erasure of their data under certain circumstances (commonly known as the "right to be forgotten"),
2) the right to restrict processing of their data,
3) the right to data portability, and
4) the right to object to the processing of their personal data in certain situations, such as for direct marketing purposes.
You may exercise your rights by either (a) directly making an enquiry to your Employer that uses Oasys, OR (b) sending an email to Oasys Oasyssupport@DELOITTE.com in which case we will forward the request to your Employer that is responsible for responding to such enquiries.
Additionally, individuals have the right to lodge a complaint with the relevant data protection authority if they believe their privacy rights have been infringed upon.
Storage of Personal Data
Depending on the instructions of our Clients, employee data are stored on our Client’s server (hosted on-premise) OR on our Client’s instance with the Client’s cloud service provider, in accordance with the Client’s implemented security safeguards and appropriate technical and organisational measures.
Sharing and Disclosure
Oasys applications does not share or disclose your personal data with third parties.
Access to Personal Data
The developer of Oasys applications does not have direct access to personal data. Instead, each Client utilising the software acts as the controller, overseeing and managing the personal data of its employees.
Access, is only permitted by the Client, is only provided on a restricted basis for potential problem solving and patching purposes.
Retention and Storage of Personal Data
Oasys itself does not store any personal data. Instead, the data is stored within the infrastructure and systems of the Client that utilises the Oasys application.
The retention and storage of personal data are determined by the Client utilising the Oasys application.
Contact us:
At Oasys, we prioritise the protection of your personal data. If you have any questions or concerns regarding the handling of your data, please contact us at Oasyssupport@DELOITTE.com. Thank you for entrusting us with your data.
[15/05/2024]