Shift Planner
CZ

GDPR

Privacy Policy

How Shift Planner handles the personal data of users and recorded employees under the GDPR. Last updated: October 2026.

1. Data controller

  • The data controller is the operator of the application: Matyáš Hraběta, Company ID 30026776 (the "Controller").
  • Contact: e-mail matyas.hrabeta.mail@gmail.com.
  • Operational and technical support is provided by the author, Jiří Karmazin, e-mail karmazinj@centrum.cz. Please send data-protection questions to this contact.
  • The Controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.

2. Data we process

  • Registration data: e-mail address, first and last name.
  • Operational data: employee data entered by the user (names, contract type, shift preferences), schedules, absences and site settings.
  • Technical data: data needed for authentication and account security (password hash, login records).

3. Purpose and legal basis

  • Providing the Shift Planner service (performance of a contract).
  • Account security and protection against misuse (legitimate interest).
  • Answering questions sent via the contact form (legitimate interest / pre-contractual steps).

4. Retention

  • Personal data is kept for as long as the user account exists.
  • After the account is deleted, all user data (including schedules and employee records) is erased from the database without undue delay.

5. Recipients and security

  • Data is stored in a secure cloud database with per-account access control; other users of the Service cannot access it.
  • Data is transferred encrypted (HTTPS). Access is protected by authentication and authorisation rules.
  • Personal data is not passed to third parties for marketing or otherwise monetised.

6. Your rights

  • Right of access to and rectification of personal data.
  • Right to erasure ("right to be forgotten") – the account can be deleted at any time in My account.
  • Right to data portability – schedules and data can be exported (CSV, PDF).
  • Right to restriction of processing and right to object.
  • Right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz) or your local supervisory authority.

7. Consent

  • By registering and ticking the consent box, you consent to the processing of personal data to the extent and for the purposes above.
  • Consent can be withdrawn at any time by deleting the account; this does not affect the lawfulness of processing before withdrawal.

For data-protection questions contact matyas.hrabeta.mail@gmail.com, support at karmazinj@centrum.cz or use the contact form.