Privacy policy

ZimaWork (the «provider»), with registered address at Calle Quintela 2 Bajo Local C, 36210 Vigo (Pontevedra), Spain, and tax ID B19435015, is the controller of the personal data of customer companies and of the users who access the dashboard.

For the data that customer companies collect from their employees through the agent, ZimaWork acts as processor and the customer company as controller. That processing is governed by the Data Processing Agreement.

From customer companies and their administrators: name, email, billing data and dashboard usage data.

From monitored employees, on behalf of the customer company: screenshots, mouse activity, idle periods, open applications and websites, start and end of working day, and the analysis the AI generates from the screenshots.

ZimaWork does not collect keystrokes or the content of employee files beyond what is visible on screen during working hours.

Customer company data is processed to provide the service and manage the contractual relationship, and to comply with legal obligations.

Employee data is processed on behalf of the customer company, whose legal basis is the monitoring of work activity, within the limits of proportionality and with the prior information required by law.

Telemetry and screenshots are kept for the retention period configured by the customer company (90 days by default), after which they are deleted automatically, including from storage.

Billing data is kept for the periods required by commercial and tax law.

To provide the service, ZimaWork relies on providers acting as sub-processors: an infrastructure and storage provider in the European Union, and the provider of the AI model that analyses the screenshots. These providers process the data under ZimaWork’s instructions and with the safeguards required by the GDPR.

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction and portability. Employees should address their request to the company they work for, which is the controller of that data. ZimaWork provides the company with the necessary export and deletion tools.

The right to lodge a complaint with the relevant data protection authority also applies.