Privacy policy

What WorkTime is for

WorkTime is a GiT solutions system for working time records. A company uses it for shifts: clock in and out, breaks, GPS on the action, a manager log and an hours report.

Accounts are not opened from the site. Access is granted by an administrator or company admin through an email invitation.

Who processes the data

For one company, that company enters and uses employee data. GiT solutions hosts and maintains the system and processes data so the service runs.

What data we process

• account — name, email, role (administrator, company admin, department head, worker) and the link to the company and department;
• shift — clock in, break, clock out, date and time in the Europe/Belgrade zone;
• location on the action — GPS coordinates and accuracy at clock-in, break or clock-out, and whether the point was in the department zone;
• profile — photo and documents the company attaches to the employee;
• sign-in — a record of successful and failed sign-ins, to protect the account.

Passwords are stored hashed, never as text. reCAPTCHA Enterprise is used on web sign-in.

What we do not do

• we do not sell data or give it away for ads;
• we do not track movement during a shift — GPS is stored only with a clock action;
• we do not open public accounts from the home page.

Why we process data

• so the service works — the account, shift records and reports (performance of the contract with the company);
• account security — protection against password guessing, a lockout after failed attempts;
• location — to see where the clock-in was and whether it was in the department zone, because the company uses that in the records.

Who we share with

With the company you work for, within the role assigned to you. With AWS SES for invite and password mail, and with AWS S3 if the company stores photos and documents there. reCAPTCHA sends a token to Google on the web. We do not give data to third parties for marketing.

How long we keep it

The account and shifts while the company uses the service and needs the records. An inactive account cannot sign in; shift records stay until the company removes them under its rights. The sign-in session lasts a long time so you are not signed out every day; you can always log out.

Your rights

You can ask for access, correction and deletion of the account via office@git.rs or through your company administrator. You change the password in the account. There is no public signup — account deletion is done by an administrator.