OpTeamsOPTEAMS / POLICIES
Privacy Principles
General privacy principles for working with account and operational data.
What information may be involved?
Depending on the modules used, information may include account and contact details, company and project information, personnel records, schedules, training and payment records, uploaded photographs and documents, and access logs. The existence of a field does not mean it must be collected from every user.
Data minimization and purpose limitation
Enter only information needed for the relevant task. Do not use collected information beyond the notified, lawful purpose. Avoid capturing unrelated people and documents in audit photographs. Remove unnecessary personal data from reports.
Company and service-provider roles
A company’s decisions about employee and trainee data must be distinguished from a platform operator’s own account and service activities. Controller and processor roles depend on the actual processing activity; using software does not automatically change those roles.
Sharing and exports
Share records only with authorized recipients and only as necessary. Spreadsheet, PDF, archive and backup downloads may contain personal data; do not leave them on shared computers. Actual service providers, recipient groups, transfer purposes and international-transfer arrangements must be explained in the notice for the relevant activity.
Retention and deletion
Retention periods depend on data type, purpose, contract and applicable obligations. This general text does not assign a single period to all records. Deleting a record from a panel does not mean backup copies are erased immediately; backup retention and deletion must be managed separately.
Requests
Submit correction and access requests about company-entered records through the channels announced by the relevant controller. Contact your company administrator for account access issues. These principles alone are not a processing-specific privacy notice.