Data Processing Terms
Controller-to-processor terms for workforce data.
Roles
The subscribing business is Controller for workforce data it enters into NEO Workforce. Renato Hoti, sole trader trading as NEO Workforce, acts as Processor for that workforce data when providing the service.
Processing
Workforce data may include employee identity/profile information, attendance dates and times, breaks, hourly rates, corrections and timesheet information. NEO Workforce processes that information to provide, maintain and secure the service on the Controller's instructions unless UK law requires otherwise.
Security and confidentiality
NEO Workforce applies access controls appropriate to the product, including authenticated workspaces, Owner PIN controls, employee clock PINs and HTTPS/TLS for browser traffic. The Security page describes current public security claims and limitations.
Subprocessors
The Controller authorises service providers needed for hosting, authentication, infrastructure and payment operations, subject to applicable data-protection requirements.
Assistance and incidents
NEO Workforce will provide reasonable assistance with relevant data-subject requests and compliance obligations, and will notify affected Controllers of relevant personal-data breaches without undue delay where required by law.
End of processing
Owners can export timesheet information and permanently delete workforce records from the service. The Controller remains responsible for lawful instructions, worker transparency, retention decisions and the accuracy of employment or payroll decisions.