Privacy Policy

Last updated: January 2026

1. Data Controller

Lareira Digital S.L. (hereinafter "we" or "the Company"), with Tax ID B10583672, is the data controller for personal data collected through our time tracking platform Workstamp.

Contact details:

  • Company name: Lareira Digital S.L.
  • Tax ID (CIF): B10583672
  • Address: Camino do Cereiro 20, 36995, Poio, Pontevedra, Spain
  • Email: privacy@workstamp.eu

2. Data We Collect

We collect the following types of personal data:

2.1 Account registration data

  • Full name
  • Email address
  • Phone number
  • Company name
  • Job title or position

2.2 Time tracking data

  • Clock-in and clock-out records
  • Working hours duration
  • Location (if enabled by the employer)
  • Device used for clocking

2.3 Technical data

  • IP address
  • Browser and device type
  • Operating system
  • Cookies and similar technologies

3. Purpose of Processing

We process your personal data for the following purposes:

  • Providing time tracking service in compliance with Spanish Royal Decree-Law 8/2019
  • Managing your user account
  • Generating compliance reports
  • Maintaining tamper-proof audit records
  • Sending service-related communications
  • Improving and optimizing our platform
  • Complying with legal obligations

4. Legal Basis for Processing

Our processing of your data is based on:

  • Contract performance: Processing is necessary for providing our services.
  • Legal compliance: Recording working hours is mandatory under Spanish Royal Decree-Law 8/2019.
  • Legitimate interest: Service improvement and platform security.
  • Consent: For marketing communications and optional features.

5. Data Retention

Time tracking data is retained for the legally required period:

  • Working time records: minimum 4 years (legal requirement)
  • Account data: while the contractual relationship remains active
  • Billing data: 6 years (tax obligation)

6. Data Recipients

Your data may be shared with:

  • Employers (in the case of employee data)
  • Labor authorities during inspections
  • Technology service providers (hosting, security)
  • Legal and accounting advisors

We do not sell or share your personal data with third parties for commercial purposes.

7. International Transfers

Your data is stored on servers located within the European Union. In case of transfer outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR.

8. User Rights

You have the right to:

  • Access: Know what data we process about you
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data (subject to legal limitations)
  • Objection: Object to certain types of processing
  • Restriction: Request restriction of processing
  • Portability: Receive your data in a structured format

To exercise your rights, contact: privacy@workstamp.eu

You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Data Security

We implement technical and organizational security measures to protect your data:

  • Encryption of data in transit and at rest
  • SHA-256 hash chains to ensure record integrity
  • Role-based access control
  • Regular security audits
  • Automated backups

10. Cookies

We use cookies for platform functionality and user experience improvement. You can manage your cookie preferences at any time through your browser settings.

11. Changes to This Policy

We reserve the right to modify this privacy policy. Changes will be notified through the platform or by email.

12. Contact

For any privacy-related inquiries, you can contact us at:

  • Lareira Digital S.L.
  • Camino do Cereiro 20, 36995, Poio, Pontevedra, Spain
  • Email: privacy@workstamp.eu