Legal
Privacy policy
Last updated: June 2026
This notice explains what personal data Pensuma processes, why, and the rights you have. Pensuma is a workforce-management platform; your employer is the controller of employee data and Pensuma acts as its processor.
Controller and processor
Your employer (the organisation that invited you) decides why and how your data is used and is the data controller. Pensuma processes that data on their instructions as a processor under a data-processing agreement.
What we collect
Account data (name, email, and date of birth used only to verify sign-in), plus the HR data your employer records: contact details, role and division, worked hours and planned shifts. We do not sell your data or use it for advertising.
Lawful basis
Employee data is processed to perform the employment relationship and to meet your employer's legal obligations, such as time-tracking and payroll. Sign-in uses a one-time code sent to your email; no passwords are ever stored.
Sub-processors
We host data in the EU (Hetzner, Germany) and send transactional email through Resend (EU). These providers process data only to deliver the service.
Retention
Data is kept for as long as your employer's account is active and as required by law. When an employee record is deleted, their profile, hours and shifts are removed.
Your rights
You can request access to, correction or deletion of your data, and a portable export. Administrators can export or erase an employee's data from that employee's settings. For requests, contact your employer or us at the address below.
Cookies
Pensuma uses a single strictly-necessary cookie to keep you signed in. We do not use tracking or advertising cookies.
Contact
Questions about this notice or your data? Email [email protected].