Your Rights Regarding Personal Data (GDPR)

1. Who is the controller

For HR data (personnel files, payroll, attendance, documents, etc.), the controller is the employing organization that entered the data in Vecto HR.

APPVECTO S.R.L. processes that data as processor on behalf of the client. For account, billing, and platform security data, APPVECTO S.R.L. may act as an independent controller — see the Privacy Policy.

2. Right of access

You may request confirmation that your data is being processed and information about data categories, purposes, and retention. If you have an employee account in the application, you may view certain of your own data in sections permitted by your role.

3. Right to rectification

If data is incorrect or incomplete (address, phone, bank account, etc.), you may request correction. As a rule, contact your company's HR department; changes are made by authorized administrators.

4. Right to erasure

You may request deletion of data when it is no longer necessary for the original purpose. Important: the company may refuse partial or total deletion when the law requires retention of certain documents (for example employment contracts, payslips, archived time records), under the legal obligations applicable to the employer.

5. Right to restriction

Under certain GDPR conditions, you may request restriction of processing (for example while accuracy is verified or a dispute is pending).

6. Right to data portability

You may receive data you provided in a structured, commonly used format (for example JSON) to transfer to another controller, where technically feasible. If you have an employee account, you may use the personal data export feature available in the application (dedicated data export section), where enabled for your organization.

7. Right to object

You may object to certain processing based on legitimate interest, under the conditions and exceptions provided by the GDPR (for example, when processing is strictly necessary for legal employment obligations, objection may be limited).

8. Automated decision-making

The Vecto HR platform does not use automated profiling or automated decisions with significant legal effect on you (no automatic performance evaluations or automated dismissals).

9. How to exercise your rights

1. For HR data: contact your company's HR administrator at the email address of your employer or organization, as configured in the organization settings.
2. For account or platform data where APPVECTO S.R.L. is controller: support@appvecto.com or contact@appvecto.com.
3. You may be asked to prove your identity to prevent abuse.
4. The controller (employer) has a legal obligation to respond within GDPR time limits; the concrete procedure depends on your organization.

10. Complaint to ANSPDCP

If you believe your rights have been violated, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): https://www.dataprotection.ro — complaints: https://www.dataprotection.ro/?page=Plangeri_pagina_principala — B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania. You may also seek a judicial remedy. APPVECTO S.R.L. is not your employer's legal representative.

11. Security of your data

The company and the provider apply measures such as encryption for sensitive data, role-based access, and audit logging. Details are in the Privacy Policy.

Platform technical support: support@appvecto.com. APPVECTO S.R.L. does not currently have a designated DPO; a DPO will be appointed if required by law.