Data processing
Data processing agreement.
Anyone processing personnel data in someone else's software needs a contract for it. This page is that contract in plain language. It applies between the customer as controller and Rewalz as processor, in addition to the terms of service.
Subject and duration
Rewalz processes personal data solely to provide the contractually agreed services. The engagement begins when the tenant is opened and ends with the contract. Section 10 applies thereafter.
Nature and purpose of processing
Processing covers storing, organising, analysing and deleting the data the customer enters itself or has its staff enter. There is no purpose other than operating the software. Personal data is never sold, never used for advertising and never used to train language models.
Data subjects and categories of data
Data subjects are employees, applicants and contact persons of the customer. Categories range from master data through contract and payroll data to absences, working time, documents and application files. This includes particularly sensitive data, namely social security numbers, health information in the context of absences, and salary data.
Instructions
Rewalz processes the data only on documented instruction from the customer. The contract, the settings inside the tenant and explicit instructions in text form all count as instructions. If Rewalz considers an instruction unlawful it will say so and may suspend execution.
Confidentiality
Everyone with access to customer data is bound to confidentiality. The obligation survives the end of their engagement.
Technical and organisational measures
Access is enforced in the database itself and not only in the application. Every query is bound to the caller's own tenant and to their role. Transmission and storage are encrypted, and sign-ins and permission changes are logged. The details are on the security page.
Sub-processors
Rewalz uses sub-processors for hosting and delivery, today Supabase for the database, Vercel for running the application and Resend for sending mail. All three are contractually bound to the same level of protection. Any change is announced in advance and can be objected to within thirty days.
Rights of data subjects
If a data subject contacts Rewalz directly they are referred to the customer. The software provides the functions needed for access, rectification, erasure and portability so the customer can meet its deadlines without a detour.
Personal data breach
Rewalz reports a personal data breach without delay and at the latest within twenty-four hours of becoming aware of it, with all known details of nature, scope and the measures taken. Notifying the supervisory authority and the data subjects remains the customer's responsibility.
Deletion and return
After the contract ends the data is handed over in a common format on request and then deleted. Absent other instructions, deletion happens ninety days after the contract ends, except for data subject to a statutory retention period.
Evidence and audit
Rewalz demonstrates compliance with these obligations on request. The customer may audit the processing itself or have it audited, with notice and without disrupting the operation of other tenants.
Place of processing
The data is held in Switzerland, in the Zurich region data centre. No disclosure abroad takes place. Should that become necessary in future it will happen only on a basis provided for by the revDSG and the GDPR.
Request the signed version
The same text is available as a signed PDF for your data protection officer's records. One line is enough.