Integrated shift planning for SAP SuccessFactors. Automated and industry-proven.
Data protection at shyftplan
With shyftplan, you combine the best of both worlds: In your shift planning software, the user-friendliness of private apps meets data protection and IT security at enterprise level. This has already won over companies such as Siemens, ZF, Krones, Mercedes Benz and Fressnapf.
We protect your company data
Whether you use shyftplan via mobile app or via the web application, your data is always transmitted securely and, unlike notices or WhatsApp groups, the use of shyftplan is fully GDPR compliant.
AVV - Order data processing contract
- We have concluded a commissioned data processing agreement with all companies that process data for us. This ensures the best possible protection of your data.
- If necessary, we will support you with information, the correction or deletion of personal data - in accordance with the GDPR regulations.
- We will be happy to provide you with our DPA template for review. Just get in touch with us.
TOMs - Technical and organizational measures
- As an ISO 27001 and SOC 2 certified company, we regularly review and optimize our technical and organizational measures to ensure data security.
- All shyftplan GmbH employees undergo annual training on IT and information security.
- We use state-of-the-art measures for firewalls, user authentication and virus protection, for example.
Protection of personal data
Many shyftplan users use private devices for the mobile app. But regardless of whether you use a private or a company device, shyftplan does not access personal data such as your contacts. Only first and last names, a unique user ID (e.g., e-mail address) and the role (planner or employee) are required to use shyftplan. Further information is voluntary.
IT security
shyftplan is ISO 27001 and SOC 2 certified and therefore meets the highest standards of data security. All data communication is encrypted and your data is hosted in a secure data center in Germany.
Everything at a glance:
- ISO 27001 certified: shyftplan is certified for information security with ISO 27001.
- SOC2 certified: shyftplan has proven its very high security with the SOC2 certification.
- DPA: Conclude your commissioned data processing agreement with us.
- Current TOMs: We always keep our technical-organizational measures up to date to protect your data.
- Works council compliant: shyftplan is already being used successfully at various DAX companies and meets the requirements for employee protection.
- Encrypted data transfer & storage: Data is transferred exclusively in encrypted form and stored on the server in encrypted form.
- Hosted in Germany: Your data is securely hosted in a German data center.
- Secure partners: All our partners are obliged to process data according to GDPR standards.
Ready to take your qualification management to the next level while relying on the highest standards of data security?
Discover how shyftplan automates your processes, simplifies ISO audits, and keeps your company data 100% GDPR compliant. Schedule a free demo today and let our experts show you how our software can streamline your daily operations.
Who is allowed to view the shift plan?
Data privacy laws for duty rosters are clear: employees are not entitled to view the entire shift plan. Every worker has the right to prevent their schedule from being published, even within the company.
Must data protection be observed for a duty roster?
Yes, as a duty roster handles personal data, data privacy regulations strictly apply. Schedules should never be posted publicly or shared via messaging apps – a common but risky practice, especially in smaller businesses. This issue also affects larger companies; sharing an open Excel document that lets employees view their colleagues' personal information violates data protection laws. A shift schedule contains confidential personal data and must always be treated as a private document.
How do I create a data-protection-compliant duty roster?
Never post shift schedules publicly or share photos of them with employees. Restrict access to duty roster files on company networks and ensure each worker can only view their own data. Scheduling software can help create a fully data-compliant roster. These intelligent tools keep larger companies safe by automatically accounting for labor laws and privacy regulations during the scheduling process.
