GDPR Compliance

Overview

This page supplements our main Privacy Policy with the specific detail required by the EU General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the UK. Where this page and the main Privacy Policy differ in detail, this page governs for GDPR purposes.

Data controller and processor roles

For our own websites and direct customer relationships (for example, Vlemon.com, OmniSnap.dev, and marketing/contact inquiries), Vlemon LLP, registered at Indore, Madhya Pradesh, India, is the data controller. Contact our privacy team at privacy@vlemon.com.

Logmy.Work works differently, since it's a workforce tool: the customer organization (your employer or the business that operates the workspace) is the data controller for employee work records — time, attendance, location, and similar data described in the Logmy.Work Privacy Policy. Vlemon acts as the processor / platform operator, handling that data only to provide the service on the organization's behalf and instructions.

Legal basis for processing

We process personal data under one or more of the following legal bases, depending on the activity: performance of a contract (providing the service you've signed up for), your consent (for example, optional performance cookies, or optional GPS/geofencing in Logmy.Work), legitimate interests (for example, keeping our Platforms secure, understanding aggregate usage, or — for a customer organization using Logmy.Work — verifying employee time and attendance), and compliance with a legal obligation where applicable. Where Logmy.Work location tracking is used, the specific legal basis is the customer organization's — see our Location Tracking Policy.

Your rights

Subject to applicable exceptions, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to certain processing
• Port your data to another provider in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal

How to exercise your rights

For data Vlemon controls directly, email privacy@vlemon.com describing the request and the Platform it relates to; we verify requests within 48 hours and fulfill them within 30 days, consistent with our main Account & data deletion policy. For Logmy.Work work records, start with your organization's workspace administrator, since they control that data as described above — Vlemon supports and fulfills those requests as the processor.

Subprocessors

We use a limited number of subprocessors to provide our Platforms — for example, infrastructure/hosting providers, Microsoft (for transactional email via Microsoft Graph), and Vlemon Origin as our shared authentication service. We only share the minimum data needed for each to perform its function. A Data Processing Agreement (DPA) with a fuller subprocessor list is available on request for enterprise customers — contact legal@vlemon.com.

International data transfers

Where personal data is transferred outside the EEA or UK — for example, to infrastructure located in India — we rely on appropriate safeguards, such as Standard Contractual Clauses, to ensure your data continues to receive an equivalent level of protection.

Right to complain

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.

Contact

Questions about GDPR compliance can be sent to privacy@vlemon.com or legal@vlemon.com.