Privacy policy
This page explains what the HD Holding staff portal (staff.hd-holding.com) and the HD Holding phone app do with personal data. Both are for the staff of HD Holding and its companies: only people given an account by the company can sign in.
Who is responsible
HD Holding is responsible for this data. For any question about it, write to [email protected].
What we hold, and why
- Your staff file: name, staff number, job, department, company, work contact details, and what HR keeps to employ you (contract, family and statutory details, documents). To run your employment and meet legal duties.
- Attendance: the times you check in and out at the office readers, and from your phone when you check in away from a reader. To work out hours, lateness and transport.
- Location: only when you check in or out from your phone, and only with your permission, the position at that moment is saved with that check in so your manager can approve it. The app does not follow your location at any other time.
- Home location: if HR records a pin for your home, it is used to measure the road distance to the office for the transport allowance.
- Leave, overtime, expense claims and requests: what you send, including the photos or files of invoices you attach. To approve them and pay them back.
- Pay: salary and payroll figures, shown only to you and to the people whose role needs them.
- Notifications: a code from Apple or Google that lets us send notifications to your phone.
- Face ID and fingerprint: handled entirely by your phone. The app is only told whether unlocking worked; your face or fingerprint never leaves the phone and is never sent to us.
- Sign-in and security: your Microsoft sign-in or password, and a record of important actions, so that changes can be traced.
Who can see it
What each person sees follows their role: you see your own records, your managers see what they approve, and HR, payroll and accounting see what their work needs. We do not sell personal data and do not use it for advertising.
It goes outside the company only to the services the portal runs on: the server it is hosted on, Microsoft for signing in, Apple and Google for delivering notifications, and the email service; maps are drawn with OpenStreetMap, and the road distance from a home pin is measured by the OpenStreetMap routing service, which receives the two positions and nothing else. It is also given to authorities when the law requires it, for example for tax and social security declarations.
How it is protected
Everything travels encrypted (HTTPS), the data is kept on an encrypted disk on a server the company controls, and a new account can see nothing until the company approves it.
How long we keep it
For as long as you work with us, then for as long as the law requires employment and payroll records to be kept (ten years in Lebanon), after which it is deleted.
Your rights
You can see your data in the portal, ask HR to correct it, and ask for a copy of it. You can also ask for your account and data to be deleted: see Delete your account. Some records have to be kept by law even after an account is closed.
Changes
We update this page when what we collect changes, and the date at the top says when it last changed.