Privacy policy

Who is responsible for your data

The data controller for the service is Christian Springer, Via San Maurizio 11, 34129 Trieste (TS), Italy. You can write to us at privacy@saturno-app.com.

Saturno is provided to organisations, which are our customers. For the data an organisation enters about its own people — who works where, their shifts, their days off — the organisation decides why and how it is used and is the data controller of that data; Saturno processes it on the organisation's behalf and under its instructions, as a data processor. For your account and for the running and security of the service, Saturno is the controller. This policy covers both.

What data we process

We process only what the service needs to work:

• Your account: your name, your e-mail address, your password (stored only as a salted hash, never readable), your preferred language and whether your e-mail address has been verified.
• Your membership: the organisation and department you belong to, your role in them, your team and your contract type.
• Your schedule: the shifts you are assigned to, your days off — each with its leave type and, if you wrote one, a note — your swap requests, and the history of changes to the schedule, which records who changed what and when.
• Your notifications: the notifications the service shows you, whether you have read them, and whether your department sends them to you by e-mail too (the e-mail notification switch).
• Technical data: the cookie that keeps you signed in and, when something goes wrong, an error report that may include the page you were on, your browser and the time.

We do not ask for, and you should not enter, special categories of data such as health information. A day off's leave type names a category your organisation has defined (holiday, sick leave…); its note is free text that only you, your department leader and your organisation's admin can read.

Why we process it, and on what legal basis

• To provide the service you or your organisation signed up for (performance of a contract, Article 6(1)(b) GDPR): building and showing schedules, days off and swaps; sending the e-mails your account needs (verification, password reset) and the notifications you or your organisation have chosen.
• To keep the service secure and working (our legitimate interest, Article 6(1)(f) GDPR): keeping you signed in, limiting repeated sign-in attempts, and collecting error reports so we can fix what breaks.
• To meet legal obligations (Article 6(1)(c) GDPR), where a law requires us to keep or hand over data.

We do not use your data for advertising, we do not sell it, and we do not profile you. The service suggests which person could take an open shift; a department leader always decides, so no decision with legal effects on you is taken automatically.

Who in your organisation sees what

Your organisation's admin and your department's leader see your assignments, your days off with their notes, and your swap requests, because they manage the schedule. Colleagues in your department see your name on the published schedule and which days you are away; they never see your notes, the reason a request was refused, or the type of a leave your organisation has not chosen to show to colleagues — they see “Away”.

Who processes data for us

We rely on a few providers to run the service. Each processes data only on our instructions and under a data processing agreement:

• Vercel (Vercel Inc., USA) hosts the application; it is served from the European Union.
• Neon (Neon Inc., USA) hosts the database, in Frankfurt, Germany, in the European Union.
• Resend (Resend Inc., USA) sends our e-mails: verification links, password resets and notifications.
• Sentry (Functional Software Inc., USA) receives error reports when something in the service fails.

Your data is stored in the European Union. Where a provider established outside the European Economic Area could access it, the transfer rests on the European Commission's standard contractual clauses or on an adequacy decision such as the EU-US Data Privacy Framework. We share data with nobody else, unless the law requires it.

Cookies

Saturno sets no analytics, advertising or third-party cookies, so it shows no cookie banner. The cookie that keeps you signed in is strictly necessary for the service. A few other small cookies only remember how you like the service shown — your language, the calendar view you used last, how the tiles are laid out — and identify no one. Your light or dark choice stays in your browser's storage and is never sent to us.

How long we keep data

We keep your data while your organisation uses Saturno. When a person is removed from an organisation, their past shifts and hours stay in that organisation's schedules and reports as a former member, so the records stay accurate, until the organisation itself is deleted. When an organisation is deleted, or when you or your organisation ask us to delete data, we delete it; copies in our provider's backups expire on their own within the provider's short retention window. Error reports are deleted automatically after ninety days.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• rectify data that is wrong or incomplete — your language in Settings; for your name or e-mail address, write to us or to your organisation;
• erase your data, where there is no longer a reason to keep it;
• restrict processing while a question about the data is resolved;
• receive the data you provided in a portable, machine-readable form;
• object to processing based on our legitimate interest.

To exercise them, write to privacy@saturno-app.com; we answer within a month. For the data your organisation enters about you, you can also turn to your organisation, which is its controller. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live or work.

Security

Data travels encrypted (HTTPS) and is stored encrypted at rest by our providers. Passwords are stored as salted hashes. Access to production data is limited to the people who run the service, and sign-in attempts are rate-limited.

Changes to this policy

We may update this policy as the service changes; the date at the top says when it last did. A change that matters to you is announced in the service or by e-mail before it applies.