Privacy and data
What mkadr collects, who can see it and how it's handled.
Expanded draft policy. Confirm actual infrastructure, providers, retention periods and legal entity before approval.
1. Who handles data
mkadr is a platform for employers. Employers decide which HR data to use and who can access it. The provider processes data to deliver the service. Its legal identity is stated in the agreement.
2. Data we process
Names, job roles, departments, schedules, leave, attendance records, IDs, contact details and activity logs. Depending on features enabled, photos, location data, terminal identifiers and Telegram IDs may also be processed.
3. Why data is used
To manage attendance, schedules, notifications, reports, access rights, support and security. Other uses require a separate lawful basis.
4. Photos, biometrics and location
Mobile check-ins may verify location when a record is made. Photo and biometric processing depends on terminals and settings. Employers must establish the required notices, consents or other lawful grounds, especially for biometrics.
5. Access to data
Authorised company staff access data by role. Support access is limited to what is needed for agreed technical work.
6. Storage and retention
Hosting location, retention, backups and deletion depend on the actual setup and contract. Applicable Uzbek data storage and cross-border transfer rules must be followed.
7. Third-party services
With customer approval, minimum necessary data may be shared with connected devices, Telegram or other agreed systems. HH, 1C and government connections are not enabled automatically.
8. Security
Role-based permissions and technical controls are used according to the configured service. Changes may be logged; specific safeguards are described in the agreement.
9. Employee rights
Employees may contact their employer about access, correction, deletion and other legal rights. mkadr can assist the employer under the agreed process.
10. Ending a subscription
The customer may request an export of available data. Export, deletion, archives and backups follow the contract and applicable retention rules.
11. Website and technical data
The website may use technical data for operation, security and language selection. Any third-party analytics or cookies must be documented after checking actual tools.
12. Questions and updates
For data questions email hrm@mkadr.uz. Material changes will be reflected in a dated update, with notices as required by contract and law.