This Privacy Policy explains how atWorkAI Corporate Welfare Shpk collects, uses, discloses and protects personal data when you use our websites, mobile applications and related services.
Data controller
- Company
- atWorkAI Corporate Welfare Shpk
- Address
- Durana Tech Park, Rruga Aleksandër Moisiu, Tirana, Albania
- Website
- atworkapp.co
- [email protected]
- VAT / NIPT
- M52209504T
- Data protection contact (DPO)
- [email protected]
Introduction
atWorkAI Corporate Welfare Shpk ("atWork", "we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy applies when you:
- Visit our website at atworkapp.co
- Use the atWork mobile or web application
- Interact with us as an employee of one of our corporate clients
- Communicate with us by email, phone, or support channels
This policy complies with the EU General Data Protection Regulation (GDPR), applicable Albanian personal data laws, and other relevant legal frameworks where required.
What personal data we collect
Data you provide directly
- Name, surname, and professional email address
- Phone number and job title
- Company information and delivery details
- Dietary preferences, allergies, and food restrictions
- Payment information processed via secure third-party payment providers
- Messages and correspondence sent to our team
- Your CV and application details, if you apply for a job through our careers form
Data collected automatically
- IP address and device identifiers
- Browser type, operating system, and language settings
- Pages visited, time spent, and navigation paths
- Application usage events and feature interactions
- Campaign information from the address you arrived on, such as which advertisement or link brought you to our website
- Your Theme preference, if you choose the light or the dark theme of the website, kept in your browser
Data received from corporate clients
Where your employer provides access to atWork, we may receive work-related information needed to administer your account and meal benefits, such as employee name, employee ID, work email, budget allocation, department, or office location.
Legal basis for processing
We rely on these legal bases, in these situations:
- Contract (Article 6(1)(b))
- Processing your order, delivering meals, managing your account
- Legitimate interest (Article 6(1)(f))
- Service improvement, fraud prevention, analytics, direct marketing to business contacts
- Consent (Article 6(1)(a))
- Non-essential cookies, marketing communications, dietary data
- Legal obligation (Article 6(1)(c))
- Accounting and regulatory compliance
- Vital interest or safety
- May be used if food safety data were necessary for user safety
Where we rely on consent, you can withdraw it at any time.
How we use your data
- Deliver and manage meal orders and platform access
- Operate and improve the atWork platform and mobile app
- Communicate service updates, reminders, and support responses
- Personalize menus and food recommendations where relevant
- Measure service quality and improve user experience
- Comply with legal obligations and internal audit requirements
- Protect against abuse, unauthorized access, and fraud
International data transfers
We primarily store and process data within the European Economic Area. If data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or equivalent lawful transfer mechanisms.
Data retention
- Account data: kept for as long as your account remains active
- Order and invoice data: retained as required by accounting and tax laws
- Communication records: retained for support and dispute resolution purposes
- Requests sent through our website forms (demo requests, messages, newsletter sign ups): kept while they are needed to answer you and to manage our relationship with your company, in our database, mailbox and CRM
- Job applications: a CV uploaded through our careers form is deleted automatically 180 days after it is uploaded
- Preference and consent data: retained until withdrawn or no longer needed
- Cookie consent logs: retained to demonstrate compliance where required
Your rights under GDPR
- Right of Access
- Right to Rectification
- Right to Erasure
- Right to Restriction of Processing
- Right to Data Portability
- Right to Object
- Right to Withdraw Consent at any time where processing is based on consent
- Right to lodge a complaint with the competent supervisory authority
To exercise your rights, contact us at [email protected].
Data security
- TLS encryption for data in transit
- Role-based access control and authentication safeguards
- Monitoring, logging, and incident response procedures
- Regular security updates and infrastructure hardening
- Backups and availability measures where appropriate
Children's privacy
Our services are not directed to children, and we do not knowingly collect personal data from children.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The latest version will always be published on this page.
Contact and complaints
For any privacy request or complaint regarding this policy, please contact us using the details below.
- Company
- atWorkAI Corporate Welfare Shpk
- Address
- Durana Tech Park, Rruga Aleksandër Moisiu, Tirana, Albania
- Website
- atworkapp.co
- [email protected]
- VAT / NIPT
- M52209504T
- Data protection contact (DPO)
- [email protected]