Privacy policy
Last updated: 5 November 2026
AutoDimona helps businesses plan their staff, register working time and declare employment to the Belgian social security (Dimona). The business that uses AutoDimona is the controller of its employees’ data; AutoDimona is its processor and only processes that data on the business’s instructions.
What we process
- Portal users: name, e-mail, a hash of the password (never the password itself), sign-in times and the actions they take.
- Employees: name, contact details if entered, kind of work, shifts, absences, check-in and check-out times, and — when location checking is on — whether the device was at the location when checking in.
- National numbers (INSZ/NISS) needed for Dimona: stored encrypted (AES-256-GCM), shown only masked, and sent only to the RSZ/ONSS.
- Fingerprint and face: never stored on our servers. A fingerprint stays in the tablet’s own secure hardware; we keep only a public key. Face recognition runs on the tablet, and the face data stays on that tablet.
Why
To plan work, record working time, declare employment to Dimona as the law requires, and send the worked hours to the business’s social secretariat.
Where and how long
On a server in the European Union. Data stays as long as the business keeps its account; an employee can be erased completely from the portal, and closing the account deletes everything. Activity logs are kept for at most 400 days.
Who receives it
The RSZ/ONSS (Dimona declarations) and the addresses the business enters for its monthly report. Nothing is sold or shared for advertising. No third-party trackers are used.
Your rights
Employees can ask their employer for access, correction or erasure. Businesses can contact us at the address in their portal. You can also complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).
This text is a template — have it reviewed for your own business before relying on it.