PeopleHub — web and mobile application
Effective date: August 28, 2026 · Last updated: August 28, 2026 · Srpska verzija · Hrvatska verzija
TTK SOLUTIONS d.o.o., Knespolje bb, 71428 Knespolje, Bosnia and Herzegovina ("TTK Solutions", "we", "us" or "our") respects your privacy and is committed to protecting the personal data it processes in connection with the PeopleHub platform.
PeopleHub is a platform intended for organizations and their employees, available through a web application and mobile applications for iOS, Android and Huawei devices, including distribution through the Apple App Store, Google Play and Huawei AppGallery (the "Service").
Depending on the features activated by a given employer, PeopleHub enables the management of employee requests, time tracking, documents, payslips, internal announcements and communication, equipment, surveys and training, and, where enabled, meal ordering.
PeopleHub is not intended for the general public, nor is it intended for children as end users. Access to PeopleHub is generally granted to an employee by their employer.
This Privacy Policy explains:
The scope of data processed depends on the features your employer has activated and how they are used.
When using PeopleHub, different roles regarding the protection of personal data may exist.
Your employer, i.e. the organization that has granted you access to PeopleHub, is generally the controller for personal data processed for the purpose of managing the employment relationship.
This applies in particular to:
The employer determines which PeopleHub features are used, which data is entered and processed, and how long it needs to be retained, in accordance with applicable regulations.
When TTK Solutions processes employee data on behalf of the employer and in accordance with its documented instructions, TTK Solutions acts as a processor.
This particularly includes the hosting, storage, display and technical processing of data required to provide PeopleHub's features.
TTK Solutions does not use employee data it processes on behalf of the employer for its own advertising, nor does it sell such data to third parties.
TTK Solutions may act as controller for certain data required for its own business operations and the technical administration of the Service, for example:
In such cases, TTK Solutions independently determines the purpose and manner of processing in accordance with applicable regulations.
If you are unsure who is responsible for a particular processing activity, you may contact your employer's PeopleHub administrator or TTK Solutions using the contact details in Section 19.
Depending on the features used by your employer, PeopleHub may process the following categories of data.
We may process:
Passwords are stored as a cryptographic hash and are not stored in plain text.
If sign-in via Microsoft Entra ID is enabled, we may process basic organizational Microsoft account identifiers, such as name, business email address and tenant identifier, for authentication purposes.
Employment data may be entered directly into PeopleHub or synchronized from the employer's HR/ERP system.
This may include:
If the employer enables benefits related to employees' children, an employee may voluntarily enter:
This data is not required for using PeopleHub in general.
PeopleHub may process the content of employee requests, including:
We may also process:
Documents or photographs uploaded by a user may contain special categories of personal data, including health data. For example, a photograph of a medical certificate or a sick-leave slip may contain health-related data. TTK Solutions does not use such documents for advertising, profiling or other purposes of its own. When we process them as part of the employer's HR processes, we do so as a processor acting on the employer's instructions. PeopleHub does not analyze or automatically interpret the health-related content of such documents, unless a future feature expressly provides for such processing and appropriate legal and technical safeguards are put in place for it.
If the employer uses the relevant module, PeopleHub may provide access to digital payslips.
Payslips are generally generated in the employer's payroll system, while PeopleHub enables secure access to them for the employee.
We may also process:
If the feature is enabled, PeopleHub may process:
If the employer uses the equipment management module, we may process data on equipment assigned to the employee, for example:
PeopleHub may process:
If the module is activated, we may process:
If the user selects a delivery location on a map themselves, the address or location they selected may be processed.
PeopleHub does not access the device's GPS location to determine the delivery location.
We may automatically process:
Where required to send push notifications, we process the device's push token and platform (iOS/Android).
To protect the Service, we may log:
This data is used to detect and prevent misuse, brute-force attacks and other security incidents.
If you contact us, we may process:
We may obtain data:
When you:
Your employer may provide or synchronize basic employee data from its HR/ERP system.
While using the Service, technical, security and diagnostic data may be collected automatically.
If sign-in via Microsoft Entra ID is enabled, basic organizational account data may be received from Microsoft for authentication purposes.
Depending on the specific processing activity, the legal basis may include:
When processing is necessary to provide PeopleHub's features or to perform a contractual relationship.
When particular processing is necessary to fulfill legal obligations, for example those related to employment, tax, accounting or time-tracking requirements.
When processing is necessary for:
When relying on legitimate interest, we carry out an appropriate balancing test where required.
When consent is required for a specific optional processing activity, for example certain voluntary data or features.
Consent may be withdrawn at any time for future processing based on that consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
When processing involves special categories of personal data, including health data, additional conditions and an appropriate legal basis apply under the applicable regulations.
Within HR features, that purpose and legal basis are generally determined by the employer as controller.
We process personal data for the purposes of:
We do not sell personal data and do not use employee data for third-party advertising.
Data may be made available to:
Depending on the PeopleHub configuration, we use the following providers:
| Provider | Purpose | Data categories |
|---|---|---|
| Hetzner Online GmbH | Hosting and infrastructure | Data stored in PeopleHub, technical data, backups |
| Sentry / Functional Software, Inc. | Error and crash monitoring | Diagnostic data, device and app data, technical logs |
| Microsoft Entra ID / Microsoft Graph | Organizational authentication | Name, business email address, organization/tenant identifier |
| Cloudflare Turnstile | Bot and abuse protection | Technical and security signals required for verification |
| Apple Push Notification service (APNs) | Push notifications on iOS devices | Push token and data required to deliver notifications |
| Firebase Cloud Messaging (FCM) | Push notifications on Android devices | Push token and data required to deliver notifications |
| Expo | Mobile push notification management, where used | Technical data required to deliver push notifications |
| Esri | Maps and location search, where used | Data required to display/search the map |
| OpenStreetMap Nominatim | Address search, where used | Address query text and technical data required for the request |
Subprocessors process data only to the extent necessary to provide their services and, where applicable, on the basis of an appropriate data processing agreement.
The list of subprocessors may be updated when we change service providers or introduce new technical components.
PeopleHub primarily uses infrastructure located in the European Union, including hosting with Hetzner Online GmbH at a selected EU location.
However, certain technical service providers may be established outside the EU/EEA or may, in certain circumstances, process data outside the EU/EEA.
TTK Solutions is headquartered in Bosnia and Herzegovina.
Where the processing of an EU/EEA user's data involves a transfer of personal data to a third country, such transfer is carried out only where an appropriate mechanism permitted under applicable law exists, for example:
Where required, TTK Solutions and the relevant client enter into an appropriate DPA and apply applicable SCC provisions.
TTK Solutions also takes appropriate technical and organizational measures to protect data during such processing.
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required to fulfill legal obligations, perform a contract, or protect legitimate interests.
When data is no longer needed, we delete it, anonymize it, or otherwise remove it from active systems, unless there is a legal obligation to retain it further.
| Data category | Retention period |
|---|---|
| User account | For the duration of the employment relationship, i.e. while the account is active. |
| Deactivated account | Generally up to 90 days after deactivation, after which the data is deleted or anonymized, except for data that must be retained due to a legal obligation, contract or legal claim. |
| Requests and workflows | Generally up to 5 years after the request is closed, or per the period set by the employer or required by applicable law. |
| Documents and attachments | According to the purpose of the document and the period set by the employer, or under applicable law. Deleted once no longer needed. |
| Health-related documents | Not retained longer than necessary for the specific HR purpose and the applicable statutory period determined by the employer as controller. |
| Time tracking and salary data | Per the periods required by applicable labor, tax and accounting regulations. |
| Loans and salary advances | For the duration of the obligation and generally up to 5 years after it is settled, unless applicable law requires longer retention. |
| Equipment data | For the period of assignment and generally up to 12 months after return. |
| Surveys, quizzes and internal activities | Generally up to 2 years after the activity ends, unless the employer sets a shorter or longer period consistent with the legal basis. |
| Meal orders | Generally up to 12 months. |
| Meal delivery locations/addresses | Generally deleted no later than 90 days after the last order in which they were used, unless longer retention is required for a business or legal purpose. |
| Push tokens | For as long as the account/device is in use, and no later than 30 days after account deactivation or device removal. |
| Audit and security logs | Generally up to 12 months. |
| Sentry diagnostic data | Generally up to 90 days, depending on the service configuration. |
| Customer support communication | Generally up to 2 years after the request is closed. |
| Data subject rights requests | Generally up to 3 years after the request is closed, to demonstrate compliance and protect legal interests. |
| Backups | Data in backups may remain accessible during the regular backup rotation cycle, which generally does not exceed 90 days. |
If particular data is needed for judicial, administrative or other legal proceedings, it may be retained until the conclusion of those proceedings and the expiry of the relevant limitation periods for legal claims.
Depending on the applicable regulations, you have the right to:
Some rights may be limited where there is a legal obligation to retain data or another reason permitted by law.
If the data forms part of records controlled by your employer, we may forward your request to your employer as controller.
We respond to data subject requests without undue delay and, as a general rule, within one month of receipt. In cases permitted by applicable law, this period may be extended, and we will notify you accordingly in a timely manner.
PeopleHub accounts are generally created, deactivated and managed by your employer's administrator.
If you wish to request deletion of your account:
Where your employer is the controller for certain data, TTK Solutions will coordinate the request with your employer.
Deletion of an account does not necessarily mean the immediate deletion of all data. Data that must be retained due to a legal obligation, accounting requirements, the employment relationship, legal proceedings or another valid legal basis may be retained for the necessary period.
We apply appropriate technical and organizational measures to protect personal data.
These measures may include:
Data stored on PeopleHub's infrastructure is protected by appropriate technical measures, including encryption where supported and applicable.
Although we take reasonable and appropriate protective measures, no system for transmitting or storing data can be guaranteed to be completely secure.
The PeopleHub web application uses cookies and/or local storage only to the extent necessary for:
PeopleHub does not use third-party cookies for advertising and does not use personal data to track users across other companies' websites.
Where Cloudflare Turnstile is used, a technical token or other security signal required to verify that a request is not an automated bot may be processed.
PeopleHub may request the following permissions.
Used when the user chooses to:
Used to select an existing photo or document the user wants to upload.
Used to notify users about:
PeopleHub does not request access to:
If the user enters a meal delivery location on a map, that location is selected manually and is not obtained by reading the device's GPS sensor.
PeopleHub is not an advertising platform.
We do not:
Technical tools used for security, diagnostics and the provision of the Service's features are not used to sell personal data.
PeopleHub is intended for employees and is not intended for children as users.
In certain cases, an adult employee may enter data about their child, for example to obtain benefits the employer provides for employees' children.
Children do not use PeopleHub as end users.
Data about children is processed only for the specific purpose for which it was submitted by the employee or employer and is not used for advertising or profiling.
PeopleHub is available through the Apple App Store, Google Play and Huawei AppGallery, and may also be available through other app stores.
Information about the categories of data collected and shared, as declared in those stores, should correspond to the app's actual technical implementation and to this Privacy Policy.
Depending on each platform's current rules, the declared categories may include items such as:
PeopleHub does not use personal data to track users for advertising purposes or to link data from the app with data from other companies for advertising.
Data required for PeopleHub to function may be processed and shared with infrastructure and technical service providers acting within the scope of their functions, including the subprocessors described in Section 7.
Data required for PeopleHub to function may be processed and shared with infrastructure and technical service providers acting within the scope of their functions, including the subprocessors described in Section 7.
If PeopleHub is distributed through other app stores, we will adapt our privacy declarations to the rules and categories required by that specific platform.
We will regularly align the information in app stores with PeopleHub's actual implementation.
We may amend this Privacy Policy from time to time in order to:
The date of the last update is shown at the top of this Policy.
If a change represents a material change to the way we process personal data, we will take appropriate steps to notify users before or at the time the change takes effect, where required under applicable law.
For questions about this Privacy Policy, the protection of personal data, or exercising your rights, you can contact us at:
TTK SOLUTIONS d.o.o., Knespolje bb, 71428 Knespolje, Bosnia and Herzegovina. Email: legal@ttk.solutions
For questions relating to the processing of data within your employment relationship, you may also contact PeopleHub's administrator or your employer's HR department.
This Privacy Policy describes how PeopleHub processes personal data at the platform level.
For specific HR processing, your employer may have additional privacy policies, internal rules, retention periods and legal bases applicable to its processing of personal data.
If there is a discrepancy between this Policy and your employer's specific policy relating to a particular HR process, the information and rules determined by your employer as controller apply to that process, in accordance with applicable regulations.