Alpina Group HR is an internal human resources management platform operated by Alpina Group, accessible at app.alpinagrouphr.com. For GDPR purposes, Alpina Group is the data controller.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email, role, hashed password | Authentication, access control |
| Employee / worker data | Name, employer, work hours, salary, nationality | Payroll, workforce management |
| Candidate data | Name, appointment date, firm, county, notes | IGI appointment scheduling |
| Identity documents | Passport scans, work permits, ID copies | Compliance and document tracking |
| Uploaded files | PDFs, images, spreadsheets | HR document management (Google Drive) |
| Usage data | Login timestamps, IP address, session activity | Security monitoring, audit trail |
| Notification data | Telegram message content, delivery status | Automated HR reminders |
We use your information to: operate the HR platform for authorized users; process payroll and generate reports; schedule and manage IGI appointments; store documents in Google Drive; send Telegram notifications about appointments and document expiry; maintain security and audit logs; comply with Romanian and EU legal obligations.
Legal bases (GDPR Art. 6): Contract performance (6(1)(b)); Legal obligation (6(1)(c)); Legitimate interests (6(1)(f)); Consent for optional features (6(1)(a)).
Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
Files in Google Drive are also subject to Google's Privacy Policy.
We never sell, rent, or trade personal data. Limited sharing occurs only as follows:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Google LLC | File storage via Drive API | Google Privacy Policy |
| Telegram Messenger | HR notifications via Bot API | Telegram Privacy Policy |
| Authorized staff | Internal HR operations | Role-based access, confidentiality obligations |
| Legal authorities | Court orders, regulatory requirements | Only as required by applicable law |
We protect your data with: HTTPS/TLS encryption for all transmissions; bcrypt-hashed passwords; CSRF protection and secure session management; role-based access control; file type and size validation; login rate limiting; regular security reviews.
No system is fully impenetrable. In case of a data breach, we will notify affected parties as required by law.
Under GDPR you have the right to: access your data; correct inaccurate data; erase data where no legitimate basis exists; restrict processing; data portability; object to processing; and withdraw consent at any time. Contact admin@alpinagrouphr.com to exercise any right. We respond within 30 days. You may also lodge a complaint with your national supervisory authority (Romania: ANSPDCP).
We use only strictly necessary cookies: a session cookie for authentication (expires on browser close or 30 minutes of inactivity) and localStorage for theme preference. We use no tracking, advertising, or analytics cookies. No Google Analytics, Facebook Pixel, or similar tools are used.
This application is for adults (18+) in a professional context only. We do not knowingly collect data from children under 16. Contact us immediately if you believe a minor's data has been collected.
We may update this policy to reflect changes in practices or law. Significant changes will be communicated within the application. The effective date above reflects the latest revision. Continued use constitutes acceptance.