General Data Protection Regulation (GDPR) compliance at Peakon

Effective from May 25th 2018, the General Data Protection Regulation (GDPR) replaces the Data Protection Directive which has been law across the European Union for the past 20 years. Its mission is to harmonize the approach to data protection matters across Europe by establishing a single set of pan-European rules, protecting and empowering citizens.

Peakon is built with GDPR compliance in mind and we're excited to help our customers understand how we are approaching this.

Data Peakon collects can be classified into three categories; information employees give us, employee information given to us by employers, and information Peakon collects when you complete surveys or use the platform. Employees provide information via the surveys they complete. Employers provide information about their employees such as length of tenure, department, job title, location etc. in addition to basic contact information, such as employee email address for the survey to be sent to.

Peakon automatically collects information when the platform is used for systems administration purposes, and to ensure the right access is given to users based on the access rights that have been set by the account administrators.

Information that employees provide is aggregated with information from other employees, and compared to data from past or future employee responses and/or industry benchmarks. This information is not used to personally identify individuals. All survey responses are entirely optional and questions can be skipped. There is no requirement for employees to complete Peakon surveys. 

Peakon will also provide information about products and services as requested from our users. Peakon may also contact users to gain feedback on how to improve the product, as well as informing our users of new features, versions of the product, or service offerings. We also use this data to handle queries, concerns and complaints.

In short, Peakon will store data for up to 5 years. In the event that your organization stops using Peakon, data will be fully anonymized no later than 6 months after the expiration of the service period. We will not store personal data for longer than is reasonably necessary to use it in accordance with our application privacy statement, our contractual agreement with the customer, or with our legal rights and obligations.

In addition, personal data that we collect from employees through the platform, is subject to the following rights: 

When requesting to delete personal data, please contact your HR responsible within your organization.

It is also possible to unsubscribe from Peakon emails, by clicking on the unsubscribe option on the email.

The core of the Peakon platform is hosted inside the EEA, where employee data and survey responses are stored and processed, with reasonable and adequate measures designed to ensure it is stored securely and safely.

Some Peakon features may require that some of the information that we collect from users be transferred, processed, or stored at a destination outside the European Economic Area ("EEA"). This may be required to support certain features of the Platform instructed by your employer. Full details of the use of sub-processors can be found on the Workday Subprocessor List.

Appropriate technical and organizational measures are in place to mitigate against accidental, unauthorized or unlawful loss, destruction, alteration, disclosure or access to Personal Data.  

Measures implemented by Peakon include:

If you have any questions about this article, please contact Workday Support.