Workday Payroll privacy & data

Depending on the situation, Workday can be either a controller or a processor. This Privacy Statement only applies when Workday is acting as a controller for your personal information.

Your business contact information such as name, email, telephone number, company name, job details, and address.

This includes your IP address, device type (e.g., iPhone,desktop, PC), unique device identifiers, the type of browser you are using

Which pages you visit and the features you use.

billing information (name, address, credit card number)

health and safety details (emergency contact, dietary preferences)

broad geographic location from which you are accessing our site (country or city-level location based on your IP address).

We use this information for internal analysis to better understand who our visitors are, where they come from, and what content interests them the most.

We use this data to run, maintain, and protect our websites, ensure you can access the content you requested, and display information specific to your location.

We keep your personal information for as long as we have a legitimate business need to do so

entering into “standard contractual clauses” approved by the European Commission or competent governmental authority

Workday relies on the DPF as a legal basis for transfers of personal information from the EEA, UK, and Switzerland to the United States.

When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it.

Obtain access to your personal information that is being processed by us.

Correct inaccurate personal information.

Request the deletion of your personal information.

Request the portability of your personal information in a structured, commonly used, and machine-readable format.

Opt out of the sale or sharing of personal information for targeted advertising.

Under some data protection laws, our disclosure of this information to third parties through cookies and other trackers for targeted advertising may be considered a “sale” or “share” of personal information.