Privacy Policy & Cookie Policy

atWorkAI – Corporate Welfare Shpk · Last updated: March 2026 · Version 1.0

Data Controller Information

Field	Information
Company	atWorkAI – Corporate Welfare Shpk
Address	Durana Tech Park, Rruga Aleksandër Moisiu, Albania
Website	https://atworkapp.co
Email	[email protected]
VAT / NIPT	M25201057K
DPO Contact	[email protected]

Part 1 — Privacy Policy

1. Introduction

atWorkAI – Corporate Welfare Shpk (“atWork”, “we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our websites, mobile applications, and related services.

Visit our website at https://atworkapp.co
Use the atWork mobile or web application
Interact with us as an employee of one of our corporate clients
Communicate with us by email, phone, or support channels

This policy complies with the EU General Data Protection Regulation (GDPR), applicable Albanian personal data laws, and other relevant legal frameworks where required.

2. What Personal Data We Collect

2.1 Data you provide directly

Name, surname, and professional email address
Phone number and job title
Company information and delivery details
Dietary preferences, allergies, and food restrictions
Payment information processed via secure third-party payment providers
Messages and correspondence sent to our team

2.2 Data collected automatically

IP address and device identifiers
Browser type, operating system, and language settings
Pages visited, time spent, and navigation paths
Application usage events and feature interactions

2.3 Data received from corporate clients

Where your employer provides access to atWork, we may receive work-related information needed to administer your account and meal benefits, such as employee name, employee ID, work email, budget allocation, department, or office location.

3. Legal Basis for Processing

Legal Basis	When We Rely On It
Contract (Art. 6(1)(b))	Processing your order, delivering meals, managing your account
Legitimate Interest (Art. 6(1)(f))	Service improvement, fraud prevention, analytics, direct marketing to business contacts
Consent (Art. 6(1)(a))	Non-essential cookies, marketing communications, dietary data
Legal Obligation (Art. 6(1)(c))	Accounting and regulatory compliance
Vital Interest / Safety	May be used if food safety data were necessary for user safety

4. How We Use Your Data

Deliver and manage meal orders and platform access
Operate and improve the atWork platform and mobile app
Communicate service updates, reminders, and support responses
Personalize menus and food recommendations where relevant
Measure service quality and improve user experience
Comply with legal obligations and internal audit requirements
Protect against abuse, unauthorized access, and fraud

5. Who We Share Your Data With

We do not sell personal data. We may share data with:

Restaurants and kitchen partners to fulfill your meal orders
Delivery partners to complete deliveries
Payment processors for secure payment handling
Cloud and infrastructure providers hosting our services
Analytics and communication providers where necessary
Public authorities or regulators when required by law

All third-party providers are bound by data processing agreements and are expected to implement appropriate GDPR safeguards.

6. International Data Transfers

We primarily store and process data within the European Economic Area. If data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses or equivalent lawful transfer mechanisms.

7. Data Retention

Account data: kept for as long as your account remains active
Order and invoice data: retained as required by accounting and tax laws
Communication records: retained for support and dispute resolution purposes
Preference and consent data: retained until withdrawn or no longer needed
Cookie consent logs: retained to demonstrate compliance where required

8. Your Rights Under GDPR

Right of Access
Right to Rectification
Right to Erasure
Right to Restriction of Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent at any time where processing is based on consent
Right to lodge a complaint with the competent supervisory authority

To exercise your rights, contact us at [email protected].

9. Data Security

TLS encryption for data in transit
Role-based access control and authentication safeguards
Monitoring, logging, and incident response procedures
Regular security updates and infrastructure hardening
Backups and availability measures where appropriate

10. Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The latest version will always be published on this page.

Part 2 — Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your browser or device when you visit our website or use our services. They help us keep the service secure, remember preferences, and understand how the platform is used.

2. Types of Cookies We Use

2.1 Strictly Necessary Cookies

Cookie Name	Provider	Purpose	Duration	Type
session_id	atworkapp.co	Maintains your authenticated session	Session	HTTP Cookie
csrf_token	atworkapp.co	Protects against CSRF attacks	Session	HTTP Cookie
cookieConsent	atworkapp.co	Stores your cookie consent preferences	12 months	HTTP Cookie

2.2 Performance & Analytics Cookies

Cookie Name	Provider	Purpose	Duration	Type
_ga	Google Analytics	Distinguishes unique users for traffic analysis	2 years	HTTP Cookie
_gid	Google Analytics	Stores and counts page views	24 hours	HTTP Cookie
_gat	Google Analytics	Throttles request rate	1 minute	HTTP Cookie
_clck	Microsoft Clarity	Persists the Clarity user ID and preferences	1 year	HTTP Cookie

2.3 Functional Cookies

Cookie Name	Provider	Purpose	Duration	Type
user_lang	atworkapp.co	Stores preferred language setting	12 months	HTTP Cookie
meal_pref	atworkapp.co	Stores dietary preference selection	6 months	HTTP Cookie
region	atworkapp.co	Caches delivery availability region	3 months	HTTP Cookie

2.4 Marketing Cookies

Cookie Name	Provider	Purpose	Duration	Type
_fbp	Meta (Facebook)	Used by Facebook to deliver advertisements	3 months	HTTP Cookie
_gcl_au	Google Ads	Used for ad measurement and conversion tracking	3 months	HTTP Cookie

3. Managing and Withdrawing Consent

Where legally required, a cookie banner allows you to accept or reject non-essential cookies. You can also manage cookie settings through your browser.

Google Chrome: Settings > Privacy and security > Cookies and other site data
Safari: Preferences > Privacy
Microsoft Edge: Settings > Cookies and site permissions
Mozilla Firefox: Settings > Privacy & Security

4. Third-Party Services

Some cookies may be set by trusted third-party providers, such as analytics, embedded content, payment tools, or advertising platforms. Their handling of data is governed by their own privacy policies.

5. Cookie Consent Management

You may update your cookie choices at any time through the cookie banner or cookie preferences tool, where available.

6. Do Not Track

Some browsers offer a “Do Not Track” feature. Because there is no consistent industry standard for responding to these signals, our website may not respond to them.

7. Updates to This Cookie Policy

We may revise this Cookie Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact & Complaints

For any privacy request or complaint regarding this policy, please contact us using the details below.

Field	Information
Company	atWorkAI – Corporate Welfare Shpk
Address	Durana Tech Park, Rruga Aleksandër Moisiu, Albania
Website	https://atworkapp.co
Email	[email protected]
VAT / NIPT	M25201057K
DPO Contact	[email protected]