Effective date: January 1, 2026.
This Privacy Policy and Personal Data Protection Policy (hereinafter: the "Privacy Policy") explains how personal data is collected, used, processed and protected within the Atendo software platform, including the web application and the mobile application.
The Atendo platform is provided by Nik-Com, Company ID: 60422664, Episkopa Visariona 5, 21000 Novi Sad, Republic of Serbia ("Nik-Com", "Atendo", "we", "our").
This Privacy Policy applies to all users of the Atendo platform, including employees, associates, and administrative or authorized users of organizations that use the Atendo system.
In most cases the following applies:
With respect to the personal data the Customer processes through the platform, the Customer generally acts as the data controller and Nik-Com as the processor.
Nik-Com does not independently decide the purpose or means of processing employees' personal data; it processes data solely in accordance with the instructions of the organization using the Atendo system.
For questions concerning the processing of their data, employees and end users should primarily contact their employer as the data controller.
Depending on the platform settings defined by the Customer, Atendo may process the following categories of personal data:
Nik-Com does not collect data that is not necessary for the Atendo platform to function.
For the mobile application to function properly, Atendo may use the following device features and permissions, exclusively for clearly defined purposes:
Location data is used exclusively in connection with attendance recording and verification of field activities, in accordance with the settings defined by the Customer.
Location data is collected at the moment of clock-in and clock-out to verify presence at the approved location. Additionally, during an active work session (i.e. while the user is clocked in), location data may be used to verify whether the user is within a predefined zone (geofence).
The application does not continuously track location outside an active work session. Location data is not collected when the user is not clocked in and is not used for background tracking unrelated to time and attendance recording.
Location data is not used for marketing, analytics or commercial purposes.
Use of location services and geofence functionality depends exclusively on the settings defined by the Customer.
Bluetooth Low Energy (BLE) and NFC technologies are used exclusively to:
Atendo does not use Bluetooth or NFC to track users, map movement, or collect data outside the purpose of attendance recording.
The device camera is used exclusively to scan QR codes for clocking in and out.
Atendo:
Personal data is processed exclusively for the following purposes:
Data is not used for marketing, user profiling, or automated decision-making.
For business customers using the Atendo system to manage employee working time and attendance, the processing of personal data is additionally governed by a Data Processing Agreement (DPA) between Nik-Com, as processor, and the Customer, as controller.
The legal basis for processing personal data is determined by the Customer as controller, and may include:
Nik-Com processes data exclusively within the stated legal bases.
Personal data may be made available to:
Data is not sold or shared with third parties for marketing purposes.
Where data is processed or stored outside the Republic of Serbia or the European Union, appropriate safeguards are applied in accordance with applicable regulations, including standard contractual clauses.
Nik-Com applies appropriate technical and organizational security measures, including:
System security is continuously improved in line with best practice.
Personal data is retained for as long as necessary to achieve the purpose of processing, in accordance with the Customer's instructions and applicable regulations.
Upon termination of platform use, data is deleted or returned to the controller, unless there is a legal obligation to retain it.
In accordance with applicable regulations, users have the right to:
Requests should primarily be addressed to the employer as data controller.
As a data subject, you have the following rights under applicable personal data protection regulations:
Requests to exercise the above rights should primarily be addressed to the employer or the organization using the Atendo system, as data controller.
Where necessary, you may also contact Nik-Com as data processor using the contact details given in this Privacy Policy.
Requests to exercise these rights will be answered without undue delay, and no later than the deadline prescribed by applicable personal data protection regulations.
Where processing of personal data is based on the controller's legitimate interest, you have the right to object at any time to such processing, on grounds relating to your particular situation.
You also have the right to object to the processing of your personal data for direct marketing purposes, where such processing applies.
Where the legal basis for processing is your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
If you believe that the processing of your personal data has been carried out contrary to applicable regulations, you have the right to lodge a complaint with the competent supervisory authority for personal data protection, in accordance with the regulations of the country of your residence, place of work, or the place where the alleged infringement occurred.
Additional information on the rights of data subjects is available in Articles 12–23 of the General Data Protection Regulation (GDPR).
This section applies to visitors of the public atendo.org website, including all of its language versions, and not to the use of the Atendo platform. For personal data collected through the website, Nik-Com acts as the data controller. Requests to exercise the rights described in section 11 regarding this data should be sent directly to Nik-Com, using the contact details in section 14.
When you fill in one of the forms on the website, we process the data you enter and technical data about the submission:
The data is used to respond to your enquiry, prepare a trial account or an assessment, and communicate about a possible cooperation. The legal basis is taking steps at your request prior to entering into a contract, or our legitimate interest in responding to an enquiry you have sent.
The data is stored in the Atendo system database and forwarded by email to Nik-Com staff responsible for sales and support. It is kept for as long as necessary to handle the enquiry and any resulting business cooperation, and you can request its deletion at any time.
The forms are protected by Cloudflare Turnstile, a service of Cloudflare, Inc., to prevent automated (bot) abuse and spam. When you use a form, Turnstile checks in your browser whether the request comes from a human. For this purpose Cloudflare processes technical data such as your IP address, browser information (User-Agent) and the technical fingerprint of the connection. The result of the check is sent to our server together with the form content, and the server verifies it with Cloudflare. A submission without a successful check is not accepted.
The legal basis is Nik-Com’s legitimate interest in protecting its forms and systems from abuse. Cloudflare may also use this data as an independent controller to improve its bot detection. More information: Cloudflare Privacy Policy, Turnstile Privacy Addendum.
The website uses Google Analytics 4 (Google Ireland Limited / Google LLC) to produce statistics on visits, page usage and interaction with key elements, such as button clicks and form submissions. Form submissions are also measured as conversions in Google Ads.
On your first visit a cookie notice is shown. Analytics cookies are set only if you accept them. If you decline or make no choice, no cookies are set, but through Google Consent Mode Google may still receive limited data without cookies (e.g. that a page was opened and basic technical information about the browser), which is used for aggregated statistics. Advertising cookies are not used on the website.
The legal basis for analytics cookies is your consent, which you can change at any time using the “Cookies” button in the bottom left corner of the page. Your choice is stored in your browser (localStorage) and contains no personal data. Details are in the Cookie Policy, and information on Google’s processing in the Google Privacy Policy.
The website is delivered through Cloudflare (a content delivery and protection network) and hosted with a hosting provider. On every visit, technical data such as your IP address, time of access, requested page and browser information are processed to deliver content, ensure security and fix errors. Fonts are loaded from Google Fonts, so your browser sends your IP address to Google when loading them.
The legal basis is Nik-Com’s legitimate interest in the secure and proper operation of the website. Google and Cloudflare may process data outside the Republic of Serbia and the European Union; in that case, the safeguards described in section 8 apply.
Nik-Com reserves the right to amend this Privacy Policy in the event of legal, technical or organizational changes.
Users will be notified of material changes via the platform or the official website.
For questions regarding this Privacy Policy or the processing of personal data, you may contact us:
Nik-Com
Email: [email protected]
Address: Episkopa Visariona 5, 21000 Novi Sad, Republic of Serbia