Note:
We'll soon use Cronofy for the Recruiting calendar integration only. For time off, you can bypass Cronofy and integrate your company calendar directly.
The article addresses the most frequently asked questions on the Recruiting calendar integration. Personio's subcontractor Cronofy provides this calendar integration service.
What is Cronofy?
Cronofy B.V. (Apollolaan 151, Amsterdam, 1077 AR, The Netherlands) is a subcontractor of Personio that provides a calendar synchronization service. With Cronofy, you can integrate your company calendar with Personio.
What data does Cronofy access?
Cronofy has access to all calendars, entries, and content. This includes email addresses, calendar entries and content, subjects, places, and times of calendar invitations created by your employees via Personio.
If your employees store confidential or private information in their personal calendars, inform them that after you activate the calendar integration, third parties and selected employees may access all calendar contents. Alternatively, suggest that employees don't store confidential or private information or appointments in their calendars. This is a recommendation that doesn't constitute legal advice.
GDPR compliance
Cronofy Amsterdam is based in the EU and processes the data exclusively on servers located in Germany. It is ISO27001 certified and has a SOC2 report available. For more information on Cronofy compliance and security, refer to Cronofy's documentation on Privacy and Security.
Data processing agreement (DPA)
As Cronofy is a Personio subcontractor, it isn’t necessary to conclude a separate DPA with them. You can use their service under Personio's DPA provided you opt in to Cronofy B.V. as a subprocessor of Personio.
To opt in to Cronofy B.V. as a subcontractor, follow these steps:
- Go to Settings.
- In the Account & support section, click Subscription & Billing.
- Click the Data Protection Information tab.
- In the list of subcontractors, enable Cronofy B.V.
When you opt in to Cronofy as a subcontractor, the data required for the provision of its services is processed by Cronofy. You can opt out of Cronofy to prevent this processing of data.
Can I restrict or limit Cronofy's access to my data (using Graph API)?
Cronofy needs full access to your data to be able to create events. However, Graph API has fewer permissions and accesses only calendar data. You can further limit access to certain user groups by following this documentation.
Can I restrict or limit Cronofy's access to my data (using Service Account)?
Cronofy needs full access to your data to create events. However, you can:
Why is free-busy access not enough?
Using free-busy access prevents Personio from creating events directly in your calendar. As this is the core functionality of our feature, we need full access. See here for more information on levels of access.
Are hybrid setups supported?
No, as it is only possible to connect one service account with Personio.