Introduction
TimeTac GmbH, Schmiedgasse 31, 8010 Graz, Austria, hereinafter referred to as “TimeTac”, is a processor within the meaning of Art. 28 GDPR. TimeTac processes personal data in the context of the use of the TimeTac app on behalf of and only on the documented instructions of a controller. The controller in this context is the respective customer of TimeTac. Typcally, this is the employer of the data subject.
TimeTac acts as a processor in relation to the use of the app and is therefore not subject to any information obligation regarding the processing of personal data in accordance with Art. 13 GDPR.
However, the installation of the TimeTac app via the Google Play Store or the Apple App Store requires the processing of personal data by TimeTac. TimeTac is the controller only in this context within the meaning of Art 4(7) GDPR.
In addition, consent for the transmission of telemetry data can optionally be given within the mobile apps. In this context, TimeTac is also the controller within the meaning of Art. 4(7) GDPR.
Processed data
After installing the TimeTac app on the Google Play Store or the Apple App Store, the following data is processed: Diagnostics (crash data, if transmitted to TimeTac as part of a crash – can be set up by the controller), usage data (product interaction).
The processing of the mentioned personal data is based on the contractual basis pursuant to Art 6 para 1 lit b GDPR.
As part of the processing of optional telemetry data, processing is based on consent in accordance with Art 28 GDPR.
In TimeTac’s role as processor according to Art 4 lit 7 GDPR processing data on behalf of the controllers (our customers), the following data is processed:
Data marked “*” are required.
¹ Optional: When using a terminal with a transponder
² Optional: Data which is only processed if the customer makes this data available in the software application of the provider
³ Optional: When using the native apps. The user has the ability to refuse the processing of this data within the app. In addition, it is possible to deactivate the collection of geolocation data for the entire account.
⁴ Optional: When using a terminal with a fingerprint scanner. Upon instruction of the Customer, Provider can access binary fingerprint data via remote connection which can then be transferred to another device of Customer.
⁵ Optional: When using Project Time Tracking
⁶ Optional: When using interfaces in TimeTac (including within the scope of add-ons)
Purposes for processing
The aforementioned (pseudonymised) data – where TimeTac acts as controller – is processed for the purpose of analysing stability problems and for recording general app usage. This data is collected by the mobile device used.
The data processed by TimeTac in the role as processor is processed for the purpose to fulfill the contracts with our customers.
3rd party transfers
The personal data collected will not be transmitted to other controllers.
Data Retention
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. In any case, we store your personal data for as long as statutory retention obligations exist or the limitation periods for any claims have not yet expired.
If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.
Contact Data and your right regarding your personal data
Your rights with regards to the personal data mentioned as well as our contact details can be found in our general privacy policy, available at: https://www.timetac.com/en/company/privacy-policy/.
