Privacy policy

Who is responsible for the processing of my personal data?

Responsible for the processing of your data is

TimeTac GmbH, Schmiedgasse 31, 8010 Graz, Austria

email: dataprotection@timetac.com

Contact for data protection-related inquiries:

TimeTac GmbH, Schmiedgasse 31, 8010 Graz, Austria

email: dataprotection@timetac.com

Competent supervisory authority for data protection matters:

Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at

Who is the Data Protection Officer?

The function of the Data Protection Officer, also called Data Protection Officer. If you have questions, suggestions, or complaints about the processing of your data, you can reach the Data Protection Officer and their team at:

TimeTac GmbH, Schmiedgasse 31, 8010 Graz, Austria

email: dataprotection@timetac.com

For what purposes and on what legal basis is my personal data processed?

Further information on data processing in connection with the operation of our website can be found in the “Cookies” section.

Processing for the performance of a contract and for pre-contractual measures carried out at your request: If you book a visit or contact us, we process the personal data provided in order to handle your request. If you provide a name for address during a visit, this will be processed during the visit and deleted immediately after it ends.

Processing based on legal obligations: Legal provisions also require us to process your personal data, e.g. for accounting, controlling, and compliance with tax law regulations.

Processing based on legitimate interests: A legitimate interest in data processing by us or third parties exists in the following cases:

• Measures to protect employees, visitors, and our property
• Exercising or defending legal claims
• Ensuring our IT security and IT operations

Processing based on consent: If there is neither a contract, nor legal obligations, nor a legitimate interest, data processing can still be lawful — namely, if you have given us your consent to do so. The scope and content of this data processing always results from the respective consent. You can withdraw your consent at any time for the future. If you withdraw your consent, the processing carried out up to the time of withdrawal remains lawful. This means that a withdrawal does not have retroactive effect.

Processing for statistical purposes: We also process your personal data for statistical purposes pursuant to § 7 of the Data Protection Act.

Am I obligated to provide my personal data? What happens if I do not want to?

We rely on your personal data for our business relationship (bookings, responding to contact inquiries). If you do not wish to provide it, we may unfortunately be unable to provide certain services. If we process your data solely on the basis of your consent, you are not obligated to give this consent or to provide the data.

Is there any decision-making based on automated processing – e.g. profiling?

No, no such processing takes place.

To whom is my personal data disclosed?

Your personal data may be disclosed to:

• Processors and other service providers (controllers) commissioned by us, e.g. for IT, back office, legal and tax advice, provided they need the data for their task.
• Third parties, if this is mandatory for the performance of a contract or due to legal provisions.
• Public authorities and institutions, as well as persons acting under official authority, provided we are legally obligated to do so or in order to safeguard our legitimate interests, e.g. tax authorities.

Disclosure to third parties may also take place if and as long as you have consented to the disclosure.

A list providing an overview of possible recipients can be found here.

Is my personal data transferred to a third country?

Your personal data may be transferred to a third country in the following cases:

• If this is necessary to assert, exercise, or defend legal claims, or if there is a legal obligation to do so, e.g. upon official request within the framework of a mutual legal assistance agreement.
• If this is necessary for your contract or for pre-contractual measures.
• Our processors and sub-processors may be based in third countries. Unless the transfer is based on an adequacy decision by the European Commission, we transfer the data on the basis of suitable or appropriate safeguards. Upon request, we are happy to provide you with these.
• In other cases where data is transferred to a third country, you will be informed separately.

How long is my personal data retained?

Your personal data is retained for as long as necessary for the respective purpose, for example if a law requires retention.

Legal provisions that are relevant for us include, for example:

• Austrian Commercial Code (Unternehmensgesetzbuch) § 212 (7 years)
• Federal Fiscal Code (Bundesabgabenordnung) § 132 (7 years, or for the duration of a tax procedure)

If you register for a trial account of our software via our website, we process personal data that you provide to us directly during registration, as well as information about your use of our website. This serves to provide the trial account and to initiate a business relationship. In particular, the following data may be processed:

• Name
• Company name
• Email address
• Pages visited
• Preferred language
• Product interests
• Time zone

This data is stored in our Customer Relationship Management (CRM) application (see § 4).

To provide the trial account, we also use your data to create and manage your user account. Use of our software application at prod-plus.timetac.com is subject to our General Terms and Conditions as well as the Data Processing Agreement.

In addition, we may use your data for direct marketing, for example to inform you by email about product updates or supplementary services. We may also contact you by email or telephone to discuss your requirements and support you in setting up your trial account.

The legal basis for processing personal data in connection with a trial account is our legitimate interest in managing and documenting existing and potential business relationships, as well as the provision of the (pre-)contractual service.

If you do not become a TimeTac customer and no further interactions take place, we delete this data after 2 years. This retention period serves to allow us to trace previous interactions and inquiries.

If you contact us via a contact form on our website, by email, or by telephone, we process your personal data to handle your inquiry and to provide our services. This includes, in particular, responding to inquiries about our products or providing support services.

The legal basis for this is our legitimate interest in processing your inquiry and providing you with the expected services.

The data processed in this context is stored in our CRM and support ticketing system.

If you are not a TimeTac customer and no further interactions take place, we delete this data after 2 years. This retention period serves to allow us to trace previous inquiries in the event of renewed contact.

If you register for a webinar, we process your personal data to enable your participation in the webinar, as well as for the organizational and statistical evaluation of our webinars.

The data is used, in particular:

• To conduct and manage the webinar
• For communication in connection with the webinar
• To analyze and optimize our webinar offering

This data is stored in our CRM application as well as in an application for transactional emails.

In addition, we may use your data for direct marketing, for example to inform you by email about product updates or supplementary services, or to provide further information about the webinar you attended or additional webinars.

The legal basis for this is your consent given upon registration for the webinar, as well as your agreement to the privacy policy.

If you do not become a TimeTac customer and no further interactions take place, we delete this data after 2 years. This retention period serves to allow us to trace prior interest in our products and services.

What rights do I have?

The GDPR grants the following rights regarding your personal data. You have the right to:

• Access, pursuant to Article 15 GDPR
• Rectification, pursuant to Article 16 GDPR
• Erasure, pursuant to Article 17 GDPR
• Restriction of processing, pursuant to Article 18 GDPR
• Data portability, pursuant to Article 20 GDPR
• Object, pursuant to Article 21 GDPR
• Decisions not based solely on automated processing – including profiling, pursuant to Article 22 GDPR

What information do I need to provide?

We do not want your data to fall into the wrong hands. Please understand that in cases of doubt, we may request further information to verify your identity.

How can I submit my request?

You can submit your request by email to:

or by letter to:

How long does it take for my request to be processed?

We will provide you with the relevant information about the measures taken without undue delay, and in any case within one month of receiving your request.

This period may be extended by a further 2 months if necessary, taking into account the complexity and number of requests. In any case, we will inform you within one month of receiving your request of any such extension and the reasons for it.

Does it cost me anything to exercise my rights?

No, requests are processed free of charge. Exception: If requests are manifestly unfounded or excessive, we are entitled to charge a reasonable fee. This takes into account the administrative costs of providing the information, refusal, or carrying out the requested measure.

Are there ways to file a complaint?

For all complaints, questions, and suggestions regarding data protection, our Data Protection Officer is happy to help. We are convinced that a joint solution can be found for almost every problem.

If you do not receive a timely response to a request, believe your right to data protection has been violated, or believe that we have not lawfully complied with your request, you may also file a complaint with the competent supervisory authority:

Data Protection Authority of the country

Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at

Furthermore, any person who has suffered material or non-material damage as a result of an infringement of the GDPR or of § 1 or Article 2, Main Chapter 1 of the Austrian Data Protection Act (DSG) is entitled to compensation from the controller or processor pursuant to Article 82 GDPR. The general provisions of civil law apply in detail. Please note that claims for damages are not handled by the Austrian Data Protection Authority, but by the local regional court (Landesgericht) responsible for civil matters in your district. However, claims and actions may also be brought before the regional court in whose district the defendant has their habitual residence, registered office, or a place of business. You can find out which court has jurisdiction here:
https://www.justiz.gv.at/

Using cookies, we analyze access to our website and create content and offers that correspond to your needs. You can set your browser so that your consent is required before using a cookie, or so that the use of cookies is generally blocked. When visiting this privacy policy page, the cookie bar is not automatically displayed, so that you can first inform yourself.

In the following area, which you can reach by clicking the button [borlabs-cookie type=”btn-consent-preferences” title=”Cookie Settings” element=”link”/], you will find further information and the option to object to the use of cookies, analytics, and services.

Show Cookie bar

In addition, we use online services from third parties in order to provide certain functions on this website. These also use cookies, web analytics, and third-party services. All information on this can be found under “Data Processing for Online Services”.