Processing employee data

Controller and processor

When an employer uses TimeTakt for employee time and absence records, the employer normally determines the purposes of processing and is the controller. TimeTakt provides the technical service as a processor on the employer’s instructions. Our own account, billing and support processing is described in the privacy notice.

Data processing agreement

Before using TimeTakt to process employee personal data, arrange the required agreement under Article 28 GDPR with hello@timetakt.com. It must identify the customer, instructions, processing duration, data categories, approved subprocessors, security measures, support obligations, deletion or return, and audit arrangements. This information page is not a substitute for the concluded agreement.

Keep employee information limited

Only record information necessary for the employment purpose. A sickness entry can itself reveal health information; medical diagnoses and documents should not be entered in notes. Set access by role, review sharing links and revoke access that is no longer needed. The employer must determine the applicable legal basis and inform employees.

Requests and incidents

Contact hello@timetakt.com for the processing agreement, data-subject requests, exports, deletion instructions or security concerns. Include the company reference, but do not send passwords, medical records or unnecessary employee details.