Privacy Policy

The controller responsible for processing personal data is:
Mikel Krasniqi, Höllgehau 10, 86381 Krumbach (Schwaben), Deutschland
E-Mail: hello@webtakt.ai

We process account and contact information to provide the service and answer contract-related enquiries (Art. 6(1)(b) GDPR). Technical security and abuse prevention serve our legitimate interest in a reliable service (Art. 6(1)(f)). Contract, cancellation, withdrawal and accounting records are also kept to meet legal duties (Art. 6(1)(c)). Optional analytics requires consent (Art. 6(1)(a)).

Account data includes name, email, optional phone number, password hash, company membership and permissions. Employers enter schedules, working times, leave and substitute information. The employer determines the purposes and legal basis for its employee records; TimeTakt processes those records on its instructions under a data processing agreement. Sickness information can be health data under Art. 9 GDPR. Do not enter diagnoses or medical documents. Contact and contract forms record the details you submit and their receipt time.

A hosting and email provider based in Cyprus operates the site on infrastructure in Germany. A payment processor based in Ireland processes payment and billing information when you use paid checkout; TimeTakt does not store full card numbers. Optional external sign-in exchanges profile and verified email information with the identity provider you select. A web analytics provider based in Ireland processes public-page usage only after consent. A global delivery network supplies some interface libraries and receives technical connection data. Access to employee records depends on assigned company permissions. Public sharing links disclose their selected records to people who can unlock them.

The selected identity and analytics providers, payment processor and delivery network may process data outside the EEA. Relevant safeguards depend on the recipient and service, including an applicable adequacy decision or standard contractual clauses. You can request the names of actual recipients and details and copies of applicable safeguards at hello@webtakt.ai.

Session and security cookies are necessary for login and forms (§ 25(2) TDDDG). Language and cookie choices are stored for up to 365 and 180 days respectively. Optional web analytics cookies require consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw that consent in Cookie settings; this affects future processing. No analytics runs on private work pages, authentication pages or contract declaration forms.

Account records are kept while the account is maintained. Employee records are retained according to the employer’s instructions and applicable obligations. Enquiries are retained while necessary to handle the matter and any resulting claims. Billing and contract records remain where statutory retention duties or legal claims require them. Deletion can therefore be restricted even after account closure. Contact us for a review of the records and retention grounds applying to your request.

Subject to the statutory conditions, you can request access, correction, deletion, restriction and data portability. You can object to processing based on legitimate interests, and withdraw consent at any time without affecting prior lawful processing. You can complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. For employee records, contact your employer as controller; we support its handling of requests.

We update this notice when actual data processing changes. The current version and date appear on this page. For privacy questions, use the contact details under “Controller” or in the legal notice.