ClickTime & GDPR

At ClickTime, we provide high-quality time and expense management applications for businesses. We're happy to announce that we are in compliance with the General Data Protection Regulation (GDPR). In this article, we'll explain our methods and plans to achieve GDPR compliance.

GDPR Territorial Scope

Companies are subject to the General Data Protection Regulation (GDPR) if they are located in the EU, or if they process the personal data of employees who are EU residents.

Data Subject Rights Under GDPR

In accordance to GDPR, individuals will have the right to access, rectify, restrict processing, and request the erasure of their personal data. To exercise these rights, they can contact us at gdpr@clicktime.com. Click here to learn how to address data subject requests.

In order to use ClickTime, users subject to GDPR will be asked for consent to process their personal data. Users will also have the option to withdraw consent available under My Preferences. By withdrawing consent, Your company's ClickTime Data Officer will be contacted to address the request. To learn more about our practices, you can read our Privacy Policy, our Security Document, and our Terms of Service. ClickTime is committed to protecting your privacy and anonymizes personally identifying information from inactive accounts in compliance with GDPR regulations.

Additional information about GDPR

The GDPR has two key terms and four key players:

Terms
Processing: any operation or set of operations which is performed on personal data.
Personal Data: any data relating to a natural person that may be identifiable.

Players
Data Subject: natural person who could be identified through the personal data.
Controller: natural or legal person who determines the purpose and means of processing of personal data (Your Company). 
Processor: natural or legal person who processes personal data on behalf of the controller (ClickTime).
Sub-Processors: natural or legal persons other than the controller, and processor who, under the direct authority of the controller or processor, are authorized to process personal data.

ClickTime has appointed a data protection officer to help your company address data subject requests. The appointed person may be reached at gdpr@clicktime.com.

Personal Data

We only process personal data after explicit consent is given and with the goal of executing the Terms of Service we promised. Personal Data is securely stored and is only shared when necessary as described in our Sub-Processors List, our Privacy Policy, and our Security Document.