Privacy Policy

This privacy policy explains which personal data is processed when you visit this website (timeghost-solutions.com), for what purposes, and what rights you have under the EU General Data Protection Regulation (GDPR).

The most important point first: this website is deliberately designed to be data-minimal. We do not use any analytics, tracking or marketing services, we do not embed content from third-party servers, and we only use a single, technically necessary cookie to store your language preference. For this reason, this website does not require a cookie banner.

Separate privacy notices apply to the use of our software products (e.g. timeghost Time Tracking, Project Board, Company Contacts, Whiteboard, AI MindMap). These are provided within the respective application or on the respective product website.

The controller within the meaning of the GDPR is:

timeghost Solutions GmbH
Reichenaustr. 11a
78467 Konstanz, Germany

Commercial register: Amtsgericht Freiburg, HRB 729216
Telephone: +49 7531 9783000
Email: support@timeghost.io

In accordance with Article 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG), we have appointed a Data Protection Officer. For any questions related to data protection, you can contact him directly:

Sven Weiser
timeghost Solutions GmbH, Reichenaustr. 11a, 78467 Konstanz, Germany

Telephone: +49 7531 9783000
Email: info@timeghost.io

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). When you visit our website, Vercel, acting as our processor (Art. 28 GDPR), processes the following data in server log files for technical reasons:

• IP address of the requesting device
• date and time of access
• page or file accessed
• amount of data transferred and access status
• browser type and version, operating system (user agent)
• previously visited page (referrer URL)

This processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in providing this website securely, reliably and efficiently, and in defending against attacks. The log data is not merged with other data sources and is automatically deleted after a short period.

Vercel may also process data on servers in the USA. This transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) and Vercel's certification under the EU-U.S. Data Privacy Framework. For more information, see Vercel's privacy policy.

This website does not use any analytics, tracking or marketing cookies.

Only a single, technically necessary cookie is set:

• NEXT_LOCALE — stores your selected language (German/English) so that the website is displayed in your preferred language on your next visit. Storage period: 12 months.

This cookie is strictly necessary for the function you have explicitly requested (language selection). No consent is required for this (Section 25 (2) No. 2 of the German TDDDG). For this reason, this website does not display a cookie banner.

This website uses the fonts "Plus Jakarta Sans" and "Source Sans 3". Both fonts are hosted locally on our own server. No connection to servers operated by Google or other third parties is established when you visit this website, and no data is transferred to third parties.

If you contact us by email (e.g. at support@timeghost.io) or by telephone, we process the data you provide (name, contact details, content of your enquiry) in order to handle and respond to your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise our legitimate interest in responding to your enquiry (Art. 6 (1) (f) GDPR). We delete the data as soon as it is no longer required for processing your enquiry and no statutory retention obligations apply.

This website contains links to external websites, in particular to our product websites (e.g. timetracking.timeghost.io, project-board.timeghost-solutions.com) and to the website of our parent company (timeghost.io). When you click such a link, you leave our website and the privacy notices of the respective provider apply.

You have the following rights with regard to the personal data concerning you:

• Access (Art. 15 GDPR) — you may request information about whether and which data we process about you.
• Rectification (Art. 16 GDPR) — you may request the correction of inaccurate data or the completion of incomplete data.
• Erasure (Art. 17 GDPR) — you may request the deletion of your data, unless statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR) — you may request the restriction of processing under certain conditions.
• Data portability (Art. 20 GDPR) — you may request that we provide your data in a structured, commonly used and machine-readable format.
• Objection (Art. 21 GDPR) — you may object to processing based on our legitimate interest on grounds relating to your particular situation.
• Withdrawal of consent (Art. 7 (3) GDPR) — you may withdraw any consent you have given at any time with effect for the future.

To exercise your rights, an informal message to the contact details above is sufficient.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Wuerttemberg (LfDI), Lautenschlagerstrasse 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

We will update this privacy policy whenever changes to the website or legal requirements make this necessary. The current version is always available on this page.