Privacy policy

Controller and roles

Leftclick AG is the controller for this website, registration and contract handling (contact details in the imprint). Customers are the controllers of the personal data they record about their employees in weetime (working time, absences, badges); Leftclick AG processes that data as a processor under the data processing agreement.

Data we process

• Account data: name, e-mail address, language, password (hash only), two-factor settings.
• Company data: company name, address, billing details, subscription.
• Customers' time-recording data: clock events, corrections, absences, balances, terminal and badge assignments (badge identifiers are stored hashed only).
• Contact requests: the data entered in the contact form; the IP address is stored only as a keyed hash to fight abuse.
• Technical logs: time, requested address, error codes; never form contents.

Hosting and sub-processors

weetime is operated by {{TODO-LEGAL: hosting provider}} in {{TODO-LEGAL: data centre location}}. Payments are processed by Stripe Payments Europe Ltd.; card data never reaches our servers. E-mails are sent through {{TODO-LEGAL: e-mail delivery service}}.

Cookies and local storage

We only use necessary cookies and preferences, no analytics or advertising cookies:

• ts_at, ts_rt, ts_mfa: sign-in and session (necessary).
• ts_locale, ts_hint: chosen language and a hint that you are signed in (preference).
• Local storage ts_theme, ts_sidebar: appearance (light/dark, sidebar).

No analytics

We use no analytics, tracking or advertising services and load no third-party content.

Retention

Account data is kept for the term of the contract. Time-recording data is kept as configured by the customer (for example five years under Art. 46 of the Swiss Labour Act) and deleted after the contract ends as agreed. Contact requests are deleted after twelve months at the latest, spam after 30 days.

Your rights

Under the Swiss Federal Act on Data Protection and, where applicable, the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection. Employees of our customers should contact their employer first.

Contact

Please send privacy requests to {{TODO-LEGAL: privacy e-mail address}}.