Skip to the main content.

Data Processing & GDPR at TimeXtender

Your Data. Our Responsibility.

At TimeXtender, we are committed to protecting your personal data and ensuring compliance with the General Data Protection Regulation (GDPR) and related privacy legislation. This page outlines our approach to data processing, provides access to our Data Processing Agreement (DPA), and links to all relevant privacy and compliance resources.

Data Processing Agreement
Rights and obligations of both TimeXtender and our customers

Our Commitment to Data Protection

TimeXtender acts as a Data Processor on behalf of our customers (the Data Controllers). We process personal data only as instructed by our customers and in compliance with the GDPR and our Data Processing Agreement (DPA)

Purpose of Processing: We process personal data solely to deliver our SaaS services, such as data management, quality, and master data solutions, as outlined in our Privacy Policy.

Legal Basis: Processing is governed by our DPA, which is activated by your acceptance of the End User License Agreement (EULA).

Duration: Personal data is retained only as long as necessary for service provision or as instructed by our customers.

Sub-Processors

We use trusted sub-processors to deliver our services. The current list is maintained here and updated as needed. Customers are notified of changes in advance.

Sub-Processor Link to DPA Service Provided Security Measures
Microsoft
Cloud Computing, Cloud storage, Email, Accounting
Access controls
HubSpot
Customer Engagement
Access controls
Zendesk
Customer support tickets
Access controls
Gainsight (FKA Insided)
User Community Engagement
Access controls
Auth0 by Okta
User Authentication
Access controls
Sendgrid by Twilio
Email
Access controls
Teachable
Product Training
Access controls
Tripletex by Visma
Accounting
Access controls

Security and Compliance

Certifications: For information on our ISO and SOC certifications, visit our Trust Center.

Technical & Organizational Measures: We use industry-standard security controls, including encryption, access management, and regular security assessments.

Data Subject Rights: We support our customers in meeting their obligations regarding data subject rights, including access, rectification, erasure, and portability.

Additional Resources

Privacy Policy: Full details on how we collect, use, and protect your personal data.

Copyrights & Trademarks: Information on intellectual property rights.

Recruitment Data Policy: How we process candidate data.

Security: Details on our security certifications and practices.

Contact Information

For any questions or general information requests, please reach out to us at: