Privacy Policy

For "TimeLokator" at timelokator.com — Last updated: March 28, 2026

1. Controller

Daniel Jung (Jung-Marketing)
Schützenweg 10, 29476 Quickborn, Germany
Email: kontakt@timelokator.com
Phone: 05865 988 084 / 0151 1024 7486

2. Purposes and Legal Bases

Provision and operation of TimeLokator (Art. 6(1)(b) GDPR)
Contract handling, invoicing and accounting (Art. 6(1)(b) and (c) GDPR)
IT security and abuse prevention (Art. 6(1)(f) GDPR)
Communication via email/contact form (Art. 6(1)(b) or (f) GDPR)

3. Server Log Files

When you access the platform, technically required access data may be processed, e.g. IP address, date/time, requested URL, referrer, browser type and operating system.

4. Technically Necessary Session Cookie

TimeLokator only uses one technically necessary session cookie (PHPSESSID) for session management, deleted after the session ends. No consent banner is required.

5. End-Client Dashboard Access via Token URL (No Login)

End clients do not receive user accounts. Dashboard access is provided via an individual token URL. Please keep token URLs confidential.

6. Contact via Email or Form

If you contact us, we process the data you provide to handle your request.

7. Payment Processing via Stripe

Provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
Purpose: payment processing and subscription management
Data: payment data, email, subscription status
Available payment methods: Credit/Debit Card, Apple Pay, Amazon Pay, Klarna, Link (Stripe)
Stripe Privacy Policy: stripe.com/privacy
Legal basis: Art. 6(1)(b) GDPR
Note: Stripe may transfer data to the USA; SCCs (Standard Contractual Clauses) are in place.

8. Hosting in Germany

Provider: all-inkl.com, Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf
Purpose: hosting of the web application and database
Data: all data stored in the system
Legal basis: Art. 6(1)(b) GDPR
DPA: a data processing agreement with all-inkl.com is concluded.

9. Email Delivery

Provider: all-inkl.com SMTP
Purpose: sending system emails
Data: email address, name

Our users (freelancers), acting as controllers, are required to inform their end clients about the use of TimeLokator. We provide a sample text for this in the user dashboard.

10. No Tracking or Marketing Technologies

No analytics tools, no tracking pixels, no third-party fonts and no marketing cookies are used.

11. Retention Periods

Contract and billing data: for contract duration and statutory retention periods
Server logs: short-term for IT security
Support and communication data: until request completion

12. Recipients

Recipients may include hosting providers, Stripe and other service providers where required for contract performance.

13. Your Rights

You have rights of access, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority.

14. Data Security

We implement appropriate technical and organizational measures to protect personal data.

15. Changes to This Privacy Policy

The version published at timelokator.com is authoritative.

16. Social Media Presence

This privacy policy applies to the following social media profiles:

Data Processing by Social Networks

We maintain publicly accessible profiles on social networks. Social networks such as Facebook, X, etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content. Visiting our social media profiles triggers numerous data processing operations relevant under data protection law.

If you are logged in to your social media account and visit our social media profile, the platform operator may associate this visit with your user account. Your personal data may also be collected if you are not logged in, for example via cookies or your IP address.

Please note that we cannot track all processing operations on social media platforms. For details, please refer to the privacy policies of the respective platforms.

Legal Basis

Our social media profiles serve our public presentation. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Controller and Exercise of Rights

When you visit one of our social media profiles, we are jointly responsible with the platform operator. You can assert your rights (access, rectification, erasure, restriction, data portability, complaint) both against us and against the respective platform operator.

Retention Period

We have no influence on how long your data is stored by platform operators. Please obtain information directly from the respective operators.

Social Networks in Detail

X (formerly Twitter)
Provider: X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For users outside the USA: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland.
Privacy policy: x.com/privacy

Pinterest
Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Privacy policy: policy.pinterest.com/privacy-policy

Reddit
Provider: Reddit Inc., 548 Market Street, San Francisco, CA 94104, USA.
Privacy policy: reddit.com/policies/privacy-policy

YouTube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Privacy policy: policies.google.com/privacy

TikTok
Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
Privacy policy: tiktok.com/legal/page/eea/privacy-policy/en