Privacy policy

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act). In this privacy policy we inform you about the most important aspects of data processing within our website and application.

1. Controller

The controller responsible for data processing is TimeTracker by Jomawo, [address], reachable at [email address].

2. What data we process

• Master data (e.g. name, email address upon registration)
• Usage data (e.g. tracked times, projects, clients)
• Communication data (e.g. content from the contact form)
• Payment data for premium subscriptions (processed by our payment service provider)
• Technical data (e.g. IP address, browser type, time of access)

3. Purposes of processing

We process your data to provide and improve our time tracking service, to fulfil contracts, to communicate with you and to comply with legal obligations.

4. Legal bases

Processing is based on Art. 6 (1) GDPR (consent, performance of a contract, legitimate interest and legal obligation).

5. Disclosure to third parties

Your data is only disclosed insofar as this is necessary for the performance of the contract (e.g. to payment or hosting service providers) or where we are legally obliged to do so. We conclude corresponding contracts with processors pursuant to Art. 28 GDPR.

6. Storage period

We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention periods.

7. Your rights

You have the rights to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a supervisory authority.

8. Referral program

If you participate in our referral program or reach us via a referral link, we additionally process the following data:

• Referral code and assignment: If you visit our website via a referral link, we store the referral code for 30 days in a cookie (“jomawo_ref”). If you register within this period, your account is assigned to the referring user. The referring user only sees your abbreviated name, your registration date and your chosen plan – no contact details.
• Commission and payout data of referrers: balance, credited and reversed commissions, payout requests including bank details (account holder, IBAN, BIC) and a log of payout status changes.

This processing is carried out to operate the referral program and to make payouts (Art. 6 (1)(b) GDPR). We also review payout requests automatically and manually for abuse (e.g. self-referrals or fake registrations); the legal basis for this is our legitimate interest in fraud prevention (Art. 6 (1)(f) GDPR). Bank details are disclosed exclusively to our bank for the purpose of executing the transfer. We retain payout data within the scope of statutory retention periods under commercial and tax law.

9. Cookies

We use cookies to make our website functional and user-friendly. You can find details in our cookie policy.

Note: This is a template. Please have your privacy policy legally reviewed before publication and add the specific details.