Privacy policy — Toggl Track

Cited by

Facts read from this source

• Entities Report an error

  “Toggl OÜ, an Estonian private limited company, registered number 11346813, based in Tallinn, Estonia; and Toggl, Inc., a Delaware corporation, file number 5675394, based in Wilmington, USA.”

• Children under 13 Report an error

  “We do not knowingly collect personal data from children under 13 (or under the higher minimum age of digital consent where required by local law, which in the EEA/UK can be up to 16).”

• Controller role Report an error

  “Toggl processes these data on the Organization Owner’s behalf and is thus considered to be the ‘processor’ of the said Personal Data.”

• Processing location Report an error

  “In case your contractual relationship with Toggl is through Toggl, Inc., all data processing operations relevant to that relationship have been delegated to Toggl OÜ (a company based in Estonia, with its processing operations also in Estonia).”

• List location Report an error

  “Toggl is using internal Toggl Group sub-processors to provide service development, service delivery, and customer support services for all our products. There is an internal privacy policy in place that governs the data processing of Toggl Group sub-processors. To see the full list of sub-processors please visit the Sub-processors page.”

• Profile collected Report an error

  “when you register for a Service user account (“User Account”), we ask you to give us your full name, email address, country of residence and time zone, and you may also upload a profile picture.”

• API token Report an error

  “During the sign-up procedure, we may automatically record your internet protocol address (IP address) and an application programming interface token (API token) is automatically generated and stored under your User Account (this is an authentication token that you can use for accessing the Service through other software).”

• Payment details stored Report an error

  “if you give the payment service provider credit card details, the last four digits of the credit card number are stored in the Organization under subscription billing info.”

• Timeline autotracker opt in Report an error

  “These features are strictly opt-in and can be easily disabled, and the information they record or generate is only available to the User whom it relates to.”

• Dnt not honored Report an error

  “The Service and Websites do not respond to web browsers’ “do not track” signals and our data processing practices are not altered upon our receipt of such a signal.”

• Cookie consent Report an error

  “We are not allowed to use cookies unless you agree to it. You can manage your cookie consent through the banner on the Website and later through our Cookie Declaration.”

• Google API policy Report an error

  “When accessing Google user data, Toggl's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.”

• Retention accounting Report an error

  “contract and billing records relevant to our accounting or taxation (which is likely to be the case upon some of the Personal Data under the Profile Information and Billing Information categories) are generally kept for at least seven years after the primary purpose for their processing ceases to apply”

• Retention logs Report an error

  “Backups, system, and application logs are retained for shorter operational periods (usually up to 90 days unless required for security investigations or the establishment and defence of legal claims).”

• Deletion on expiry Report an error

  “Once the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised.”

• International transfers mechanisms Report an error

  “For those transfers, we rely on one or more of the following mechanisms: (1) adequacy decisions, where the European Commission has determined that the recipient country ensures an adequate level of protection, including participation in the EU-U.S. Data Privacy Framework, as applicable; (2) where no adequacy decision applies, the European Commission Standard Contractual Clauses, appropriately supported by transfer impact assessments and supplementary measures; (3) in limited cases, we may rely on another legal basis for transfer permitted by law (e.g., your explicit Consent).”

• ISO 27001 Report an error

  “Toggl is certified to ISO/IEC 27001:2022 and undergoes regular audits.”

• Security measures Report an error

  “We shall maintain adequate technical and organisational measures to ensure such level of security in our processing of Personal Data as appropriate in the given circumstances, including encryption in transit and at rest, access controls, monitoring, and resilience measures.”

• GDPR rights access Report an error

  “Right of access / GDPR Article 15 You have the right to enquire and get a confirmation from us as to whether or not we process any of your Personal Data.”

• Opt out marketing Report an error

  “As for Marketing Messages, you can always opt out of receiving these, but the variety of procedures for doing so may depend on the nature of the message and whether you have a User Account.”

• Retention policy formal Report an error

  “Toggl maintains a formal data retention policy that specifies retention periods for different categories of data and assigns responsibility for their enforcement.”

Scores citing this record

• The Agency Owner European sovereignty
• The Agency Owner Capture in the real workplace
• The Agency Owner Working-time law & audit record
• The Agency Owner Payroll handoff
• The Agency Owner European sovereignty
• The Agency Owner Capture in the real workplace
• The Agency Owner Working-time law & audit record
• The Agency Owner Payroll handoff
• The Agency Owner European sovereignty
• The Agency Owner Capture in the real workplace
• The Agency Owner Working-time law & audit record
• The Agency Owner Payroll handoff
• The Agency Owner European sovereignty
• The Agency Owner European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor Payroll handoff
• The Field Supervisor European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Operations Lead Working-time law & audit record
• The Operations Lead European sovereignty
• The Operations Lead Capture in the real workplace
• The Operations Lead Working-time law & audit record
• The Operations Lead Payroll handoff
• The Operations Lead European sovereignty
• The Operations Lead Capture in the real workplace
• The Operations Lead Working-time law & audit record
• The Operations Lead Payroll handoff
• The Operations Lead European sovereignty
• The Operations Lead Working-time law & audit record
• The Operations Lead European sovereignty
• The Operations Lead Working-time law & audit record
• The Operations Lead European sovereignty
• The Payroll Officer European sovereignty
• The Payroll Officer Working-time law & audit record
• The Payroll Officer Payroll handoff
• The Payroll Officer European sovereignty
• The Payroll Officer Working-time law & audit record
• The Payroll Officer Payroll handoff
• The Payroll Officer European sovereignty
• The Payroll Officer Capture in the real workplace
• The Payroll Officer Working-time law & audit record
• The Payroll Officer European sovereignty
• The Payroll Officer Working-time law & audit record
• The Payroll Officer European sovereignty
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Skeptic Capture in the real workplace
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Skeptic Capture in the real workplace
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty
• The Works Council Advocate Capture in the real workplace
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty
• The Works Council Advocate Capture in the real workplace
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty
• The Works Council Advocate Capture in the real workplace
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty
• The Works Council Advocate Capture in the real workplace
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty