GDPR and Timecounts
The General Data Protection Regulation (GDPR) is the European Union's privacy law.
It gives individuals greater control over their personal data and establishes responsibilities for organizations that collect and process that information.
Organizations using Timecounts are generally the Data Controller for volunteer information they collect. Timecounts acts as a Data Processor, providing the tools and infrastructure used to manage volunteer data.
We are committed to supporting GDPR compliance and helping organizations respond to privacy-related requests.
Your responsibilities as an organization
As the Data Controller, your organization is responsible for:
Collecting volunteer information lawfully
Maintaining accurate records
Responding to requests from volunteers regarding their personal data
Determining how volunteer information is used and retained
Timecounts provides tools to help you manage and fulfill these responsibilities.
GDPR rights for volunteers
Individuals may have the right to:
Access their personal data
Correct inaccurate information
Request deletion of personal data
Receive their data in a portable format
Object to certain types of processing
Organizations should respond to these requests in accordance with applicable privacy laws.
Managing volunteer data in Timecounts
Timecounts provides several tools to help organizations manage volunteer information and respond to privacy requests.
Organizations can:
View volunteer profiles
Update volunteer information
Export volunteer data
Delete volunteer records
Remove custom field responses
Review volunteer activity history
If you require assistance with a formal data-subject request, contact [email protected].
How volunteers can exercise their rights
Volunteers who wish to access, update, or delete information stored by an organization should contact that organization directly.
Because organizations control the volunteer data they collect, they are responsible for responding to most privacy requests.
If a volunteer wishes to delete their Timecounts user account entirely, they can contact [email protected] from the email address associated with their account.
How Timecounts protects personal data
Timecounts maintains technical and organizational safeguards designed to protect personal data, including:
Encryption in transit and at rest
Access controls and authentication
Monitoring and logging
Vendor and subprocessor reviews
Backup and disaster recovery procedures
We regularly review our security practices and work with trusted service providers to help safeguard personal information.
Data Processing Agreement (DPA)
Our Data Processing Agreement outlines:
How Timecounts processes data on behalf of organizations
Security and privacy measures
International data transfer mechanisms
Subprocessor obligations
How we support GDPR, UK GDPR, CCPA/CPRA, and PIPEDA
You can review our DPA here:
You can view our current subprocessors here:
Need help?
If you have questions about GDPR, privacy, or a data-subject request, contact [email protected] and our team will be happy to assist.