Data processing agreement
Processing Time Team data on behalf of your organization.
Version dated 6 October 2026
Subject
This agreement covers collection, recording, organization, consultation, corrections, exports and deletion of Time Team data to provide the service. Data subjects are organization owners, managers and members; data includes identities, affiliations, hours, timesheets, notes and exports. Processing lasts during the service and the 90-day exit period.
Instructions
The organization determines the purposes and authorizes processing necessary for the service under this agreement. KL Digital follows its documented instructions, including for transfers, unless legally required otherwise; the organization is informed before such processing unless prohibited by law. Instructions considered contrary to data protection rules are reported to the organization.
Confidentiality
People authorized to process data are bound by confidentiality obligations appropriate to their role.
Security measures
The service uses authentication, access controls and organization-level data separation. Database backups and a restoration procedure are part of platform operations.
Subprocessors
The organization generally authorizes the subprocessors needed for the service and identified in the provider list. KL Digital informs the organization of planned additions or replacements so that it can object before the change. Corresponding protection obligations are imposed on subprocessors; applicable safeguards for transfers outside the EEA must be documented.
Assistance
Considering the processing and available information, KL Digital assists the organization with rights requests, security, data breaches, impact assessments and required consultations. A breach of entrusted data is reported to the organization without undue delay after becoming aware of it. KL Digital provides information needed to demonstrate compliance with this agreement and allows audits and inspections under applicable rules.
End of processing
The organization can export data during the service and the 90 days following the effective end of the subscription. At the deadline, the retention process deletes the relevant Time data. Requests for return or deletion can be sent to support@onlinecenter.be. Legal retention obligations and separate backup cycles continue to apply; restores must take prior deletion requests into account.