Privacy Statement
for time cockpit

Last updated: 4 September 2026

This privacy statement applies to the website www.timecockpit.com and to the online service “time cockpit”, including the time cockpit portal and the other software architects online services that display or link to this notice. Please note that the service is offered only to organizations and not to consumers.

software architects is not responsible for the privacy practices of its customers or of third parties, except as described below.

Controller and Contact

The controller responsible for the processing of your personal data is:

software architects gmbh
Birkenweg 16
4060 Leonding, Austria
Phone: +43 732 673575
E-mail: support@timecockpit.com
VAT ID: ATU65831825

We have not appointed a data protection officer, because we are not legally required to do so. Please direct all privacy requests to the e-mail address above.

Hosting and Infrastructure

The website is hosted on Microsoft Azure (Azure Static Web Apps and Azure Front Door) in data centers operated by Microsoft in the European Union. When you visit the site, the web server automatically records technical data that your browser sends with every request: IP address, date and time, requested page, referring page, browser type and language, and operating system. We use these server logs to operate the site securely and to diagnose faults. The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Microsoft retains the logs for a short period and then deletes them.

Please note that the infrastructure necessary to run the service “time cockpit” is partly not run by software architects. Timesheet and signal data collected by the time cockpit service is stored and processed on the cloud computing platform Microsoft Azure. As a consequence, the Microsoft Privacy Statement also applies when you subscribe to or test time cockpit.

Cookies, Consent and Local Storage

When you first visit the website, a consent banner asks you which categories of cookies and similar technologies you allow. Your choice is stored in your browser’s local storage, so that you are not asked again on every page. There are four categories:

• Necessary – required to run the site: storing your consent choice and protecting our forms against spam (see Google reCAPTCHA below). These cannot be switched off.
• Preferences – remember settings such as your selected language.
• Analytics & Marketing – Google Analytics, Google Ads conversion measurement and Microsoft Advertising (see below).
• External Media – YouTube videos, Google Maps and the tawk.to chat (see below).

The site itself stores the following items in your browser:

Cookies from third parties (Google, Microsoft, tawk.to, YouTube) are set only after you have given the corresponding consent. Where processing is based on your consent, the legal basis is Art. 6(1)(a) GDPR together with § 165(3) of the Austrian Telecommunications Act (TKG 2021). You can change or withdraw your consent at any time by clicking the cookie icon in the bottom left corner of every page. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. If you withdraw the Analytics & Marketing consent, the stored referrer and campaign information is deleted from your browser.

Web Analytics Without Cookies: Simple Analytics

We use Simple Analytics, a service of Simple Analytics B.V., Netherlands, to measure how many visitors our pages receive. Simple Analytics does not use cookies or any other identifiers, does not store IP addresses and does not track individual visitors. It only produces aggregate statistics such as page views, referring sites, browser type and country. Because no personal data is stored, Simple Analytics runs without consent, on the basis of our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). Details: Simple Analytics privacy policy.

Google Analytics 4 and Google Ads (With Consent)

If you accept the “Analytics & Marketing” category, we load Google Analytics 4 and the Google tag, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Until you consent, nothing is sent to Google (Google Consent Mode v2 with all signals set to “denied”).

Google Analytics uses cookies (_ga, _ga_*) to recognize your browser across pages and visits and creates reports about how the site is used: pages viewed, time spent, referring site, approximate location based on the IP address, device and browser. IP addresses are truncated by Google before they are stored. We use these reports to improve the website and our content. User and event data is retained in Google Analytics for at most 14 months.

With the same consent we enable Google Ads conversion measurement and advertising signals (ad storage, ad user data, ad personalization). This allows us to measure whether visitors who arrived via a Google ad later create a trial account, and to show relevant ads to visitors of our website on Google properties.

The legal basis is your consent (Art. 6(1)(a) GDPR). Google may transfer data to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Further information: Google privacy policy, How Google uses data from sites that use its services. You can also install the Google Analytics opt-out browser add-on.

Referrer and Campaign Information

If you accept the “Analytics & Marketing” category, the website stores the address of the website that referred you to us and the parameters of the page address you arrived at (for example campaign or partner codes such as utm_source) in your browser’s local storage. When you then create a trial account, this information is sent to us together with the account data, so that we can attribute the trial to the campaign or partner that led you to time cockpit. The legal basis is your consent (Art. 6(1)(a) GDPR). The information is deleted from your browser when you withdraw the consent, and it is not sent to us if the consent is not active when you create the account.

Microsoft Advertising (With Consent)

If you accept the “Analytics & Marketing” category, we load the Universal Event Tracking (UET) tag of Microsoft Advertising, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. UET uses cookies (_uetsid, _uetvid, MUID) to measure whether visitors who arrived via an ad on Bing later create a trial account, and to show relevant ads on Microsoft properties. Until you consent, the tag is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to Microsoft Corporation in the USA, which is certified under the EU-US Data Privacy Framework. Further information: Microsoft privacy statement.

Live Chat: tawk.to (With Consent)

If you accept the “External Media” category, we load the tawk.to chat widget, a service of tawk.to Inc., 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA. The widget allows you to chat with our team directly on the website. tawk.to processes the messages you send, your IP address, browser data and the pages you visited during the chat, and sets cookies (twk_*, TawkConnectionTime) to keep the conversation together across pages. Until you consent, the widget is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR); for answering your questions it is also our legitimate interest in providing support (Art. 6(1)(f) GDPR). Data is transferred to the USA on the basis of the EU standard contractual clauses. Further information: tawk.to privacy policy.

Spam Protection: Google reCAPTCHA Enterprise

The contact form and the trial account form are protected by Google reCAPTCHA Enterprise, a service of Google Ireland Limited. reCAPTCHA is only loaded when you start filling in one of these forms; it is not loaded when you merely view the page. It analyzes your interaction with the form (IP address, mouse movements, time spent, browser and device data) in the background to distinguish humans from automated bots, and may set the cookie _GRECAPTCHA. The legal basis is our legitimate interest in protecting our forms and systems against abuse (Art. 6(1)(f) GDPR). Further information: Google privacy policy and Google terms of service.

YouTube Videos (With Consent)

Some pages contain videos hosted on YouTube, a service of Google Ireland Limited. The videos are embedded in privacy-enhanced mode (youtube-nocookie.com) and are only loaded after you have accepted the “External Media” category; before that, only a placeholder is shown. When you play a video, YouTube receives your IP address and the page you are on and may set cookies to measure playback and, if you are logged in to a Google account, to associate the playback with your account. The legal basis is your consent (Art. 6(1)(a) GDPR). Further information: Google privacy policy.

Google Maps (With Consent)

The contact page contains a map from Google Maps, a service of Google Ireland Limited. The map is only loaded after you have accepted the “External Media” category. When it is loaded, Google receives your IP address and may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR). Further information: Google privacy policy.

Contact Form, Trial Account and Support

Contact form. When you send us a message through the contact form, we process your first and last name, e-mail address, phone number (optional) and your message in order to answer your request. The legal basis is the preparation or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep the messages for as long as necessary to handle the request and for any follow-up.

Trial account. When you create a trial account, we process your first and last name, e-mail address, password, phone number (optional), preferred language and, with your consent, the referrer and campaign information described above, in order to set up and operate the account. The legal basis is the performance of a contract or of pre-contractual steps (Art. 6(1)(b) GDPR). Service trials are provided for the purpose of testing the service before purchase. We may temporarily retain personal information collected during a trial after the end of the trial period, so that your data is still available if you later decide to purchase the service. You can have your trial data deleted at any time by writing to support@timecockpit.com.

Support. When an authorized representative of your organization submits a support request, we consider your organization to have consented to software architects handling the personal data in your account as far as this is necessary to fulfil the request. We may also collect additional information, including hardware and software information related to the incident. We retain this information to diagnose further problems with your account, to understand your organization’s needs and to improve our services.

Service e-mails. We use the contact information provided to send registration information and other service e-mails to the account owner or to end users, for example about technical service issues related to a product or service you requested. You cannot unsubscribe from these messages, because they are an essential part of the service. We do not currently send a newsletter.

Security of Your Data

software architects is committed to protecting the security of your data. We maintain technical and organizational measures designed to protect your data from unauthorized access, use or disclosure. Some personal data may be particularly sensitive to you or your organization and may require a level of security that we do not provide. You or your organization are responsible for determining whether our security meets your requirements. You can find a detailed description of the security measures in time cockpit in the online help. If you have specific questions, please contact support@timecockpit.com.

Disclosure and International Transfers

We may access or disclose data about you, including the content of your communications, in order to:

1. comply with the law or respond to lawful requests or legal process;
2. protect the rights or property of software architects or our customers, including the enforcement of our agreements or policies governing your use of the service; or
3. act on a good faith belief that such access or disclosure is necessary to protect the personal safety of software architects employees, customers or the public.

Apart from the service providers named in this statement, we do not pass your data on to third parties. Where a provider processes data outside the European Economic Area, in particular in the USA, this is based on an adequacy decision of the European Commission (EU-US Data Privacy Framework) or on the EU standard contractual clauses.

Your Rights

You have the right to obtain information about the personal data we hold about you, and to have it rectified, erased or its processing restricted. You have the right to receive the data you provided to us in a portable format, and to object to processing that is based on our legitimate interests. Where processing is based on your consent, you can withdraw the consent at any time with effect for the future. To exercise these rights, write to support@timecockpit.com.

If you believe that we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.

Changes to This Privacy Statement

We will occasionally update this privacy statement to reflect changes in the service and customer feedback. We encourage you to periodically review this statement to be informed of how software architects is protecting your data.