PRIVACY POLICY
A clear account of how we handle personal data.
1. Who is responsible for your personal data?
HL Sverige AB, organisation number 556885-8715, is the controller for the personal data described in this policy. Address: Finspångsvägen 131, 602 10 Norrköping, Sweden Privacy contact: privacy@timecue.eu timecue is the product name used on this website. It is not identified here as a separate legal entity.
This Privacy Policy applies when you browse the timecue website, submit a contact or pilot form, join the product-update list, or voluntarily contact us by email.
2. What data do we use, why, and on what basis?
| Purpose | Data we may use | Legal basis |
|---|---|---|
| Review contact and pilot forms | Your name, email, company, country, topic, message, and optional details that you submit. We also record consent versions and timestamps. | Our legitimate interest in receiving and responding to business enquiries. Pre-contractual steps may apply when you ask to discuss a pilot or service. |
| Send product updates | Your email address, locale, consent text version, and consent timestamp when you request product updates. | Your consent, which you can withdraw by using the unsubscribe option in a later message. |
| Operate and protect the website | IP address, requested page, timestamp, browser or device information, and security events contained in technically necessary server logs, including anti-abuse checks. | Our legitimate interest in delivering, securing, troubleshooting, and preventing misuse of the website. |
| Handle privacy and security requests | Contact details, request content, verification data where reasonably necessary, and our response. | Our data-protection obligations and legitimate interest in resolving requests securely. |
3. Where the data comes from
We receive personal data directly from you when you submit a contact or pilot form, request product updates, or choose to email us and continue an email conversation. Cloudflare Turnstile and the API may also process limited technical data to verify a submission and prevent abuse. The website host may create technically necessary server and security logs.
4. What information is required?
Contact and pilot forms require the fields marked as required, including a working email address and the acknowledgement that lets us review and respond to the request. The product-updates form requires an email address. Marketing updates are optional in contact forms. Please do not submit passwords, access tokens, payment-card details, sensitive personal data, customer records, or confidential project documents.
6. Who receives the data?
Access is limited to people who need the data to respond to your email or operate and protect the website. The website and business email are provided through cal.pl, operated by INFOCAL sp. z o.o. in Poland. cal.pl's public information does not state the physical server region, so we do not infer a data-centre location from the provider's registered address. The provider's service terms and applicable safeguards govern any processing outside the EU/EEA. The email provider processes messages you choose to send. We may also disclose data where required by law or necessary to protect legal rights.
7. International transfers
If a website hosting or business email provider processes personal data outside the EU/EEA, we will use a lawful transfer mechanism and any supplementary measures required for the transfer. We do not claim that processing is limited to the EU/EEA until the selected providers and their subprocessors have been verified.
8. How long do we keep data?
We do not keep personal data longer than reasonably necessary for the stated purpose, applicable legal duties, and the establishment or defence of legal claims.
| Data | Draft retention decision |
|---|---|
| Email enquiries and correspondence | Up to 12 months after the last meaningful correspondence, then deleted unless a longer period is needed for a legal obligation or claim. |
| Necessary server and security logs | timecue does not maintain a separate application log store. Any technical or security logs created by cal.pl are retained by cal.pl under its service terms. |
| Privacy and legal requests | Up to 3 years after the request is closed, or longer only where needed to establish, exercise, or defend a legal claim or comply with law. |
9. Your rights
Subject to applicable law, you may have the right to receive information, access your data, correct it, request deletion or restriction, object to legitimate-interest processing, receive portable data where the conditions are met, withdraw consent, and lodge a complaint with a data-protection authority. To exercise a right, contact privacy@timecue.eu. We may request only information reasonably necessary to verify identity. We normally respond within one month, subject to lawful extensions. The expected lead authority is the Swedish Authority for Privacy Protection (IMY): https://www.imy.se/privatperson/utfora-arenden/lamna-ett-klagomal/. Polish-facing users can also find the Polish authority at UODO: https://uodo.gov.pl/pl/138/155.
10. Automated decisions and AI
The public website does not make decisions producing legal or similarly significant effects solely by automated means. Pilot applications must not be described as automatically accepted or rejected unless that processing is actually introduced, assessed, and disclosed. The current product direction does not present AI scoring, worker monitoring, or consequential recommendations as available functionality.
11. Security
We use technical and organisational measures intended to provide a level of security appropriate to the risk. No internet service is completely secure. For security concerns, contact privacy@timecue.eu.
12. Children
The website and pilot are intended for people acting in a professional or business context, not for children. We do not knowingly seek children's personal data through the public website.
13. Changes to this policy
We may update this policy when our processing, vendors, product, or legal duties change. We will publish the new version and effective date. If a change materially affects processing based on consent, we will obtain new consent where required. Earlier versions should be retained internally for accountability.
14. Contact
Questions or requests about this policy may be sent to: HL Sverige AB Finspångsvägen 131 602 10 Norrköping Sweden privacy@timecue.eu