Timely and GDPR

Privacy Handbook Understanding our commitment to the EU Data Regulation and GDPR.

Here at Timely, we’ve worked hard to ensure that we always fulfill our obligation to maintain transparency about how we use your data. On May 25th, 2018, the EU General Data Protection Regulation (GDPR) became the standardization for how we use and protect EU citizens’ data. The GDPR is a data protection law replacing an existing EU Data protection law, strengthening the protection of you and your “personal data.” It constitutes a set of rules that govern monitoring and processing of EU data.

How is Timely preparing for GDPR?

With an extremely large overhaul of processes and data models, we want to ensure we meet our legal obligations but also do the absolute best thing for you, our customer, while still enabling us to be agile, grow, and continue to build great products for you.

Building new features

We’ve built features that are vital and necessary for you to be able to fully delete all data linked to you within Timely.

Taking security measures

We believe your data is yours and that you should always be in control of it. All of your information is kept entirely private and not shared with anyone.

We’ve also reviewed our internal access design to ensure the right people have access to the right level of customer data.

Appointing a Data Protection Officer

We have dedicated a specific person as a Data Protection Officer to advise, oversee, and manage Timely’s data. If you have questions about this, please feel free to touch base with them directly at [email protected].

Updating our Data Processing Agreements

As an important part of GDPR requirements, we’ve updated our data processing agreement and privacy commitments to meet our obligations for GDPR. Our parent company, Memory AS, is a registered company in Norway and a member of the European Economic Area (EEA), and has adopted the EU directive 1995/46/EC in its laws (including GDPR).

Data is processed and stored in the EU by our sub-supplier and sub-processor, Amazon Web Services (AWS). AWS services are GDPR compliant, so transfer of data to it is in compliance with EU law.

Coordinating with our vendors

We’ve reviewed all of our vendors to understand their GDPR policies and have structured GDPR-ready data processing agreements with them.