Privacy Policy

For the Bitrix24 Marketplace App "Time2Report"

1. General Information

This Privacy Policy explains how personal data is processed in connection with the Bitrix24 Marketplace App "Time2Report" (the "App"), the related licensing service, and the payment flow for paid licenses.

The App is provided by WAM IT for use within Bitrix24 Cloud portals. Most operational data is read from or stored inside the customer's Bitrix24 portal. Certain licensing, billing, and payment-related data is processed by WAM IT as described below.

2. Provider and Contact

Provider: WAM IT

Burchardstrasse 17

20095 Hamburg

Germany

Email: kontakt@wam-it.de

Phone: +49-40-99-999-450

3. App Data Processed in the Customer's Bitrix24 Portal

The App retrieves and displays task time tracking data from the customer's Bitrix24 portal. Depending on the selected filters, displayed columns, and export options, this may include:

• Task time tracking entries, dates, duration, and comments
• Task names, task IDs, task status, task deadlines, task creator, responsible person, and observers where available
• Bitrix24 users selected in filters or shown in reports
• Project groups linked to tasks
• CRM entities linked to tasks
• User-specific report settings, filter presets, visible columns, analytics widget settings, and export settings

This data is used to show the report table, KPI cards, dashboards, and exports inside the customer's Bitrix24 environment. The Bitrix24 customer remains responsible for configuring access rights and ensuring lawful use inside their portal.

4. Exports

In the Pro version, users may export report data to Excel or PDF. Export files are generated from the data currently available to the App according to the selected filters and export settings. Users are responsible for storing, sharing, and deleting exported files in accordance with their internal policies and applicable law.

5. Licensing Service

The App communicates with WAM IT's licensing service at https://license.wam-it.de/ to register installations, check license status, create payment orders, and activate paid licenses.

For installation and license checks, the App may send the following technical data to the licensing service:

• App code
• Bitrix24 portal domain
• Bitrix24 member ID or installation identifier
• Bitrix24 authorization data required to validate the request
• Installation URL and placement handler URL
• Language and installation timestamps
• Installer display name, if available through the permitted Bitrix24 user scope

6. Billing and Payment Data

If a user chooses to purchase a paid license, the payment form asks the user to manually enter billing details. Depending on the form fields used, this may include:

• First name and last name
• Email address
• Phone number
• Company name
• Postal code, street, city, country
• E-invoice email address
• Selected license/payment option
• Consent record for personal data processing

This data is sent to the licensing service and may be used to create or update billing-related CRM records, such as contacts, companies, requisites, invoices, and license records in WAM IT's Bitrix24 environment.

Payment processing is handled via PayPal. When the user proceeds to payment, the user may be redirected to PayPal or interact with PayPal services. PayPal processes payment data according to PayPal's own privacy policy and terms.

7. Consent for Personal Data Processing

Before proceeding to payment, the user must confirm a required consent checkbox in the payment form. The consent confirms that WAM IT may process the entered personal data for billing, payment processing, license management, and customer support in accordance with this Privacy Policy.

The consent record may include the consent status, timestamp, consent text, consent version, and the URL of this Privacy Policy.

8. Purposes of Processing

WAM IT processes the data described above for the following purposes:

• Providing reports and analytics inside the customer's Bitrix24 portal
• Saving user-specific filter presets, column settings, dashboard settings, and export settings
• Generating Excel and PDF exports when requested by the user
• Registering and identifying App installations
• Checking license status and applying free or Pro license limits
• Creating payment orders and subscriptions
• Creating invoices and billing records
• Activating, extending, or terminating paid licenses
• Providing customer support related to purchases and licenses
• Meeting legal, accounting, and tax obligations

9. Legal Basis under GDPR

Where GDPR applies, processing may be based on one or more of the following legal bases:

• Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering into a contract
• Art. 6(1)(c) GDPR - compliance with legal obligations, including tax and accounting requirements
• Art. 6(1)(f) GDPR - legitimate interests in operating, securing, and supporting the App and licensing service
• Art. 6(1)(a) GDPR - consent, where the user confirms the payment form consent checkbox

10. Recipients and Service Providers

Personal data may be processed by the following recipients or service providers where necessary for the purposes described in this Privacy Policy:

• Bitrix24, as the platform on which the App operates and where customer portal data is stored
• WAM IT's Bitrix24 environment, for licensing and billing records
• WAM IT's licensing service at https://license.wam-it.de/
• PayPal, for payment processing
• Hosting and technical infrastructure providers used to operate the App website and licensing service

WAM IT does not sell personal data and does not use personal data for advertising profiling.

11. Technical Logs

For security, troubleshooting, and abuse prevention, technical server logs may be created when the App website or licensing service is accessed. Such logs may include technical metadata such as timestamp, requested URL, IP address, user agent, and error information. These logs are used only for technical operation and security.

12. Cookies, Analytics, and Tracking

The App itself does not use advertising cookies, analytics trackers, or profiling technologies. Third-party services such as PayPal may use their own cookies and similar technologies when the user interacts with them.

13. Data Retention

Operational App data stored inside the customer's Bitrix24 portal remains under the control of the Bitrix24 customer.

Licensing and billing data processed by WAM IT is retained for as long as necessary to provide the license, process payments, handle support requests, and comply with statutory accounting, tax, and documentation obligations.

Technical logs are retained only for as long as reasonably necessary for security and troubleshooting unless longer retention is required by law or to investigate misuse.

14. Data Subject Rights

Depending on applicable law, data subjects may have rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.

For data stored in the customer's Bitrix24 portal, requests should usually be addressed to the Bitrix24 customer who controls that portal. For licensing, billing, and payment-related data processed by WAM IT, requests may be sent to kontakt@wam-it.de.

15. Data Security

WAM IT applies appropriate technical and organizational measures to protect licensing and billing data against unauthorized access, loss, misuse, or alteration. Communication with the App website and licensing service is provided via HTTPS.

The security of data stored within the customer's Bitrix24 portal is governed by the customer's Bitrix24 environment and its access permissions.

16. Changes to this Privacy Policy

WAM IT may update this Privacy Policy if required due to legal changes, changes in App functionality, changes to the licensing or payment flow, or Bitrix24 Marketplace requirements.

17. Contact

For questions about this Privacy Policy or WAM IT's processing of licensing and billing data, please contact: kontakt@wam-it.de.