Controller and contact
Scharfe-Sicht GmbH, Im Teelbruch 58, 45219 Essen, Germany is responsible for this website. Privacy requests: info@scharfesicht.com; telephone +49 2054 9820641. Commercial enquiries: sales@scharfesicht.com.
TIME365 · Privacy
Privacy & cookies
How this website processes data, uses browser storage and respects your privacy choices.
Last updated: 26 October 2026. This notice covers the Time365 marketing website and its administration, partner and academy access. Data processed inside a customer’s operational Time365 installation is governed by that organization’s own notices and agreements.
Website delivery and security
Our hosting service processes connection data such as IP address, requested URL, time and browser information to deliver and secure the website. We use OpenAI’s website hosting with Cloudflare infrastructure. Our application uses short-lived, hashed network counters to limit abuse; these are not advertising identifiers. The legal basis is our legitimate interest in a reliable and secure website under Article 6(1)(f) GDPR. Provider logs follow the applicable hosting retention rules; security data is retained only as required for operations, abuse investigation or legal obligations.
Enquiries and communication
When you submit a demo, support or partner enquiry, we store the details you enter, the request reference, language, time and workflow status. Our authorized team uses them to respond and follow up. Processing is based on Article 6(1)(b) GDPR for steps requested before a contract, or Article 6(1)(f) for other business correspondence. Required fields are marked; without them we cannot process the form. No marketing subscription is created. Enquiries are kept for handling and follow-up, then only where required by applicable commercial/tax retention duties or the establishment, exercise or defence of legal claims.
Administration, partner and academy access
Authorized access uses account email, assigned permissions, password hashes or one-time verification and protected session records. Academy access can also use invitations and learning progress. These records support access control and the requested service under Article 6(1)(b) or (f) GDPR. Session cookies expire after eight hours or logout. Account and progress records are retained while access and the agreed service require them; necessary audit and business records may remain for security or legal obligations.
Ask Time365
Ask Time365 is an AI product assistant, not a human adviser. When you submit a question, its text and selected public product information are sent server-side to the OpenAI API to generate an answer. Our legitimate interest is responding to your explicitly requested product guidance, Article 6(1)(f) GDPR. Do not enter personal, employee, sensitive or confidential information. The site does not give the assistant access to employee databases, private requests or administration. We request store:false; this does not eliminate provider abuse-monitoring logs, which ordinarily may retain content for up to 30 days, with exceptions for legal or security needs. Conversations are held in page memory and are not saved as complete chat histories by this website.
Optional question sharing and assistant statistics
Operational counts and topic/language/page totals, feedback and attributed demo actions help maintain and improve the assistant, based on Article 6(1)(f) GDPR. These statistics contain no visitor identity, IP address, full answer or full conversation. Detailed statistics expire within 90 days. Saving a question for review requires your separate, unchecked choice under Article 6(1)(a); the chosen period is displayed before submission and is never more than 30 days. Masking email addresses, links and long numbers reduces exposure but is not complete anonymization. You can withdraw permission for future submissions by clearing the checkbox, or ask us to locate and delete a previously shared question using its approximate time and non-sensitive wording.
Optional website measurements
Audience and performance measurements are off until you separately allow them in the footer, under Article 6(1)(a) GDPR and § 25(1) TDDDG. Audience totals use public page, interaction, device/referral category and approximate country, without sending a visitor identifier or form contents; totals are kept up to 180 days. Performance samples measure loading, interaction and layout stability and are kept for 30 days. Both honor supported Do Not Track and Global Privacy Control signals. You can refuse or withdraw either choice in the same footer controls without affecting website access.
Cookies and browser storage
Necessary storage under § 25(2)(2) TDDDG: __Host-time365_staff (administration/partner session, eight hours); time365_academy (academy session, eight hours); __Secure-time365-ask (request protection, ten minutes, created only when asking). These cookies use Secure and HttpOnly flags. Preference records time365-audience-consent and time365-performance store your allow/refuse choice and timestamp for 180 days, then require a new choice. Optional time365-audience-session is tab-local session storage used only after consent; visit grouping resets after 30 minutes of inactivity or at midnight UTC, and storage ends with the tab. No advertising cookies are set by our application. You can also clear storage through your browser; doing so can end sessions and reset preferences.
Videos and external links
Self-hosted videos use this website’s hosting. A YouTube player is loaded only after a separate confirmation in the video dialog. YouTube is provided by Google Ireland Limited; it can receive connection/device data, access browser storage and process data outside the EEA. The legal basis for loading this optional embedded player is your consent, Article 6(1)(a) GDPR and § 25(1) TDDDG. Close the video to stop further playback; consent is not remembered for the next video. Opening an external link visits a separate service governed by its own privacy information.
Recipients and international processing
Access is limited to authorized Scharfe-Sicht staff and service providers involved in hosting, security, AI replies and email handling. Hosting and AI are supplied by OpenAI, with infrastructure subprocessors including Cloudflare. Our notification integration uses Resend when enabled; the corporate mailbox provider also processes email correspondence. Processing is not guaranteed to remain exclusively in Germany or the EEA. Provider processing terms describe their subprocessors and international-transfer safeguards, including applicable adequacy decisions and EU standard contractual clauses. You may request information and copies of the relevant safeguards from info@scharfesicht.com. We do not sell visitor data.
Your rights and withdrawal
Subject to the legal conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. Consent may be withdrawn at any time without affecting earlier lawful processing. Contact info@scharfesicht.com; we may need proportionate identity verification. This website does not make solely automated decisions producing legal or similarly significant effects on you.
Supervisory authority and complaints
You can complain to a data protection supervisory authority, particularly where you live, work or believe an infringement occurred. The authority for our location is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; poststelle@ldi.nrw.de; www.ldi.nrw.de.