Privacy policy
1. Identity of the Data Controller
The data collected through the website www.contracktime.com and the Contracktime® application is processed by:
Forest CM SPRLAvenue Général Lartigue 41, 1200 Woluwe-Saint-Lambert, BelgiumCompany registration number: BE 0845.956.103Email: nicolas.forest@forestcm.com
2. Data Collected
2.1 Via the website
When you visit www.contracktime.com, we collect:
- Browsing data (IP address, browser type, pages visited, visit duration) via analytical cookies
- Information you voluntarily provide through the contact form or demo booking form (first name, last name, email address, company, message)
2.2 Via the Contracktime® application
In the context of using the application, we collect:
- Identification data: last name, first name, email address, phone number (optional)
- Connection data: login credentials, access logs, IP address
- Project data: tagged emails, meeting minutes, schedule files, price lists, progress updates
- Microsoft Outlook and/or Google Gmail data linked to emails manually archived in the application (Email ID, Conversation ID, distribution list, subject, body text, attachments)
3. Purposes of Processing
Your data is collected for the following purposes:
- Service delivery: account creation and management, application access, contract execution
- Communication: responding to your contact or demo requests, service-related notifications
- Billing: subscription and payment management
- Service improvement: statistical analysis of website and application usage
- Legal obligations: compliance with applicable accounting and tax obligations
4. Legal Basis for Processing
Service deliveryLegal basis: performance of a contract (Art. 6.1.b GDPR)
CommunicationLegal basis: legitimate interest (Art. 6.1.f GDPR)
BillingLegal basis: legal obligation (Art. 6.1.c GDPR)
Analytical cookiesLegal basis: consent (Art. 6.1.a GDPR)
Service improvementLegal basis: legitimate interest (Art. 6.1.f GDPR)
5. Data Retention
- User account data: retained for the duration of the contractual relationship, then deleted according to the terms defined in Article 3 of the Terms and Conditions
- Company account data: permanently deleted 60 days after the last payment made
- Billing data: retained for 7 years in accordance with Belgian accounting obligations
- Analytical cookies: maximum 13 months
- Contact requests: 3 years from the last contact
6. Recipients of Data
Your data is strictly confidential. It is neither sold nor transmitted to third parties for commercial purposes.
It may be accessible to the following technical processors, strictly within the scope of service delivery:
- Amazon Web Services (AWS) — application hosting on servers located within the European Economic Area
- Webflow — website hosting
- Calendly — demo appointment scheduling
- Microsoft / Google — in the context of Outlook or Gmail connection to the application
Each processor is contractually bound to maintain the confidentiality of your data and comply with GDPR regulations.
7. Transfers Outside the European Union
Forest CM undertakes to use only servers located within the European Economic Area for hosting Contracktime® application data.
Some processors (Microsoft, Google, Calendly) may process data outside the EU. These transfers are governed by appropriate safeguards in accordance with the GDPR (standard contractual clauses of the European Commission).
8. Data Security
Forest CM implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure:
- Web Application Firewall (WAF) with OWASP rules
- Encryption of sensitive data
- Strict access controls
- Infrastructure hosted on AWS with advanced security protocols
9. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access: obtain a copy of your personal data
- Right of rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data under the conditions provided by the GDPR
- Right to restriction: request the restriction of processing of your data
- Right to portability: receive your data in a structured, machine-readable format
- Right to object: object to the processing of your data for reasons relating to your particular situation
- Right to withdraw consent: at any time for processing based on your consent (cookies in particular)
To exercise these rights, contact us at: nicolas.forest@forestcm.com
We are committed to responding to your request within a maximum of 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Data Protection AuthorityRue de la Presse 35, 1000 Brusselswww.dataprotectionauthority.be
10. Cookies
10.1 What is a cookie?
A cookie is a small text file placed on your device when you visit our website. It allows information related to your browsing to be stored.
10.2 Cookies used on www.contracktime.com
Essential cookiesPurpose: website operation, consent managementDuration: session
Analytical cookiesPurpose: audience measurement (Google Analytics)Duration: 13 months
10.3 Managing your preferences
Upon your first visit, a banner allows you to accept or decline non-essential cookies. You can modify your preferences at any time via the "Cookie Settings" link at the bottom of each page.
11. Amendments to the Privacy Policy
Forest CM reserves the right to modify this privacy policy at any time. Any material change will be communicated to you by email or via a notification on the website. The last updated date is indicated at the top of this document.
12. Governing Law
This privacy policy is governed by Belgian law and Regulation (EU) 2016/679 of April 27, 2016 (GDPR). In the event of a dispute, only the courts of Forest CM's registered office shall have jurisdiction.