Where your data is, and for how long
In the European Union, separately for each organisation, with a copy every day and a time after which it is erased.
The data from requests has a time limit
Let time run and see when what disappears. The time limits are kept automatically, every day.
To keep it simple, the request and the slot are on the same day.While it is blocked, its requests are kept.
The time limits in short
- The day of the requestThe data from the form is stored: name, e-mail, phone and a description or note, if there is one. With it, when the request was sent and from which IP address. All of it stays with your organisation.
- After 30 daysThe records of the codes that confirm an e-mail are erased, and so is the note on an appointment with a specialist.
- After 6 monthsThe IP address stored with the request is erased.
- After 24 monthsThe name, e-mail, phone and description are erased automatically. Only a record for statistics remains: when and what was booked, not by whom.
- The logThe records of who did what in the panel are kept for 24 months. Then they are erased automatically.
- The backupsAn encrypted copy is made every day, and each copy is erased after 30 days. So whatever is erased is gone from the copies within a month too.
- Longer — only against abuseWhile an e-mail is blocked, its requests are not anonymised. Once the block is lifted, the general time limits apply.
By default we keep the data from requests for up to 2 years. The period can be agreed — shorter or longer. Anti-abuse data and ZPPI records are kept longer.
Where the data is, and who sees it
Where
- The data and the backups are in the European Union.
- Every organisation has a separate database — you share tables with nobody.
- The backup is encrypted and kept apart from the system, in another cloud, with the data in the EU.
Who
- Your staff — according to their role, after signing in with a password and a code from their phone.
- For support — only our team, with downloads of the log recorded.
- The data is not sold and not used for advertising or profiling.
Most things aren’t deleted: a place or a person is deactivated, and requests are declined or cancelled, they don’t disappear.
Every day we keep an encrypted copy of your data, apart from the system, for 30 days. If needed, we restore the data from the last copy.
Yes. Restoring from a copy has been tried out.
A restore brings the organisation’s data back as it was at the last daily copy.
Documents
Ready texts: a privacy policy, terms and cookies, matched to the calendars you use.
A description of the measures and a data processing agreement.
Three questions on the topic
Is the data safe?
Yes. Only authorised staff have access, signing in with a password and a code from their phone — and for support, only our team, with downloads of the log recorded. Actions in the panel are logged, and the data has an encrypted backup every day. Under contract with a public body we provide a description of the measures and a data processing agreement.
In detailWhat if something is deleted by mistake?
Most things aren’t deleted but deactivated or cancelled. Besides, every day we keep an encrypted copy of the data, apart from the system, for 30 days; if needed, we restore from the last copy. The restore has been tested.
Where is the data hosted?
The data and the backups are in the European Union.
Talk to us about the data
We’ll go through the measures with your data protection officer.