Time tracking after the CJEU ruling: privacy-friendly, without employee surveillance
Tickin records working time so your team is paid correctly and you meet your record-keeping duties. It is not built to watch people. Here is exactly what we record, what we never do with your data, and where it is stored.
What the CJEU ruling requires
In May 2019 the Court of Justice of the European Union (case C-55/18) held that employers must set up an objective, reliable and accessible system for recording each worker's daily working time. In Germany, the Federal Labour Court confirmed in September 2022 (1 ABR 22/21) that this obligation already applies.
This page explains how Tickin works. It is not legal advice.
How Tickin records working time
- Every working day, timestamped
- Every clock-in, clock-out and break is stored with its timestamp, whether it comes from the web app, Slack or Microsoft Teams.
- Changes leave a trail
- Important changes are logged append-only: who made them, when, and the value before and after.
- Employees see their own records
- Each employee sees their own hours in their My day view; admins see the team's.
- Time, not people
- Tickin measures hours and attendance, not keystrokes. Activity monitoring is an optional Desktop App feature and is off by default.
Our commitments on your data
We never sell your data
We never sell customer data or share it with anyone for their own purposes. It is used only to run Tickin for the customer it belongs to. The providers that help us run the service are listed on our subprocessors page.
Every workspace is isolated
Each workspace has its own dedicated database, so one customer's records are never stored alongside another's.
Monitoring is the customer's choice
Desktop activity tracking and screenshots stay off unless the customer turns them on. Only the customer's own admins can see the results. Tickin never views, uses or sells them.
Workspaces in Germany and the EU
For workspaces whose country is set to Germany, activity tracking and screenshots are removed entirely: not switched off, but not available at all, and no admin can turn them on. It applies automatically as soon as Germany is saved as the workspace's country in Settings, and only Tickin can lift it. Workspaces in other EU countries can have it applied on request. Idle detection and attendance work as before. Activity data recorded before the switch is no longer shown anywhere (it is not deleted automatically).
Where your data is stored
Tickin is hosted on Amazon Web Services in the United States today. AWS processes the data under the EU Standard Contractual Clauses, through the AWS GDPR Data Processing Addendum that is part of the AWS Customer Agreement. An EU region (Frankfurt) is in preparation.
Data processing agreement
A data processing agreement (DPA, in German: AVV) is available on request. Contact us and we will send it to you.
Request a DPA