In short
- We use your data to connect you on professional criteria, secure the service and manage companies’ spaces. We neither sell nor rent your data.
- Before mutual interest, companies see neither your name, nor your photo, nor your contact details.
- Matching follows known rules, without artificial intelligence, and a person always makes the hiring decision. If you ask for it, a European AI (Mistral AI) reads the document you import to fill in your profile.
- To exercise your rights: simon.kortsmit@timstrok.com.
01Data controller
The controller of the platform’s processing is Simon Kortsmit, private individual, publisher of Timstrok, 118 avenue de Limoges, 79000 Niort, France (see the legal notice). Contact for your personal data: simon.kortsmit@timstrok.com. Data protection officer: no officer is appointed, as the appointment is not mandatory for Timstrok; write to simon.kortsmit@timstrok.com.
Each company is the controller of how it uses applications for its own recruitment (internal notes, selection stages, exports, decisions). For this data, we act as the company’s processor, under the data processing agreement in the terms of sale; you can exercise your rights with the company as well as with us.
The publisher intends to entrust the operation of Timstrok to a company that he will set up, which will then become the controller. We will inform you at least 30 days in advance; you may close your account before that date.
02Closed test
During the closed test, only invited e-mail addresses can register. For this purpose, we keep a list of authorised addresses, on the basis of our legitimate interest in restricting access to the test. It is neither published nor used to solicit you, and it is deleted when the service opens to the public.
When the service opens to the public, your account and your data are kept and this policy continues to apply, in its version then in force. If Timstrok does not open to the public, we delete the accounts and their data within 30 days of closing the service.
During the test, payments and company verifications are fictitious: no data is sent to Mollie, Billit or Didit.
03Data concerned and where it comes from
- Account: last name, first name, e-mail, telephone number (optional), declaration that you are 16 or older, sign-in methods, sessions (IP address, device), trusted devices and preferences (language, appearance, notifications). When you sign up, you confirm that you are 16 or older: we record only this declaration and its date. If you give it, the telephone number allows us to contact you about your account, for example to confirm your identity during a support request. This information is never shown to a company before mutual interest.
- Profile and search: optional photo, CV, experience, education, skills, certifications, languages, driving licences, mobility, availability, preferences and reactions to offers.
- Recruitment: offers, expressed interest, connections, selection stages, internal notes, messages, attachments and appointments.
- Company and subscription: identity of the entity and its representatives, members and permissions, orders, invoices and payments.
- Security and support: sign-in events, sensitive actions, reports, moderation decisions and requests to support.
The information marked as mandatory (last name, first name, e-mail, declaration that you are 16 or older and sign-in methods) is needed to create the account: without it, registration is not possible. The telephone number and the rest are optional; the more complete your profile, the more precise the matching.
Most of this data comes from you. Some comes from other users (notes and selection stages entered by a company, invitation of a member by an administrator, a report about you) or from our providers (result of a verification, status of a payment).
Do not include health data, opinions, religion, a social security number or identity documents in a CV or a message: they are not needed for matching.
04Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing your account | Performance of the contract (terms of use) | Lifetime of the account; after a deletion request, 30 days during which you can restore it, then erasure |
| Matching candidates and offers, managing interest, connections and messages | Performance of the contract; for the automated exclusion of a profile, Article 22(2)(a) GDPR, with the safeguards described below | Lifetime of the account; a conversation is erased 30 days after both participants have hidden it |
| Administering company spaces and their access | Performance of the contract with the company; legitimate interest towards its members | For as long as the space exists, including after the end of the subscription. When an administrator asks support, the space is closed within one month: members’ access removed, public presentation and media erased, offers closed; accounting records remain kept for ten years and exchanges already held remain visible to candidates |
| Securing the service and preventing fraud | Legitimate interest | Sessions (IP address, device): until sign-out or expiry of the session. Trusted devices: until they expire or are revoked. Access recovery records: 30 days. Server technical logs: 14 days |
| Keeping a security log: successful and refused sign-ins, activation and deactivation of two-factor authentication, actions of company administrators and of Timstrok staff (roles, members, deletions, exports), readings of reported conversations and export requests | Legitimate interest and security obligation (Article 32 GDPR) | 12 months, then automatic deletion. The log keeps the account identifier, the type of action, its date, the truncated IP address with a fingerprint computed with a secret key, and the type of device; never a password, a code or the content of a message. Only the people in charge of security can access it |
| Handling reports and moderating content | Legal obligation (Regulation (EU) 2022/2065); legitimate interest | Duration of the review and of appeals, at the latest until the conversation or account concerned is deleted |
| Verifying an identity or a company (not used during the closed test) | Legitimate interest (combating fake profiles and fraud); for comparing your face with your identity document, your explicit consent (Article 9(2)(a) GDPR) | Result: lifetime of the account. Supporting documents: deleted by the provider no later than 30 days after the verification |
| Invoicing and managing payments (not used during the closed test) | Accounting and tax legal obligations | Accounting records: 10 years from the end of the financial year (Article L123-22 of the French Commercial Code) |
| Answering support requests | Legitimate interest; legal obligation for requests to exercise rights | 90 days after the request is closed; the follow-up link without an account expires after 7 days |
| Reading a document you import (CV, job description) | Performance of the contract, at your request | Document: deleted as soon as reading ends, at the latest within 24 hours; Mistral AI does not keep it (zero data retention). Extracted information: that of your profile or of the offer |
| Searching for an interview address | Performance of the contract | Answers from the address services kept in memory for 30 days, without any link to your account; the chosen address follows the lifetime of the appointment |
| Notifications | Performance of the contract | Deleted 30 days after being read, at the latest 90 days after being created |
| Proving acceptance of the terms of use, the privacy policy and the terms of sale | Legitimate interest (proof of the contract) | Lifetime of the account; for the terms of sale, lifetime of the company space |
| Restricting access to the closed test | Legitimate interest | Until the service opens to the public |
| Backing up data | Legitimate interest (continuity of the service) | Encrypted copies of the databases: 30 days; data erased from the database disappears from these copies at the latest 30 days later |
| Establishing or defending legal claims | Legitimate interest | Duration of the proceedings or of the applicable limitation period, for the necessary elements only |
Inactive accounts. An account with no activity (sign-in or use of a session) for 2 years is deleted. We warn you by e-mail 60, 30 and 7 days beforehand; a single sign-in is enough to keep it. After deletion, you have 30 days to restore the account by signing in, before it is permanently erased. The owner of a company space is not deleted as long as they have not transferred ownership of the space. A registration whose e-mail address has not been verified within 7 days is erased; the day before, we send a new verification code to the address given.
Where the law requires it, in particular to answer a judicial request, some data may be kept longer, with restricted access and only for the period required.
Timstrok does not send marketing. Reading this policy or accepting the terms of use is not consent to marketing or to optional trackers; any consent would be asked for separately and could be withdrawn at any time.
05Who sees your profile and your exchanges?
Before mutual interest, the company sees a profile without last name, first name, photo, telephone number or address. The title displayed is the position sought. This masking does not make a career path fully anonymous: an experience, a free text or an attachment may allow you to be recognised.
After mutual interest, the information provided for in the shared profile becomes accessible to the company’s authorised persons for this recruitment. Recruiters’ internal notes are not displayed in your conversation but remain subject to your rights.
Offers and company presentations published in the public area are accessible without an account and may be indexed by search engines. Candidates’ profiles are never public.
Timstrok staff read a conversation only if one of its participants has reported it, while the report is being examined and only to the extent needed for that examination. Every reading is recorded in the security log.
06How matching works
Timstrok compares the criteria of your CV with the criteria of each offer: reference position, experience, skills, certifications, languages, driving licences, location, remote work, pay and availability. The mandatory criteria of an offer must be met; optional criteria increase compatibility. A threshold chosen by you or the company may exclude a result.
This calculation is deterministic: it follows known rules, without artificial intelligence or machine learning, and does not measure your professional worth. Without human intervention, it may exclude your profile from an offer when a mandatory criterion is not met or a threshold is not reached. It never takes a hiring decision: a person at the company reviews the profiles proposed and decides.
This automated exclusion is necessary for the matching service you ask for (Article 22(2)(a) GDPR). At any time you can find out which criteria excluded your profile, express your point of view, contest the result and have a person review the situation, by writing to support. You can also correct your information and your preferences.
07Providers, recipients and transfers
Timstrok’s authorised persons only access the information needed for their task. Our processors act only on our instructions, under a contract that complies with Article 28 GDPR:
| Processor | Role | Location |
|---|---|---|
| netcup GmbH | Hosting of the application and the databases | European Union |
| Hetzner Online GmbH (Hetzner Object Storage) | Storage of files (photos, media, attachments) and backups | European Union |
| Lettermint | Sending e-mails | European Union |
| Proton | Mailbox of the publisher’s contact address | Switzerland (adequacy decision) |
| Myra Security (EU CAPTCHA) | Protection of forms against bots | European Union |
| Mistral AI | Reading the documents you import (CVs, job descriptions), at your request | European Union and EFTA |
| Didit | Identity and company verification, assisted access recovery (not used during the closed test) | European Union |
| Mollie | Payments (not used during the closed test) | European Union |
| Billit | Electronic invoicing (not used during the closed test) | European Union |
The following recipients are not our processors: they process the data they receive on their own behalf.
| Recipient | Role | Location |
|---|---|---|
| IGN (Géoplateforme) | Searching for an interview address in France: our server only sends the text typed | France |
| Komoot (Photon) | Searching for an interview address outside France, in the same way | European Union |
| Google, Microsoft | Calendars, only if you connect them: availability and recruitment appointments | United States (Data Privacy Framework) |
| Public authorities | On a request with a legal basis (courts, police, administration) | France or European Union |
Only Google and Microsoft, when you connect your calendar, may process data in the United States: the transfer relies on the adequacy decision of 10 July 2023 (EU–US Data Privacy Framework) and, failing that, on the European Commission’s standard contractual clauses. Proton processes contact e-mails in Switzerland, a country recognised as adequate. You can obtain a copy of the applicable safeguards from simon.kortsmit@timstrok.com.
08Importing a document read by AI
If you ask for it, Timstrok reads your CV (or, in a company space, a job description) to fill in your profile (or a draft offer, never published automatically). The document is sent to Mistral AI, which reads it in its data centres in the European Union and EFTA, then returns the written information. Timstrok deletes the document as soon as reading ends, at the latest within 24 hours in case of an incident, and keeps only the information added, which you can freely correct or delete.
Mistral AI keeps neither the request nor its answer beyond the time needed to process it (zero data retention, enabled for Timstrok) and does not use them to train its models.
This reading does not sort, score or rank any candidate: it only fills in your own profile, at your request. Matching with offers remains as described above, without artificial intelligence.
09Connected calendars
Connecting a Google or Microsoft calendar is optional. The connection lets us check your availability and create or update your recruitment appointments. You can disconnect it at any time; events already created with the provider remain in your calendar.
10Cookies and storage on your device
Timstrok uses neither advertising nor audience measurement tools, and does not track you on other websites. Only mechanisms strictly necessary for the service are used; they are exempt from consent (Article 82 of French law no. 78-17 of 6 January 1978):
- secure session cookie, to stay signed in (duration of the session);
- device identifier, to recognise a trusted device (kept in the browser until it is cleared; the trust granted expires on the date set or when revoked);
- local preferences: language, theme, contrast and reduced motion (until they are cleared);
- temporary memory of a journey in progress, such as the address entered at registration or a pending action on an offer (until the journey ends or the tab is closed);
- anti-bot token of the CAPTCHA provider, on sensitive forms (a few minutes); its script is loaded from the servers of Myra Security, which receive your IP address.
In the app for iPhone and iPad, the sign-in cookies are kept only in the device’s Keychain.
11Your rights
Free of charge, you can request access to your data, its rectification, its erasure, the restriction of its processing or its portability, object to processing based on legitimate interest for reasons relating to your situation, withdraw consent and set instructions for what happens to your data after your death (Article 85 of French law no. 78-17 of 6 January 1978).
Write to simon.kortsmit@timstrok.com or use the support form. Proof of identity is requested only in case of reasonable doubt. We reply within one month, which can be extended by two months if the request is complex; you are then informed within the first month.
You can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the data protection authority of your country. For a company’s use of your application, you can also contact that company directly.
12Security and updates
Access is restricted by role and by space, communications are encrypted and two-factor authentication is mandatory for anyone holding a role in a company space and for Timstrok staff. In case of a personal data breach, we inform the CNIL within 72 hours and, if the risk is high, the people concerned without undue delay.
This policy exists in French, English, German and Dutch; the French version prevails. A significant change is submitted to you at your next sign-in; a minor change applies as soon as it is published.