FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Customer support

Timify

PreferencesOfficial website

Timify is a Munich based SaaS platform for online appointment booking, calendar management, and resource scheduling, used by small businesses and large retailers across Europe. When embedded on a website, the Timify widget sets cookies, loads scripts from Timify domains, and processes booking information, which makes prior consent and a data processing agreement necessary under GDPR and ePrivacy.

Block Timify until consentScan my site
Overview

What does Timify do?

What Timify is

Timify is a SaaS platform developed in Munich for online appointment booking, calendar management, queue management, and resource planning. It is used by independent professionals, retail chains, and enterprises to let customers book services online, manage availability across multiple locations, and synchronize calendars with internal systems. The platform is offered as an embedded widget, a standalone booking page, and a backend application.

Cookies and data set by Timify

The embedded Timify widget stores cookies for session continuity, CSRF protection, user interface preferences, and analytics about widget usage. The platform processes the booking information entered by the user, such as name, email, phone number, the service selected, the time slot, and any custom field configured by the merchant. Some integrations may add cookies for marketing or analytics depending on the configuration chosen by the merchant.

GDPR and ePrivacy implications

The booking processing itself relies on the performance of a contract under Article 6(1)(b) GDPR. The cookies set by the widget, however, are subject to Article 5(3) of the ePrivacy Directive and to the German TTDSG, which require informed consent for any storage that is not strictly necessary. Strictly necessary cookies for the actual booking session can be set without consent, but analytics or convenience cookies must be conditioned on the user opting in.

Consent requirements

Best practice is to load the Timify widget only after the user expresses a clear intent to book, for example by clicking a button, and to display a notice explaining that the widget will set cookies and process the booking information. Strictly necessary cookies can be loaded without prior consent, while any analytics or marketing cookies should be governed by the consent management platform.

International data transfers

Timify hosts data in the European Union and offers EU data residency by default. Some sub processors may operate outside the EU for specific functions, such as transactional email delivery. Controllers should check the current list of sub processors, sign the data processing agreement, and confirm that Standard Contractual Clauses are used where transfers occur outside the EU or EEA.

Practical compliance steps

Sign the data processing agreement with Timify, document the categories of personal data collected through the booking flow, set realistic retention periods aligned with the legal hold period for billing, list the cookies in the cookie policy, configure the consent banner to gate non essential cookies, and inform customers about the use of Timify in the privacy policy.

Compliance

Timify and the GDPR

Timify is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Performance of a contract (Article 6(1)(b) GDPR) for booking management and consent (Article 6(1)(a) GDPR) plus ePrivacy Article 5(3) for the embedded widget cookies
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, BDSG, TTDSG

Impact assessment (DPIA)

A full Data Protection Impact Assessment is usually not required for standard booking use, but a basic assessment is recommended when Timify is deployed at scale, when special categories of data could be collected (for example in healthcare bookings), or when personal data is enriched with marketing tools. The assessment should look at the data fields collected, the retention periods, the integrations with CRM or marketing tools, and the sub processors used by Timify.

Sample text for your banner

We use the Timify booking widget on this page to manage your appointment. Timify sets cookies and processes the booking information you provide. By accepting, you allow the widget to load and to store the necessary identifiers. You can withdraw your consent at any time from the cookie settings.
Cookies and trackers

What Timify sets and contacts

Tracking method
Client side JavaScript widget with first party cookies and authenticated API calls for booking flows
Server location
European Union (Germany, AWS Frankfurt) with EU data residency

Cookies set (4)

NameTypeDurationPurpose
TIMIFY_SESSIONfirst_partySessionStores the booking session identifier used to keep the user logged in during the booking flow.
XSRF-TOKENfirst_partySessionStores the CSRF token used to protect the booking form against cross site request forgery attacks.
timify_localefirst_party1 yearStores the language preference selected by the user in the booking widget.
timify_consentfirst_party6 monthsStores the user consent state for non essential analytics cookies inside the widget.

Third-party domains contacted (4)

  • timify.com
  • book.timify.com
  • api.timify.com
  • cdn.timify.com
Questions

Frequently asked questions about Timify

Can't find your question? Write to us, we answer fast.

Which cookies does the Timify widget set?

The Timify widget sets first party cookies for session continuity, CSRF protection, locale preferences, and limited usage analytics. Some configurations may load additional cookies for marketing or integrations, depending on how the merchant has set up the widget.

Is consent required for Timify?

Consent is required for any non essential cookie set by the widget, in particular analytics or convenience cookies. The booking processing itself relies on contract performance and does not need consent, but the cookies that go beyond what is strictly necessary do need an opt in under ePrivacy and TTDSG.

What is the legal basis for processing bookings?

The legal basis is Article 6(1)(b) GDPR, performance of a contract, for booking management, payment, and reminders. For optional marketing communications based on the booking data, the legal basis is Article 6(1)(a), consent.

Where is Timify data hosted?

Timify hosts customer data on infrastructure located in the European Union, typically in Germany. Some sub processors may operate outside the EU for specific functions such as transactional email, in which case Standard Contractual Clauses are used.

Is a DPIA required for Timify?

A full DPIA is usually not required for standard appointment booking. A basic risk assessment is recommended when Timify is used at scale, when special categories of data such as health information are collected, or when the booking data feeds marketing systems.

How to deploy Timify in a compliant way?

Sign the DPA with Timify, list the cookies in the cookie policy, configure the consent banner to gate non essential cookies, load the widget only after a clear user action, set realistic retention periods, and document the integration in the records of processing activities.

What are the alternatives to Timify?

Alternatives include Calendly, SimplyBook.me, Doodle Bookable Calendars, Microsoft Bookings, and Acuity Scheduling. They differ in EU hosting, integrations, and pricing, so the choice depends on data residency requirements and on the booking workflow.

How to update the cookie policy for Timify?

Add a clear section explaining that the website embeds the Timify booking widget, describe the cookies set by the widget, the categories of personal data processed during the booking, the retention periods, the sub processors, and the link to Timify privacy information.

Same category

More services: Customer support

See the whole category

Muchat

Muchat is a live chat and customer messaging platform that enables businesses to engage with website visitors in real time. It provides instant messaging, chatbot automation, and team collaboration tools to deliver fast, personalized customer support. Muchat supports multi-channel communication, conversation routing, and canned responses to improve response times. With built-in analytics and CRM integration, Muchat helps convert visitors into customers.

Preferences

Lead-Finity Webchat

Lead-Finity Webchat is a lead generation platform designed to help businesses capture, qualify, and convert website visitors into sales-ready leads. It offers smart forms, interactive content, and behavioral tracking to identify high-intent prospects. Lead-Finity Webchat integrates with CRM and marketing automation tools to streamline lead nurturing. With scoring models and analytics, Lead-Finity Webchat helps teams focus on the most promising opportunities, improving pipeline quality and revenue growth.

Preferences

SignalZen

SignalZen is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SignalZen supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SignalZen ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Quiq Messaging

Quiq Messaging is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quiq Messaging integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quiq Messaging helps organizations maintain robust websites that meet user expectations and technical.

Preferences

BetterBot

BetterBot is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BetterBot supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BetterBot ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Appointy

Appointy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Appointy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Appointy helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site