Who we are
We are the French company People over Process SAS (the “Company, “We”, or “Us”) domiciled at 3 square Claude Debussy, 75017, Paris, France with chamber of commerce registration number 879920981. We are the joint controller responsible, together with the entity which has contracted the service (the “Client), for the processing of personal data through the Website and Popwork.
How we obtain personal data
We collect and receive personal data through the Website and Popwork. Personal data means any information relating to an identified or identifiable natural person.
First of all, we collect personal data that you choose to voluntarily provide to us for your use of the Website and Popwork. Also, we collect personal information through Popwork.
The list of third party services we rely on in connexion with our Website and Web App is available here.
The types of personal data we may obtain
We may collect and receive the following personal data from you:
Name and contact details (such as gender, name, address, email, and phone numbers);
Account details (such as company, manager details, team member details);
Payment information (such as bank account information);
Information on your use of the Website and Popwork;
Personal data included in content uploaded by you to Popwork;
Personal data posted by you on the Website or in Popwork;
Traffic and connection data;
Any other information that you have provided us with (such as your profile picture, the comments you leave and whether you would like to receive emails in relation to our product).
We may collect other types of personal data if required under applicable law or if necessary for the purposes listed below. We will then inform you and ensure that there is a valid legal basis for doing so.
How we may use personal data
We may use the personal data we collect and receive for the following purposes:
To create an account for your use of the Website and Popwork;
To provide Popwork service, including support;
To analyze how the Website or the Web App are used, such as which pages are visited, how long pages were visited and the paths taken by visitors to our website as they move from page to page;
To verify compliance with applicable legal requirements and our policies;
To suggest tips customized based on your usage;
To inform you about our services, any updates, and any new services that may be of interest to you.
We process personal data because this is necessary for the performance of the contract between you and us, for our compliance with our legal obligations and for the purpose of our legitimate interests. In particular, our legitimate interests are our commercial company interest (e.g. to improve our products and services), our interest to make use of direct marketing, our interest to prevent fraud and our interest to report possible criminal acts or threats to competent authorities.
You may unsubscribe from receiving any newsletter and marketing emails we may send you at any time by following the unsubscribe link included in every newsletter and marketing email sent to you by Popwork.
How we may share personal data
We may share your personal to third-party service providers (the "Subprocessors") in the context of carrying out our services. In such a case, we make sure that the Subprocessors guarantee and protect your personal data and comply with the applicable law. As per the Article 28 of the GDPR, we have signed contracts with our Subprocessors, defining the nature and purpose of the processing and allowing us to monitor and control the way they handle your personal data.
You may find more details about how we use third party providers in our security section.
We do not sell, rent or trade your personal data.
We will inform you immediately, to the extent we are legally authorised to do so, in case of any application or order originating from an administrative or judicial authority relating to your personal data.
Data transfers outside the EU and the EEA
We may transfer part of your personal data to third party service providers located outside the European Union (the "EU") and the European Economic Area (the "EEA"), in order to perform our services.
In such a case, we make sure that they are located in a country with sufficient level of protection of personal data as per the EU’s standards. In the case of the United States, we make sure that the third party service providers comply with the requirements of the “EU-U.S. Privacy Shield” or equivalent provisions.
How we protect personal data
We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us or the personal information stored is absolutely secure. We will notify you of any data breach that is likely to have unfavorable consequences for your privacy in accordance with applicable law.
How long we retain personal data
We retain personal data for as long as necessary to fulfill the purposes for which we collect or receive the personal data, except if required otherwise by applicable law. Typically, we will retain most of the personal data for the duration of your use of the Website and Popwork, until you have removed your account, unless a longer applicable statutory retention period applies. Note that after the deletion of your account, your personal data will be anonymised and all the data you have inputted in Popwork will be deleted within a timeframe of 90 days.
You can modify some of your identifying personal data at any time by logging onto your account’s “Settings” section.
In accordance with the French Data Protection Law of 6 January 1978 as amended, and, as of May 25th 2018, the GDPR, you have the right to access, correct, request the portability, request the deletion, and/or oppose the processing of your personal data, under the conditions provided by the GDPR.
We will acknowledge receipt of your request within a few days or receiving it, but may need up to 30 days to inform you of our decision to process it or not (unless specific circumstances justifying a longer processing time apply, in which case you will be notified).
We may require that your request be accompanied by a photocopy of proof of identity or authority. In addition, in the event a third party whose personal data you have included in data you enter into our services makes a request to exercise his/her data protection rights, we will honor that request after proper verification and will inform you of any consequences on the data available to you.
How to Contact Us
Updated on 22 June 2020