This Privacy Policy informs you about the type of personal data that is collected and received through our website https://pop.work (“Website”) and our web-based services that relate to the application Popwork accessible on https://app.pop.work (“Web App” or “Popwork”), and about how we use, share, retain and protect such personal data.

We are the French company People over Process SAS (the “Company, “We”, or “Us”) domiciled at 3 square Claude Debussy, 75017, Paris, France with chamber of commerce registration number 879920981. We are the joint controller responsible, together with the entity which has contracted the service (the “Client), for the processing of personal data through the Website and Popwork.

To provide the Service for the Client, Popwork acts as data controller for certain data such as: identification data, billing data, and requests made by users to customer support. This Privacy Policy is intended to govern this relationship.

Popwork also acts as a data processor, for all data and information entered by the Client as part of their use of the solution. A Data Processing Agreement (“DPA”) governs this relationship.

We collect and receive personal data through the Website and Popwork. Personal data means any information relating to an identified or identifiable natural person.

First of all, we collect personal data that you choose to voluntarily provide to us for your use of the Website and Popwork. Also, we collect personal information through Popwork.

In addition, we collect certain personal data by using cookies, including similar technologies such as local storage when you visit the website. Cookies are bits of text that are placed on your computer’s hard drive or mobile device when you visit certain websites. Cookies hold information that may be accessible by the party that places the cookie, which is either the website itself (first party cookie) or a third party (third party cookies). You do have control over cookies, and can refuse the use of cookies by selecting the appropriate setting on your browser. Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable or delete existing cookies.

Please note, however, that by not accepting or deleting the use of cookies, you may not be able to use the Website and Popwork.

On the Website, we use cookies to gather website statistical data to analyze how our users use the website, such as which pages are visited, how long pages were visited and the paths taken by visitors to our website as they move from page to page. These cookies are placed by the domain https://pop.work.

The list of third party services we rely on in connexion with our Website and Web App is available here.

We may collect and receive the following personal data from you:

We may collect other types of personal data if required under applicable law or if necessary for the purposes listed below. We will then inform you and ensure that there is a valid legal basis for doing so.

We may use the personal data we collect and receive for the following purposes:

We process personal data because this is necessary for the performance of the contract between you and us, for our compliance with our legal obligations and for the purpose of our legitimate interests. In particular, our legitimate interests are our commercial company interest (e.g. to improve our products and services), our interest to make use of direct marketing, our interest to prevent fraud and our interest to report possible criminal acts or threats to competent authorities. 

You may unsubscribe from receiving any newsletter and marketing emails we may send you at any time by following the unsubscribe link included in every newsletter and marketing email sent to you by Popwork.

We may share your personal to third-party service providers (the "Subprocessors") in the context of carrying out our services. In such a case, we make sure that the Subprocessors guarantee and protect your personal data and comply with the applicable law. As per the Article 28 of the GDPR, we have signed contracts with our Subprocessors, defining the nature and purpose of the processing and allowing us to monitor and control the way they handle your personal data.

You may find more details about how we use third party providers here.

We do not sell, rent or trade your personal data.

We will inform you immediately, to the extent we are legally authorised to do so, in case of any application or order originating from an administrative or judicial authority relating to your personal data.

We may transfer part of your personal data to third party service providers located outside the European Union (the "EU") and the European Economic Area (the "EEA"), in order to perform our services.

In such a case, we make sure that they are located in a country with sufficient level of protection of personal data as per the EU’s standards. In the case of the United States, we make sure that the third party service providers comply with the requirements of the “EU-U.S. Privacy Shield” or equivalent provisions.

We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. 

However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and us or the personal information stored is absolutely secure. We will notify you of any data breach that is likely to have unfavorable consequences for your privacy in accordance with applicable law.

We retain personal data for as long as necessary to fulfill the purposes for which we collect or receive the personal data, except if required otherwise by applicable law. Typically, we will retain most of the personal data for the duration of your use of the Website and Popwork, until you have removed your account, unless a longer applicable statutory retention period applies. Note that after the deletion of your account, your personal data will be anonymised and all the data you have inputted in Popwork will be deleted within a timeframe of 90 days.

You can modify some of your identifying personal data at any time by logging onto your account’s “Settings” section. 

In accordance with the French Data Protection Law of 6 January 1978 as amended, and, as of May 25th 2018, the GDPR, you have the right to access, correct, request the portability, request the deletion, and/or oppose the processing of your personal data, under the conditions provided by the GDPR. 

We will acknowledge receipt of your request within a few days or receiving it, but may need up to 30 days to inform you of our decision to process it or not (unless specific circumstances justifying a longer processing time apply, in which case you will be notified). 

We may require that your request be accompanied by a photocopy of proof of identity or authority. In addition, in the event a third party whose personal data you have included in data you enter into our services makes a request to exercise his/her data protection rights, we will honor that request after proper verification and will inform you of any consequences on the data available to you.

We may update this Privacy Policy from time to time. We will notify our users of any significant changes to this Privacy Policy on the Website or through other appropriate communication channels. All changes shall be effective from the date of publication, unless otherwise provided in the notification.

If you have any comments or inquiries about the information in this Privacy Policy, if you would like to request the deletion of your personal data, or to exercise your rights, please contact us by email at [email protected].

Updated on 2 February 2024