Privacy Policy

You have subscribed to or are about to subscribe to the Task Direct Live application. This privacy policy is part of the contract binding you to the Publisher of Task Direct Live and complements the Task Direct Live General Terms and Conditions of Use and Sale. In the event of a contradiction between this privacy policy and the General Terms and Conditions, the General Terms and Conditions shall prevail, except for any provision directly concerning personal data within the meaning of Law No. 78-17 of January 6, 1978 (hereinafter "Data Protection Act") and Regulation (EU) 2016/679 on data protection (hereinafter "GDPR"), in which case the privacy policy shall prevail. It also applies to visitors to the taskdirectlive.com website, under the conditions set out in Part 2.

PART 1 – PROCESSING FOR WHICH CORNER H IP IS THE DATA CONTROLLER

1. Data controller and scope

CORNER H IP, SASU, registered under number 103 181 707, with its registered office at Rue du Bois Carré, 97232 Le Lamentin, Martinique (France), is the data controller for the processing described in this Part 1. For any questions regarding your data, you may contact them at [dedicated personal data email address].

This Part 1 applies to account, billing, and usage data for all Clients and Users, as well as all data processed within personal spaces. Content processed within the professional spaces of a professional Client is handled by CORNER H IP as a data processor, under the conditions set out in Part 3.

2. Data processed, purposes, and legal bases

Account creation and management, authentication, and access security: identification data (surname, first name, email address), identifiers, and connection logs. Legal basis: performance of the Contract.
Provision of Services (tasks, calendar, instant messaging, field feedback, tickets, storage): Content entered by Users. Legal basis: performance of the Contract.
AI-powered task dictation: dictated content and voice recordings, transmitted to the service provider OpenAI for processing, only when the User chooses to use this feature. Legal basis: performance of the Contract.
Location or address sharing: when the User chooses to link a location to a status, or to share a location or address in messaging, a report, a task, or any other Content, the chosen location or address is saved with that Content and is visible to its recipients. No continuous or background geolocation is performed. Access to device location is subject to the User's prior authorization, which may be withdrawn at any time in the device settings. Legal basis: performance of the Agreement. This data is retained with the Content to which it is linked.
Payment and billing: billing data and payment history. Payments are processed by Stripe; CORNER H IP does not store credit card numbers. Legal bases: performance of the Agreement and compliance with legal obligations, particularly accounting and tax requirements.
Processing of Reports, Complaints, and support requests. Legal bases: compliance with legal obligations (notably Regulation (EU) 2022/2065, known as the "DSA") and the legitimate interest of CORNER H IP in ensuring the proper functioning of the Services.
Improvement, audience measurement, and Service security [to be specified based on tools used]. Legal bases: legitimate interest or, for non-essential trackers, consent obtained upon the first launch of the Application.

3. Recipients and subcontractors

Data is accessible only to authorized personnel at CORNER H IP and its subcontractors, within the scope of their duties: Amazon Web Services (hosting and storage, region [to be specified] within the European Union), OpenAI (processing of AI-dictated content, United States), Galadrim (development and maintenance, France), and Brevo (email delivery).

Map display and address searches utilize the OpenStreetMap Foundation (United Kingdom), which receives the device's IP address and, where applicable, the searched address.

Stripe acts as a payment service provider. For certain purposes specific to its operations, notably fraud prevention and compliance with its regulatory obligations, Stripe acts as an independent data controller; its privacy policy is available on its website. Finally, data may be disclosed to authorized authorities upon request.

4. Transfers outside the European Union

Data is hosted within the European Union. However, certain data may be transferred to the United States: dictated content, when the User utilizes the artificial intelligence dictation feature (OpenAI), and certain payment data (Stripe). These transfers are governed by appropriate safeguards as defined in Chapter V of the GDPR: the adequacy decision regarding the EU–U.S. Data Privacy Framework for certified entities, and/or standard contractual clauses adopted by the European Commission. A copy of these safeguards can be obtained at the address indicated in Article 1.

When maps are provided by the OpenStreetMap Foundation, based in the United Kingdom, the data transmitted to it benefits from the adequacy decision adopted by the European Commission for the United Kingdom.

5. Users located outside the European Union

Task Direct Live is only available in certain countries, in accordance with the General Terms and Conditions of Use. Regardless of your country of residence, your data is hosted within the European Union and processed in compliance with the GDPR. If you reside outside the European Union, your data is therefore transferred to the European Union for processing. Any rights granted to you by the laws of your country of residence are in addition to those described below, where applicable.

6. Retention periods

Account data and Content: for the duration of the Agreement, and for thirty (30) days thereafter, in accordance with the "Reversibility and data deletion" section of the General Terms and Conditions of Use.
Personal spaces of a User whose support has been terminated: ninety (90) days from such termination, provided the User has not subscribed to a plan, in accordance with the General Terms and Conditions of Use; data is then permanently deleted.
Billing data: ten (10) years from the end of the financial year, in accordance with accounting obligations.
Connection logs: [twelve (12) months].
Reports and Complaints: [duration to be specified].
Content dictated to OpenAI: [duration according to current OpenAI terms].

7. Your rights

You have the right to access, rectify, erase, restrict, port, and object to your data, as well as the right to withdraw your consent at any time when processing is based on it, and the right to define directives regarding the fate of your data after your death. You may exercise these rights at the address indicated in Article 1; a response will be provided within one (1) month. You may also lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

8. Minors

Task Direct Live is reserved for individuals aged at least eighteen (18) years, in accordance with the Terms and Conditions. CORNER H IP does not knowingly collect data concerning minors. If it learns that an account has been created or is being used by a minor, it will delete the account and the associated data.

9. Security

CORNER H IP implements appropriate technical and organizational measures to protect data, including the segregation of personal and professional spaces, strict access management, enhanced administrator authentication, [and encryption of data in transit and at rest – to be confirmed].

PART 2 – TASKDIRECTLIVE.COM WEBSITE AND COOKIES

1. Scope

This Part 2 applies to data collected during visits to the taskdirectlive.com website. The data controller, transfers outside the European Union, and your rights are as described in Articles 1, 4, and 7 of Part 1. For any questions: cornerhip@mdynamique.com.

2. Data collected, purposes, and legal bases

Contact form: name, email address, and message, to respond to your request. Legal basis: legitimate interest.
[Newsletter: email address, to send you our news. Legal basis: consent. You can unsubscribe at any time via each email.]
[Subscription via the site: identity, contact details, and billing information, for order and billing management; payment is processed by Stripe. Legal bases: performance of the contract and legal obligations.]
Browsing: IP address and technical connection data, for site operation and security. Legal basis: legitimate interest.

3. Recipients

Data is accessible only to authorized personnel at CORNER H IP and its service providers, within the scope of their duties: Amazon Web Services (site hosting, European Union), Brevo (email delivery), and Stripe for payments. Data is never sold.

4. Retention periods

Contact requests: for the time required to process the request, then [three (3) years] from the date of the last contact.
[Newsletter: until you unsubscribe.]

5. Cookies and trackers

The taskdirectlive.com website does not place any cookies or other trackers on your device, and does not use any audience measurement or advertising tools. Should this change, this policy would be updated and your consent would be obtained beforehand where required by regulation.

PART 3 – DATA PROCESSING AGREEMENT (PROFESSIONAL CLIENTS)

Within the framework of the Agreement and/or upon the express written and documented instruction of the Client, CORNER H IP may process certain personal data of the Client (hereinafter "Personal Data"), or of its Users, for the purposes cited in Article 1 below, in the context of the use of Task Direct Live by a professional Client, for Content processed within its professional spaces. In this capacity, CORNER H IP acts as a Processor, and the Client as a Controller, within the meaning of Article 4 of the GDPR.

In accordance with Article 28 of the GDPR, the Parties agree to define their respective obligations regarding the Processing of Personal Data by CORNER H IP on behalf of the Client in this Appendix.

1. Information on processing

Purposes of processing

To ensure operational management related to the use of Task Direct Live, including monitoring and managing tasks to be performed, maintaining a history of these tasks, authenticating and securing User access, and managing access rights and the revocation of access rights.

Data subjects

The Client and its Users.

Categories of personal data processed

Client Data, and more specifically Personal Data entrusted by the Client to CORNER H IP for hosting and storage, in the context of using Task Direct Live

Duration of processing

The term of the Agreement
For configuration/development services, Personal Data is permanently deleted at the end of the service.

2. Commitments of CORNER H IP

In its capacity as a Processor, and in accordance with Article 28 of the GDPR, CORNER H IP undertakes to:

Processing carried out by CORNER H IP solely upon the Client's instruction -To process Personal Data only upon documented instructions from the Client, particularly in accordance with the Agreement. In the event of a request for instructions from the Client outside the scope of the Agreement, the Client agrees to submit this request to CORNER H IP, which will respond as soon as possible, accepting the request in writing subject to feasibility and establishing the terms, including financial ones;
Confidentiality obligation of CORNER H IP personnel -To ensure that its personnel authorized to process Personal Data commit to respecting confidentiality and only process Personal Data within the framework of the Agreement and/or upon the Client's instruction;
Transfers outside the EU -Personal Data is hosted within the European Union. CORNER H IP only transfers data to a third country in the cases mentioned in the appendix, particularly when Users utilize the artificial intelligence dictation feature (processing by OpenAI in the United States), and subject to appropriate safeguards within the meaning of Chapter V of the GDPR (adequacy decision, notably the EU–U.S. Data Privacy Framework for certified entities, and/or standard contractual clauses of the European Commission). CORNER H IP shall inform the Client of any new transfer;
Security obligation (Article 32 of the GDPR) -In light of the structure of the Agreement, the state of the art, and the information made available to CORNER H IP by the Client, CORNER H IP implements appropriate technical and organizational measures to preserve the confidentiality and security of the Personal Data processed on behalf of the Client. The objective is to prevent such data from being distorted, damaged, or disclosed to unauthorized persons.
Status of Personal Data at the end of the Agreement-Depending on the options subscribed to, at the end of the Agreement, CORNER H IP may, at the written and express request of the Client, within a maximum period of thirty (30) business days after the end of the Agreement for any reason whatsoever, either return all of the Client's data in its possession due to the performance of the Agreement in a standard format, or destroy it, subject to and within the limits of the legal and regulatory retention obligations imposed on CORNER H IP. After this thirty (30) day period, all of the Client's data will be automatically destroyed by CORNER H IP.
Cooperation obligation – Audit -CORNER H IP undertakes to make available to the Client all information necessary to demonstrate compliance with the obligations set out in this Appendix, to reasonably assist the Client in conducting its Privacy Impact Assessments, and to allow for the performance of audits. The Parties agree that these audits will be carried out by an independent auditor who must be approved by CORNER H IP and who will sign a confidentiality agreement prior to the audit. The audit is at the Client's expense. Prior to audit operations, the Client will indicate the specific purpose of the audit and the types of information to which the auditor will need access, which must only concern the obligations provided for in this article, to the exclusion of any other area. CORNER H IP undertakes to collaborate in good faith with the independent auditor for the performance of audit operations. Audit operations must not disrupt the activity of CORNER H IP, the proper functioning of its infrastructure, or the performance of this Agreement. A full copy of the audit report prepared by the auditor will be provided to CORNER H IP at the same time as to the Client; otherwise, such a report will not be enforceable against it. The right to audit is available to the Client one (1) time per calendar year, and limited to a workload of two (2) man-days made available by CORNER H IP, at the Client's expense;
Notification in case of data breach -To notify the Client of any Personal Data breach within the meaning of the GDPR as soon as possible after becoming aware of it. CORNER H IP undertakes to cooperate with the Client and to take all reasonable commercial measures requested by the Client to assist it in investigating, mitigating, and remediating each Personal Data breach.
General authorization for sub-processing- In general, the Client authorizes CORNER H IP to engage other sub-processors for the sole purpose of the proper performance of the Agreement and/or the Client's instructions, provided that they undertake to comply with the terms of this Agreement and are established within the European Union or, if outside the European Union, are established in an adequate country or provide appropriate safeguards within the meaning of the GDPR. The list of sub-processors that CORNER H IP may engage is provided in the appendix to this document. This list will be kept up to date. CORNER H IP shall inform the Client of any addition or replacement of a sub-processor at least [thirty (30)] days before it takes effect, in order to allow the Client to raise objections. In the event of the Client's refusal of CORNER H IP's new sub-processor, the Client shall bear all consequences and damages resulting from any delay or impossibility of using the services offered under the Agreement.
Exercise of data subject rights- The Client further warrants that it has obtained the express and prior consent of the individuals concerned for the collection and processing of their Personal Data within Third-Party Products or in the context of services provided by CORNER H IP. It warrants that it has informed the individuals concerned by the collection and processing of their Personal Data of their rights and the procedures for making available, accessing, rectifying, deleting, tracing, and potentially transmitting their Personal Data. To the extent possible, CORNER H IP must assist the Client in fulfilling its obligation to respond to requests for exercising the rights of data subjects. When data subjects submit requests to exercise their rights to CORNER H IP, CORNER H IP will forward these requests to the Client as soon as possible.

In the event that the Client requests CORNER H IP to handle requests related to the GDPR or the French Data Protection Act for processing operations for which the Client is the controller, these services will be provided taking into account the nature of the processing and the information available to CORNER H IP, subject to feasibility and acceptance by CORNER H IP, at the latter's current rates.

3. Client obligations

In accordance with the French Data Protection Act and the GDPR, the Client is the sole controller within the meaning of the GDPR regarding the Personal Data processed by CORNER H IP on behalf of the Client in the context of the performance of the Agreement and/or according to its instructions.

More generally, the Client is solely responsible for the use it makes of said data, whether personal or otherwise, and for the use it makes of the data it integrates or processes through Task Direct Live.

It is recalled that CORNER H IP does not know the nature of the data used by the Client within Task Direct Live. Consequently, the Client undertakes to ensure that all data used in the context of using Task Direct Live complies with the Law, in particular the French Data Protection Act and the GDPR, does not infringe upon public order or the rights of third parties, and does not constitute sensitive data within the meaning of the French Data Protection Act and the GDPR, such as, in particular, health data.

Geolocation.Task Direct Live does not allow for continuous or background tracking of User locations: a location is only recorded when a User chooses to share it. The Client undertakes not to use these features to monitor the activity or movements of its employees outside of the cases and conditions authorized by applicable regulations, and to inform them in advance.

As the data controller, the Client must in particular:

Comply with the French Data Protection Act (Loi Informatique et Libertés), the GDPR, and any regulations applicable to the protection of personal data, and complete any formalities required in this regard;
Inform CORNER H IP without delay in the event of an incident, a Personal Data breach, or in the event of an audit by the CNIL or any administrative or judicial authority concerning the processing operation(s) covered by this Agreement.
In accordance with Article 28 of the GDPR, the Client undertakes to detail the subject matter, nature, and purpose of the processing operations sub-processed to CORNER H IP, as well as the type of Personal Data and categories of data subjects, in a document for each processing operation sub-processed to CORNER H IP.

Appendix: List of sub-processors authorized by the Client, the data controller

Galadrim — Location: 2 rue Neuve Saint-Pierre 75004 Paris, France — Service: Development
Amazon Web Services (AWS) — Location: eu-west-3 and eu-west-1 regions, European Union – US company: Data Privacy Framework and/or standard contractual clauses — Service: Data hosting and storage
OpenAI — Location: United States – Data Privacy Framework and/or standard contractual clauses — Service: AI-powered dictation processing
OpenStreetMap Foundation — Location: [United Kingdom – adequacy decision / to be adapted] — Service: Map display and address search