1. Subject matter
This document sets out the conditions under which DisaTime processes personal data on behalf of the customer in connection with the use of the service.
GDPR & Data
Privacy Policy
Privacy Policy
and GDPR
How DisaTime Protects, hosts and processes data as part of its SaaS service.
2. Role of the parties
The client acts as the controller.
DisaTime acts as a technical subcontractor.
The customer shall determine the purposes of the processing, the categories of data recorded and the persons concerned. DisaTime processes data only to allow the service to function.
3. Nature and purpose of the processing
- data hosting
- time entries management
- Benefit management
- management of customer information
- generation of reports
- Technical maintenance
- data backup
4. Data categories
Depending on the use of the software, data may include:
- name and contact details of employees
- professional information
- customer data
- benefit data
- Invoicing data
The customer remains responsible for the content of the data that he records in DisaTime.
5. Persons concerned
The persons concerned may include, inter alia, the employees of the client, the customers of the client and the employees.
6. Confidentiality
DisaTime ensure that persons authorised to access the systems are subject to a confidentiality obligation and access to data only when strictly necessary.
7. Security measures
- secure access to systems
- Encryption of communications
- regular backups
- infrastructure monitoring
8. Technical contractors
DisaTime may use technical subcontractors to operate the service, including accommodation or infrastructure providers.
These subcontractors are subject to security and confidentiality obligations.
9. Data breach
In the event of data breach that may affect the customer's data, DisaTime inform the customer as soon as possible to enable him to comply with his legal obligations.
10. Assistance to the controller
DisaTime The client will be reasonably assisted to respond to requests for access, rectification and deletion rights.
11. Removal or restitution of data
At the end of the contract, the data may be returned to the customer upon request or deleted after a reasonable period of time.
12. Data backups
In order to ensure continuity of service and protection against data loss, the system can be subject to regular technical backups.
- backups made by the hosting infrastructure
- backups performed by the editor in the context of computer security procedures
These backups are intended exclusively for the restoration of the service in the event of a technical incident or for the recovery of data in the event of corruption or loss of database.
DisaTime n) does no analysis, exploitation or voluntary consultation of the contents of the data stored in these backups.
13. Limiting access to data
DisaTime does not access customer data in the normal operating environment of the service.
Any access to the data is limited to the following:
- explicit request of the client
- resolution of a technical incident
- legal obligation
Any questions about your data?
Our team remains available for any privacy or GDPR issues.