1. Purpose
This document defines the conditions under which DisaTime processes personal data on behalf of the customer in the context of the use of the service.
GDPR & Data
Privacy Policy
Privacy Policy
and GDPR
How DisaTime protects, hosts and processes data as part of its SaaS service.
2. Role of the parties
The customer acts as data controller.
DisaTime acts as a technical subcontractor.
The customer determines the purposes of the processing, the categories of data recorded and the persons concerned. DisaTime processes data only to enable the operation of the service.
3. Nature and purpose of the processing
- data hosting
- score management
- Management of services
- customer information management
- report generation
- technical maintenance
- data backup
4. Data categories
Depending on the use of the software, the data may include:
- employee name and contact details
- professional information
- customer data
- benefit data
- billing data
The customer remains responsible for the content of the data he records in DisaTime.
5. Persons concerned
The data subjects may include, in particular, the client's employees, the client's customers and collaborators.
6. Privacy
DisaTime ensures that persons authorized to access the systems are subject to an obligation of confidentiality and only access data when strictly necessary.
7. Security measures
- securing access to systems
- communications encryption
- regular backups
- infrastructure monitoring
8. Technical subcontractors
DisaTime may use technical subcontractors to ensure the operation of the service, in particular hosting or infrastructure providers.
These subcontractors are subject to security and confidentiality obligations.
9. Data breach
In the event of a data breach that may affect the customer's data, DisaTime will inform the customer as soon as possible to enable it to comply with its legal obligations.
10. Assistance to the data controller
DisaTime will reasonably assist the customer to enable them to respond to requests related to access, rectification and erasure rights.
11. Deletion or restitution of data
At the end of the contract, the data may be returned to the customer upon request or deleted after a reasonable period.
12. Data backups
In order to guarantee continuity of service and protection against data loss, the system may be subject to regular technical backups.
- backups made by the hosting infrastructure
- backups made by the publisher as part of IT security procedures
These backups are intended exclusively for restoring the service in the event of a technical incident or for data recovery in the event of database corruption or loss.
DisaTime does not carry out any analysis, exploitation or voluntary consultation of the content of the data stored in these backups.
13. Limitation of access to data
DisaTime does not access customer data in the normal course of operating the service.
Any possible access to data is limited to the following cases:
- explicit request from the customer
- resolution of a technical incident
- legal obligation
A question about your data?
Our team remains available for any questions related to privacy or GDPR.