Privacy Policy

1. What categories of data do we process?

We may collect and process the following categories of data:

Data categories	Examples of data
Civil status and contact details	First name, last name, date and place of birth, personal postal and email addresses, personal phone number, official identity document
Professional data	Employer name, job title, team, workplace, professional postal and email addresses, professional phone number, professional calendar, professional photo, analytical data related to users (including the number of days spent by the User in a workspace booked via Worklib)
Workspace bookings	Booking history, credits granted by the employer for booking workspaces, banking information (including payment card details), invoices, preferences regarding workspaces and transport modes, booking-related analytical data
Interactions with Worklib	History of conversations, requests, and communications with Worklib
Interactions between users	History of sharing between Users (including calendar sharing and presence in workplaces)
Geolocation data	User geolocation and geolocation of consulted workspaces
Digital tools	Information about your computer, smartphone, or other digital device, including IP address and frequency of use of the Worklib application

As a general rule, we do not process data belonging to so-called “special categories” of personal data, i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data used to identify a person, or data concerning health, sex life or sexual orientation.
If we do process such data, we do so only where permitted by applicable law and where an appropriate legal basis exists, for example where you have given your explicit consent, where processing is necessary for the establishment, exercise or defense of legal claims, or where you have manifestly made such data public.

2. How do we collect your personal data?

We collect your personal data directly from you when you create an account to use the Worklib application or when you interact with us.
We may also collect your data indirectly from third parties, in particular from your employer when they request the creation of an account for you.

If you choose not to provide your personal data, this may prevent us from processing your account creation request or from providing certain services, in particular workspace booking services.

3. For what purposes do we process your data?

We process your personal data for the following purposes:

Provision of services	Analysis of the use of our services by users and companies. Adaptation and improvement of our platform and services
Analysis and improvement of our services	Analysis of service usage by users and companies. Improvement and development of our platform
Protection of our application and systems	Securing our application and IT systems against fraud attempts, attacks, abuse, and security incidents
Marketing and advertising	Sending promotional and marketing messages to users
Legal and regulatory obligations	Compliance with our legal and regulatory obligations

4. What are the legal bases for processing your data?

We process your personal data on the following legal bases. In some cases, several legal bases may apply to the same processing activity.

Legal basis	Description
Performance or negotiation of a contract	Processing is necessary for the performance of the contract binding us to you or for entering into such a contract in connection with the use of the Worklib application
Legitimate interests	Processing is necessary for Worklib’s legitimate interests, unless your interests or fundamental rights and freedoms prevail. These interests include in particular: protection of our application and systems; improvement and development of our services; internal organization and record management; compliance with legal obligations; and defense in the event of litigation
Protection of our application and our systems	Securing our application and IT systems against attempts of fraud, attacks, abuse, and security incidents Provision, improvement, and development of our services for Users and businesses Our internal organization and the management of our files and records Compliance with our legal and regulatory obligations Our defense in the event of litigation
Legal obligations	Processing is necessary to comply with a legal obligation to which we are subject
Consent	In certain specific cases, we will ask for your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. In such cases, we may continue processing if another legal basis applies

5. With whom is your data shared?

We may share your personal data with the following categories of third parties:

Categories of third parties	Examples and purposes
Worklib affiliated companies	Any Worklib affiliated company to complement the services we provide to Users
Workspace operators	Owners or managers of workspaces to enable User bookings
Employers	Employers of Users to understand their employees’ work organization
Service providers	Insurance companies, banks, lawyers, accountants, notaries, and IT service providers for Worklib’s internal management
Parties involved in a transaction	Any company in the event of a sale, acquisition, merger, or reorganization of all or part of Worklib’s activities

6. How do we regulate international transfers of your data?

If we transfer your personal data outside the European Economic Area (European Union, Iceland, Liechtenstein, and Norway), we ensure that appropriate safeguards are in place to guarantee an adequate level of protection.
These safeguards include the use of standard contractual clauses adopted by the European Commission and, where necessary, additional measures to ensure compliance with GDPR requirements.

You may contact us for any questions regarding international data transfers and to obtain a copy of the standard contractual clauses (see section 9 “How to contact us?”).

7. How long do we retain your data?

We retain your personal data for a limited period not exceeding what is necessary for the purposes described in section 3.
As a general rule, we retain your data for as long as you maintain a Worklib user account and for five years thereafter, unless a longer retention period is required by law or necessary for ongoing or potential legal proceedings.

Throughout the retention period, we implement appropriate technical and organizational security measures to protect your data against breaches, including unauthorized access, alteration, or destruction.

8. What are your rights regarding your personal data?

You have the following rights, which you may exercise by contacting us (see section 9):

Right	Description
Access	Obtain confirmation that your data is being processed and access to such data
Rectification	Request correction or completion of inaccurate or incomplete data
Erasure (“right to be forgotten”)	Request deletion of your data in certain circumstances
Restriction of processing	Request restriction of processing in certain cases
Portability	Receive your data and request its transfer to another entity
Objection	Object to processing based on legitimate interests in certain situations
Complaint	Lodge a complaint with a supervisory authority such as the CNIL

9. How to contact us?

If you have any questions regarding the protection of your personal data or wish to exercise your rights, you may contact us at the address below or by email: [email protected]

Worklib SAS
66 rue des Archives
75003 Paris
France