Coworkapp — WB Studio
1. Data controller
WB Studio, a French société par actions simplifiée (SAS) with a share capital of €2,000, registered with the Rennes Trade and Companies Register under no. 10224668300019, with its registered office at 9 allée des terrasses, 35230 Noyal-Châtillon-sur-Seiche, France, is the controller of the processing activities described in Article 3 of this policy.
Contact: [email protected]
No data protection officer has been appointed, as such appointment is not mandatory under Article 37 GDPR.
Because WB Studio is established in the European Union, the GDPR applies to all of its processing activities, wherever our customers and their users are located. Additional rights available to residents of certain US states are set out in Article 12.
2. Two distinct roles
WB Studio acts as a controller for data collected through the website https://web.coworkapp.io/, the contact form, the creation and administration of customer accounts, billing and support.
WB Studio acts as a processor for the data that the Customer — the coworking space operator — processes in Coworkapp about its members, residents and visitors. In that case, the Customer determines the purposes and means of the processing: the Customer is the controller, informs its own users and responds to their requests to exercise their rights. WB Studio acts only on the Customer's instructions, under the data processing agreement entered into pursuant to Article 28 GDPR.
If you are a member or a visitor of a coworking space that uses Coworkapp, please address your requests to the operator of that space. WB Studio will forward any request received directly.
3. Data collected and purposes
Purpose | Data concerned | Legal basis |
|---|---|---|
Responding to enquiries through the contact form | Name, email address, company, message content | Legitimate interest (responding to an enquiry) |
Creating and administering customer accounts | Name, email address, job title, credentials, preferences | Performance of the contract |
Providing and operating the Service | Usage data, connection logs, IP address | Performance of the contract |
Billing and debt recovery | Company name, address, VAT number, billing data | Performance of the contract and legal obligation |
Ensuring security and preventing fraud | Technical logs, IP address, authentication events | Legitimate interest (security of the Service) |
Diagnosing defects | Technical error reports, session context | Legitimate interest (quality of the Service) |
Sending account-related messages | Email address | Performance of the contract |
Measuring website audience | Measurement identifiers, pages viewed, traffic source | Consent |
Complying with accounting and tax obligations | Invoices and supporting documents | Legal obligation |
WB Studio does not use your data for marketing prospecting purposes and does not sell or rent it to third parties.
4. Retention periods
Data | Period |
|---|---|
Contact enquiries (prospects) | 3 years from the last contact |
Account and contractual data | Term of the contract, then 5 years |
Customer Content entered into the Service | Term of the contract, then 10 days for export before deletion |
Invoices and accounting records | 10 years from the end of the financial year |
Connection and security logs | 12 months |
Technical error reports | 90 days |
Audience measurement | 13 months for trackers, 25 months for the data collected |
5. Recipients
Data is accessible to authorised WB Studio personnel and to the following providers, acting as processors:
Provider | Role | Location |
|---|---|---|
OVH SAS | Hosting of the website and the Service | France |
Stripe | Card payment processing | Ireland / United States |
Google Ireland Limited | Audience measurement (Google Analytics) | Ireland / United States |
Glitchtip | Detection and diagnosis of defects | France |
Brevo | Delivery of account-related messages | France |
Data may also be disclosed to administrative or judicial authorities where required by law.
6. Transfers outside the European Union
The Service's data is hosted in France. Some of the providers listed in Article 5 belong to entities established in the United States. Such transfers are governed either by the recipient entity's certification under the EU–US Data Privacy Framework, or by the standard contractual clauses adopted by the European Commission, together with supplementary measures. A copy of these safeguards may be obtained at [email protected].
7. Security
WB Studio implements appropriate technical and organisational measures: encryption of communications (HTTPS), separation of environments, access control through authentication, logging of administrative access, regular backups, and hosting within the European Union.
In the event of a data breach likely to result in a high risk to the individuals concerned, WB Studio will notify the CNIL and, where applicable, those individuals, in accordance with Articles 33 and 34 GDPR.
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions regarding the fate of your data after your death.
Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights: [email protected]. A response is provided within one month, extendable by two months for complex requests. Proof of identity may be requested in the event of reasonable doubt.
You may also lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
9. Cookies and trackers
Strictly necessary cookies. Session, authentication, security and storage of your tracker preferences. They do not require your consent and cannot be disabled without affecting how the website works.
Audience measurement (Google Analytics). These trackers are only placed after you have given consent, collected through the banner displayed on your first visit. You may change or withdraw your choice at any time. Refusing has no effect on your access to the website.
Your choice is stored for six (6) months. You may also configure your browser to block cookies, at the risk of degrading certain features.
10. Minors
The Service is intended for business use. WB Studio does not knowingly collect data relating to individuals under the age of 16, or under 13 for users located in the United States. If you believe that a minor has provided us with personal information, please contact us so that it can be deleted.
11. Changes to this policy
WB Studio may amend this policy. Any substantial change is communicated to customers by email and indicated on this page. The version in force is the one published at https://web.coworkapp.io/.
12. Additional rights for United States residents
This section applies to residents of US states that have enacted comprehensive privacy legislation, including California, Colorado, Connecticut, Virginia, Texas and others. Where the rights below overlap with those in Article 8, you may rely on whichever is more favourable to you.
No sale or sharing. WB Studio does not sell personal information, and does not share it for cross-context behavioural advertising. We do not use advertising features in our audience measurement tool, and no analytics tracker is placed without your prior consent.
No sensitive information. We do not collect data that would qualify as sensitive personal information under these laws, and we do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.
Your rights. Subject to the conditions set out in the applicable state law, you have the right to:
know what categories of personal information we collect, the purposes for which we use it, and the categories of recipients;
access a copy of the personal information we hold about you;
correct inaccurate personal information;
request deletion of your personal information;
opt out of any sale, sharing or targeted advertising (not applicable, as described above);
appeal a refusal of your request, where the applicable state law provides for it;
not be discriminated against for exercising these rights.
Exercising your rights. Send your request to [email protected]. We will confirm receipt and respond within forty-five (45) days, extendable once where reasonably necessary. We may ask for information allowing us to verify your identity. An authorised agent may submit a request on your behalf upon proof of authorisation.
Members and visitors of a coworking space. Where your data was entered into Coworkapp by an operator, that operator is the business responsible for it. Please address your request to the operator; we will forward any request we receive directly.
Contact: [email protected]