Privacy Policy
Data protection and data security are important to Taskbase AG Taskbase; we). This Privacy Policy describes how we collect and process your personal data when you visit websites operated by Taskbase Website) or access and use our products or services.

1. Collection and processing of personal data

Data we collect and process in order to make the Website and the products available

You may visit the Website and obtain information about Taskbase and our products and services without telling us who you are. As with any connection to a web server, the server on which we make available the Website automatically logs and stores certain technical data and stores it for a short time. This includes the IP address and operating system of your device, the date and time of use and the type of browser you use to access the Website. This is necessary for the optimal and secure provision of the Website.

Personal data we collect and process in order to respond to your inquiries

If you contact us using our contact forms or by email or telephone, we collect and process the information you provide to us. This will regularly include personal data such as your name, business email address and telephone number, and information on a potential affiliation with a company you work for or represent.

Personal data we collect and process in order to allow access to and use of the products or services

We collect and process the following types of personal data in order to allow the use of our products: Your organization or company, your name, your email address, your address, your phone number and data, which are necessary for the invoicing and the chosen payment method.

The access and use of certain functionalities of our products may require prior registration. In the registration process, we will ask you to provide personal data such as your IP-address, name and email address.

In particular: Use of our online platform

We operate an online platform. When you register as a user on the online platform, we collect the information you provide to us. This includes general personal data such as name and contact details as well as personal information that you or other users enter, upload, generate, store and process when using the online platform.

We may also operate the online platform as a data processor on behalf of a customer. In these cases, the respective customer is responsible for the processing of personal data using the online platform and during its operation. If you have any questions as a user of one of our customers, please contact the customer who provides you with access to the online platform.

Web analytics

We use web analysis services (currently Hotjar) to evaluate the use of the Website and obtain information for its optimization. The web analysis services we use collect and store user data using cookies. Before they are transmitted to a server outside of Switzerland/EU/EEA, the requesting IP addresses are shortened or completely removed. We therefore do not transmit any personal data to the providers of the web analytics services abroad.

2. Note on our use of cookies

We use cookies, tags and similar technologies on the Website to provide you with the best possible user experience and to help us improve the Website. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies we use are necessary in order to make available certain features of the Website or our products. In addition, we use cookies to enable web analytics. You can set your preferences in your browser.

3. Purposes and legal basis

We collect and process your personal data to inform you about our range of services and to provide our services to you or to the company or organization you represent. This includes the following purposes:

Making the Website available

Responding to your inquiries

Providing the products and related services

Taskbase has a legitimate interest in this processing of your personal data in accordance with the purposes pursued. The data processing is usually also necessary for us to perform our contractual obligations to you or our contractual obligations to your company or organization (in which we have a legitimate interest).

We also process your personal data (and certain non-identifiable technical data) for the following purposes. We have a legitimate interest in processing your personal data in accordance with these purposes:

Analysis and improvement of the use of the Website

Sending you information about new developments at Taskbase or new services

or offers (you may at any time opt-out of receiving such information in the

future)

Promotion of events

Protection against misuse of our contact forms

Compliance with legal obligation

Enforcement of legal claims

The legal basis for the processing of personal data described in this Privacy Policy is therefore primarily our legitimate interest in pursuing the purposes described, our legitimate interest in performing our contractual obligations to your company or organization, or the necessity to perform our contractual obligations to you. In addition, we carry out some data processing in order to comply with our legal obligations (e.g. records keeping obligations).

We may separately ask you for your consent to process your personal data for specific purposes (for example, our sharing of your personal data with a third party) for the third party’s own purposes compatible with the initial purposes. Please revert to the

Privacy Policy | Taskbase

2

relevant third party’s privacy policies for information about their further processing of your personal data.

If you give us your consent, we will process your personal data only to the extent based on this consent as there is no other suitable or above-mentioned legal basis for this and only insofar as we need a legal basis or justification for the corresponding data processing. You have the right to revoke any consent you have given. The revocation has no effect on the legality of data processing that has already taken place.

4. Data security

We take appropriate technical and organizational measures to protect the integrity, confidentiality and contractual availability of the personal data processed. In particular, we implement access controls, use firewalls to protect servers, encrypt certain data and implement procedures for regular review, assessment and evaluation of the effectiveness of the measures in accordance with our risk assessment.

5. Duration of data processing

We store your personal data only to the extent and for as long as it is necessary to fulfill the purposes described in this Privacy Policy, we have a legitimate interest in storing it, or we are required to do so by law.

6. Place of data processing

We store and process your personal data in Switzerland. However, in order to achieve some of the purposes described in this Privacy Policy, it may also be necessary for us to process your personal data in countries outside Switzerland and the EU or to transfer it to such countries.

We transfer data to countries without adequate data protection on the basis of standard data protection clauses or legal exceptions (necessity for fulfilling our contractual obligations).

7. With whom we share your personal data

Where necessary in order to make available the Website and to provide the products and related services, or to pursue the legitimate interests described herein, we share your personal data with the following categories of recipients:

External service providers,

If necessary, suppliers or further business partners with whom we may need to

coordinate the processing of your use of the products or a certain inquiry,

If necessary, public authorities and courts.

Such recipients are usually based in Switzerland, or in an EU or EEA member state. If we have to share your personal data with recipients in countries without an adequate standard of data protection, we will do so based on suitable guarantees or otherwise in accordance with the applicable legal provisions on the international transfer of personal data.

8. Your rights with regard to your personal data

You have the following rights as regards our processing of personal data that relates to you:

The right to obtain information on the processing of your personal data

The right to obtain a copy of your personal data

The right to correct your personal data

The right to delete your personal data

The right to object to the processing of your personal data.

Please note, however, that your rights are subject to exceptions or derogations. Where legally permitted to do so, we may refuse your request to exercise these rights. Specifically, we may need to further process and retain your personal data to perform a contract with you or your company or organization, to comply with legal obligations or to protect our own legitimate interests. However, you have a right to lodge a complaint with a competent supervisory authority.

9. Controller / How to contact us

Taskbase AG Dreikönigstrasse 47, 8002 Zurich, Switzerland) is the controller in relation to the processing of personal data described in this Privacy Policy.

If you have any questions about data protection at Taskbase or would like to exercise your rights under applicable data protection law, you may contact us at privacy@taskbase.com.

10. Amendments of this Privacy Policy

We may amend this Privacy Policy at any time. The current version published on the Website applies.

Last updated: 24 January 2023