Privacy policy

The data controller is EUNITED, SARL (société à responsabilité limitée), 2 rue du Verger, 69110 Sainte-Foy-lès-Lyon, France, registered under RCS Lyon 513 147 157. For any question about your data, write to contact@pegazo.eu.

Everyone with an account:

• Name, email address, password (stored only as a secure hash), role (business or worker) and language.
• Sign-in sessions, with the IP address and browser or app version used, to keep your account secure.

Workers:

• The jobs you can do, a short bio and your availability.
• The area you work in, as you type it (for example a neighbourhood), converted into approximate coordinates, and how far you are willing to travel. We never ask for your full home address.
• Your right to work: whether you are an EU/EEA citizen or hold a residence and work permit, and if so its expiry date. We do not ask for a copy of the document.

Businesses:

• Company name, description and phone number.
• The addresses of your work locations, with their coordinates.
• Missions, shifts, pay rates and job tutorials you create, including sensitive details such as door codes.

Activity on Pegazo: applications, confirmed and cancelled shifts, no-shows, reviews you give and receive, favourites and notifications.

• Running the service you signed up for: your account, matching workers with missions by job, availability and distance, confirmations, tutorials and notifications. Basis: performance of a contract (GDPR art. 6(1)(b)).
• Checking that workers may legally take a shift: we only let workers with a valid right to work apply, and stop new missions when a permit has expired. Basis: performance of a contract and the legitimate interest of businesses in complying with employment law (art. 6(1)(b) and (f)).
• Trust and reliability: reviews, reliability based on cancellations and no-shows, and moderation of abuse. Basis: legitimate interest in a reliable, safe marketplace (art. 6(1)(f)).
• Security: sessions, rate limiting and fraud prevention. Basis: legitimate interest (art. 6(1)(f)).
• Accounting and tax records for business payments. Basis: legal obligation (art. 6(1)(c)).

We do not sell your data, do not use it for advertising and do not make decisions about you based solely on automated processing with legal effects.

• Businesses see a worker's name, jobs, bio, reviews and reliability. They see whether a worker can work a given shift, never the right-to-work details themselves.
• Workers see a business's name, description, reviews and the location of missions they are offered. Sensitive tutorial details are shown only to the confirmed worker, only during the mission.
• Reviews are public on profiles.

We use the following service providers, who process data only on our instructions:

• Hosting and database: Scaleway SAS, 8 rue de la Ville l'Évêque, 75008 Paris, France, +33 1 84 13 00 00.
• Transactional email (sign-up, password reset, notifications): Scaleway SAS, France.
• Address lookup: the OpenStreetMap Foundation's Nominatim service receives the address or area text you enter (not your name or email) to turn it into coordinates. The Foundation is based in the United Kingdom, which the European Commission recognises as providing adequate protection.

We may also disclose data when required by law, for example to a court or a labour inspectorate.

We keep your data while your account exists. You can delete your account at any time from your account page; your profile and personal data are then deleted. Sign-in sessions expire automatically. Records we must keep by law, such as invoices, are kept for the legal period (10 years for accounting documents under French law), then deleted.

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Most of it you can view and edit yourself in your profile. For anything else, write to contact@pegazo.eu; we answer within one month.

You may also complain to a data protection authority: the French CNIL (cnil.fr), which supervises us, or the authority of your EU country, for example the Croatian Agencija za zaštitu osobnih podataka (AZOP), azop.hr.

Pegazo uses only strictly necessary cookies, so there is no consent banner:

• A session cookie that keeps you signed in, deleted when you sign out or the session expires.
• pz_locale, which remembers the language you picked, for one year.

No analytics, advertising or third-party tracking cookies.

If we change this policy in a way that matters, we will tell you by email or in the app before the change applies.