In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ( https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679 ) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), we hereby inform you about the rules governing the processing of your personal data and your related rights.

The rules set out below apply to all processing of personal data carried out by TaskPulse and have been applicable since 25 May 2018.

1. Identification of the Controller

The controller of your personal data is TaskPulse, a registered business entity in Bulgaria (“Controller”, “we”, “our”, “us”).

You may contact us regarding any data protection matters at: privacy@taskpul.se.

2. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

1. To take steps at your request prior to entering into an agreement with us, and to conclude and perform an agreement with you (Article 6(1)(b) GDPR), including:
   • creating and managing your user account,
   • enabling access to the TaskPulse platform and its functionalities,
   • facilitating task posting, execution, and settlement between Users.
2. To comply with legal obligations to which we are subject (Article 6(1)(c) GDPR), including:
   • accounting, tax, and financial reporting obligations,
   • responding to lawful requests from public authorities.
3. For the purposes of our legitimate interests (Article 6(1)(f) GDPR), including:
   • ensuring the security and integrity of the platform,
   • preventing fraud, abuse, and violations of our Terms of Service,
   • handling queries, complaints, and communications with Users,
   • improving and developing our services and user experience,
   • establishing, exercising, or defending legal claims.
4. In certain cases, based on your consent (Article 6(1)(a) GDPR), for example:
   • sending certain types of marketing communications, where required by law,
   • using optional cookies or similar technologies, as described in our Cookies Policy.

3. Obligation to Provide Personal Data

Providing personal data is necessary to conclude and perform an agreement with TaskPulse and to use the platform. Failure to provide the required data may prevent us from creating your account, providing our services, or fulfilling our legal obligations.

Where processing is based on your consent, providing data is voluntary. However, failure to provide such data may limit your access to certain functionalities (for example, receiving specific notifications or using certain features of the Website).

4. Recipients of Personal Data

In connection with the purposes indicated in section 2, your personal data may be disclosed to the following categories of recipients:

1. providers of IT, hosting, and infrastructure services used to operate the platform,
2. payment service providers and financial institutions involved in processing deposits and payouts,
3. accounting and auditing service providers,
4. providers of customer support and communication tools,
5. legal and consulting service providers, where necessary,
6. public authorities and supervisory bodies, where required by law.

We require all recipients to ensure an appropriate level of protection for personal data and to process such data only in accordance with applicable data protection laws and our instructions.

5. Data Retention Period

Your personal data will be processed for as long as necessary to achieve the purposes indicated in section 2, including:

• for the duration of your agreement with TaskPulse and active use of the platform,
• for the period required by applicable laws (in particular accounting and tax regulations),
• for the period necessary to establish, exercise, or defend legal claims, in accordance with statutory limitation periods.

Where processing is based on your consent, data will be processed until you withdraw your consent or until the purpose for which the consent was granted is fulfilled, whichever occurs first.

6. Rights of the Data Subject

In accordance with the GDPR, you have the following rights in relation to your personal data:

1. Right of access: the right to obtain confirmation as to whether we process your personal data and, where applicable, to access such data and receive a copy.
2. Right to rectification: the right to request correction of inaccurate personal data and completion of incomplete data.
3. Right to erasure (“right to be forgotten”): the right to request deletion of personal data where:
   • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
   • you withdraw consent and there is no other legal basis for processing,
   • you successfully object to processing,
   • the data have been unlawfully processed,
   • erasure is required for compliance with a legal obligation.
4. Right to restriction of processing: the right to request restriction where:
   • you contest the accuracy of the personal data (for a period enabling us to verify it),
   • processing is unlawful and you oppose erasure and request restriction instead,
   • we no longer need the data for the purposes of the processing, but you require it for the establishment, exercise, or defence of legal claims,
   • you have objected to processing pending verification of whether our legitimate grounds override your interests.
5. Right to data portability: the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller, where:
   • processing is based on consent or on a contract, and
   • processing is carried out by automated means.
6. Right to object: the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests (see section 2). We will no longer process your data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise, or defence of legal claims.

You may exercise your rights by contacting us at privacy@taskpul.se.

7. Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Right to Lodge a Complaint

If you consider that the processing of your personal data by TaskPulse infringes the GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

9. Transfer of Personal Data Outside the EEA

In certain justified and necessary cases, we may transfer your personal data to recipients located outside the European Economic Area (EEA), for example where this is required for the provision of our services, support, or payment processing.

Such transfers will take place only where:

• the European Commission has decided that the third country ensures an adequate level of protection, or
• appropriate safeguards are provided, in particular through the use of Standard Contractual Clauses approved by the European Commission, together with additional technical and organisational measures where necessary.

You have the right to obtain more detailed information about the safeguards applied to data transfers outside the EEA by contacting us at privacy@taskpul.se.

TaskPulse

1766 Business Park Sofia, Building 7, Sofia, Bulgaria