Your personal data
What the activity report portal records, why, who can see it, how long it is kept, and how to exercise your rights.
Why
Peppermint follows the time its employees spend on projects: to invoice clients, steer projects and measure the activity rate.
This processing rests on the employment contract and on the company's legitimate interest in managing its activity. The data controller is Peppermint.
What is recorded
- You: your name and your work email address.
- Your activity: for each day, your availability and the time spent on each project, and the dates your reports were saved and submitted.
Never the reason for an absence: a day off is recorded as unavailable, without saying why.
Who can see it
You, for your own reports.
The people at Peppermint who steer the activity and hold the administrator role of this portal.
If you connect an AI assistant to this portal, it acts in your name: it reads and writes your reports only, with your own access, and cannot submit them.
How long
Reports are kept for as long as they are needed to invoice and to account for the activity, within the legal retention periods.
Your rights
You can ask to access your data, to have it corrected or erased, to restrict its processing, or to object to it. Write to it@peppermint.company.
As long as a report has not been submitted, you can correct it yourself from My reports.
If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL.