Politique de confidentialité

Privacy Policy JUMP AT WORK LTD (“JUMP”)

Version in force since September 2025

DEFINITIONS

JUMP AT WORK LTD:
A Private limited Company, founded on 28 October 2025.

Freelancer Launchpad is the parent company of the JUMP Group, composed of three subsidiaries: Jump Blue, Jump Green, and Jump Realty.
Through these entities, the JUMP Group supports independent professionals by assisting them in developing their activity while providing a secure legal and administrative framework.

Service / Offer:
Refers to any service offered by JUMP through its platforms and tools.

User:
Refers to any person using JUMP’s services, including prospects, users, clients, or professionals registered on the platform.

Website Prospect:
Refers to individuals who browse or use the website prior to subscribing to a service offered by JUMP.

End Clients of Users:
Refers to companies or organizations for which a User carries out professional assignments.

Data Controller:
Refers to the natural or legal person who determines the purposes and means of the processing of personal data.

Processor:
Refers to any natural or legal person who processes personal data on behalf of the Data Controller as part of a service or contract.

1. PRIVACY POLICY – USERS

ARTICLE 1: PREAMBLE

When using the JUMP platform, we may collect personal data concerning you at various times, including:

When creating a JUMP account as a website prospect;
When subscribing to one of our services.

Personal data refers to any information that makes it possible to identify a User.

The purpose of this Privacy Policy is to inform you:

How your personal data is collected depending on your status as a User;
What rights you have regarding your personal data;
Who is responsible for processing the collected personal data;
Who the recipients of this personal data are, namely:
Our internal staff;
Our processors, including hosting providers, analytics and audience measurement providers, invoicing tools, and payroll or administrative software;
Where applicable, supervisory authorities (including auditors), public authorities strictly for legal compliance purposes, legal professionals, court officers, and debt recovery entities.

This Privacy Policy supplements the Legal Notice and the Terms and Conditions of Use available at:

https://www.join-jump.com/mentions-legales
https://www.join-jump.com/cgu

ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data is:

Processed lawfully, fairly, and transparently;
Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
Adequate, relevant, and limited to what is necessary;
Accurate and kept up to date;
Retained only for as long as necessary for the purposes for which it is processed;
Processed in a manner ensuring appropriate security, including protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Processing is lawful only if at least one of the following conditions is met:

The data subject has given consent;
Processing is necessary for the performance of a contract or pre-contractual measures;
Processing is necessary to comply with a legal obligation;
Processing is necessary to protect vital interests;
Processing is necessary for the performance of a task carried out in the public interest;
Processing is necessary for the legitimate interests pursued by the Data Controller or a third party, unless overridden by the interests or fundamental rights of the data subject.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED

Article 3.1: Data Collected

The personal data collected in the course of our activities, based on legitimate interests, may include:

Identification data (e.g. first name, last name, email address, postal code, identity documents, residence permits, social security number);
Professional data (e.g. occupation, CV);
Connection data (e.g. IP address, logs);
Economic and financial data (e.g. bank details, turnover).

Sensitive data may also be collected where required by law, including health-related data, solely for compliance with legal and regulatory obligations. Such data may be transmitted to competent authorities when legally required.

Legal Bases for Processing

Personal data processing is carried out on the basis of:

Contractual necessity: to manage user accounts and deliver services;
Legitimate interests: to operate, develop, and improve our platform, services, and user experience;
Legal obligations: to comply with applicable legal and regulatory requirements, including anti-money laundering and fraud prevention.

Article 3.2: Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it was collected, including:

Commercial prospecting data: 3 years from the last contact;
Contractual data: 5 years after the end of the contractual relationship;
Accounting and financial records: 10 years after the end of the relevant financial year;
Tax data: 6 years;
Health-related data: 5 years where applicable;
Data related to information requests: depending on the User’s status and account activity;
Identity data used to exercise rights: for the duration necessary to verify identity.

Some data may be retained beyond these periods to comply with legal or regulatory obligations.

Article 3.3: Data Hosting

The website https://www.join-jump.com is hosted by:

OVH
2 Rue Kellermann
59100 Roubaix, France

Personal data may be transferred outside the European Union in the context of tools and processors used. Such transfers are secured through:

Transfers to countries recognized as providing an adequate level of protection by the European Commission; or
Standard contractual clauses approved by the European Commission.

ARTICLE 4: DATA CONTROLLER

Article 4.1: Identity of the Data Controller

Personal data is collected by Freelancer Launchpad SAS,
Registered office: 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France
RCS Bobigny No. 882 610 223

The Data Controller can be contacted:

By post: 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France
By phone: +33 1 76 40 32 01
By email: rgpd@join-jump.com

Personal data procedures are overseen by the legal department: Legal@join-jump.com

ARTICLE 5: USER RIGHTS

In accordance with GDPR and French data protection law, Users have the following rights:

Right to information
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to data portability
Right to restriction of processing
Right to object to processing
Right not to be subject to automated decision-making
Right to define instructions regarding personal data after death

Users also have the right to lodge a complaint with the competent supervisory authority, namely CNIL (Article 77 GDPR).

To exercise these rights, Users may contact:

By post: 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France
By email: rgpd@join-jump.com

Proof of identity may be requested to process the request.

Users are encouraged to contact us before filing a complaint with the CNIL to allow faster resolution.

More information is available at: https://www.cnil.fr

ARTICLE 6: AMENDMENTS TO THE PRIVACY POLICY

The website publisher reserves the right to amend this Privacy Policy at any time to ensure compliance with applicable law.
Changes take effect on the date the updated version is published. Users are encouraged to review this Policy regularly.

This Privacy Policy was issued in October 2024 and last updated in August 2025.

2. PRIVACY POLICY – END CLIENTS OF USERS

ARTICLE 1: PREAMBLE

As part of managing user profiles on our platform (including our registered users and professionals operating through our services), we may collect personal data relating to certain members of your staff.

Personal data means any information that makes it possible to identify an individual.

Personal data is mainly collected when creating and managing assignments carried out for your company by our Users, as well as when issuing the corresponding invoices.

This Privacy Policy aims to inform you:

How such personal data is collected;
What rights you have regarding this data;
Who is responsible for processing the personal data collected and processed;
Who the recipients of this personal data are, namely:
Our internal staff;
Our processors: hosting provider, audience measurement and analytics provider, invoicing tools, payroll and/or administrative processing software;
Where applicable: oversight bodies (including statutory auditors), public authorities strictly to meet our legal obligations, legal professionals, court officers, and debt recovery entities.

This policy supplements the Legal Notice and the Terms and Conditions of Use available at:

https://www.join-jump.com/mentions-legales
https://www.join-jump.com/cgu

ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data is:

Processed lawfully, fairly, and transparently with regard to the data subject;
Collected for specified, explicit, and legitimate purposes (see Article 3.1) and not further processed in a manner incompatible with those purposes;
Adequate, relevant, and limited to what is necessary for the purposes for which it is processed;
Accurate and, where necessary, kept up to date. Reasonable steps must be taken to ensure that inaccurate personal data is erased or rectified without delay;
Kept in a form permitting identification of data subjects for no longer than necessary for the purposes for which it is processed;
Processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

Processing is lawful only if, and to the extent that, at least one of the following applies:

The data subject has consented to the processing for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
Processing is necessary to protect vital interests of the data subject or another natural person;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, in particular where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED

Article 3.1: Data Collected

The personal data collected in the course of our activities includes:

Identification data (in particular: first name, last name, email address of your legal representative and/or your billing contact);
Data relating to your company (e.g., company name, registration number such as SIREN);
Economic and financial data (in particular: bank details).

Purposes and Legal Bases

The collection and processing of this data serves the following purposes and legal bases under GDPR:

Contract:
On the basis of performance of the contract concluded with our end clients, processing of certain personal data is necessary to monitor assignments carried out within your company by our Users.
Legitimate interests:
On the basis of JUMP’s legitimate interest in developing and promoting its business, processing is necessary to:

Manage the contractual and billing relationship with end clients;
Manage any disputes relating to our services.

Legal obligation:
On the basis of compliance with legal and regulatory obligations, processing is necessary for:

Compliance with regulations applicable to our activity;
Managing requests to exercise data protection rights.

Article 3.2: Data Retention Periods

Personal data is retained by the Data Controller under reasonable security conditions and for the time necessary to achieve the purposes for which it was collected.

Depending on the type of data collected, specific retention periods apply, including:

Data relating to the commercial contract signed with end clients: retained for 5 years from the end of the contractual relationship;
Accounting data and supporting documents (including personal data collected when creating invoices): retained for 10 years from the close of the last financial year concerned;
Data collected to respond to information requests: retained for the duration necessary to process the request;
Identity data in the event of a rights request: retained for the time necessary to verify identity.

The company may retain certain personal data beyond the periods above in order to comply with legal or regulatory obligations.

Article 3.3: Data Hosting

The website https://www.join-jump.com is hosted by:

OVH
2 Rue Kellermann
59100 Roubaix, France

Personal data may be transferred outside the European Union through the tools we use and our relationships with processors.

Such transfers are secured through:

Transfers to countries recognized by a European Commission decision as providing an adequate level of protection; or
Specific contracts signed with our processors governing transfers outside the European Union, based on the Standard Contractual Clauses approved by the European Commission.

ARTICLE 4: DATA CONTROLLER

Article 4.1: Identity of the Data Controller

Personal data is collected by Freelancer Launchpad SAS, a simplified joint-stock company, whose registered office is located at 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France (RCS Bobigny No. 882 610 223).

The Data Controller may be contacted as follows:

By post: 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France
By phone: +33 1 76 40 32 01
By email: rgpd@join-jump.com

Personal data procedures are overseen by the legal department of Freelancer Launchpad: Legal@join-jump.com

ARTICLE 5: RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any individual concerned by the processing of their personal data may exercise the following rights under GDPR and French data protection law:

Right to information (addressed by this policy);
Right of access (Article 15 GDPR);
Right to rectification (Article 16 GDPR);
Right to erasure / “right to be forgotten” (Article 17 GDPR);
Right to data portability (Article 20 GDPR);
Right to restriction of processing (Article 18 GDPR);
Right to object (Article 21 GDPR);
Right not to be subject to a decision based solely on automated processing (Article 22 GDPR), except where the decision is:
necessary for entering into or performance of a contract;
authorized by Union or Member State law with appropriate safeguards; or
based on the data subject’s explicit consent.
Right to determine the fate of personal data after death (including instructions regarding retention, erasure, and disclosure);
Right to lodge a complaint with the competent supervisory authority, namely the CNIL in France (Article 77 GDPR).

To exercise your rights, please write to 7 Place de l’Hôtel de Ville, 93600 Aulnay-sous-Bois, France or email rgpd@join-jump.com.

To allow the Data Controller to process your request, you may be required to provide information to verify your identity (e.g., name, email address, account or subscriber number, and a valid ID document).

You benefit from these rights under the European data protection framework and applicable French legislation.

We invite you to contact us before filing a complaint with the CNIL in order to speed up the processing of your request.

More information is available at: https://www.cnil.fr/fr

ARTICLE 6: AMENDMENTS TO THE PRIVACY POLICY

The website publisher reserves the right to amend this Policy at any time to ensure compliance with applicable law.

Any changes will apply from the effective date of the updated version. Users are invited to review this Policy whenever they use our services, without any requirement for formal notice.

This policy, issued in October 2024, was updated in August 2025.