Privatlivspolitik
Last updated: 15 November 2026
1. Who we are
workin.space is published by BEEFAIR SAS, with share capital of €2,500, registered in Paris under number 824 217 541, 1 rue de Stockholm, 75008 Paris, France. BEEFAIR SAS is the controller of the processing described here, on workin.space, book.workin.space, the partner area and the connector for AI assistants.
Contact: contact@workin.space or BEEFAIR SAS, Service RGPD, 1 rue de Stockholm, 75008 Paris, France.
2. Data, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Name, email, phone, company | Create and manage your account | Contract |
| Billing details, booking details | Book, take payment and invoice | Contract and legal obligation |
| Name, email, phone, message | Answer your requests (quote, visit, contact) | Pre-contractual steps |
| Review | Publish your review of the space | Legitimate interest |
| Send you our news and offers | Legitimate interest for our customers, consent otherwise | |
| IP address, pages viewed | Secure the site and measure its traffic | Legitimate interest |
| Business contact details | Manage partner spaces and prospect new ones | Contract or legitimate interest |
Fields marked as required in our forms are needed to make a booking or to answer you.
3. AI assistants
When you search for a space from ChatGPT or Claude, we receive your search criteria, the IP address of the request and, for ChatGPT, an anonymous identifier and an approximate location. They are used to answer and to prevent abuse (legitimate interest). Counters are deleted after 24 hours; the search log keeps the criteria and an irreversible fingerprint of the user for 90 days. The connector does not book or pay for anything.
4. Who receives your data
- workin.space;
- the booked operator and the company running it, which is the controller of its own processing.
We do not sell your data.
5. Transfers outside the European Union
Your data is hosted by Amazon Web Services (AWS). If you book a space located outside the European Union, your contact details are sent to the company running it, because the booking requires it (Article 49 GDPR). Any other transfer is covered by the European Commission’s standard contractual clauses.
6. Retention periods
- Customer or partner account: until it is deleted, or 3 years after the last activity.
- Bookings and invoices: 10 years (accounting obligation).
- Requests and newsletters: 3 years after the last contact.
7. Your rights
You can access your data, have it corrected or erased, restrict its use, object to its processing, receive a copy of it and withdraw your consent, by writing to the address in section 1. Every newsletter includes an unsubscribe link. You can also lodge a complaint with the CNIL, the French data protection authority.
8. Changes
We may change this policy; the date at the top shows its latest version.