Article 28 GDPR, between the box using CoverShift and CoverShift. Version of 5 November 2026.
The box is the controller of its team's data. CoverShift, whose publisher is given in the legal notice, processes this data on its behalf, as processor. This agreement is part of the terms of use and applies as soon as a box creates its space. A signed version can be requested from contact@covershift.be.
Purposes: class schedule, cover, leave, hours, payroll preparation, Dimona declarations, invoices and the box's register.
Data subjects: the box's coaches, head coaches and managers.
Data: identity and contact details, status, certifications, availability, classes taught, hours, rates, absences, national number, IBAN, company number, Dimona declarations and NSSO replies.
Duration: as long as the box uses CoverShift.
Process the data only on the box's instructions, given through its use of the app or in writing, and warn it if an instruction seems to breach the GDPR.
Restrict access to the people who need it, bound by confidentiality.
Protect the data: encrypted connections, role-based access (a head coach sees no rates, pay, IBAN or national number), access rules in the database, backups and an action log.
Help the box answer requests from individuals (access, correction, erasure) and meet its own security and impact assessment obligations.
Notify the box without delay, and at the latest within 48 hours of becoming aware of it, of any data breach that concerns it, with what is known and the measures taken.
The box authorises the processors listed on the Personal data page, with their country. CoverShift notifies boxes 30 days before adding or changing one; a box that objects can stop the service and get its data back free of charge. When data leaves the European Union, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision.
At the end, the box exports its data from « My box » or asks for it to be handed over. CoverShift then deletes it within 30 days, except what the law requires it to keep.
On request, CoverShift makes available to the box the information needed to check compliance with this agreement, and answers its written questions.