GDPR & Your Data Rights
Last updated: 28 October 2026
Leggi questa pagina in italiano
Because bitsplitters operates in the European Union, the use of Team Tasks Manager (“TTM”) is subject to the General Data Protection Regulation (GDPR). This page explains the legal basis for processing and the rights you have. It complements our Privacy Policy, which lists exactly what data we handle.
Data controller
bitsplitters — Alessandro Vurro, Via di Dragone 478/B, 00126 Rome (RM), Italy. Italian VAT no. 18349651002, certified email (PEC): alessandro.vurro@pec.it. Contact for any data-protection matter: info@bitsplitters.app.
Legal basis for processing (Art. 6 GDPR)
- Performance of the service (Art. 6(1)(b)) — for you, when you add the bot or use it. Most data (Discord IDs, task content, reminders, configuration, webhooks) is processed because it is necessary to provide the functionality you request.
- Legitimate interest (Art. 6(1)(f)) — for the people who appear in a list without using the bot themselves, for example an owner chosen by someone else or a member mentioned in a task. The interest is the team’s: organising its work in its own server. Those people can object, and can ask the server’s admins to remove them.
- Legitimate interest (Art. 6(1)(f)) — also for keeping the bot reliable and safe: usage statistics, technical logs, error reports and backups. The same basis covers our community server, with its moderation and support tickets (see Our community server), and our websites (see Our websites). We have weighed these interests against your rights, and you can object to any of them.
We do not carry out automated decision-making with legal effects, nor profiling.
Your rights
Under the GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (“right to be forgotten”).
- Restriction — ask us to limit processing in certain cases.
- Portability — receive your data in a structured, commonly used, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
Much of your data is also directly under your control inside Discord: editing or deleting tasks, reminders, webhooks and configuration removes them; deleting a list (the Delete list button in its More panel, or /config lists) removes that list with its tasks, reminders and history, and sealing it (Seal list, same panel) does the same while leaving its message in the channel; and removing the bot from a server deletes the lists, tasks, reminders, webhooks and history it holds, and the records of the roles it created for tasks owned by several people (the roles stay in the server). A few server-level records are kept — see Retention in the Privacy Policy for the exact list, and for the data stored against your Discord user ID (your personal time zone and your direct-message channel with the bot), which removing the bot does not touch and which we delete on request.
How to exercise your rights
Email info@bitsplitters.app with your request and enough information to identify the relevant server or data (e.g. the Discord server ID, or your Discord user ID for your personal time zone and direct-message channel). We will respond within the time limits set by the GDPR (normally within one month).
An email address does not prove who owns a Discord account. Before acting on a request about data stored against a Discord user ID, we may ask you to confirm it from that account — for example by opening a support ticket on our community server. We ask only what we need to be sure the request is yours.
Retention
We keep data only as long as needed to provide the service, as described in the Privacy Policy. Data deleted from the service survives in our backups for up to 14 days. Removing the bot deletes that server’s content data; the residual server-level records and the data stored against your Discord user ID (personal time zone and direct-message channel) are deleted upon a valid erasure request, unless the law requires otherwise.
International transfers
The bot, its database and its backups are hosted by OVHcloud on a dedicated server in France (Gravelines data centre), within the European Economic Area (EEA). A second copy of the backups is kept in Italy, on our own computer.
Some data leaves the EEA through services based in the United States:
- Discord — the bot works on Discord, so what it shows in your server passes through Discord, as does everything else you do there. The error reports described in the Privacy Policy go to a private channel on Discord too. Discord transfers data under the safeguards set out in its privacy policy (opens in a new tab).
- GitHub — it hosts our websites, and receives the technical data of each visit. GitHub transfers data under the safeguards set out in its privacy statement (opens in a new tab).
- Cloudflare — it counts the visits to our websites (see Our websites). Cloudflare transfers data under the EU-U.S. Data Privacy Framework, with the standard contractual clauses as a fallback, as set out on its GDPR page (opens in a new tab).
Complaints
If you believe your data is handled unlawfully, you may lodge a complaint with your local supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it (opens in a new tab)).