Conformité RGPD - Superdocu

Legal Context.

We abide by the recommendations of the relevant authorities and have put in place an organization to ensure our compliance with the regulatory framework established by the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and any other laws or regulations relating to personal data that apply to us.

Our commitments.

In order to comply with the principle of lawfulness, the legal bases for each data processing is determined carefully and on a case-by-case basis in accordance with the list provided by Article 6 of the General Regulation on Data Protection (GDPR).

Consent: you have given clear consent to process your personal data for a specific purpose.
Contract: the processing of personal data iss necessary for a contract you have with us.
Public interest: the processing of personal data is necessary to perform a task in the public interest.
Legitimate interest: the processing of your personal data is necessary for your legitimate interests.

What personal data do we collect?

We only collect and process personal data that are relevant and adequate. We give a special attention to its accuracy and updates when needed. Personal data includes in particular :

Identification data: first name and last name, email address, phone number, etc.
Professional life: company name, company incorporation documents or certifications, etc.
Economic and financial information: VAT number, IBAN, Credit Card information, etc.
Internet: cookies, tracers, navigation data, audience metrics, etc.
Connection data: IP address, logs, terminal and connection identifiers, timestamp, etc.

How do we use your personal data?

We only collect and process personal data for specified, explicit and legitimate purposes, like:

Creating a private account for customers, completing their profile, and enabling them to use Superdocu for their own needs.
Producing usage statistics and improving Superdocu based on behaviours.
Processing payments from customers, managing invoices and refunds.
Managing notification email or SMS sending and producing statistics on email usage
Managing newsletter subscription and email sending, producing statistics on openings, clicks, bounce rate or unsubscriptions.
Providing customer and user support through live chat

Your personal data will never be processed for incompatible purposes regarding why it was first collected.

What are the retention periods for your personal data?

Retention periods of your personal data are determined according to the purposes for which we collected it and our legal obligations. When theses purposes are fulfilled or when you ask us, your personal data are archived, erased or anonymized.

For instance, we store your email information to send you our newsletter as long as you don't unsubscribe from it.

Is your data processed securely?

We care deeply about the safety of your personal data and that is why we put in place adequate technical and organizational security measures to preserve its confidentiality, integrity and availability (for instance, encrypting your info into our database).

We take into account the risks for data subjects and therefore follow with great care the recommendations of the competent authorities regarding security.

What are your rights and how to exercise them?

In accordance with Articles 12 to 23 of the General Regulation on Data Protection (GDPR), you have rights over your personal data that we are committed to respect: right of access, right of rectification, right to object, right to data portability, right to erasure, right to limitation of processing.

These rights can be exercised directly and at any time via email or through contact forms on our website. We make every effort to answer requests in the shortest possible time.

You are duly informed in clear and simple terms in our Privacy Information Notices available on our forms and subscription page.

Policy Change.

This Privacy Policy may be modified in the future to keep it updated with legal jurisprudence and evolution. You'll be informed either by a special mention on our website or by a personalized warning, by email for instance.

GDPR.