Privacy Policy

This Privacy Policy is intended for you, as a user of the website https://www.docloop.io/ (hereinafter referred to as the "SITE"). The SITE is published by the data controller Docloop, a simplified joint-stock company with a capital of €1,428.40, whose registered office is located at 22 Avenue Robert Schuman – 13002 Marseille, registered with INSEE at the Marseille Trade and Companies Register under SIREN number 914137211, SIRET number 91413721100019, APE 6201Z. Respecting your privacy and personal data is a priority for Docloop. The purpose of this Privacy Policy is to inform you about how personal data is processed on the WEBSITE.

Docloop undertakes in all circumstances to comply with the following three essential principles:
- Docloop only collects data that is strictly necessary for the purposes for which it is intended;
- You remain in control of your personal data;
- Your data is processed in a transparent, confidential, and secure manner.

The processing of personal data is governed:
- By Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, in its current version;
- By Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, which came into force on May 25, 2018.

Article 1. Definitions

The terms listed below have the following meanings in this Privacy Policy:● DATA CONTROLLER: refers to the entity that determines the means and purposes of personal data processing
- SERVICE: refers to all services offered by Docloop and available on the WEBSITE;
- PROCESSOR: refers to the person processing personal data on behalf of the DATA CONTROLLER, who acts under the authority of the DATA CONTROLLER and on the latter's instructions.
- USER: refers to any person who accesses and browses the WEBSITE either as a simple internet user or as a CUSTOMER.

Article 2. Purposes of processing

Your various data may be collected by Docloop for explicit, legitimate, and specific purposes in order to ensure:
- The proper functioning and continuous improvement of the SITE, its services, and its features;
- The management of requests for demonstrations of Docloop solutions
- The management of requests via the contact form The management of your subscription to the Docloop newsletter
- The management of requests for access, rectification, opposition, erasure, restriction, portability, and the right to lodge a complaint with the CNIL
- The compilation of statistics;In any event, and for each defined purpose, Docloop will use all means at its disposal to ensure the security and confidentiality of the personal data entrusted to it, in compliance with the laws and regulations in force.

Article 3. Identity of the data controller

Your personal data is collected and processed by Docloop, a simplified joint stock company with capital of €1,428.40, whose registered office is located at 22 Avenue Robert Schuman – 13002 Marseille, registered with INSEE at the Marseille Trade and Companies Register under SIREN number 914137211, the Data Controller responsible for processing personal data in connection with the operation of the WEBSITE. If you have any questions about the management and use of your personal data, please contact us at contact@docloop.io.

Article 4. Identity of the data controller

When Users browse the SITE and/or wish to benefit from the services available on the SITE, Docloop may collect certain personal data from Users. This data is processed in accordance with the purposes specified at the time of collection. The data that may be collected and processed by Docloop for the purposes described in Article 2 of this privacy policy concerns:
- Identification data (last name, first name, email address, phone number, company, position, country, and, where applicable, a copy of the identity card, for the purposes of proving the exercise of a right of access, rectification, or opposition, or to comply with a legal obligation);
- Data relating to the monitoring of the commercial relationship: requests for information, history of exchanges with the services;
- Connection data and cookies (IP addresses, connection logs);

In particular, Docloop may collect personal data:
- When you visit the SITE;
- When you register on the SITE;
- During exchanges with Docloop via the SITE;
- When you request contact from Docloop.

Regardless of the method of collection, Docloop undertakes to inform you of the purposes of the processing, the mandatory or optional nature of the responses to be provided, the possible consequences of not responding, the recipients of the data, and the existence and methods of exercising your rights of access, rectification, and opposition to the processing of your data.

Article 5. Consent

All data concerning you is collected directly from you when you register, place orders, log in, and during our various exchanges (online requests, letters, phone calls, etc.). When you register on the SITE, you fill out various forms and provide various personal data about yourself in order to benefit from all the services offered by Docloop. When required by the French Data Protection Act, Docloop undertakes, as appropriate, to obtain your consent and/or allow you to object to the use of your data for certain purposes. Docloop may send commercial solicitations to Users who have agreed to receive them. If, at a later date, Users no longer wish to receive such solicitations by email, they may send an email at any time, free of charge and without providing any reason, to the following address: contact@docloop.io

Article 6. Recipients of data

Only the authorized and designated persons listed below will have access to USER data:
- Authorized personnel from various Docloop departments (authorized personnel from the communications, administrative, logistics, and IT departments, responsible for customer relations and control),
- Docloop subcontractors acting on behalf of Docloop, including the SITE host,
- Third parties that may place cookies on your devices (computers, tablets, mobile phones, etc.) when you consent to this (for more details, see our Cookie Management Policy);
- Third-party social networks. The SITE may use social plugins provided and operated by third-party companies, such as YouTube and LinkedIn buttons. As a result, you can send third parties the information you view in a section of our SITE. If you are not logged into your account with the third party, the latter will not be able to know your identity. If you are logged into your account with the third party, then the third party will be able to link information or actions related to your interactions with the SITE to your account with the third party. Please review the third party's privacy policies to learn more about their data practices. Your data is not shared, exchanged, sold, or rented to anyone other than those mentioned above.

Article 7. Data retention period

Docloop undertakes to store the data collected in a form that allows you to be identified for a period that does not exceed the time necessary for the purposes for which the data is collected and processed.
However, data processing is possible for the purpose of proving a right or a contract. This data may also be stored for the purpose of complying with a legal obligation or kept in files in accordance with applicable regulations and laws.
For the management of our commercial relationship with you and customer follow-up, your data is stored for 3 years from the end of the commercial relationship if you are a customer. For the management of requests regarding your personal data rights, your data is kept for a period of one (1) year.
With regard to cookies, it is specified that the information stored on your device (e.g., cookies) or any other element used to identify you for audience statistics purposes is not kept for more than six (6) months. Beyond this period, raw traffic data associated with an identifier is either deleted or anonymized.
Finally, in order to ensure the proper functioning and continuous improvement of the SITE and its features, raw traffic data associated with an identifier is stored for a period of thirteen (13) months. Beyond this period, it is deleted or anonymized.
(For more details, see our Cookie Management Policy)
To learn more about cookies (how to manage, delete, and identify them), you can visit the CNIL website: http://www.cnil.fr/vos-droits/vos-traces/les-cookies/#c5554

Article 8. Your rights

In accordance with the French Data Protection Act and the GDPR, you have the following rights:
- Right of access (Article 15 GDPR), rectification (Article 16 GDPR), updating, and completeness of your data,
- Right to block or erase your personal data (Article 17 GDPR) when it is inaccurate, incomplete, ambiguous, outdated, or when its collection, use, communication, or storage is prohibited,
- Right to withdraw your consent at any time (Article 13-2c GDPR),
- Right to restrict the processing of your data (Article 18 GDPR),
- Right to object to the processing of your data (Article 21 GDPR),
● Right to the portability of the data you have provided to us, when your data is subject to automated processing based on your consent or on a contract (Article 20 GDPR),
- Right to lodge a complaint with the CNIL (Article 77 GDPR),
- Right to define the fate of your data after your death and to choose whether or not we communicate your data to a third party that you have previously designated.

In the event of death and in the absence of instructions from you, we undertake to destroy your data, unless its retention is necessary for evidentiary purposes or to meet a legal obligation. These rights can be exercised by simply sending an email to contact@docloop.io, providing your contact details (surname, first name, address, and a copy of a signed identity document) and a legitimate reason when required by law (particularly in the event of opposition to processing). If you provide a copy of your identity document to prove your identity, we will keep it for one (1) year or three (3) years when this communication is made in the context of exercising a right of opposition. To find out more about your rights, you can also visit the website of the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés), available at the following address: http://cnil.fr.

Article 9. Security

Docloop and its subcontractors undertake to implement all technical and organizational measures to ensure the security of our processing of personal data and the confidentiality of your data, in accordance with the French Data Protection Act, the European General Data Protection Regulation (GDPR), and Law No. 2018-133 of February 26, 2018 " on various provisions adapting to European Union law in the field of security." As such, Docloop takes the necessary precautions, given the nature of your data and the risks presented by our processing, to preserve the security of the data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties (physical protection of premises, authentication process for our customers with personal and secure access via confidential usernames and passwords, connection logging, encryption of certain data, etc.).

Article 10. Transfers outside the EU

Docloop undertakes not to transfer USERS' data outside the European Union. In the event that Docloop is required to do so, it will inform USERS of the measures taken to control this transfer and ensure that the confidentiality of their data is respected.