Personal Data Protection Policy

Introduction
This privacy policy aims to inform you in a clear, transparent manner and in accordance with applicable regulations on the methods by which the publishing company of the docu-labs.com site processes your personal data. As a company established in England, QODERZ LTD, registered with the Companies House under number 15725172 and having its registered office at 7 Bell Yard, London, WC2A 2JR, United Kingdom, acts as data controller within the meaning of the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the Data Protection Act 2018 applicable in the United Kingdom. By using the docu-labs.com site, you accept the conditions of this policy.
Data collected

In the context of using the site, Docu-Labs collects certain personal data concerning you. This data may include your name, first name, professional email address, position, as well as information relating to your company such as its corporate name and identification number. When browsing the site, technical data is also collected, such as your IP address, the type of browser you use, your operating system, the duration and characteristics of your connections, the pages viewed as well as the cookies placed. Furthermore, Docu-Labs keeps data related to your usage history of its services, your subscriptions, your preferences, as well as your interactions with the support team.

This data is collected directly from you, either when you browse the site, or when you create an account, subscribe to a subscription, use a service or contact our customer support.

Processing purposes

The data you provide to us is used exclusively for specific, explicit and legitimate purposes. It enables us to manage the contractual relationship, including creating your account, managing your orders and subscriptions, processing payments, and providing access to services. They are also used to ensure communication with you in the context of technical notifications or exchanges with support.

In parallel, this data serves to improve the functioning of our services, carry out internal statistical analyses, guarantee the security of our infrastructure, prevent fraud, and meet our legal, accounting and tax obligations. If you have consented, it may also be used to send you commercial communications and information about our offers.

Legal basis
All processing carried out is based on legal bases strictly compliant with GDPR. When they are necessary for the execution of a contract, they rely on article 6.1.b of GDPR. When they respond to legal obligations imposed by regulation, they fall under article 6.1.c. If the processing aims to respond to a legitimate interest of Docu-Labs, particularly in matters of security, service improvement or fraud prevention, it is justified by article 6.1.f. Finally, when your consent is required, particularly for placing cookies or sending commercial emails, it is collected beforehand in accordance with article 6.1.a.
Retention period

Docu-Labs retains your personal data for a period that does not exceed that strictly necessary for achieving the purposes for which it was collected. Data related to your account and subscriptions is retained for the entire duration of the contractual relationship, plus a period of five (5) years for evidential and legal compliance purposes. Billing-related data is archived for ten (10) years in accordance with tax rules. Data processed for commercial prospecting purposes is retained for a maximum period of three (3) years from the last contact from your part. After these deadlines, data is either deleted or made anonymous irreversibly.

Recipients and international transfers

The personal data you entrust to us is accessible only to properly authorized Docu-Labs collaborators, in the context of their respective missions. They may be transmitted to certain technical service providers acting as subcontractors (hosting, maintenance, payment services, customer relationship management, email sending), which act under the instruction of Docu-Labs and are contractually bound to ensure the security and confidentiality of your data. Some of these service providers may be located outside the European Economic Area. In this case, Docu-Labs ensures that transfers are appropriately framed by appropriate guarantees, including the contractual clauses types adopted by the European Commission, or relies on an adequacy decision.

Docu-Labs never commercializes your personal data, and does not transfer it to any unauthorized third parties.

Your rights

In accordance with the GDPR, you have rights that you can exercise at any time, namely: the right to access your personal data, the right to request its rectification or erasure, the right to restrict or object to its processing under the conditions provided for by law, and the right to the portability of the data you have provided to us in a structured format. You also have the option of formulating guidelines regarding the fate of your data after your death.

To exercise your rights, simply send a written request to the following address: support@docu-labs.com. Identity verification may be requested to guarantee the security of your data. We undertake to respond to you within one month, in accordance with regulations.

Consentement à l'utilisation des cookies

Pour le bon fonctionnement de notre site Web, nous utilisons des cookies. Afin d'obtenir votre consentement valide pour l'utilisation et le stockage de cookies dans le navigateur que vous utilisez pour accéder à notre site Web et pour documenter correctement ceci, nous utilisons une plateforme de gestion des consentements : CookieFirst. Cette technologie est fournie par Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Pays-Bas. Site web : https://cookiefirst.com désigné sous le nom de CookieFirst.

When you access our website, a connection is established with CookieFirst's server to give us the ability to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser to enable only the cookies you have consented to and to properly document this. The processed data is stored until the predefined storage period expires or until you request data deletion. Certain mandatory legal retention periods may apply notwithstanding the foregoing.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6, paragraph 1, point c), of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that the data of visitors to our website is only processed in accordance with our instructions and in compliance with GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in what are called server log files, which your browser automatically transmits to us. The following data is collected:

  • Your consent status or withdrawal of consent
  • Your anonymous IP address
  • Information about your browser
  • Information about your device
  • The date and time of your visit to our website
  • The URL of the web page where you saved or updated your consent preferences
  • The approximate location of the user who saved their consent preferences
  • A universal unique identifier (UUID) of the website visitor who clicked on the cookie banner
Data security

Docu-Labs implements all appropriate technical and organizational measures to guarantee a level of security adapted to the risks. This includes data encryption, server security, access authentication, logging of critical activities, as well as training our staff on data confidentiality. Hosting is provided by Amazon Web Services (AWS), which guarantees a high level of compliance with European security standards.

Complaints and supervisory authority

If you believe that your rights have not been respected or that your data has been processed in violation of the law, you can lodge a complaint with the competent control authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO), whose website is accessible at the following address: https://ico.org.uk. If you reside in France, you can also submit a complaint to the National Commission for Computing and Civil Liberties (CNIL) via https://www.cnil.fr.