1. Data controller

The controller for the processing described in this policy is:

DOCWEB
Simplified single-member joint-stock company (SASU)
Registered office: 149 avenue du Maine, 75014 Paris, France
SIREN: 914 133 954

Contact for any question relating to personal data:

contact@docweb.fr

2. Principles applied

DOCWEB limits the collection of personal data to what is necessary for the operation, security and handling of requests sent to the site.

DOCWEB does not sell, rent or otherwise commercialise any personal data.

The site currently offers no user account, personal area or newsletter subscription.

3. Data related to site visits

When you visit the site, certain technical information may be recorded automatically in the server logs:

  • the IP address used to access the site;
  • the date and time of the request;
  • the page or resource requested;
  • the type of browser and system used;
  • the server response code;
  • information needed to diagnose an error or abnormal access attempt.

This data is used to:

  • ensure the site works correctly;
  • detect technical errors;
  • protect servers and content;
  • prevent abuse, attacks and unauthorised access attempts;
  • establish, where necessary, the origin of a security incident.

This processing is based on DOCWEB’s legitimate interest in ensuring the operation and security of its services, in accordance with Article 6(1)(f) of the General Data Protection Regulation — GDPR.

4. Contact form

The contact form on docweb.fr and docweb.io is active. Messages are transmitted electronically to DOCWEB so that we can reply.

Data collected through the form

When you submit the form, DOCWEB processes the following data:

  • the name or identifier you enter;
  • the email address provided for the reply;
  • the content of the message;
  • the language of the site of origin (French or English), used only to adapt the technical messages shown to you and to tell the operator where the message came from;
  • technical data related to the request (in particular the IP address, date and time), used for service security (abuse limitation, diagnostics).

An invisible technical field (honeypot) may be present to deter automated submissions. It is not intended to collect useful information about a person.

Purposes

This data is used solely to:

  • read and handle the request;
  • reply by email;
  • follow up the exchange;
  • protect the service against spam, abuse and automated attacks.

Legal basis

Depending on the nature of the request, processing is based on:

  • DOCWEB’s legitimate interest in responding to enquiries and securing its service (Article 6(1)(f) GDPR); or
  • the performance of pre-contractual measures taken at the request of the person concerned when they seek a service or collaboration (Article 6(1)(b) GDPR).

How the data is processed

  • Messages are not stored in a dedicated application database.
  • They are transmitted by email to DOCWEB’s contact address (contact@docweb.fr), with the ability to reply directly to the sender.
  • Retention then follows the rules for email communications (see sections 5 and 7).

Safeguards associated with the form

DOCWEB notably implements:

  • server-side field validation;
  • a limit on the number of submissions per IP address over a given period;
  • an anti-bot measure (honeypot);
  • transmission from the site to the contact API through a suitable server configuration (same origin / HTTPS in production).

Sensitive data

The form must not be used to send unnecessary confidential information, passwords, access keys, bank details, medical data or any other sensitive data.

5. Email communications

When someone contacts DOCWEB directly by email, the information contained in the message may be processed, including:

  • their name;
  • their email address;
  • the subject of their request;
  • the content of the message;
  • any attachments;
  • information needed to follow up the exchange.

This data is used only to read the request, reply to it and ensure follow-up.

Depending on the nature of the request, processing is based on:

  • DOCWEB’s legitimate interest in responding to enquiries received; or
  • the performance of pre-contractual measures taken at the request of the person concerned when they seek a service or collaboration.

6. Recipients of the data

Data is accessible only to:

  • authorised persons within DOCWEB;
  • the site’s technical host;
  • the email provider used to receive and send messages;
  • technical providers strictly necessary for the operation or security of the service;
  • legally authorised authorities when a legal obligation requires it.

These recipients may use the data only within the scope of their respective roles.

The sites are hosted by:

OVH SAS
2 rue Kellermann
59100 Roubaix
France

7. Retention periods

Data is not kept longer than necessary.

The periods currently applied are as follows:

  • server technical logs: six months at most;
  • contact messages with no contractual relationship: three years at most from the last exchange;
  • data linked to a contractual relationship: for the duration of the relationship, then for applicable retention or limitation periods;
  • data needed to handle a security incident or dispute: for the time needed to handle it and defend DOCWEB’s rights.

Data may be deleted or anonymised before these periods expire when it is no longer needed.

8. Cookies and other trackers

As of the date of this policy update, docWeb does not use:

  • advertising cookies;
  • profiling trackers;
  • tracking pixels;
  • social buttons that set trackers;
  • audience measurement tools that require user consent.

The site therefore currently requires no cookie consent banner.

Elements strictly necessary for the operation or security of the site may be used without advertising purposes or cross-site tracking.

If audience measurement tools, external content or trackers subject to consent are added, none of those trackers will be activated before the user has made a choice. This policy will then be updated.

9. Transfers outside the European Economic Area

DOCWEB does not intentionally carry out transfers of personal data outside the European Economic Area in the context of the site’s current operation.

If a future provider involves such a transfer, DOCWEB will ensure it rests on a mechanism provided for by the GDPR and will inform users.

10. Security

DOCWEB implements appropriate technical and organisational measures to protect personal data against:

  • unauthorised access;
  • loss;
  • alteration;
  • disclosure;
  • destruction;
  • misuse.

These measures include securing communications, limiting access, keeping systems up to date and monitoring abnormal technical events.

No computer system can guarantee absolute security; users should avoid sending sensitive information that is not necessary to process their request.

11. Automated decision-making and profiling

DOCWEB does not take any decision producing legal effects on a person based on fully automated processing.

No advertising or behavioural profile is built from browsing on the site.

12. Rights of individuals

Depending on the processing concerned and the conditions set by regulation, any person may request:

  • access to data concerning them;
  • rectification of inaccurate or incomplete data;
  • erasure of their data;
  • restriction of processing;
  • objection to processing based on legitimate interest;
  • data portability where that right applies;
  • withdrawal of consent where processing is based on consent.

These rights may be exercised by writing to:

contact@docweb.fr

The request must make it possible to identify the data or exchange concerned. Proof of identity may be requested only where there is reasonable doubt about the requester’s identity.

DOCWEB will reply within the time limits set by regulation.

13. Complaint to the CNIL

Anyone who considers that their rights are not being respected may lodge a complaint with the French data protection authority — CNIL (Commission nationale de l’informatique et des libertés).

It is recommended to contact DOCWEB first so that the request can be examined and, where possible, resolved.

The websites docweb.fr and docweb.io may contain links to sites or services operated by third parties.

DOCWEB is not responsible for data processing carried out by those external sites. Users are invited to consult their own privacy policies before sending them information.

15. Changes to this policy

This policy may be amended to take account of:

  • changes to the site;
  • the addition of a new service;
  • a change of provider;
  • a technical or regulatory development.

The last-updated date at the top of the page identifies the applicable version.

Legal notice Contact