Privacy Policy

Last updated: January 15, 2022

The purpose of WEPROC’s Privacy Policy is to provide you with all the information regarding the conditions under which WEPROC collects and processes your Personal Data.

By accessing and using our websites and the WEPROC procurement software, you agree to review this Privacy Policy, which may be modified or updated at any time without notice. Any changes will be posted on the Site, and we advise you to consult it regularly.

I. Purposes of Processing

We collect and process data that you voluntarily provide to us in order to access and use Weproc, submit requests to our teams (demos, contact forms), or access our online resources.

We also collect and process data related to User preferences and traffic (such as IP addresses).

Specifically, we process your Data to enable:

Browsing of our websites (https://www.weproc.com and https://blog.weproc.com);
Creation of environments (paid and trial versions) to access Weproc and use our services;
Submission of contact forms and online demonstrations;
Downloading of our online resources;
Management and monitoring of the commercial relationship (invoices, payments, claims, and User support);
Provision of the websites and their various features;
Improvement of our services;
Security management of the site and the Software;
Management of requests to exercise User rights: rights of access, rectification, erasure, portability, objection, and restriction.

II. Data Collected

To open a license and use Weproc, you must provide, at a minimum, the following personal identification information:

First and last name
Email address

You may complete your profile with other Personal Data (phone number, photo, names of your suppliers, etc.). We will never collect or process sensitive Personal Data as defined by regulations (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, etc.).

1.2. We collect information related to our contractual relationship: history, subscribed modules, billing and payment details, requests and incidents reported to support…

1.3. We collect certain Personal Data during your visits to our site (https://www.google.com/search?q=pro.weproc.com) via cookies—either automatically deposited on your terminal or subject to your express consent: for example, the date, time, and duration of your visit, your browsing path, operating system type, etc.

Definition: A cookie is a small file stored by a server on a user’s terminal (computer, phone, etc.) associated with a web domain. Its function is to enable the site to function, facilitate navigation (remembering technical choices, past activity), improve site use, and better understand the User experience. The maximum lifespan of a cookie is 13 months.

III. Use of Your Personal Data

The Privacy Policy is available here.

Cookies

Personal Data is used only in cases provided for by current regulations:

Performance of the contract related to your use of the WEPROC Software;

Compliance with a legal obligation;

Your consent to use your data;

Our legitimate interest in conducting prospecting or promotional operations for Weproc.

IV. Processing of Personal Data

WEPROC collects and processes your Personal Data fairly and lawfully, in compliance with the principles of European Regulation 2016/679 of April 27, 2016 (GDPR). WEPROC is the Data Controller within the meaning of the GDPR.

WEPROC has appointed a Data Protection Officer (DPO) whom you can contact at dpo@weproc.com.

The DPO’s missions include:

Raising awareness among WEPROC employees regarding User Data protection;

Assisting them during the implementation of processing operations;

Responding to requests related to the exercise of your rights, in accordance with Article VIII.

V. Data Security

WEPROC makes every effort to prevent the loss, misuse, intrusion, unauthorized disclosure, alteration, or destruction of the Personal Data you provide.

As such:

Data is stored within the European Economic Area (EEA). Server security monitoring and Weproc updates are performed in real-time;
WEPROC employees are subject to confidentiality and non-disclosure obligations and have all signed a specific commitment regarding the protection of Personal Data;
Access to your Data is governed by a strict access control policy, restricted to authorized personnel under defined conditions;

When we engage service providers to process Personal Data, we have previously verified that these providers guarantee an equivalent level of security protection.

VI. Data Retention Period

WEPROC retains your Personal Data in accordance with the following legal and regulatory provisions:

We retain information related to customer account management, billing, and payments for 10 years after the end of the contract or the last contact from an inactive Customer.Nous conservons les informations relatives à la gestion du compte Client, de la facturation, des paiements 10 ans après la fin du contrat ou du dernier contact émanant du Client inactif.

We retain information related to the creation and management of prospecting files for 3 years from the last contact initiated by the prospect.

We are obligated to retain the following Personal Data for 1 year resulting from the creation, modification, or deletion of User Content:

Login identification;
Terminal identification;
Protocol types;
Nature of the operation;
Date and time of the operation;
Identification used by the author of the operation.

When data retention is no longer justified by customer account management, a legal obligation, commercial requirements, or the establishment, exercise, or defense of legal claims—or when you request it through the exercise of your rights (Article X)—we delete your Data in a secure manner.

VII. Access to Your Personal Data

7.1. Authorized WEPROC employees may have access to Personal Data based on individual access authorizations.

Depending on the purposes defined in Article I, authorized WEPROC employees may have access to Personal Data.

Access to your data is granted on the basis of individual access authorizations, as specified in Article V.

7.2. Data Transmission

WEPROC may outsource the following services:

Hosting
Maintenance
Technical Development

In accordance with Article 28 of the GDPR, access to your Data by our subprocessors is governed and framed by a contract. This contract between us and our subprocessors lists the various regulatory obligations they must fulfill regarding Personal Data protection.

VIII. Transfer of Personal Data

We keep your Personal Data within the European Union.

If data must be transferred to subprocessors in other countries, we ensure appropriate safeguards are in place (such as European Commission Standard Contractual Clauses with additional security measures).

We may also provide our Users’ Personal Data only if required by French law or ordered by a French court.

IX. Communications from WEPROC

We may send emails to the address associated with your Account for reasons related to our business relationship, namely: technical or security reasons, administrative reasons regarding your Software subscription, your participation in our events, or to inform you about updates to our service offering.

X. Exercising Your Rights

In accordance with the French “Data Protection” law (Loi Informatique et Libertés) and European Regulation 2016/679 of April 27, 2016 (GDPR), effective as of May 25, 2018, you have the following rights regarding processing:

Right of access and rectification
Right to object
Right to erasure (“Right to be forgotten”)
Right to data portability
Right to restriction of processing
Right to define instructions for your digital data after death

You can:

Modify your data via your WEPROC Account settings.
Click the “unsubscribe” link at the bottom of promotional emails.

You may exercise these rights by writing to us at the following postal address: WEPROC – 2 parvis des écoles, bâtiment les beaux-arts, bureau B09, 83000 TOULON, or by writing directly to our Data Protection Officer at dpo@WEPROC.com. Any request must be reasoned and accompanied by a copy of a valid ID. You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) at the following address: