Privacy Policy

Last updated 11 September 2026

The purpose of the WEPROC Privacy Policy is to give you all the information you need about the conditions under which WEPROC collects and processes your Personal Data.

By accessing and using our websites and the WEPROC procurement software, you undertake to read this Privacy Policy, which may be amended or updated at any time without notice. Any change will be published on the Site and we advise you to consult it regularly.

IPurposes of processing

We collect and process the data you provide to us voluntarily in order to access and use Weproc, to make requests to our teams (demonstrations, contact form) or to access our online resources.

We also collect and process data relating to our Users' preferences and to traffic (such as IP addresses).

More specifically, we process your Data in order to enable:

• browsing of our website (https://www.weproc.com);
• the creation of environments (paid versions and trial versions) to access Weproc and use our services;
• the sending of contact forms and online demonstration requests;
• the downloading of our online resources;
• the management and monitoring of the business relationship (invoices, payments, complaints and User support);
• the provision of the websites and their various features;
• the improvement of our services;
• the security management of the site and of the Software;
• the handling of requests to exercise Users' various rights: rights of access, rectification, erasure, portability, objection and restriction.

IIData collected

To open a licence and therefore use Weproc, you must provide us with at least the following personal identification information:

• first name and surname;
• email address.

You may complete your profile with other Personal Data (telephone number, photograph, names of your suppliers, etc.).

We collect information relating to the contractual relationship we have with you: history, modules subscribed to, billing and payment details, requests and incidents reported to our support team, and so on.

Through certain cookies placed automatically on your device, or other cookies subject to your express consent, we collect certain Personal Data during your visits to our site (www.weproc.com): for example, the date, time and duration of your visit to our site, your browsing path, the type of your operating system, and so on.

A cookie is a small file stored by a server on a user's device (computer, telephone, etc.) and associated with a web domain (that is, in most cases, with all the pages of the same website). Its purpose is to allow the site to function, to make browsing easier (remembering technical choices and past activity), to improve the use of the site and of the service, and to better understand Users' experience. The maximum lifetime of a cookie is 13 months. For further details, see our Cookie Policy.

IIIUse of your Personal Data

Personal Data is used only in the cases provided for by the applicable regulations:

IVProcessing of Personal Data

WEPROC collects and processes your Personal Data fairly and lawfully, and in compliance with the principles of European Regulation 2016/679 of 27 April 2016 (GDPR). WEPROC is the controller of your Personal Data within the meaning of the GDPR.

WEPROC has appointed a Data Protection Officer (DPO) whom you may contact at dpo@weproc.com.

The DPO's duties include:

• raising WEPROC employees' awareness of the protection of Users' Personal Data;
• supporting them when processing operations are implemented;
• responding to requests relating to the exercise of your rights, in accordance with Article X.

VSecurity of your Data

WEPROC does everything possible to prevent the loss, misuse, intrusion, unauthorised disclosure, alteration or destruction of the Personal Data you provide to us. Accordingly:

• Data is stored within the European Economic Area. Server security and Weproc updates are monitored in real time;
• WEPROC employees are bound by a confidentiality and non-disclosure obligation and have all signed a specific undertaking relating to the protection of Personal Data;
• Access to your Data is governed by a strict access control policy, restricted to authorised persons under defined conditions.

Where we call on service providers to process Personal Data, we have first verified that those providers guarantee an equivalent level of protection in terms of security.

VIData retention period

WEPROC retains your Personal Data in accordance with the following legal and regulatory provisions:

The logging data concerned is as follows:

• The connection identifier;
• The identifier provided by the device;
• Protocol types;
• Nature of the operation;
• Date and time of the operation;
• Identifier used by the person performing the operation.

Where the retention of Data is no longer justified by the management of a Client account, a legal obligation, business requirements, or the establishment, exercise or defence of our legal claims, or where you ask us to do so in exercise of one of your rights (Article X), we delete your Data securely.

VIIAccess to your Personal Data

7.1. Access to your Data by WEPROC employees

Depending on the purposes defined in Article I, authorised WEPROC employees may have access to Personal Data.

Access to your data is granted on the basis of individual access authorisations, as specified in Article V.

7.2. Transmission of Data

WEPROC may subcontract the following services:

• Hosting
• Maintenance
• Technical development

In accordance with Article 28 of the GDPR, access to your Data by our subcontractors is provided for and governed by a contract. That contract between us and our subcontractors sets out the various regulatory obligations incumbent on them regarding the protection of Personal Data.

VIIITransfer of Personal Data

We keep your Personal Data within the European Union.

Should the Data we collect have to be transferred to subcontractors located in other countries, we first ensure that appropriate safeguards are in place to govern any transfer of Personal Data (such as the European Commission's Standard Contractual Clauses together with additional security safeguards), in accordance with the GDPR and the recommendations of the European Data Protection Board.

We may also provide our Users' Personal Data solely where required by French law or ordered by a French court.

IXCommunications from WEPROC

We may send you emails at the email address associated with your Account for reasons connected with our business relationship, namely technical or security reasons, administrative reasons relating to your subscription to the Software or your participation in our events, or to inform you of developments in our service offering.

XHandling of rights requests

In accordance with the French "Informatique et Libertés" Act and European Regulation 2016/679 of 27 April 2016 (GDPR), in force since 25 May 2018, you have the following rights regarding processing operations:

• Right of access and rectification
• Right to object
• Right to erasure
• Right to portability
• Right to restriction of processing
• Right to determine what happens to your digital data after death

You may:

• Modify your Personal Data directly from your WEPROC Account, if you have one.
• Manage the receipt of promotional communications (not related to a transaction) simply by clicking the "unsubscribe" link at the bottom of emails sent by WEPROC.

You also have the option of lodging a complaint with the French Data Protection Authority (CNIL), at the following address: CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France, or via its website www.cnil.fr/fr/plaintes.