Privacy Policy

Last updated: January 15, 2022

This WEPROC Privacy Policy is intended to provide you with all information regarding the conditions under which WEPROC collects and processes your Personal Data.

By accessing and using our websites and the WEPROC procurement software, you agree to this Privacy Policy, which may be modified or updated at any time without notice. Any changes will be posted on the Site, and we advise you to consult it regularly.

I. Purposes of Data Processing

We collect and process the data you voluntarily provide to us in order to access and use Weproc, make requests to our teams (demos, contact form), or access our online resources.

We also collect and process data related to our Users’ preferences and traffic (such as IP addresses).

Specifically, we process your Data to enable:

Browsing our websites (https://www.www.weproc.com and https://blog.weproc.com);
Creating environments (paid and trial versions) to access Weproc and use our services;
Processing contact form and online demo requests;
Downloading our online resources;
Managing and monitoring the business relationship (invoices, payments, claims, and User support);
Providing the websites and their various features;
Improving our services;
Managing the security of the site and the Software;
Managing requests to exercise Users’ various rights: rights of access, rectification, erasure, portability, objection, and restriction of processing.

II – Data Collected

To open a license and use Weproc, you must provide us with at least the following personal identification information:

First and last name
Email address

You can complete your profile with other Personal Data (phone number, photo, your supplier names, etc.). We will never collect or process sensitive Personal Data within the meaning of the regulations, such as data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, etc.

1.2. We collect information related to our contractual relationship with you: history, subscribed modules, billing and payment details, requests, and incidents reported to the support service…

1.3. We collect certain Personal Data during your visits to our site (pro.www.weproc.com) through some cookies that are automatically placed on your device, or other cookies subject to your express consent: for example, the date, time, and duration of your visit to our site, your browsing path, your operating system type, etc.

A cookie is a small file stored by a server on a user’s terminal (computer, phone, etc.) and associated with a web domain (i.e., in most cases, all the pages of the same website). Its function is to enable the site to work, facilitate navigation (remembering technical choices, past activity), improve the use of the site and service, and better understand the User experience. The maximum lifetime of a cookie is 13 months.

III. Use of Your Personal Data

The privacy policy is available here

Cookies

Personal Data is used only in cases provided for by the current regulations:

The performance of the contract related to your use of the WEPROC Software

Compliance with a legal obligation

Your consent to use your data

Our legitimate interest in conducting prospecting or promotional activities for Weproc.

IV. Processing of Personal Data

WEPROC collects and processes your Personal Data fairly, lawfully, and in compliance with the principles of the European Regulation 2016/679 of April 27, 2016 (GDPR). WEPROC is the data controller for your Personal Data within the meaning of the GDPR.

WEPROC has appointed a Data Protection Officer (DPO) whom you can contact at dpo@WEPROC.com.

The DPO’s missions include:

Raising awareness among WEPROC employees about the protection of Users’ Personal Data

Assisting them during the implementation of data processing

Responding to requests related to the exercise of your rights, in accordance with Article VIII.

V – Security of Your Data

WEPROC makes every effort to prevent the loss, misuse, intrusion, unauthorized disclosure, alteration, or destruction of the Personal Data you provide to us.

Thus:

Data is stored in the European Economic Area. The security of the servers and the updating of Weproc are monitored in real time;
WEPROC employees are subject to a confidentiality and non-disclosure obligation and have all signed a specific commitment regarding the protection of Personal Data;
Access to your Data is governed by a strict access control policy, reserved for authorized persons under defined conditions.

When we use service providers to process Personal Data, we first verify that these providers guarantee an equivalent level of security protection.

VI – Data Retention Period

WEPROC retains your Personal Data in accordance with the following legal and regulatory provisions:

We retain information related to Client account management, invoicing, and payments for 10 years after the end of the contract or the last contact from an inactive Client.

We retain information related to the creation and management of prospecting files for 3 years from the last contact from the prospect.

We are required to retain the following Personal Data for 1 year from the creation, modification, or deletion of User Content:

Connection identifier;
Identifier provided by the terminal;
Protocol types;
Nature of the operation;
Date and time of the operation;
Identifier used by the author of the operation.

When the retention of Data is no longer justified by the management of a Client account, a legal obligation, business requirements, the establishment, exercise, or defense of our legal rights, or when you request it by exercising one of your rights (Article X), we will securely delete your Data.

VII. Access to Your Personal Data

7.1. Access to Your Data by WEPROC Employees

Depending on the purposes defined in Article I, authorized WEPROC employees may have access to Personal Data.

Access to your data is based on individual access authorizations, as specified in Article V.

7.2. Data Transmission

WEPROC may subcontract the following services:

Hosting
Maintenance
Technical developments

In accordance with Article 28 of the GDPR, access to your Data by our subcontractors is provided for and governed by a contract. This contract that binds us with our subcontractors lists the various regulatory obligations incumbent upon them regarding the protection of Personal Data.

VIII. Transfer of Personal Data

We store your Personal Data within the European Union.

If the Data we collect is to be transferred to subcontractors located in other countries, we first ensure that appropriate safeguards are in place to govern any transfer of Personal Data (such as the European Commission’s Standard Contractual Clauses with additional security guarantees), in accordance with the GDPR and the recommendations of the European Data Protection Board.

We may also provide our Users’ Personal Data, only if required by French law or ordered by a French court.

IX. Communications from WEPROC

We may send you emails at the email address associated with your Account for reasons related to our business relationship, namely, for technical or security reasons, administrative reasons related to your subscription to the Software, your participation in our events, or to inform you of the evolution of our service offerings.

X. Processing of Rights Requests

In accordance with the French ‘Informatique et Libertés’ law and the European Regulation 2016/679 of April 27, 2016 (GDPR), in effect since May 25, 2018, you have the following rights regarding the processing of your data:

Right of access and rectification
Right to object
Right to erasure
Right to portability
Right to restriction of processing
Right to define instructions for your digital data after your death

You can:

Modify your Personal Data directly from your WEPROC Account, if you have one.
Manage the receipt of promotional communications (not related to a transaction) by simply clicking the ‘unsubscribe’ link at the bottom of emails sent by WEPROC.

You can exercise these rights by writing to us at the following postal address: WEPROC – 2 parvis des écoles bâtiment les beaux-arts bureau B09 83000 TOULON, or by writing directly to our Data Protection Officer at dpo@WEPROC.com. All requests must be justified and accompanied by a copy of a valid identity document. You have the right to lodge a complaint with the French Data Protection Authority (CNIL), at the following address: