+
1. GDPR Overview
+
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union (EU) and European Economic Area (EEA). DocuPulse is committed to full compliance with GDPR requirements.
+
+
+
Our Commitment
+
We are fully committed to protecting your privacy and ensuring compliance with GDPR. Our data processing activities are designed with privacy by design and default principles.
+
+
+
2. Legal Basis for Processing
+
Under GDPR, we process your personal data based on the following legal grounds:
+
+
+
+
+
+ | Processing Purpose |
+ Legal Basis |
+ Description |
+
+
+
+
+ | Service Provision |
+ Contract Performance |
+ Processing necessary to provide our services |
+
+
+ | Account Management |
+ Contract Performance |
+ Managing your account and billing |
+
+
+ | Customer Support |
+ Legitimate Interest |
+ Providing support and improving service |
+
+
+ | Security & Fraud Prevention |
+ Legitimate Interest |
+ Protecting our systems and users |
+
+
+ | Marketing Communications |
+ Consent |
+ Only with your explicit consent |
+
+
+ | Legal Compliance |
+ Legal Obligation |
+ Complying with applicable laws |
+
+
+
+
+
+
3. Your Data Subject Rights
+
Under GDPR, you have the following rights regarding your personal data:
+
+
+
+
+
+
+
Right of Access
+
You have the right to request access to your personal data and information about how we process it.
+
+
+
+
+
+
+
Right to Rectification
+
You can request correction of inaccurate or incomplete personal data we hold about you.
+
+
+
+
+
+
+
Right to Erasure
+
You can request deletion of your personal data in certain circumstances (the "right to be forgotten").
+
+
+
+
+
+
+
Right to Restriction
+
You can request that we limit how we process your personal data in certain situations.
+
+
+
+
+
+
+
Right to Portability
+
You can request a copy of your personal data in a structured, machine-readable format.
+
+
+
+
+
+
+
Right to Object
+
You can object to processing of your personal data based on legitimate interests.
+
+
+
+
4. How to Exercise Your Rights
+
To exercise any of your GDPR rights, you can:
+
+ - Use our self-service tools: Access and manage your data through your account settings
+ - Contact our Data Protection Officer: Email us at dpo@docupulse.com
+ - Submit a formal request: Use our data request form
+ - Contact us directly: Reach out to our support team
+
+
+
+
Response Time
+
We will respond to your requests within 30 days. In complex cases, we may extend this period by up to 60 days, but we will notify you of any delay.
+
+
+
5. Data Processing Details
+
5.1 Categories of Personal Data
+
We process the following categories of personal data:
+
+ - Identity Data: Name, email address, contact information
+ - Account Data: Username, password, profile information
+ - Usage Data: How you interact with our services
+ - Technical Data: IP address, browser type, device information
+ - Content Data: Documents and files you upload
+ - Communication Data: Messages and support requests
+
+
+
5.2 Data Retention Periods
+
We retain your personal data for the following periods:
+
+ - Account Data: Until account deletion or 2 years of inactivity
+ - Usage Data: 24 months for analytics purposes
+ - Support Communications: 3 years from last contact
+ - Billing Data: 7 years for tax and accounting purposes
+ - Security Logs: 12 months for security monitoring
+
+
+
6. International Data Transfers
+
Your personal data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place:
+
+ - Standard Contractual Clauses: We use EU-approved SCCs for transfers
+ - Adequacy Decisions: We transfer to countries with adequate protection
+ - Certification Schemes: We rely on approved certification mechanisms
+ - Binding Corporate Rules: Where applicable, we use BCRs for intra-group transfers
+
+
+
7. Data Protection Measures
+
We implement comprehensive technical and organizational measures to protect your data:
+
+
+
+
+
+ | Measure |
+ Implementation |
+ Status |
+
+
+
+
+ | Encryption |
+ AES-256 encryption at rest and in transit |
+ Compliant |
+
+
+ | Access Controls |
+ Role-based access and multi-factor authentication |
+ Compliant |
+
+
+ | Data Minimization |
+ Only collect data necessary for service provision |
+ Compliant |
+
+
+ | Privacy by Design |
+ Privacy considerations built into all systems |
+ Compliant |
+
+
+ | Regular Audits |
+ Annual privacy and security assessments |
+ Compliant |
+
+
+ | Staff Training |
+ Regular GDPR and privacy training |
+ Compliant |
+
+
+
+
+
+
8. Data Breach Procedures
+
In the unlikely event of a data breach, we have established procedures to:
+
+ - Detect and assess the breach within 72 hours
+ - Notify the relevant supervisory authority
+ - Inform affected individuals when required
+ - Document all breach incidents and remedial actions
+ - Implement measures to prevent future breaches
+
+
+
9. Third-Party Processors
+
We work with carefully selected third-party processors who help us provide our services. All processors:
+
+ - Are bound by data processing agreements
+ - Implement appropriate security measures
+ - Process data only as instructed by us
+ - Are regularly audited for compliance
+
+
+
10. Supervisory Authority
+
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately.
+
+
+
EU Representative
+
For EU residents, you can contact our EU representative at: DocuPulse EU Representative, [Address], [Email]
+
+
+
+
+
+
Last Updated: December 2024
+
+