464 lines
22 KiB
HTML
464 lines
22 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>GDPR Compliance - DocuPulse</title>
|
|
<meta name="description" content="Learn about DocuPulse's GDPR compliance measures and how we protect your data rights under European data protection regulations.">
|
|
<link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
|
|
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
|
|
<link rel="stylesheet" href="{{ url_for('static', filename='css/colors.css') }}?v={{ 'css/colors.css'|asset_version }}">
|
|
<style>
|
|
.legal-section {
|
|
padding: 80px 0;
|
|
}
|
|
|
|
.legal-content {
|
|
background: var(--white);
|
|
border-radius: 20px;
|
|
padding: 40px;
|
|
box-shadow: 0 10px 25px var(--shadow-color);
|
|
margin-bottom: 30px;
|
|
}
|
|
|
|
.legal-header {
|
|
background: linear-gradient(135deg, var(--primary-color) 0%, var(--secondary-color) 100%);
|
|
color: white;
|
|
padding: 80px 0;
|
|
position: relative;
|
|
overflow: hidden;
|
|
}
|
|
|
|
.legal-header::before {
|
|
content: '';
|
|
position: absolute;
|
|
top: 0;
|
|
left: 0;
|
|
right: 0;
|
|
bottom: 0;
|
|
background: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><defs><pattern id="grain" width="100" height="100" patternUnits="userSpaceOnUse"><circle cx="50" cy="50" r="1" fill="white" opacity="0.1"/></pattern></defs><rect width="100" height="100" fill="url(%23grain)"/></svg>');
|
|
opacity: 0.3;
|
|
}
|
|
|
|
.legal-header .container {
|
|
position: relative;
|
|
z-index: 1;
|
|
}
|
|
|
|
.section-title {
|
|
color: var(--primary-color);
|
|
border-bottom: 3px solid var(--primary-color);
|
|
padding-bottom: 10px;
|
|
margin-bottom: 25px;
|
|
}
|
|
|
|
.info-box {
|
|
background: rgba(var(--primary-color-rgb), 0.05);
|
|
border-left: 4px solid var(--primary-color);
|
|
padding: 20px;
|
|
border-radius: 8px;
|
|
margin: 20px 0;
|
|
}
|
|
|
|
.info-box h5 {
|
|
color: var(--primary-color);
|
|
margin-bottom: 10px;
|
|
}
|
|
|
|
.rights-grid {
|
|
display: grid;
|
|
grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
|
|
gap: 20px;
|
|
margin: 30px 0;
|
|
}
|
|
|
|
.right-card {
|
|
background: var(--white);
|
|
border: 2px solid var(--border-color);
|
|
border-radius: 15px;
|
|
padding: 25px;
|
|
transition: all 0.3s ease;
|
|
}
|
|
|
|
.right-card:hover {
|
|
border-color: var(--primary-color);
|
|
transform: translateY(-5px);
|
|
box-shadow: 0 10px 25px var(--shadow-color);
|
|
}
|
|
|
|
.right-card h4 {
|
|
color: var(--primary-color);
|
|
margin-bottom: 15px;
|
|
}
|
|
|
|
.right-icon {
|
|
width: 50px;
|
|
height: 50px;
|
|
background: linear-gradient(135deg, var(--primary-color) 0%, var(--secondary-color) 100%);
|
|
border-radius: 12px;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
color: white;
|
|
font-size: 1.5rem;
|
|
margin-bottom: 15px;
|
|
}
|
|
|
|
.compliance-table {
|
|
background: var(--white);
|
|
border-radius: 10px;
|
|
overflow: hidden;
|
|
box-shadow: 0 5px 15px var(--shadow-color);
|
|
margin: 20px 0;
|
|
}
|
|
|
|
.compliance-table th {
|
|
background: linear-gradient(135deg, var(--primary-color) 0%, var(--secondary-color) 100%);
|
|
color: white;
|
|
border: none;
|
|
padding: 15px;
|
|
}
|
|
|
|
.compliance-table td {
|
|
padding: 15px;
|
|
border-bottom: 1px solid var(--border-color);
|
|
}
|
|
|
|
.compliance-table tr:last-child td {
|
|
border-bottom: none;
|
|
}
|
|
|
|
.contact-info {
|
|
background: linear-gradient(135deg, var(--primary-color) 0%, var(--secondary-color) 100%);
|
|
color: white;
|
|
padding: 40px;
|
|
border-radius: 20px;
|
|
text-align: center;
|
|
}
|
|
|
|
.contact-info h3 {
|
|
margin-bottom: 20px;
|
|
}
|
|
|
|
.contact-info a {
|
|
color: white;
|
|
text-decoration: none;
|
|
}
|
|
|
|
.contact-info a:hover {
|
|
text-decoration: underline;
|
|
}
|
|
|
|
.last-updated {
|
|
background: var(--light-bg);
|
|
padding: 15px;
|
|
border-radius: 10px;
|
|
text-align: center;
|
|
margin-top: 30px;
|
|
}
|
|
|
|
.status-badge {
|
|
display: inline-block;
|
|
padding: 8px 16px;
|
|
border-radius: 20px;
|
|
font-size: 0.9rem;
|
|
font-weight: 600;
|
|
margin: 5px;
|
|
}
|
|
|
|
.status-compliant {
|
|
background: rgba(40, 167, 69, 0.1);
|
|
color: #28a745;
|
|
border: 1px solid #28a745;
|
|
}
|
|
|
|
.status-pending {
|
|
background: rgba(255, 193, 7, 0.1);
|
|
color: #ffc107;
|
|
border: 1px solid #ffc107;
|
|
}
|
|
|
|
@media (max-width: 768px) {
|
|
.legal-content {
|
|
padding: 25px;
|
|
}
|
|
|
|
.rights-grid {
|
|
grid-template-columns: 1fr;
|
|
}
|
|
|
|
.compliance-table {
|
|
font-size: 0.9rem;
|
|
}
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
{% include 'components/header_nav.html' %}
|
|
|
|
<!-- Header Section -->
|
|
<section class="legal-header">
|
|
<div class="container">
|
|
<div class="text-center">
|
|
<h1 class="display-4 fw-bold mb-3">GDPR Compliance</h1>
|
|
<p class="lead opacity-75">Your data rights under European law</p>
|
|
<p class="opacity-75">Last updated: December 2024</p>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- GDPR Content -->
|
|
<section class="legal-section">
|
|
<div class="container">
|
|
<div class="row">
|
|
<div class="col-lg-8 mx-auto">
|
|
<div class="legal-content">
|
|
<h2 class="section-title">1. GDPR Overview</h2>
|
|
<p>The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organizations processing personal data of individuals in the European Union (EU) and European Economic Area (EEA). DocuPulse is committed to full compliance with GDPR requirements.</p>
|
|
|
|
<div class="info-box">
|
|
<h5><i class="fas fa-shield-alt me-2"></i>Our Commitment</h5>
|
|
<p class="mb-0">We are fully committed to protecting your privacy and ensuring compliance with GDPR. Our data processing activities are designed with privacy by design and default principles.</p>
|
|
</div>
|
|
|
|
<h2 class="section-title">2. Legal Basis for Processing</h2>
|
|
<p>Under GDPR, we process your personal data based on the following legal grounds:</p>
|
|
|
|
<div class="compliance-table">
|
|
<table class="table table-hover mb-0">
|
|
<thead>
|
|
<tr>
|
|
<th>Processing Purpose</th>
|
|
<th>Legal Basis</th>
|
|
<th>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Service Provision</td>
|
|
<td>Contract Performance</td>
|
|
<td>Processing necessary to provide our services</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Account Management</td>
|
|
<td>Contract Performance</td>
|
|
<td>Managing your account and billing</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Customer Support</td>
|
|
<td>Legitimate Interest</td>
|
|
<td>Providing support and improving service</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Security & Fraud Prevention</td>
|
|
<td>Legitimate Interest</td>
|
|
<td>Protecting our systems and users</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Marketing Communications</td>
|
|
<td>Consent</td>
|
|
<td>Only with your explicit consent</td>
|
|
</tr>
|
|
<tr>
|
|
<td>Legal Compliance</td>
|
|
<td>Legal Obligation</td>
|
|
<td>Complying with applicable laws</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
<h2 class="section-title">3. Your Data Subject Rights</h2>
|
|
<p>Under GDPR, you have the following rights regarding your personal data:</p>
|
|
|
|
<div class="rights-grid">
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-eye"></i>
|
|
</div>
|
|
<h4>Right of Access</h4>
|
|
<p>You have the right to request access to your personal data and information about how we process it.</p>
|
|
</div>
|
|
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-edit"></i>
|
|
</div>
|
|
<h4>Right to Rectification</h4>
|
|
<p>You can request correction of inaccurate or incomplete personal data we hold about you.</p>
|
|
</div>
|
|
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-trash"></i>
|
|
</div>
|
|
<h4>Right to Erasure</h4>
|
|
<p>You can request deletion of your personal data in certain circumstances (the "right to be forgotten").</p>
|
|
</div>
|
|
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-pause"></i>
|
|
</div>
|
|
<h4>Right to Restriction</h4>
|
|
<p>You can request that we limit how we process your personal data in certain situations.</p>
|
|
</div>
|
|
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-download"></i>
|
|
</div>
|
|
<h4>Right to Portability</h4>
|
|
<p>You can request a copy of your personal data in a structured, machine-readable format.</p>
|
|
</div>
|
|
|
|
<div class="right-card">
|
|
<div class="right-icon">
|
|
<i class="fas fa-ban"></i>
|
|
</div>
|
|
<h4>Right to Object</h4>
|
|
<p>You can object to processing of your personal data based on legitimate interests.</p>
|
|
</div>
|
|
</div>
|
|
|
|
<h2 class="section-title">4. How to Exercise Your Rights</h2>
|
|
<p>To exercise any of your GDPR rights, you can:</p>
|
|
<ul>
|
|
<li><strong>Use our self-service tools:</strong> Access and manage your data through your account settings</li>
|
|
<li><strong>Contact our Data Protection Officer:</strong> Email us at dpo@docupulse.com</li>
|
|
<li><strong>Submit a formal request:</strong> Use our data request form</li>
|
|
<li><strong>Contact us directly:</strong> Reach out to our support team</li>
|
|
</ul>
|
|
|
|
<div class="info-box">
|
|
<h5><i class="fas fa-clock me-2"></i>Response Time</h5>
|
|
<p class="mb-0">We will respond to your requests within 30 days. In complex cases, we may extend this period by up to 60 days, but we will notify you of any delay.</p>
|
|
</div>
|
|
|
|
<h2 class="section-title">5. Data Processing Details</h2>
|
|
<h4>5.1 Categories of Personal Data</h4>
|
|
<p>We process the following categories of personal data:</p>
|
|
<ul>
|
|
<li><strong>Identity Data:</strong> Name, email address, contact information</li>
|
|
<li><strong>Account Data:</strong> Username, password, profile information</li>
|
|
<li><strong>Usage Data:</strong> How you interact with our services</li>
|
|
<li><strong>Technical Data:</strong> IP address, browser type, device information</li>
|
|
<li><strong>Content Data:</strong> Documents and files you upload</li>
|
|
<li><strong>Communication Data:</strong> Messages and support requests</li>
|
|
</ul>
|
|
|
|
<h4>5.2 Data Retention Periods</h4>
|
|
<p>We retain your personal data for the following periods:</p>
|
|
<ul>
|
|
<li><strong>Account Data:</strong> Until account deletion or 2 years of inactivity</li>
|
|
<li><strong>Usage Data:</strong> 24 months for analytics purposes</li>
|
|
<li><strong>Support Communications:</strong> 3 years from last contact</li>
|
|
<li><strong>Billing Data:</strong> 7 years for tax and accounting purposes</li>
|
|
<li><strong>Security Logs:</strong> 12 months for security monitoring</li>
|
|
</ul>
|
|
|
|
<h2 class="section-title">6. International Data Transfers</h2>
|
|
<p>Your personal data may be transferred to and processed in countries outside the EU/EEA. We ensure appropriate safeguards are in place:</p>
|
|
<ul>
|
|
<li><strong>Standard Contractual Clauses:</strong> We use EU-approved SCCs for transfers</li>
|
|
<li><strong>Adequacy Decisions:</strong> We transfer to countries with adequate protection</li>
|
|
<li><strong>Certification Schemes:</strong> We rely on approved certification mechanisms</li>
|
|
<li><strong>Binding Corporate Rules:</strong> Where applicable, we use BCRs for intra-group transfers</li>
|
|
</ul>
|
|
|
|
<h2 class="section-title">7. Data Protection Measures</h2>
|
|
<p>We implement comprehensive technical and organizational measures to protect your data:</p>
|
|
|
|
<div class="compliance-table">
|
|
<table class="table table-hover mb-0">
|
|
<thead>
|
|
<tr>
|
|
<th>Measure</th>
|
|
<th>Implementation</th>
|
|
<th>Status</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td>Encryption</td>
|
|
<td>AES-256 encryption at rest and in transit</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Access Controls</td>
|
|
<td>Role-based access and multi-factor authentication</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Data Minimization</td>
|
|
<td>Only collect data necessary for service provision</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Privacy by Design</td>
|
|
<td>Privacy considerations built into all systems</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Regular Audits</td>
|
|
<td>Annual privacy and security assessments</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
<tr>
|
|
<td>Staff Training</td>
|
|
<td>Regular GDPR and privacy training</td>
|
|
<td><span class="status-badge status-compliant">Compliant</span></td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
<h2 class="section-title">8. Data Breach Procedures</h2>
|
|
<p>In the unlikely event of a data breach, we have established procedures to:</p>
|
|
<ul>
|
|
<li>Detect and assess the breach within 72 hours</li>
|
|
<li>Notify the relevant supervisory authority</li>
|
|
<li>Inform affected individuals when required</li>
|
|
<li>Document all breach incidents and remedial actions</li>
|
|
<li>Implement measures to prevent future breaches</li>
|
|
</ul>
|
|
|
|
<h2 class="section-title">9. Third-Party Processors</h2>
|
|
<p>We work with carefully selected third-party processors who help us provide our services. All processors:</p>
|
|
<ul>
|
|
<li>Are bound by data processing agreements</li>
|
|
<li>Implement appropriate security measures</li>
|
|
<li>Process data only as instructed by us</li>
|
|
<li>Are regularly audited for compliance</li>
|
|
</ul>
|
|
|
|
<h2 class="section-title">10. Supervisory Authority</h2>
|
|
<p>You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns adequately.</p>
|
|
|
|
<div class="info-box">
|
|
<h5><i class="fas fa-info-circle me-2"></i>EU Representative</h5>
|
|
<p class="mb-0">For EU residents, you can contact our EU representative at: DocuPulse EU Representative, [Address], [Email]</p>
|
|
</div>
|
|
|
|
<div class="contact-info">
|
|
<h3><i class="fas fa-user-shield me-2"></i>Data Protection Officer</h3>
|
|
<p>For any GDPR-related questions or to exercise your rights, contact our Data Protection Officer:</p>
|
|
<p><strong>Email:</strong> <a href="mailto:dpo@docupulse.com">dpo@docupulse.com</a></p>
|
|
<p><strong>Address:</strong> DocuPulse Inc., 123 Business Ave, Suite 100, City, State 12345</p>
|
|
<p><strong>Phone:</strong> <a href="tel:+1-555-123-4567">+1 (555) 123-4567</a></p>
|
|
</div>
|
|
|
|
<div class="last-updated">
|
|
<p class="mb-0"><strong>Last Updated:</strong> December 2024</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
{% include 'components/footer_nav.html' %}
|
|
|
|
<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
|
|
</body>
|
|
</html> |