Hyland enters into agreement for the acquisition of Docdil. Learn more

Data Privacy at Docdil

In May 2018, Docdil appointed a Data Protection Officer. This person is based in Docdil’s Paris office and works closely with the company’s security and legal teams to ensure Docdil is in compliance with data privacy regulations and laws, such as GDPR, CCPA and others.

You can also discover how using the Docdil Platform can help you ensure a GDPR compliance in a timely manner.

Registry of Processing Activities

As required by GDPR, Docdil has created a registry of processing activities that indicates for each process: the actors, the business goals that justify personal data being stored, the security measures to guarantee personal data security and integrity, etc.

More specifically, we list all processes linked to:

  • Prospects and users subscribing for content from our website and using a trial account in Docdil Studio
  • Customers registered in Docdil Online Services and our client database
  • Customers based on a Cloud subscription
  • Docdil internal employees

This is all made available to authorities upon request.

Request Tracking

All the individual right requests are tracked in JIRA and linked to our internal GDPR platform. Individuals making a request will receive an email to acknowledge receipt of their request (within 48 hours) and a second email to confirm the request has been completed (within 30 days)

Personal Data Breaches

Personal data breaches are handled by the Docdil Security team, as part of the Docdil Security processes that are in place:

Processes Image

Registry of Subcontractors

Docdil maintains a list of all its subcontractors. In addition to the security questionnaire each subcontractor completes, Docdil requests a Data Protection Addendum (also called DPA). It is an agreement between Docdil and The subcontractor that states that the subcontractor is compliant with GDPR requirements.

Internal Training

A Docdil GDPR awareness course is mandatory for all the Docdil employees.

Contact

[email protected] to contact the Docdil Data Protection Officer.

[email protected] to raise an issue related to data privacy or to exercise individual rights:

  • Right of access
  • Right of data portability
  • Right to restriction of processing
  • Right to rectification
  • Right to object