Traitement des données à caractère personnel

Traitement des données à caractère personnel

Chez Connective, nous considérons qu’il est absolument prioritaire de faire savoir aux utilisateurs comment leurs données personnelles sont utilisées et traitées lorsqu’ils utilisent nos services.
C’est pourquoi nous fournissons un aperçu complet de nos services et de leur flux de données.

Traitement des données à caractère personnel dans les services de connexion

Vous trouverez ci-dessous un aperçu de la manière dont les données à caractère personnel sont traitées et stockées lors de l’utilisation des services de connexion.
Selon les services de connexion utilisés, les données à caractère personnel traitées et la période de conservation peuvent varier.

ProcessData SubjectData TypeStorageRetention Period
Portal
API
WYSIWYS		Business user
End user		First name
Last name
Email
Avatar/ image
Date of birth
Phone number
Belgian Lawyer Identification
Belgian National Registry Number
Document Name		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
Portal
API
WYSIWYS		Business user
End user		Document name
Document/content
Personal Signing Certificate		File SystemUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Manual signature		Business user
End user		First name
Last name
Document name
Handwritten image		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Belgian Electronic ID		Business user
End user		First name
Last name
Document name
Personal Signing Certificate

Optional
Date of birth
Belgian National Registry number		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
SMS Code		Business user
End user		First name
Last name
Document name
Phone number		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
E-mail Code		Business user
End user		First name
Last name
Document name
E-mail		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
iDIN		Business user
End user		First name
Last name
Document name
BIN
Name
Initials
Address
Data of birth
E-mail

Optional
18 or older
Gender
Phone number		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Wacom Signing Pad		Business user
End user		First name
Last name
Document name
Biometric signature image		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Belgian Lawyer Card		Business user
End user		First name
Last name
Document name

Optional
Lawyers-ID		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Itsme		Business user
End user		First name
Last name
Document name
First name from signing certificate
Last name from signing certificate
Personal signing certificate

Optional
Date of birth		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
OpenIDConnect		Business user
End user		First name
Last name
Document name
Personal data coming from configured idP

Optional
Date of birth		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
WYSIWYS
Debit Card
Softkey
Hardkey
Password		Business user
End user		First name
Last name
Document name		DatabaseUntil package deletion
OR
Configuration of the Auto Deletion
OR
End of the contractual agreement
eSignatures LoggingBusiness user
End user		E-mail
First name
Last name
Package title
Initiator first name
Initiator last name		FileDeletion of the logs
OR
End of the contractual agreement
eSignatures Audit ProofsBusiness user
End user		Encrypted
Signature details
Signed PDF

Not Encrypted
Optional
Phone number (signed with SMS OTP)
E-mail (signed with e-mail OTP)
End user IP adress		FileUntil package deletion +30 days
OR
Configuration of the Auto Deletion
eSignatures Audit TrailBusiness User
End user		• Package information, including name and date of package, e-mail and IP-address of the initiator, package status, document names, etc.
• In case the document is refused: datetime, name, email, and IP address of the refuser.
• In case of approval: datetime, name and email of the approver;
• In case of reassignment approver: datetime, name, email, and IP-address of the one who reassigned and the one who is reassigned.
• Viewers: datetime, name, email, and IP address of the viewers.
• In case of reassignment signer: datetime, name, email, and IP-address of the one who reassigned and the one who is reassigned.
• In case of signing: datetime, name, email, and IP-address of the signer
• In case of receivers: datetime, name and email of the receiver.
Database (however a separate file can be requested including the audit trail)Anonymization upon package deletion
OR
Anonymization upon Auto Deletion

ProcessData SubjectData TypeStorageRetention Period
Manual SignatureBusiness user
End user		First name
Last name
Handwritten image		DatabaseUntil session time-out, standard setting 30 minutes
Belgian Electronic IDBusiness user
End user		First name from signing certificate
Last name from signing certificate
Personal Signing Certificate		DatabaseUntil session time-out, standard setting 30 minutes
SMS CodeBusiness user
End user		First name
Last name
Telephone number		DatabaseUntil session time-out, standard setting 30 minutes
Mail CodeBusiness user
End user		First name
Last name
E-mail		DatabaseUntil session time-out, standard setting 30 minutes
iDINBusiness user
End user		First name
Last name
DatabaseUntil session time-out, standard setting 30 minutes
Wacom Signing Pad
Business user
End user		First name
Last name
Biometric signature image		DatabaseUntil session time-out, standard setting 30 minutes
Belgian Lawyer Card
Business user
End user		First name from signing certificate
Last name from signing certificate
Personal Signing Certificate		DatabaseUntil session time-out, standard setting 30 minutes
Itsme
Business user
End user		First name from signing certificate
Last name from signing certificate
Personal Signing Certificate		DatabaseUntil session time-out, standard setting 30 minutes
OpenIDConnect
Business user
End user		First name
Last name
Personal data coming from configured idP		DatabaseUntil session time-out, standard setting 30 minutes
Debit Card
Softkey
Hardkey
Password		Business user
End user		First name
Last name		DatabaseUntil session time-out, standard setting 30 minutes

ProcessData SubjectData TypeStorageRetention Period
Manual SignatureBusiness user
End user		First name
Last name
Handwritten image		MemoryEnd of the session
Belgian Electronic IDBusiness user
End user		First name
Last name
Document name
Signed document with Personal Signing Certificate

Optional
Date of birth
Social security number		MemoryEnd of the session
SMS CodeBusiness user
End user		First name
Last name
Telephone number
Signed document		MemoryEnd of the session
Mail CodeBusiness user
End user		First name
Last name
Document name
E-mail
Signed document		MemoryEnd of the session
iDINBusiness user
End user		First name
Last name
Document name
E-mail
Signed document		MemoryEnd of the session
Wacom Signing Pad
Business user
End user		First name
Last name
Document
Biometric signature image
Signed document		MemoryEnd of the session
Belgian Lawyer Card
Business user
End user		First name
Last name
Document name
Signed document with Personal Signing Certificate

Optional
Laywers-ID		MemoryEnd of the session
Itsme
Business user
End user		First name
Last name
Document name
Signed document with Personal Signing Certificate

Optional
Date of birth		MemoryEnd of the session
OpenIDConnect
Business user
End user		First name
Last name
Document
Signed document
Personal data coming from configured idP		MemoryEnd of the session
Debit Card
Softkey
Hardkey
Password		Business user
End user		First name
Last name
Document
Signed document		MemoryEnd of the session

ProcessData SubjectData TypeStorageRetention Period
Personal InfoEnd usereID card number
First name
Last name
Two given first names
Letter third given name
Nationality
Registered address
Birth location
Gender
Noble condition
Document type
Special status
Issuing Municipality		IDS databaseDeletion of the session
OR
Time configured for auto deletion (15 min. by default)
Include national numberEnd userBelgian National Registration numberIDS databaseDeletion of the session
OR
Time configured for auto deletion (15 min. by default)
PhotoEnd userIdentity card pictureIDS databaseDeletion of the session
OR
Time configured for auto deletion (15 min. by default)

Lors de l’utilisation de Connective Smart Documents, l’utilisateur peut soumettre des données personnelles.

Le Client informe Connective des Données Personnelles qu’il va traiter via la Convention de Traitement des Données signée entre Connective et le Client.

La période de conservation des documents qui sont générés avec le service ConnectR de Connective est fixée par défaut à 7 jours. Le XML d’entrée est supprimé immédiatement après sa génération.

ProcessData SubjectData TypeStorageRetention Period
Smart Document AccountBusiness userFirst name
Last name
E-mail		DatabaseEnd of contractual agreement
OR
Deletion of the account

Contrôle des clients

ProcessData SubjectData TypeStorageRetention Period
SupportBusiness userFirst name
Last name
E-mail		Client Control databaseEnd of contractual agreement

Business nameAddressCountry of processingServiceProcessingCertificationsData transfer based on
Microsoft AzureIR
NL		Hosting services & core systemsEnd user personal data as defined in the DPAISO 27001
ISO 27018
Privacy Shield		DPA
SCC_EU
EEA – Privacy Shield
Salesforce
salesforce.com
EMEA Limited		Floor 26
Salesforce tower
110 bishopsgate EC2N 4AY London
UK		UKSupport & incident managementCustomer contacts are registered in Salesforce CRM system with name, e-mail and phone number.ISO 27001
ISO 27018
Privacy Shield		DPA
SCC_EU
EEA & UK
Atlassian Pty Ltd c/o Atlassian Inc.
(Jira & Confluence)		350 Bush Street
San Francisco
CA 94104		USSupport & incident managementCustomer contacts are registered in Salesforce CRM system with name, e-mail and phone number.ISO 27001
ISO 27018
Privacy Shield		DPA
SCC_EU
EEA – Privacy Shield
CM TelecomKonijnenberg 30
4825 BD
Breda		NLSMS Gateway
Sending SMS messages		End user
phone number		ISO 27001
ISO 9001		DPA
TripolisJoop Geesinkweg 125C
1114 AB
Amsterdam		NLE-mail gateway
Mass mailing service provider		End user
e-mail		ISO 27001
ISO 9001		DPA

POUR DES QUESTIONS CONCERNANT LA PROTECTION DES DONNÉES

veuillez contacter notre Data Protection Office.

POUR DES QUESTIONS CONCERNANT TSP

Contacter Trust Service Board