Traitement des données à caractère personnel
Chez Connective, nous considérons qu’il est absolument prioritaire de faire savoir aux utilisateurs comment leurs données personnelles sont utilisées et traitées lorsqu’ils utilisent nos services. C’est pourquoi nous fournissons un aperçu complet de nos services et de leur flux de données.
Traitement des données à caractère personnel dans les services de connexion
Vous trouverez ci-dessous un aperçu de la manière dont les données à caractère personnel sont traitées et stockées lors de l’utilisation des services de connexion. Selon les services de connexion utilisés, les données à caractère personnel traitées et la période de conservation peuvent varier.
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Portal API WYSIWYS | Business user End user | First name Last name Avatar/ image Date of birth Phone number Belgian Lawyer Identification Belgian National Registry Number Document Name | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
Portal API WYSIWYS | Business user End user | Document name Document/content Personal Signing Certificate | File System | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Manual signature | Business user End user | First name Last name Document name Handwritten image | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Belgian Electronic ID | Business user End user | First name Last name Document name Personal Signing Certificate Optional Date of birth Belgian National Registry number | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS SMS Code | Business user End user | First name Last name Document name Phone number | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS E-mail Code | Business user End user | First name Last name Document name | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS iDIN | Business user End user | First name Last name Document name BIN Name Initials Address Data of birth Optional 18 or older Gender Phone number | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Wacom Signing Pad | Business user End user | First name Last name Document name Biometric signature image | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Belgian Lawyer Card | Business user End user | First name Last name Document name Optional Lawyers-ID | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Itsme | Business user End user | First name Last name Document name First name from signing certificate Last name from signing certificate Personal signing certificate Optional Date of birth | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS OpenIDConnect | Business user End user | First name Last name Document name Personal data coming from configured idP Optional Date of birth | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
WYSIWYS Debit Card Softkey Hardkey Password | Business user End user | First name Last name Document name | Database | Until package deletion OR Configuration of the Auto Deletion OR End of the contractual agreement |
eSignatures Logging | Business user End user | E-mail First name Last name Package title Initiator first name Initiator last name | File | Deletion of the logs OR End of the contractual agreement |
eSignatures Audit Proofs | Business user End user | Encrypted Signature details Signed PDF Not Encrypted Optional Phone number (signed with SMS OTP) E-mail (signed with e-mail OTP) End user IP adress | File | Until package deletion +30 days OR Configuration of the Auto Deletion |
eSignatures Audit Trail | Business User End user | • Package information, including name and date of package, e-mail and IP-address of the initiator, package status, document names, etc. • In case the document is refused: datetime, name, email, and IP address of the refuser. • In case of approval: datetime, name and email of the approver; • In case of reassignment approver: datetime, name, email, and IP-address of the one who reassigned and the one who is reassigned. • Viewers: datetime, name, email, and IP address of the viewers. • In case of reassignment signer: datetime, name, email, and IP-address of the one who reassigned and the one who is reassigned. • In case of signing: datetime, name, email, and IP-address of the signer • In case of receivers: datetime, name and email of the receiver. | Database (however a separate file can be requested including the audit trail) | Anonymization upon package deletion OR Anonymization upon Auto Deletion |
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Manual Signature | Business user End user | First name Last name Handwritten image | Database | Until session time-out, standard setting 30 minutes |
Belgian Electronic ID | Business user End user | First name from signing certificate Last name from signing certificate Personal Signing Certificate | Database | Until session time-out, standard setting 30 minutes |
SMS Code | Business user End user | First name Last name Telephone number | Database | Until session time-out, standard setting 30 minutes |
Mail Code | Business user End user | First name Last name | Database | Until session time-out, standard setting 30 minutes |
iDIN | Business user End user | First name Last name | Database | Until session time-out, standard setting 30 minutes |
Wacom Signing Pad | Business user End user | First name Last name Biometric signature image | Database | Until session time-out, standard setting 30 minutes |
Belgian Lawyer Card | Business user End user | First name from signing certificate Last name from signing certificate Personal Signing Certificate | Database | Until session time-out, standard setting 30 minutes |
Itsme | Business user End user | First name from signing certificate Last name from signing certificate Personal Signing Certificate | Database | Until session time-out, standard setting 30 minutes |
OpenIDConnect | Business user End user | First name Last name Personal data coming from configured idP | Database | Until session time-out, standard setting 30 minutes |
Debit Card Softkey Hardkey Password | Business user End user | First name Last name | Database | Until session time-out, standard setting 30 minutes |
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Manual Signature | Business user End user | First name Last name Handwritten image | Memory | End of the session |
Belgian Electronic ID | Business user End user | First name Last name Document name Signed document with Personal Signing Certificate Optional Date of birth Social security number | Memory | End of the session |
SMS Code | Business user End user | First name Last name Telephone number Signed document | Memory | End of the session |
Mail Code | Business user End user | First name Last name Document name Signed document | Memory | End of the session |
iDIN | Business user End user | First name Last name Document name Signed document | Memory | End of the session |
Wacom Signing Pad | Business user End user | First name Last name Document Biometric signature image Signed document | Memory | End of the session |
Belgian Lawyer Card | Business user End user | First name Last name Document name Signed document with Personal Signing Certificate Optional Laywers-ID | Memory | End of the session |
Itsme | Business user End user | First name Last name Document name Signed document with Personal Signing Certificate Optional Date of birth | Memory | End of the session |
OpenIDConnect | Business user End user | First name Last name Document Signed document Personal data coming from configured idP | Memory | End of the session |
Debit Card Softkey Hardkey Password | Business user End user | First name Last name Document Signed document | Memory | End of the session |
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Personal Info | End user | eID card number First name Last name Two given first names Letter third given name Nationality Registered address Birth location Gender Noble condition Document type Special status Issuing Municipality | IDS database | Deletion of the session OR Time configured for auto deletion (15 min. by default) |
Include national number | End user | Belgian National Registration number | IDS database | Deletion of the session OR Time configured for auto deletion (15 min. by default) |
Photo | End user | Identity card picture | IDS database | Deletion of the session OR Time configured for auto deletion (15 min. by default) |
Lors de l’utilisation de Connective Smart Documents, l’utilisateur peut soumettre des données personnelles. Le Client informe Connective des Données Personnelles qu’il va traiter via la Convention de Traitement des Données signée entre Connective et le Client. La période de conservation des documents qui sont générés avec le service ConnectR de Connective est fixée par défaut à 7 jours. Le XML d’entrée est supprimé immédiatement après sa génération.
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Smart Document Account | Business user | First name Last name | Database | End of contractual agreement OR Deletion of the account |
Contrôle des clients
Process | Data Subject | Data Type | Storage | Retention Period |
---|---|---|---|---|
Support | Business user | First name Last name | Client Control database | End of contractual agreement |
Business name | Address | Country of processing | Service | Processing | Certifications | Data transfer based on |
---|---|---|---|---|---|---|
Microsoft Azure | IR NL | Hosting services & core systems | End user personal data as defined in the DPA | ISO 27001 ISO 27018 Privacy Shield | DPA SCC_EU EEA – Privacy Shield |
|
Salesforce salesforce.com EMEA Limited | Floor 26 Salesforce tower 110 bishopsgate EC2N 4AY London UK | UK | Support & incident management | Customer contacts are registered in Salesforce CRM system with name, e-mail and phone number. | ISO 27001 ISO 27018 Privacy Shield | DPA SCC_EU EEA & UK |
Atlassian Pty Ltd c/o Atlassian Inc. (Jira & Confluence) | 350 Bush Street San Francisco CA 94104 | US | Support & incident management | Customer contacts are registered in Salesforce CRM system with name, e-mail and phone number. | ISO 27001 ISO 27018 Privacy Shield | DPA SCC_EU EEA – Privacy Shield |
CM Telecom | Konijnenberg 30 4825 BD Breda | NL | SMS Gateway Sending SMS messages | End user phone number | ISO 27001 ISO 9001 | DPA |
Tripolis | Joop Geesinkweg 125C 1114 AB Amsterdam | NL | E-mail gateway Mass mailing service provider | End user | ISO 27001 ISO 9001 | DPA |