Data controller
This policy informs you about how Data Legal Drive collects and processes your data, as well as your rights under applicable data protection laws.
Data Legal Drive (hereinafter “DLD” or “we”) is part of the EQS Group, headquartered in Munich, Germany. As a member of this organization, we place great importance on personal data protection and respecting your privacy.
Which data do we collect?
By using our website, you may be required to provide us with Personal Data. Some personal data is collected from you or through your use of our services:
Identification data
such as first name and last name of the person concerned
Data related to business activities
such as company name, work email, and job title
Technical data
such as IP address, browser type and version, operating system used
Data from chat
such as comments, requests, questions, and information provided to our customer service via chat
Login data
such as functions used, web pages visited, settings selected, timestamps of visits, and search terms
Some of these Personal Data are collected via cookies placed on our Site. To learn more about how we manage these cookies, you can read our Cookies Policy at any time.
When collecting your Personal Data, you may be informed that some of this information is mandatory to provide the service you have requested. If the mandatory information is not filled in, the request may not be fulfilled.
Why do we collect your Personal Data?
We collect and process Personal Data of our Users only for the following purposes:
Managing Inquiries
- Process your requests submitted through contact forms.
- Respond to your platform trial requests.
- Organize your requests for demonstrations of our services.
- Process your subscription to our platform.
- Manage your requests for access to resources offered (guides, infographics, newsletters, etc.).
Support and Assistance
- Provide technical support and perform maintenance to ensure the proper functioning and security of our site.
- Respond to your questions and comments.
Service Improvement
- Optimize functionalities and enhance the quality of your user experience on our site.
- Offer content tailored to your preferences and interests.
- Evaluate the quality of the service provided.
Commercial Prospecting
- Conduct commercial prospecting activities.
- Measure the performance of our commercial operations.
Event Management
- Manage your registrations for webinars and other proposed events.
- Invite you to events organized by us, alone or in partnership.
Recruitment
- Manage applications for recruitment purposes submitted through our site.
On which lawful basis do we collect your Personal Data?
We collect and process your Personal Data following the Regulations and only on the following lawful basis:
- Where it is necessary for the performance of a contract we have with you;
- Where needed to comply with our legal obligations;
- Where you have given your express consent to the processing of your Personal Data;
- Where it is necessary to protect our legitimate interests.
Read more
e.g.: to detect, investigate and prevent technical, fraud, and security problems, to protect our rights, property, or the safety of our Users and employees, or concerning commercial prospecting for businesses.
What rights do I have regarding my data?
We ensure that you can exercise all the rights given to you by the Regulation. You can thus freely:
- Have access to your Personal Data
- Rectify inaccurate Personal Data
- Obtain the erasure of your Personal Data
- Restrict the processing of your Personal Data
- Withdraw your consent to the processing of your Personal Data
- Object to the processing of your Personal Data
- Obtain a copy of your Personal Data (right to data portability)
How to exercise your rights?
To exercise these rights, you can contact us at rgpd@datalegaldrive.com
We may require proof of identity to protect your privacy as well as your safety.
Who are the recipients of your Personal Data?
As a member of the EQS Group, your data may be processed by Group entities when necessary to ensure the relevant service. It is also shared with service providers we collaborate with to guarantee the provision of the offered service after ensuring they comply with personal data security and compliance obligations.
Read more
| Who is it? | Why? |
| The host of our Site and our Platform (located in France) | to perform maintenance and database hosting services. |
| The editor of a third-party application available on our Site or Platform | to access and use this application. |
| Our service providers, retailers, representatives, processors, and partners | to provide the services requested, carry out a transaction or respond to your requests for advice and information, provide the IT services required for the proper functioning of our site and our Platform, and conduct commercial statistics and direct prospecting. |
| Authorities | in the context of the investigation of the perpetrators of offences. |
How long are my data stored?
Your Personal Data is only stored for the period strictly necessary to achieve the purposes specified in this Policy, following the Regulations and the applicable laws. After this period, your Personal Data will be deleted.
Read more
| Purpose of processing | Lawful basis | Retention period in active database | Retention period in archive | Useful information |
| Candidate application processing | Legitimate interest | 19 months from the last contact | N/A | Data of an unsuccessful candidate is kept for a maximum of 19 months in an active database from the last contact |
| Carrying out satisfaction surveys and customer surveys | Legitimate interest | 3 years from the last customer contact or 2 years from the date of the closing of the User account by the customer, if applicable | N/A | |
| Tracking and traceability of Users’ browsing | Consent | Until withdrawal of consent | N/A | Users may at any time withdraw their consent for this processing |
| Evaluation of the relevance of the content offered and the operations implemented | Legitimate interest | 3 years from the last contact | N/A | |
| Sending invitations to events, competitions, sponsorship, promotions, and surveys | Consent | 3 years from last contact unless consent is withdrawn | N/A | Users may withdraw their consent for this processing at any time |
| Commercial prospecting | Consent / legitimate interest | Commercial prospecting Consent / legitimate interest Until withdrawal of consent / for 3 years from the last contact (example: a click on a link in an e-mail) | ||
| Management of Users’ accounts on the Platform and subscription requests
| Contract | Duration of the contractual relationship
| N/A | |
| To process User requests for information and comments
| Legitimate interest
| 3 years from last contact
| N/A | |
| Providing technical support and maintenance | Legitimate interest / contract | 3 years from last contact if test access, duration of contractual relationship if customer access | N/A | |
| Management of billing of subscriptions to the Platform
| Contract
| Duration of the contractual relationship
| 10 years | Billing data must be archived for 10 years according to article L.123-22 of the Commercial Code
|
| Sending information on updates and news by e-mail or sms
| Contract
| Duration of the contractual relationship for sending to customers
| N/A | |
| Storage of customer file | Contract | Duration of contractual relationship
| 5 years from the end of the contractual relationship (proof)
| |
| Organisation and follow-up of training courses
| Law
| Duration of training | 5 years |
Where do we transfer your Personal Data?
DLD mainly chooses service providers who host their data in the European Union. However, where necessary, we may transfer your Personal Data to service providers operating outside the European Union.
If these service providers are in a country that is not considered to offer adequate protection by the European Commission, we implement the Standard Contractual Clauses approved by the European Commission and we also include a Data Processing Agreement (“DPA”) as part of our contractual relationship with them.
Do you have a question or need more information?
If you have any questions about this Policy, you can contact us by sending an e-mail to the following address: rgpd@datalegaldrive.com