GDPR Compliance
Last updated: February 15, 2024
DigiNotaire is fully GDPR compliant
We adhere to all General Data Protection Regulation (GDPR) requirements to protect your data and privacy.
Data Protection Principles
We adhere to the following GDPR principles when processing personal data:
Lawfulness, Fairness & Transparency
We process data lawfully, fairly, and transparently.
Purpose Limitation
We collect data for specified, explicit, and legitimate purposes.
Data Minimization
We only collect data that is adequate, relevant, and limited to what's necessary.
Accuracy
We keep personal data accurate and up to date.
Storage Limitation
We retain data only as long as necessary.
Integrity & Confidentiality
We process data securely using appropriate technical measures.
As a notary using our platform, you are responsible for ensuring any client data you process through DigiNotaire complies with GDPR requirements.
Your Rights Under GDPR
The GDPR provides you with specific rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We provide this information in a structured, commonly used format.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
You have the right to request deletion of your personal data when there's no compelling reason for its continued processing.
Right to Restriction of Processing
You have the right to request restriction of processing your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data in certain circumstances, including direct marketing.
Data Processing Details
Types of Data We Process
We process the following categories of personal data:
- Account Data: Name, email, professional details
- Client Data: Information about your clients that you input into our system
- Document Data: Content of documents created through our platform
- Technical Data: IP addresses, browser types, device information
- Usage Data: Information about how you use our services
Lawful Basis for Processing
We process personal data based on the following lawful grounds:
Contractual Necessity
Processing necessary for our service agreement.
Legal Obligation
Processing required by law (e.g., tax records).
Consent
Processing based on your explicit consent.
Legitimate Interests
Processing for our legitimate business interests.
Data Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk:
Encryption
Data encrypted in transit (TLS 1.2+) and at rest (AES-256).
Access Control
Strict role-based access controls and authentication.
Secure Hosting
EU-based data centers with ISO 27001 certification.
Backups
Regular encrypted backups with disaster recovery.
Audits
Regular security audits and penetration testing.
Training
Staff GDPR and security awareness training.
Contact Our Data Protection Officer
For any questions regarding our GDPR compliance or to exercise your data protection rights, please contact our Data Protection Officer (DPO):
Phone
+221 33 876 5432Postal Address
Data Protection Officer
DigiNotaire
123 Data Protection Street
Dakar, Senegal
Availability
Monday-Friday: 9:00 AM - 5:00 PM GMT
Response time: Within 72 hours
Lodging a Complaint
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.