Log inRequest a demo
Log inRequest a demo

Privacy policy

Last updated: 09 December 2024

Thank you for your interest in DASHDOC and its services. This document sets out our policy regarding the collection, use and disclosure of your personal data when you use our website “ dashdoc.com ” (hereinafter the “Site”), our mobile applications and our platform for managing and tracking road freight transport, intended for shippers, loading sites, delivery sites, carriers’ subcontractors, carriers and their drivers (hereinafter the “Service”).

The terms “we” and “DASHDOC” refer to DASHDOC SAS, a simplified joint-stock company registered in the Trade and Companies Register under number 813 603 222 00049, whose registered office is located at 9 rue des colonnes 75002 Paris. When you use the Service, you consent to the collection, use and disclosure of information about you as described in this policy.

1. GENERAL INFORMATION

Your personal data is processed in accordance with French Law No. 78-17 of 6 January 1978 (the “French Data Protection Act”), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter the “GDPR”), and French and European laws governing the protection of personal data and privacy in electronic communications, in particular Directive 2002/58/EC on “Privacy and electronic communications”, as interpreted by the French National Commission on Informatics and Liberty (hereinafter the “CNIL”) and the Court of Justice of the European Union. If necessary, you can send any questions by email to legal@dashdoc.com or by post to the following address:

DASHDOC Personal Data Rights 5 avenue du général de Gaulle 94160 Saint-Mandé

2. ABOUT THE PERSONAL DATA WE COLLECT

Personal data means any information that identifies you directly (for example, your name) or indirectly (for example, your account identifier, IP address or cookie identifier).

About the personal data you provide to us

You may provide us with personal data, in particular in connection with:

  • Demo or contact requests you send to us through the Site or by email.

  • Logging into your account on the Site.

  • Messages exchanged with customer service through the chat available on the Site.

  • The provision of the Services.

In this context, we may process the following personal data as a data controller:

  • Last name, first name and contact details (email, telephone number).

  • Email and password to authenticate you when you log into your account.

  • Bank details to make a payment.

  • Data relating to the management of our relationship with you (requests for information / complaints, exchanges with customer service, etc.).

Some of this data is mandatory, and some is optional. Whether personal data is mandatory or optional is indicated at the time of collection. If you refuse to provide mandatory data, we will be unable to process your request.

You may also provide us with third parties’ personal data, in particular in connection with:

  • Invitations you send to your partners, customers, loading sites, delivery sites, carriers or shippers to give them access to our platform, thereby centralising information in transport files and speeding up transport management.

  • Use of the platform: if you are a carrier, you may send us your drivers’ personal data.

In this context, we may process the following personal data as a data processor:

  • Contact details of an individual contact person working for the carrier or shipper company (last name, first name, email, telephone number).

  • Drivers’ last names and first names, vehicle registration plate number, driving licence expiry date and number.

  • The driver’s geolocation associated with a timestamp at departure and arrival.

  • Signatures of drivers and recipients of the goods.

  • When telematics is enabled, geolocation data, mileage, timestamps, etc.

About the personal data we collect through automated means

We use automated technologies such as cookies to collect data from your computer or mobile device (telephone or tablet) when you visit our Site.

We use cookies on the Site to compile statistics, detect browsing problems, improve the quality of our interface and provide you with content (including advertisements) tailored to your interests. In this context, we may collect the following data:

  • Pages visited.

  • Your device and connection identifiers (IP address, MAC address), connection dates and times, information about the browser and operating system used, etc.

To perform a contract entered into with you or provide you with pre-contractual information We use your personal data to:

  • Respond to demo requests.

  • Provide our Services.

  • Handle invoicing and manage any unpaid amounts.

  • Handle any complaints.

To pursue our legitimate business interests in promoting our services, developing our business and defending our rights and interests

We use your personal data to:

  • Improve our products and services, for example by conducting satisfaction surveys.

  • If you are a customer, send you our newsletter and promotional messages about our Services, unless you object.

  • Combat fraud.

  • Ensure the security of our networks and information systems.

  • Conduct statistical studies.

  • Place cookies necessary for the Site to function properly.

  • Defend our interests in court.

To respect your choice when we request your consent for a specific processing activity

In some cases, your consent is required to process your personal data, for example:

  • If you are a prospect, to send you our newsletter and promotional messages about our Services.

  • To place cookies that require consent.

To comply with our legal obligations

We process your personal data to comply with our legal obligations, in particular to:

  • Respond to official requests from public authorities, judicial authorities or any third party authorised for this purpose, in accordance with a law, regulatory provision or court decision.

4. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?

We do not sell any of your personal data and share it only in accordance with the terms set out in this personal data protection policy.

DASHDOC discloses your personal data to the following recipients:

  • Our processors providing services on our behalf (for example, payment service providers, Site hosting, security and maintenance providers, etc.).

  • Public authorities, judicial authorities or any third party authorised for this purpose when such disclosure is required by a law, regulatory provision or court decision, or if it is necessary to protect and defend our rights.

5. IS YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

Where applicable, your personal data may be transferred to a country outside the European Union, for example if one of our providers is located in a country outside the European Economic Area. If the recipient country does not ensure a level of personal data protection equivalent to that of the European Union, we undertake, in the absence of an adequacy decision, to take all necessary measures to protect your personal data on the basis of appropriate safeguards (in particular standard contractual clauses), a copy of which can be obtained by emailing legal@dashdoc.com.

6. HOW LONG IS PERSONAL DATA RETAINED?

In general, your personal data will be retained only for the period necessary to achieve the purposes for which it was collected or to comply with legal or regulatory requirements. We will retain your personal data in our active database for the following periods:

  • For prospects :

three (3) years after collection or your last contact with us (e.g. clicking on a hyperlink), unless you withdraw your consent before the three (3) year period expires.

  • For customers :

until the end of our contractual relationship and, in any event, for three (3) years from the date of your last contact with us, except for your bank details, which will be retained only until the hosting service has been effectively paid for in full, and connection data, which is retained for between 6 months and 1 year.

  • For visitors to the Site :

cookies and trackers are retained for thirteen (13) months. Browsing data is retained for a maximum of twenty-five (25) months.

At the end of the periods stated above, some of your personal data will be archived in an intermediate archive database with restricted access, in accordance with our legal obligations and to defend our rights and interests in court, for the following periods:

  • Ten (10) years from the end of the financial year for data retained for accounting purposes and for business documents (invoices, business correspondence, etc.).

  • Thirteen (13) months after the debit date, or fifteen (15) months for deferred debit payment cards, for the bank card number and its expiry date, to handle any claims by payment card holders, pursuant to Article L. 133-24 of the French Monetary and Financial Code.

  • In the event of a pre-litigation dispute, until the dispute is settled amicably or, failing that, until the limitation period for the corresponding legal action has expired, it being specified that the general limitation period in civil and commercial matters is five (5) years.

  • Following litigation, until ordinary and extraordinary avenues of appeal against the decision are no longer available.

Transport data is retained on behalf of our customers for the time necessary to enable them to comply with their legal obligations.

At the end of this additional period, your remaining personal data will be permanently deleted from our systems or anonymised.

7. HOW DO WE PROTECT YOUR PERSONAL DATA?

We implement technical and organisational measures to protect your personal data, in particular against potential breaches that may result in the accidental or unlawful destruction, loss, alteration, unauthorised access to or disclosure of your personal data. These measures ensure an appropriate level of data security and take into account the state of the art, implementation costs in relation to the risks, and the nature of the data to be protected.

We also ensure that our staff and anyone required to process your personal data comply with internal rules and procedures relating to the processing of personal data, in particular the technical and organisational security measures implemented to protect your personal data.

8. WHAT RIGHTS DO YOU HAVE OVER YOUR PERSONAL DATA?

In accordance with applicable personal data protection regulations, you have the following rights over your personal data:

  • You may request access to the personal data we hold about you and obtain a copy, including in electronic format.

  • You may request that your personal data be corrected, updated and deleted, and that its processing be restricted.

  • You may object to the use of your personal data on grounds relating to your particular situation and have an absolute right to object to the processing of your personal data for direct marketing purposes, including profiling related to such marketing.

  • You may request the portability of your personal data.

  • You may withdraw your consent where it has been obtained, without this withdrawal affecting the lawfulness of processing carried out previously.

  • You may provide us with your “last wishes” regarding your personal data in the event of your death.

When you exercise any of the rights above, we have one (1) month from receipt of the request to respond. This period may be extended by two (2) months, taking into account the complexity and number of requests. You will then be informed of the reasons for the extension within one month of receipt of your request.

These rights are not absolute: you may exercise them within the applicable legal framework and the limits of those rights. In some cases, we will be unable to grant your request (legal obligation, etc.). If this is the case, we will inform you of the reason or reasons for the refusal.

You may exercise your rights, providing proof of your identity if necessary, by emailing legal@dashdoc.com or writing to the following address:

DASHDOC Personal Data Rights 5 avenue du général de Gaulle 94160 Saint-Mandé

If you encounter a difficulty or dispute, you may lodge a complaint with the CNIL through its website or by post:

3, place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

9. THIRD-PARTY WEBSITES

Links on the Site may take you to external websites. Please note that the personal data protection policies of these websites may differ from this policy. We therefore recommend reading the personal data protection policy of each website concerned. In any event, DASHDOC cannot be held liable if the content of any of these websites violates applicable legal and regulatory provisions.

10. UPDATES TO THIS POLICY

This policy may be amended from time to time. You will be deemed to have accepted the new terms of the personal data protection policy upon your first use of the services immediately following such amendments. We therefore recommend that you consult it regularly on our Site.

11. MISCELLANEOUS PROVISIONS

If a court or competent authority considers that any or all of the provisions of this policy are invalid or unenforceable, the provision concerned will be deemed deleted to the extent required. The validity and enforceability of the other provisions of this policy will not be affected.

This policy is governed by and interpreted in accordance with French law. Any dispute arising from this policy will be subject to the exclusive jurisdiction of the French courts.