This policy explains which personal data WABBALABS processes when you visit this site, write to us or use the customer and partner portal, why, for how long, and how to exercise your rights. It applies Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978.
Controller
WABBALABS, to be completed.
Personal data contact: to be completed.
What we process, why, and for how long
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Running and securing the site | IP address, date and time, page requested, browser (server logs) | Legitimate interest: security of the service | 14 days |
| Contact, demonstration or pilot requests | Name, professional e-mail and telephone, company, job title, country, information about your project | Pre-contractual measures and legitimate interest: answering and following up the business relationship | 36 months after our last exchange |
| News by e-mail (if you asked for it) | Name, e-mail, date and wording of your consent | Consent | Until you withdraw your consent |
| Partner programme applications | Professional contact details, information about your company | Pre-contractual measures | Length of the partnership, otherwise 36 months after our last exchange |
| Portal accounts | Name, professional e-mail, job title, telephone (optional), organisation, role, language, preferences, two-factor secret (encrypted) | Performance of the contract with your organisation | Life of the account; an account inactive for 24 months is deactivated |
| Portal security (audit log) | Actions performed, IP address, browser, date and time | Legitimate interest: security, fraud prevention, evidence | 12 months |
| Support | Content of tickets, messages and attachments | Performance of the contract (support) | Tickets: length of the contract then 5 years; attachments: 24 months after the ticket is closed |
| Downloads and licence agreement | File downloaded, date, IP address, version of the agreement accepted | Performance of the contract; legitimate interest: evidence of acceptance | Length of the contract then 5 years |
| Licence requests | Requester; the usage statement only contains technical data about the installation | Performance of the contract | Length of the contract then 5 years |
| Deal registration (partners) | Customer company, contact declared by the partner | Legitimate interest: running the partner programme | End of the deal's protection then 3 years |
Mandatory form fields are marked; without them we cannot process your request. No automated decision producing legal effects is made about you.
Who receives your data
- The members of the WABBALABS team who need it, according to their role.
- Our processors, bound by contract and acting on our behalf only: the host Amazon Web Services EMEA SARL (data hosted in the AWS Europe (Paris), eu-west-3 region); our e-mail delivery provider.
- In the portal, the members of your organisation, depending on its settings (for example, the organisation's tickets).
We do not sell or rent your data.
Transfers outside the European Union
Your data is hosted in the European Union. Our host belongs to a group whose parent company is established in the United States: any access from a third country is covered by the European Commission's standard contractual clauses and by the EU–US Data Privacy Framework.
Security
Encrypted connections (HTTPS), two-factor authentication on the portal, rights checked on the server and data kept apart per organisation, encrypted secrets, files stored outside the public web and released after rights are checked, audit log, daily backups, automatic security updates of the system.
Cookies
This site only uses the cookies it needs to work, with no audience measurement or advertising: see the Cookies page.
Your rights
You can ask for access to your data, its rectification, its erasure, the restriction of its processing and its portability, and object to processing based on legitimate interest. You can withdraw your consent at any time, from your portal profile or by writing to us, and give instructions on what happens to your data after your death.
In the portal, the Profile › My data page lets you download your data and ask for your account to be deleted. Otherwise, write to to be completed. We answer within one month.
If you consider that your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the authority of your country of residence.
Changes
This policy may change; the version in force is always published here.