Data concerned and purposes
Depending on the services used, we process the following categories:
- Contact and registration: title, name, organisation, email, phone number, country, address, legal identifier, plan and language. This information is used to respond to enquiries and to create and manage the account. Optional fields are indicated on the form.
- Subscription and payment: orders, amounts, currency, payment status and supporting documents submitted. Card information is entered with the payment provider, not in our contact forms.
- Security and monitoring: IP address, date, browser, operating system and activity logs. The country estimated from the IP address and VPN or proxy indicators may be used to prevent abuse; they do not prove actual location.
- Dossiers: information, documents, communications and analysis results needed for the features used. The company collecting this material from its applicants determines the purpose of its dossiers and their access rules.
Processing and recipients
Data is used to provide the service, respond to requests, manage payments, secure access and meet applicable obligations. Depending on the processing and applicable law, we rely on performance of the contract, legal obligations, protection of the service, or consent where required.
Access is limited to authorised persons and providers needed for hosting, storage, notification delivery, security and payment.
Retention and security
Data is retained for as long as needed for the stated purposes, the contractual relationship and applicable evidentiary, security or retention obligations. Document deletion deadlines communicated to the customer depend on its plan and account status.
Deleting dossiers and files does not automatically delete the account, billing records, logs or analysis inputs and responses retained for follow-up. Backups may have a separate retention cycle. Please contact us to request erasure covering all your data.
We use access controls and protective measures appropriate to the processing. No system can guarantee absolute security. Customers help protect their account by limiting access and safeguarding their team’s credentials.
Your requests and rights
Depending on the applicable rules, you may request access to, correction or erasure of your data, object to certain processing, withdraw consent, or request restriction of processing and data portability. Some rights may be limited by a legal obligation or the need to retain evidence.
Write to contact@dossier.tn, specifying your request and the account or dossier concerned. Proportionate verification of your identity may be necessary. For documents collected by an organisation for its own dossier, contact that organisation first; we assist it within the scope of the service.