Privacy policy (GDPR)

Codetrail, publisher of the VIEDUSITE service, attaches the utmost importance to the protection of personal data. This policy describes the processing carried out, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French “Informatique et Libertés” (Data Protection) Act.

1. Data controller

The controller of the data collected via the website and the subscription process is Codetrail, who can be contacted at jt@codetrail.eu.

With regard to the data of users (the Customer's staff) processed within the platform (time records, documents, requests, etc.), the Customer (the employer) is the data controller and Codetrail acts as a processor within the meaning of Article 28 of the GDPR.

2. Data collected

• Subscriber: last name, first name, business email, phone number, position.
• Company: company name, address, SIREN, EU VAT number.
• Payment: bank card data processed directly by Stripe (it does not pass through our servers).
• Users (within the platform): identity, assignment to sites, time records and QR code scans, documents uploaded and signed, internal requests, activity logs.
• Technical: connection logs, strictly necessary browsing data.

3. Purposes and legal bases

• Management of the subscription and account — performance of the contract (Art. 6(1)(b) GDPR).
• Invoicing and payment — performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c)).
• Provision of the VIEDUSITE service (management of sites and teams, vault, signature, time tracking) — performance of the contract on behalf of the Customer (Art. 6(1)(b)).
• Security and regulatory traceability (activity logs, signature traceability) — legal obligation and legitimate interest (Art. 6(1)(c) and 6(1)(f)).

4. Recipients and processors

Your data is never sold. It is accessible to authorised staff of Codetrail and to its technical processors, strictly within the limits of their tasks:

• Stripe — processing of card payments.
• Hosting provider — hosting in France.
• Brevo — sending of emails (contact form, notifications).

5. Retention periods

• Account and subscription data: for the duration of the contract, then archived in accordance with legal obligations.
• Accounting and invoicing documents: ten (10) years (legal obligation).
• Activity and traceability data: period defined by the Customer, in compliance with regulations.

6. Transfers outside the European Union

Hosting is provided in France. Where certain processors may process data outside the European Union, these transfers are covered by appropriate safeguards (European Commission standard contractual clauses).

7. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set out instructions regarding what happens to your data after your death. You can exercise these rights by writing to jt@codetrail.eu.

For user data processed within the platform, these requests must be addressed to the Customer (employer), as data controller; Codetrail assists the Customer for this purpose.

8. Cookies

The website only uses cookies that are strictly necessary for it to function (session, security). No advertising or third-party tracking cookies are set without your consent.

9. Security

Codetrail implements appropriate technical and organisational measures (encryption of exchanges, access control, logging) to guarantee the security and confidentiality of data.

10. Complaints

You may lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr — if you believe that your rights have not been respected.

← Back to pricing