Privacy Policy (GDPR)

1. Data Controller

The controller of personal data processing is:

JARVIS SAS, publisher of the WeWinBid platform, attaches great importance to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.

2. Data Collected

We collect the following data:

• Identification data: first name, last name, email, phone number
• Professional data: company, SIRET, business sector
• Connection data: IP address, logs, cookies
• Usage data: tenders viewed, documents generated
• Payment data: processed by our provider Stripe

3. Use of Data

Your data is used to:

• Provide and improve our services
• Manage your subscription and billing
• Send you relevant notifications
• Analyze use of the platform
• Ensure the security of our systems

4. Data Sharing

We never sell your data. We only share it with:

• Our technical providers (hosting, payment)
• Legal authorities if required by law

5. Your Rights (GDPR)

In accordance with the GDPR (Articles 15 to 22) and the French Data Protection Act, you have the following rights:

• Right of access: obtain confirmation that your data is being processed and receive a copy
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure (right to be forgotten) delete your data under certain conditions
• Right to restriction: limit the processing of your data
• Right to data portability: receive your data in a structured, commonly used and machine-readable format
• Right to object: object to the processing of your data
• Right to withdraw consent at any time

To exercise these rights, contact us at commercial@wewinbid.com and specify your first name, last name and email address. We will respond within one month.

You also have the right to lodge a complaint with the CNIL (French data protection authority): www.cnil.fr

6. Security and Retention

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure:

• SSL/TLS encryption for all communications
• Secure hosting with certified providers
• Encrypted regular backups
• Restricted access with strong authentication
• Monitoring and logging of access

Your data is retained for the duration of your subscription, then archived for 3 years for evidentiary purposes in the event of a dispute, in accordance with legal obligations. Billing data is retained for 10 years in accordance with accounting obligations.

7. Data Transfers

Your data is hosted within the European Union. No transfer to third countries is carried out without appropriate safeguards (standard contractual clauses of the European Commission).

8. DPO Contact

If you have any questions about this policy or exercising your rights: