Privacy policy

DOCUTRAD, simplified joint-stock company (SAS), RCS Paris 106 245 426.

Registered office: 78 avenue des Champs-Élysées, Bureau 326, 75008 Paris, France.

Contact for any question about your data: entreprises@docutrad.fr.

When you entrust us, on behalf of your company, with documents containing third-party data (employees, customers…), DocuTrad may act as a processor, on your written instructions. A confidentiality agreement is available on request.

When you fill in the “Request a quote” form, we receive:

• your e-mail address and name;
• your message;
• the documents you attach (file name, size and content);
• your landing page, the site you came from and, if you clicked one of our ads, that ad’s parameters (gclid, wbraid, gbraid, utm), so we know which campaign brought your request.

This data goes straight to our own servers (upload.business.docutrad.fr), hosted by Hetzner Online GmbH in a data centre in Finland (European Union). A notification containing your request and links to your documents is sent to our team (entreprises@docutrad.fr) through our business e-mail provider, Titan.

Purpose: reviewing your request, replying and preparing a quote. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for tracking where requests come from, our legitimate interest in measuring how well our campaigns work (Art. 6(1)(f)).

Retention: your documents are deleted automatically after 72 hours; only their file name stays attached to the request. Your request (contact details and message) is kept as long as needed for the business relationship, and at most 3 years after our last exchange.

We measure traffic with our own tool, with no third-party service. The data is sent to analytics.business.docutrad.fr, on the same European server (Hetzner, Finland), in a database separate from docutrad.fr’s.

Without your consent, measurement stays anonymous and is limited to:

• pages viewed, clicks, scrolling and form steps (field name and whether it is filled in, never its content);
• device type, browser, operating system, window size and language;
• the site you came from and campaign parameters in the address (utm);
• an approximate location (country, region, city) derived from your IP address, which is not stored.

No lasting identifier is set: the visit is tied to a session identifier renewed after 30 minutes of inactivity. Legal basis: our legitimate interest in understanding how the site is used in order to improve it (Art. 6(1)(f)).

With your consent (“Audience measurement” category), we add:

• a visitor identifier, to recognise your successive visits;
• ad click identifiers (gclid, wbraid, gbraid), linked to your visit;
• a sample of mouse positions, to spot parts of the page that are hard to use;
• a 90-day memory of the last ad you clicked, to attribute a quote request made on a later visit.

If you refuse or withdraw consent, the visitor identifier and the 90-day memory are erased from your browser. Visit data is kept for 180 days on our server.

On your first visit, a banner lets you accept all, refuse all or choose by category:

• Essential: running the site (language, security, remembering your choice). Always on.
• Audience measurement: the detailed measurement described above and Google Analytics.
• Advertising: measuring the effectiveness of our Google ads.
• Personalisation: remembering your preferences.

Your choice is stored in your browser for 6 months, after which the banner is shown again. You can change it at any time with the “Manage cookies” link at the bottom of every page.

By default, all Google signals are denied (Google Consent Mode v2). Google Tag Manager, and through it Google Analytics or Google Ads, is loaded only after you consent to audience measurement or advertising: nothing is requested from Google before you choose. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.

Items stored in your browser:

• dt_cc_v1 (local storage, 6 months): your cookie choice;
• dt_sid, dt_sid_last (local storage, session renewed after 30 min of inactivity): anonymous measurement session;
• dt_ref0, dt_ad_ctx (session storage, length of the visit): referring site and clicked ad, attached to your quote request;
• dt_vid (local storage and cookie, 13 months, with consent): visitor identifier;
• dt_ad_ctx_lt (local storage, 90 days, with consent): last ad clicked;
• dt_internal (local storage): used only by our team to exclude its own visits from statistics;
• Google cookies (_ga, _gcl…; lifetimes set by Google): only after your consent.

The site’s pages are served by Railway from a data centre in the Netherlands (European Union), which processes technical connection data (IP address, browser) in doing so. As Railway Corp. is a US company, any access from the United States is covered by appropriate safeguards (European Commission standard contractual clauses).

Fonts are hosted with the site: your browser does not contact Google Fonts or any other service to display them.

• DocuTrad team members in charge of your request;
• translators sworn before the competent courts of appeal, only once your order is placed and only for the documents to be translated (DocuTrad connects clients with translators);
• our technical providers, each for its own role: Railway (website hosting), Hetzner (server for requests, documents and statistics), Titan (e-mail), and Google if you have consented.

Google may process data in the United States; this transfer relies on the EU-US Data Privacy Framework. Your data is never sold. It is disclosed to authorities only where required by law.

Exchanges with the site and our servers are encrypted (HTTPS). Access to requests, documents and statistics is restricted to our team and password-protected. Links to your documents stop working as soon as the files are deleted.

You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions for what happens to it after your death. You can withdraw cookie consent at any time through “Manage cookies”.

To exercise your rights, write to entreprises@docutrad.fr. We reply within one month. If, after contacting us, you feel your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

This policy may change, for example if we add a service to the site. The version in force is always the one published on this page, with its update date.