1. Data Controller
The data controller for personal data collected through the InoDocs Sign platform is:
Controller: Ask Consulting Luxembourg SARL-S
Address: 8 rue Jean Mentelin, 67200 Strasbourg, France
Email: [email protected]
🇪🇺 Supervisory authority (EU)
Commission Nationale pour la Protection des Données (CNPD) — Luxembourg
🇩🇿 Supervisory authority (DZ)
Autorité Nationale de Protection des Données à Caractère Personnel (ANPDP) — Algérie
In accordance with Regulation (EU) 2016/679 (GDPR).
In accordance with Algerian Law No. 18-07 of June 10, 2018 on the protection of individuals in the processing of personal data.
2. Data Collected
As part of providing the InoDocs Sign service, we collect the following categories of data:
- Identification data: first name, last name, email address
- Organizational data: company name, country
- Phone number (for OTP verification)
- Documents submitted for electronic signature and their content
- Signature logs: timestamps, SHA-256 fingerprints, signatories' IP addresses
- Billing data: subscribed plan (processed by our payment provider)
- Connection data: IP address, browser, pages visited (via cookies)
3. Processing Purposes
| Purpose | Legal Basis |
|---|---|
| Providing the electronic signature service | Performance of contract (Art. 6(1)(b) GDPR) |
| Account creation and management | Performance of contract (Art. 6(1)(b) GDPR) |
| Probative archiving of signed documents — 10 years | Legal obligation (Art. 6(1)(c) GDPR / Law 18-07) |
| Billing and subscription management | Performance of contract (Art. 6(1)(b) GDPR) |
| Signatory identity verification (OTP) | Performance of contract (Art. 6(1)(b) GDPR) |
| Service improvement (aggregated analytics) | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing communications (newsletters) | Consent (Art. 6(1)(a) GDPR) |
4. Retention Periods
Data is retained for the following periods:
| Signed documents and signature logs | 10 years from the date of signature (legal probative value) |
| Active account data | For the duration of the contractual relationship |
| Data after account termination | 3 years (statutory limitation), then deletion or anonymisation |
| Billing data | 10 years (accounting obligations) |
| Analytical cookies | Maximum 13 months |
5. Hosting & Transfers
InoDocs operates on a bi-regional sovereign infrastructure:
🇪🇺 Europe (GDPR)
Data of GDPR-zone customers hosted within the European Union. No transfers to third countries without adequate safeguards (standard contractual clauses).
🇩🇿 Algeria (Law 18-07)
MENA customer data hosted in Algeria, in accordance with Law 18-07 on the protection of personal data.
Data is not sold or transferred to third parties for commercial purposes. Certain technical sub-processors (payment, infrastructure) may process data on our behalf, under GDPR-compliant data processing agreements.
6. Your Rights
Under the GDPR and Law 18-07, you have the following rights:
- Right of access — Obtain a copy of the data we hold about you.
- Right of rectification — Correct inaccurate or incomplete data.
- Right to erasure — Request deletion of your data, subject to legal retention obligations.
- Right to portability — Receive your data in a structured, machine-readable format.
- Right to object — Object to certain processing based on legitimate interest.
- Right to restriction — Request temporary suspension of processing.
- Withdrawal of consent — Withdraw your consent at any time for consent-based processing.
To exercise your rights, contact us at the address below. We will respond within 30 days. If our response is unsatisfactory, you may lodge a complaint with the competent supervisory authority.
7. Cookies & Trackers
Our site uses cookies and tracking technologies to improve your experience and measure traffic:
| Tool | Provider | Purpose |
|---|---|---|
| Google Tag Manager | Google LLC | Marketing tag and analytics management |
| Google Analytics 4 | Google LLC | Audience measurement and user behaviour |
| Meta Pixel | Meta Platforms | Advertising conversion tracking (Facebook/Instagram) |
| LinkedIn Insight Tag | LinkedIn Corporation | B2B conversion tracking and retargeting |
| Session cookies | InoDocs | Authentication and security (necessary) |
You may withdraw your consent to analytical and marketing cookies at any time via your browser settings. Strictly necessary cookies cannot be disabled.
8. Applicable Law
This policy is governed by a dual legal framework:
- Regulation (EU) 2016/679 (GDPR) — applicable to users residing in the European Economic Area
- Algerian Law No. 18-07 of June 10, 2018 on the protection of individuals in data processing — applicable to users in Algeria and the MENA region
- eIDAS Regulation (EU) No. 910/2014 — on the legal value of electronic signatures in Europe
- Algerian Law No. 15-04 of February 1, 2015 on electronic signatures and certification
9. Contact — DPO
For any question regarding this policy or the exercise of your rights:
We reserve the right to modify this policy at any time. The date at the top of the page indicates the current version.