Privacy
The principle
Your answers to DossierMalin's questionnaires, including your health information, never leave your device. Documents are built in your browser. We do not receive them and cannot read them.
Who we are
The data controller is DossierMalin, a Fillfold solution. For any question about your data, write to [email protected].
What we collect
- Waitlist: if you sign up, we keep your email address, the page you signed up from, the date and whether you confirmed it. Nothing else.
- Visit counts: a privacy-friendly tool on our own server, with no cookies and no stored IP address. We only see totals.
- On your device only: your calm-mode choice is remembered in your browser. Your questionnaire answers are saved there too, only if you choose.
If you buy a document
Payment is handled by a PCI-DSS certified payment provider, which receives your card details and, depending on the card, your country or postcode, to process and secure the payment. We never see your card number. We send it none of your questionnaire answers: only the name of the document, its price and the email address you give for the receipt. That address is only used to send you the receipt and your purchase code, once; it is kept with the payment by the provider, for accounting and any complaint, and is never added to a mailing list. Your access is kept in your browser; we keep no account. Payment data is kept by the provider under its legal and accounting obligations. Legal basis: performance of a contract (GDPR Article 6(1)(b)).
Why, and on what basis
We use your address only to tell you when DossierMalin opens, based on your consent (GDPR Article 6(1)(a)). You first confirm it through a link we email you. You can withdraw at any time with the unsubscribe link or by writing to us. Visit counts rely on our legitimate interest in improving the site (Article 6(1)(f)).
Where it is kept
Your address is encrypted (AES-256) and stored on our own server in the Netherlands, in the EU. Emails go through a delivery service acting on our behalf under a data processing agreement. We never sell or share your address.
How long
Unconfirmed addresses are deleted after 30 days. Confirmed addresses are kept until DossierMalin opens, then for at most 12 months unless you become a user.
Your rights
Ask to see, correct or delete your data at [email protected]. You can also complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of the EU country where you live.