Privacy notice

Controller

Scope

This notice covers the 42suite web application, its public forms, and associated support and operational services. Customers remain responsible for the lawfulness of personal data they enter and for informing their own data subjects.

Purposes and data categories

We process account, team, contact, CRM, finance, HR, communication, uploaded-file, audit, and technical usage data to provide the contracted service, secure it, support users, meet legal duties, and prevent abuse.

Legal bases

Processing is based on contract performance, pre-contractual steps, legal obligations, legitimate interests in secure and reliable service operation, and consent where it is specifically requested.

Recipients and subprocessors

Data is shared only with authorized members of the relevant customer team, contracted infrastructure and service providers, and public authorities where legally required. Processors are contractually bound and access is limited to the necessary purpose.

Retention and deletion

Data is retained for the contract term and then deleted or anonymized according to contractual and statutory retention periods. Authorized export, rectification, restriction, and deletion requests can be submitted through the privacy contact.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, and object to processing. You may withdraw consent for the future and lodge a complaint with a competent supervisory authority.

Cookies and analytics

The application uses essential storage and cookies for authentication, language, theme, and security. We use Rybbit on the public landing page for reach and usage analytics; the analytics script is loaded from rybbit.reamote.com. Advertising and cross-site tracking are not enabled.

Security and international transfers

Customer data is separated by company and access is controlled through roles; data is transmitted using encrypted connections and private files remain access-controlled. Transfers outside the EEA occur only with a lawful transfer mechanism and documented safeguards.