DocuWise Privacy Policy

About This Policy

At Integra Legal, pravne storitve d.o.o. (»Integra Legal«) we protect your personal data with utmost care and commitment. We respect your privacy and we protect data carefully and in accordance with applicable laws. We only collect and process your data if we have a legal basis for doing so, and only to the extent strictly necessary to achieve the purpose of the processing of personal data.

This Privacy Policy (»Policy«) describes how we process your personal data. It applies to your use of DocuWise services (»Services«) on any device. It does not apply to any other service, products, or websites we offer.

Our Contact Information

Information about us as a data controller:

Company name:	Integra Legal, pravne storitve d.o.o.
Short company name:	Integra Legal d.o.o.
Headquarters:	Ljubljana
Business address:	Kersnikova ulica 6, 1000 Ljubljana, Slovenia, EU
Registration number:	8609551000
Tax number:	SI 35287390
e-mail address:	office@integra.si

Personal Data We Collect About You

This table sets out the categories of personal data we collect.

Collected when you sign up or update your account
Category	Description
User Data	Data that we collect when you create or update your Services account. The data include your: – name, – surname, – e-mail address, – password (in encrypted form, not readable to us). We receive this data from you e.g. from the sign-up form or process or account updates.
Collected through your use of the Services
Category	Description
Usage Data	Data collected and processed when you are using the Services. a) Information about your Services settings The data includes: – information about your language preferences, – information about other Services settings. b) Information about how you use the Services The data includes: – information about your actions with the Services (including date and time), such as clicks on individual features etc. c) Technical data The data may include: – IP address, – information about the devices you use such as device IDs, network connection type, operating system, browser etc.
Additional data
Category	Description
Survey and Research Data	When you respond to a survey or take part in user research, we collect and use the personal data you provide.
Response Data	If you subscribe to our E-newsletter, we receive from our e-mail marketing partners data about your interactions with campaigns (and/or emails), which include dates and times of accessing emails and information on which emails you open.

Purpose and Legal Basis for Processing of Your Personal Data

We process your data or data relating to you for different purposes. For each purpose, we have explained what category of data we process and why are we entitled to process it. Integra Legal does not use automated decision-making or profiling.

Here is a general explanation of each »legal basis« to help you understand the table:

performance of a contract:When it is necessary for Integra Legal to process your personal data to provide Services.
legitimate interest:When Integra Legal or a third party has an interest in using your personal data in a certain way, which is necessary and justified considering any possible risks to you and other Services users. For example, using your Usage Data to improve the Services functionalities for all users. Contact us if you want to understand a specific justification.
consent:When Integra Legal asks you to actively indicate your consent to use of your personal data for a specific purpose, such as for e-mail marketing.
compliance with legal obligations:When Integra Legal must process your personal data to comply with the law.

Purpose for processing your data	Legal basis that permits the purpose	Categories of personal data used for the purpose
To provide the functioning of the Services. For example, we use your personal data to: – set up an account for you, – change your account, – personalise your account, – distinguish between users and for authentication purposes, – help you with the use of the Services, or – provide the Services functionalities.	Performance of a contract	– User Data – Usage Data – Survey and Research Data
To diagnose, troubleshoot, and fix issues with the Services	Performance of a contract	– User Data – Usage Data
To keep the Services secure and to detect and prevent fraud.	Legitimate interest Our legitimate interests here include protecting the smooth functioning of the Services and our users against fraud and other illegal activity.	– User Data – Usage Data – Survey and Research Data
To evaluate and develop new features, technologies, and improvements to the Services.	Legitimate interest Our legitimate interests here include developing and improving products and features for our users.	– User Data – Usage Data – Survey and Research Data
To analyse and define marketing strategies.	Legitimate interest Our legitimate interests here include developing strategies for marketing which enable us to effectively allocate marketing resources, such as which country, region or city should we target, which general types of customers are most likely to buy our services.	– User Data – Usage Data – Survey and Research Data – Response Data
Sending e-newsletter to our subscribers (users)	The law	– User Data
E-newsletter segmentation	Legitimate interest of improving efficiency of communication with our subscribers and potential subscribers	– User Data – Response Data
Sending e-newsletter to individuals who subscribed to e-newsletter	Consent	– User Data – Response Data
To comply with legal obligations that we are subject to. These include accounting, reporting and tax obligations.	Compliance with legal obligations	– Dataset depends on the legal obligation
To comply with a request from law enforcement, courts, or other competent authorities.	Compliance with legal obligations	– Dataset depends on the legal obligation
To establish, exercise, or defend against legal claims. For example, if we are involved in litigation and we need to provide information to our lawyers or court in relation to that legal case.	Compliance with legal obligations	– Dataset depends on the legal obligation
To conduct research and surveys. For example, when we contact our users to ask for your feedback.	Legitimate Interest Our legitimate interests here include to understand more about how users think about and use the Services.	– Survey and Research Data

Sharing Your Personal Data

See the below table for details which data we share, to whom and why we share it. Persons to whom we share data may act as our data processors with whom we enter into appropriate data processing agreements, independent data controllers or as joint controllers with whom we enter into joint controllers agreements.

Categories of recipients

Categories of data

Reason for sharing

Service providers who act as our data processors

– User Data

– Usage Data

– Response Data

They provide different services to Integra Legal.

These service providers include those we hire to:

– give customer support (e.g. CRM providers etc.)

– develop, operate and maintain the technical infrastructure we need to provide for the Services (e.g. server hosting providers, cloud infrastructure providers, software development companies)

– assist in protecting and securing our systems and services (e.g. software development companies)

– comply with our legal obligations and pursue our other legitimate interests (e.g. accounting companies, providers of analysing tools etc.)

– provide email marketing services

Law enforcement and other authorities, or other parties to litigation

– User Data

– Usage Data

– Response Data

– Survey and Research Data

When we believe in good faith it is necessary for us to do so, for example to comply with a legal obligation, to respond to a valid legal process (such as court order, or subpoena) or to initiate one, in litigation (a court case) etc.

Data Retention

We keep the data for as long as necessary to fulfill the purpose for which it was collected.

We keep your data in accordance with the following retention periods:

When providing our services, we process your personal data for the entire duration of the contractual relationship and for another 10 years after the termination of the contractual relationship. Data on generated documents are stored for 10 years from the date of creation of an individual document.
Where we process your personal data for the purpose of diagnosing, preventing and resolving problems or for security purposes, we will process the data for as long as necessary to carry out the relevant activity. Analyses for product improvement are carried out based on anonymized data, where identification is not possible.
E-newsletters are sent until you unsubscribe. You can unsubscribe at any time by clicking the unsubscribe button in each email.
When processing is carried out on the basis of the law and/or for the purpose of asserting or defending against a claim, the data is stored in accordance with the law.

Transfer of the Data Outside EU

When conducting activities set out in this Privacy Policy, Integra Legal does not transfer personal data outside the European Economic Area.

Keeping Your Personal Data Safe

We are committed to protecting your personal data. We put in place appropriate technical and organisational measures to help protect the security of your personal data. We have put various safeguards in place to guard against unauthorised access and unnecessary retention of personal data in our systems. These include access and retention policies. However, no system is ever completely secure.

In the event of a security incident, we will notify the Information Commissioner. However, should a security incident occur that may result in a high risk to the rights and freedoms of individuals, we will immediately inform individuals about it.

To protect your user account, we encourage you to:

use a strong password which you only use for the Services;
never share your password with anyone;
limit access to devices;
log out once you have finished using the Services on a shared device.

What Rights Do You Have in Relation to the Processing of Your Data?

You may exercise the following rights with respect to your data:

right to be informed: you have the right to be informed of the personal data we process about you and how we process it.
right to access to your personal data: You have the right to request access to the personal data we process about you. You can request confirmation as to whether personal data concerning you are being processed, and, where that is the case, access to the personal data and the information under Article 15 of the GDPR. You have the right to request a copy of your personal data.
right to rectification: we strive to keep accurate and complete information at all times. In the event that we unintentionally keep inaccurate or incomplete information, you have the right to request that we correct and/or supplement it.
right to erasure: in some cases, you have the right to request the deletion / erasure of your personal data.
right to restriction of processing: In some cases, in addition to the right to erasure, you may also exercise the right to restrict the processing of personal data. We must limit the processing of personal data.
right to data portability: you can request from us all your personal data that you have provided to us and that we process on the basis of your consent and on the basis of the implementation of the contract. We will provide you with personal data in a structured, stable and machine-readable form. You have the right to request that personal data be transferred directly from us to another controller when technically feasible.
right to object to the processing of data: based on the reasons related to your special situation, you have the right to object to the processing of personal data that is based on our legitimate interests. In any case, you always have the right to object to the processing of data for the purposes of direct marketing. We will immediately stop processing your data for marketing activities; in other cases, we will do the same if we do not have legitimate reasons for processing that outweigh your rights or to enforce legal claims.
right to withdraw consent: you also have the right to withdraw consent for processing in cases where we process data based on your consent.

In any case, you have the right to file a complaint with the Information Commissioner of the Republic of Slovenia, the Slovenian supervisory body responsible for data protection (Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si).

You submit a request for the exercise of your right by writing to us by office@integralegal.si with the subject “Personal data protection”.

If you submit a request for the exercise of the right, but it is not possible to identify you with certainty from the sent request, we will ask you to provide additional personal data. In the event that you do not provide us with additional personal data, we will discard your request. We will respond to requests within 30 days of receipt, except in the case of extensive requests, where we will need more time to prepare a response. We will inform you in advance of the extension of the deadline.

Cookie Policy

Cookies are small pieces of text which are downloaded to your device, for example, when you visit a website. Cookies are useful because they allow Integra Legal to uniquely recognise your device and support the continuity of your experience, for example by helping us to understand your preferences or past actions.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving your user experience.

Integra Legal uses only strictly necessary cookies. These cookies are set by Integra Legal are essential to enable you to use the features of our Services, such as technically delivering content, setting your privacy preferences, logging in, etc. Without these cookies, our Services cannot be provided so you cannot decline them.

This table sets out the strictly necessary cookies that we use.

Cookie	Purpose and functioning	Duration	Who sets the cookie?
sb-api-auth-token	To authenticate and authorize API requests.	Persistent	docuwise.eu
sentryReplaySession	To analyze errors on the website.	Persistent	docuwise.eu
platform_host	To control visual presentation of the website.	Session	docuwise.eu

Changes to this Privacy Policy

We may periodically update this Policy. If we make any material changes, we will notify you thereof. The date that this Policy was last revised is identified at the bottom.

How Can You Exercise Your Rights With Us?

If you have a question or you would like to exercise your rights, simply email us at office@integralegal.si. We will try to respond to your request as soon as possible, and within one month at the latest.

March 2025