Skip to main content
Privacy Policy

Last updated: January 2026

Introduction

Welcome to DQMS2 (Document Quality Management System). We are committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, store, and protect your information when you use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable data protection laws.

Data Controller

The data controller responsible for your personal data is the organization that operates this DQMS2 instance. For inquiries about data processing, please contact the system administrator or data protection officer at your organization.

Data We Collect

Personal Information

  • Name (first and last)
  • Email address
  • Phone number
  • Date of birth
  • Address (street, city, state, postal code, country)
  • Nationality

Identity Documents

  • Passport information (number, issuance date, expiration date, nationality)
  • Document images for verification purposes
  • Photo for identification

Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Session data and cookies
How We Use Your Data

We process your personal data for the following purposes:

  • Registration Processing: To process and verify your registration application
  • Identity Verification: To verify your identity through document checks
  • Document Generation: To generate official DA Particulares documents
  • Communication: To send you important updates about your registration
  • Legal Compliance: To comply with legal and regulatory requirements
  • Security: To protect against fraud and unauthorized access

Legal Basis for Processing (GDPR Article 6)

  • Consent: You have given consent for processing your data
  • Contract: Processing is necessary for the registration service
  • Legal Obligation: Processing is required by law
  • Legitimate Interest: Security and fraud prevention
Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

Right of Access (Article 15)

You can request a copy of all personal data we hold about you.

Right to Rectification (Article 16)

You may request correction of inaccurate personal data. However, once you have approved a DA Document or signed a Contract, the personal information captured in those documents cannot be modified. This is necessary to maintain the legal validity of these documents under eIDAS regulation. If you need to correct information after document issuance, please contact us to discuss options which may include document re-issuance.

Right to Erasure (Article 17)

You can request deletion of your personal data under certain conditions.

Right to Restriction of Processing (Article 18)

You can request that we restrict the processing of your personal data. When restricted, we will continue to store your data but will not process it for document generation or contract creation until the restriction is lifted. You can request restriction from your account settings.

Right to Data Portability (Article 20)

You can request your data in a machine-readable format.

To exercise any of these rights, please contact us using the information provided below or access your account settings.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Active registrations: Data retained during the validity period of your registration
  • Completed registrations: Data retained for 7 years for audit and legal purposes
  • Rejected applications: Data retained for 1 year, then securely deleted
  • Consent records: Retained for the duration of the consent plus 3 years
Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for the platform to function (authentication, session management)
  • Preference Cookies: Remember your settings (language, theme)
  • Analytics Cookies: Help us understand how you use the platform

You can manage your cookie preferences through your browser settings or our cookie consent banner when you first visit the site.

Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Role-based access control for system users
  • Regular security audits and penetration testing
  • Audit logging of all data access and modifications
  • Incident response procedures for data breaches
Contact Us

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact:

  • Your organization's Data Protection Officer
  • System Administrator via the admin dashboard

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Policy Updates

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

This privacy policy is provided in compliance with GDPR Articles 13 and 14.