This describes the personal data we process when you use Okwerin, why we process it and the rights you have.
Who is responsible
Okwerin is the controller for data about you as a user of the service. For the content of your agreements your organisation is the controller and Okwerin is the processor.
What we process
We only process what the service needs to work.
- Account data: name, email address and organisation.
- Agreement data: title, counterparty name and email, status and amount.
- Events: when an agreement was sent, opened, reviewed and signed.
- Technical data: timestamp, IP address and browser tied to an event.
Why we process it
To deliver the service, to show where an agreement stands, to build evidence of the process, to invoice, and to protect accounts against misuse.
Evidence and event logs
Events tied to an agreement are the point of the evidence. They cannot be edited afterwards and they remain for as long as the agreement does.
Retention
Agreements and evidence are kept for as long as the organisation keeps them or as law requires. If you delete an account we remove personal data that we are not required to keep for accounting or evidentiary reasons.
Who can access it
Members of your organisation according to their role, and the suppliers listed under Subprocessors. We never sell personal data and never use it for third-party advertising.
Your rights
You have the right to know what data we hold about you, to have it corrected, to have it erased where the law allows, to object to certain processing and to complain to your data protection authority.
Contact
Write to privacy@okwerin.com and we will handle your request.