Data Collection

This application uses the device camera for two distinct purposes. It allows users to scan QR codes, in which case all processing takes place locally on the device and no data is collected, stored, or transmitted. It also enables users to take photos of documents. In this case, the images captured by the user are securely uploaded and stored. The data collected consists solely of these photos.

Purpose of Processing

The photos are used for document handling and processing within the paperless.lu service. QR code scanning serves operational purposes within the application and does not involve any data storage.

Data Storage and Security

All data is stored on secure servers located in Luxembourg (LuxConnect 2). Appropriate technical and organisational measures are implemented to ensure data protection, including storage on encrypted disks and transmission over TLS-secured connections. Access to the data is strictly limited to the user, their employer, the employer's payroll management provider (where applicable), the provider of the paperless.lu service, and us as developers acting as data processors.

Data Retention

Data is retained in accordance with applicable legal obligations, including labour law requirements and the General Data Protection Regulation (GDPR).

Data Sharing

Data is shared only with the aforementioned parties and exclusively for purposes necessary to operate the service and comply with legal obligations.

User Rights

Users have the right to request access to or deletion of their data at any time. Requests can be made via: dpo@paperless.lu