1. Data Controller

The data controller is Clap Partners France (publisher of Clap4Gen).
Address: 29 Avenue Henri Ginoux, 92120 Montrouge, France.
Contact / DPO: dpo@clappartners.com.

2. Data Collected

Clap4Gen only processes the data necessary for HR document generation and management:
– Identification data (first name, last name, professional email, SuccessFactors ID).
– HR data from SAP SuccessFactors (employment contract information, job title, legal entity, etc.).
– Generated documents (contracts, amendments, certificates).
– E-signature data (identity of signatories, proof of signature, authentication codes).
– Technical data (logs, access records, metadata).

No personal data is permanently stored outside the CLIENT’s environments. Data may transit through Clap4Gen to perform services but is not stored by default.

3. Purposes

Data is processed exclusively for the following purposes:
– Generate and personalize HR documents.
– Manage electronic signature workflows.
– Enable archiving in SuccessFactors or connected systems.
– Provide technical support and maintenance.
– Improve service quality (anonymous statistics).

4. Legal Basis

Processing is based on:
– Execution of the contract with the CLIENT (Article 6.1.b GDPR).
– Compliance with legal obligations (Article 6.1.c GDPR).
– User consent where applicable (Article 6.1.a GDPR).

5. Data Retention

– Technical data (logs): up to 12 months.
– Generated documents: according to the contractual duration and the CLIENT’s archiving policy.
– E-signature data: retained in compliance with legal requirements of e-signature providers.

6. Subprocessors and Recipients

Clap Partners may rely on certified subprocessors:
– SAP SuccessFactors (HR data source).
– DocuSign and Certigna (electronic signature providers).
– AWS / SAP BTP (secure hosting in Europe).

These subprocessors are contractually bound to comply with GDPR and ensure confidentiality of data.
No data is transferred outside the EU without appropriate safeguards (such as Standard Contractual Clauses).

7. User Rights

In accordance with GDPR, users have the following rights:
– Access, rectification, deletion.
– Restriction of processing.
– Objection to processing.
– Data portability.

These rights can be exercised by contacting: dpo@clappartners.com.
In case of dispute, users may contact the CNIL (French data protection authority).

8. Security

Clap Partners implements appropriate technical and organizational measures (encryption, backups, access control, audit, strong authentication) to ensure confidentiality, integrity, and availability of data.

9. Updates

This Privacy Statement may be updated. Any significant changes will be communicated to the CLIENT.