Data Protection Principles

The purpose of this page is to provide you with information about the personal data collected when you visit the website Dolibarr.org (or dolibarr.fr, dolibarr.ch, dolibarr.ca, etc.).

Definition of Rights Regarding Personal Data

1. Right to information – meaning you must know whether your personal data is being processed; what data is being collected, where it comes from, why it is being processed, and by whom.

2. Right of access – meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of the personal data we collect about you.

3. Right to rectification – meaning you have the right to request the rectification or erasure of your personal data that is inaccurate or incomplete.

4. Right to erasure – meaning that in certain circumstances, you can request that your personal data be erased from our records.

5. Right to restriction or object to processing – meaning that, under certain conditions, you have the right to restrict or object to the processing of your personal data.

6. Right to data portability – you have the right to obtain your personal data in a machine-readable format.

7. Right to withdraw your consent. Consent – You have the right to withdraw any consent given for the processing of your personal data.

Data we collect from visitors

Information collected manually

We do not collect any information from forms on our website. However, simply accessing a page on our site allows us to receive the following information transmitted latently by your browser (see next chapter).

Information collected automatically about you

This includes information automatically stored by session cookies or statistical analysis cookies (based on the Matomo tool) as well as your IP address. Your IP address is stored in our technical logs for a few days. For our statistical analysis tools, this IP address is not stored but anonymized as real.

Information from partners

Our server is integrated with Cloudflare's global caching system to improve performance and protect against certain cyberattacks. This means that to reach our server, it is necessary to first pass through a Cloudflare server. Although the content of the stream is encrypted between you and us, this server may collect meta data, such as the URL you wish to access or your IP address. However, we do not collect any data from this partner.

Links to other sites

Pages on the site may include embedded content (e.g., videos, images, articles, links, etc.). Embedded content from other websites behaves in the same way as if the visitor were visiting that other website, and these websites may collect data about you (IP address, use cookies, embed third-party tracking tools) or track your interactions with this embedded content if you have an account connected to their website. The external third-party sites concerned are: youtube.com, peer.tube

Data we collect from Preferred Partners

Some pages of our site are a directory of companies offering services on the Dolibarr software. We maintain this directory by storing the information communicated by email by the requesting company. This concerns the following information:
- last name, first name, address, country, telephone number, email, professional ID such as SIRET number

Use of data collected from visitors

Although we do not collect any personal data from visitors, the non-personal data we collect (URLs visited, time of visit) is used for the following purposes:

- Conduct analyses and research to improve our services (anonymized statistical data on website visits and navigation).

Use of data collected from Preferred Partners

The personal data of companies that have explicitly requested by email to become Preferred Partners, and that have obtained this label, are stored in our database. This information is retained for the purpose of being publicly displayed on the company's listing page, also accessible via the domain name https://partners.dolibarr.org, and also to be able to communicate information to the partner for activities outside of this website.

We process our data to fulfill legal obligations.

We reserve the right to anonymize the personal data collected and to use this anonymized data for the long term.

We will only use data outside the scope of this policy if it is anonymized.

We may process your personal data for other purposes not mentioned here. In this case, this document will be updated.

How long your data is stored

Technical server logs (which contain visitors' IP addresses) are only kept for a few days.

Anonymized website visit data is stored permanently.

Who your data is shared with

Visitors

We do not share any information collected with anyone outside the Dolibarr association.

Preferred Partners listed in the Preferred Partner directory

The personal data of companies that have explicitly requested by email to become Preferred Partners, and have obtained this label, are stored in our database. This information is stored for the purpose of being publicly displayed on the company's listing page, also accessible via the domain name https://partners.dolibarr.org, and also to be able to communicate information to the partner for activities outside of this website.

Administrators and Moderators

The Dolibarr platform is administered and moderated by the members of the Dolibarr Association's Board of Directors. Each member of the Board of Directors has the right to access and modify information on the Preferred Partner profile.

The Dolibarr association cannot be held responsible for the use that may be made of this data by vendors or any other third party with access authorization.

How we secure your data

We do our best to protect your personal data.

Hosting

The service is hosted on the OVH SAS Public Cloud offering. RCS Lille: 537 407 926, 2, rue Kellermann, 59100 Roubaix

Communication Encryption

We use secure protocols for communication and data transfer (such as HTTPS). We use anonymization and pseudonymization where appropriate.

Monitoring

We monitor our systems to detect potential vulnerabilities and attacks.

Backups

Regular backups are automated and stored on our hosting provider OVH as snapshots, as well as on Google Drive as files.

Even though we do our best, we cannot guarantee the complete security of information. However, we undertake to notify the appropriate authorities of any data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything reasonably possible to prevent security breaches and assist authorities in the event of a breach.

Cookies and Other Technologies We Use

We use cookies and/or similar technologies to enable user session functionality and obtain anonymous site traffic statistics.

A cookie is a small text file stored on your computer (in memory or on disk). Cookies store information used to help make sites work. We can only access cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may prevent you from using certain features.

We use cookies for the following purposes:

- Analytics cookies: These cookies are used to anonymously track the use and performance of our website and services.

You can delete cookies stored on your computer through your browser settings. You can also control certain third-party cookies by using a privacy enhancement platform, such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, visit allaboutcookies.org.

Contact Information - DPO

The Data Controller (DPO) is the President of the Dolibarr association. His name is indicated on this page:

https://wiki.dolibarr.org/index.php/Office_and_Board_Members

Any request regarding your personal data can be made by email to contact@dolibarr.org

Changes to this policy Privacy Policy

We reserve the right to make changes to this Privacy Policy.
Last modified on 2025-08-14