Discover how Signi simplifies the document workflow in companies like yours.
Effective from 1 July 2021
We at Digital factory s.r.o., ID No.: 06988377, with registered office at Pražákova 1008/69, Štýřice, 639 00 Brno (hereinafter referred to as “Digital Factory” or “we”) operate the Signi Internet Application available on the website www.signi.com (hereinafter referred to as the “Application”) and provide our customers and users (hereinafter referred to as “You”) with services in the field of electronic signing of documents (hereinafter referred to as the “Services”). In the course of this activity, as the data controller, we determine for what purpose and by what means Your personal data will be processed, i.e. in particular how it will be collected, recorded, sorted and, where appropriate, made available. We are also responsible for the proper carrying out of such processing of Your personal data.
This policy describes the processing of personal data that we carry out as a data controller. We also process Your personal data as a processor for our customers in their capacity as controller who create documents in the Application and which You sign through the Application. For information on how Your personal data is processed by our customers, please visit the websites of these entities.
This document supersedes and replaces in its entirety the “Privacy Policy” effective as of October 26, 2019.
We process the following categories of personal data:
a) identification data, in particular Your name, surname, date of birth or ID number;
b) contact data, in particular Your address, telephone number or e-mail;
c) Your login data for the Application, in particular Your password;
d) payment data, in particular Your bank account number;
e) information about Your device, in particular the IP address of the device;
We process Your personal data for the following purposes:
a) We process Your identification data, contact data, login data to the Application and payment data on the basis of the performance of the Service Agreement for the purpose of establishing, maintaining and managing Your user profile.
b) We process Your identification data and contact data on the basis of the performance of the Service Agreement for the purpose of service communication with You.
c) We process Your identification data and contact data on the basis of our legitimate interests in order to prove the signature of a specific document.
d) We process Your identification data, contact data, login data for the Application, payment data and data about Your device on the basis of our legitimate interests for the purpose of keeping internal records of users and protecting our rights and claims.
e) We process Your identification data, contact data and login data to the Application on the basis of our legitimate interests in order to ensure the functionality, security, stability and development of the Application.
f) We process Your identification and contact data on the basis of our legitimate interests for the purpose of informing You about new features of the Application; we do not process personal data of persons who do not have a user account with us for this purpose.
g) We process Your identification and contact data on the basis of Your consent for the purpose of informing You about third-party offers; we do not process personal data of persons who do not have a user account with us for this purpose.
h) We process Your identification data, contact data and payment data in order to fulfil our legal obligations.
You have the right to object to processing on the basis of legitimate interest at any time, which is described in more detail in the section “Right to object to processing”.
We process Your personal data in full:
a) for the duration of the contract under which the Services are provided to You, for the purposes under aa), b)and f)above;
b) for a period of 15 years from the provision of the Service in the case of the purpose under c)above;
c) for the duration of the statute of limitations for claims arising out of or related to the provision of the Service (but typically no longer than 15 years from the termination of the Agreement) in the case of the purpose under d)above;
d) for the period of consent, i.e. from the moment You give us Your consent until You withdraw Your consent or terminate the contractual relationship with You in the case of the purpose under g)above;
e) for the period of time specified by the relevant legislation in the case of the purpose under h)above;
When You visit the Application, we store and then read small files called cookies on Your device. A cookie is a small file that we store on Your internet browser or on the hard drive of Your computer or mobile phone. Some cookies allow us to link Your browsing activities on the Application from the moment You open Your web browser window to the moment You close it. These cookies will be deleted the moment You close the browser window. Others remain on Your device for a set period of time and are activated each time You visit the website that created that particular cookie. We not only store cookies on Your device, but we also read the cookies that our website has placed on Your device. For simplicity, we will refer to storage only in the rest of this document.
Some cookies are placed on Your device directly by our website. These cookies help us to:
· identify You when You navigate between pages in the Application and when You visit again;
· to note that You have given us Your consent under this document, or whether You have, for example, offered to take part in a particular survey;
· to ensure security, for example, to investigate whether someone has abused Your connection to the Application and is acting instead of You;
· record, investigate and troubleshoot malfunctions and non-functioning components of the Application;
· monitor traffic to the Application, its individual pages, create statistics and reports and measure the effectiveness of individual offers;
· show You different variants of the Application portal when we are testing new functionalities,
Such cookies and other files are necessary for the functioning of the Application. If You block these cookies in Your browser, the Application may not function properly and we may not be able to provide You with our Services.
We obtain personal data directly from You and it is generated primarily by Your registration on the Application and Your use of the Application and the Services. We obtain other personal data in the course of our business, which is mainly derived from the data You provide.
We may receive additional personal data from our customers who may provide us with Your personal data as data controllers for the purposes of Your use of the Services.
All of the above-mentioned personal data are processed by us as the controller. This means that we determine the above defined purposes for which we collect Your personal data, determine the means of processing and are responsible for its proper execution.
We also involve processors in the processing of personal data who ensure the protection of personal data by means of appropriate technical and organisational measures and are also bound by confidentiality obligations. Such processors include:
a) IT technology and tool suppliers such as Google, Inc.; Survio s.r.o., ID: 28300785; IMPER CZ, s.r.o, ID: 28547888; Dáváme s.r.o, ID: 07058497; Banzai International, Inc.; Atlassian Corporation PLC;
b) suppliers of mailing and SMS services, such as ECOMAIL.CZ, s.r.o., ID: 02762943; Mailgun Technologies, Inc.; Profi SMS s.r.o., ID: 03676307; Mautic, Inc. (Acquia, Inc.);
c) suppliers of marketing and consulting services, such as Tomáš Musiol, IČ: 76093999; Ing. Eduard Hlava, IČ: 75230500; Martin Zeiler, IČ: 87945860;
d) server provider, such as Microsoft s.r.o., ID: 47123737;
e) payment gateway providers, such as GOPAY s.r.o., ID: 26046768; PayU S.A.
f) providers of external invoicing services, such as E-Consulting Czech s.r.o., ID: 27145107.
In some cases, we may be required to transfer the personal data we process to government authorities, courts, law enforcement or supervisory authorities if they ask us to do so.
Just as we have rights and obligations when processing Your personal data, You also have certain rights when processing Your personal data. These rights include:
Any consents we obtain are entirely voluntary and You are under no obligation to provide them. However, the failure to provide or withdrawal of consent for the purpose of informing You about third party offers will not affect the processing of personal data carried out on other legal bases, including sending You our commercial/marketing communications in accordance with our legitimate interest (see above for the purpose of informing You about new features of the Application).
Withdrawal of consent does not affect the lawfulness of processing prior to such withdrawal.
Simply put, You have the right to know what data we process about You, for what purpose, for how long, where we obtain Your personal data, to whom we transfer it, who processes it outside of us and what other rights You have in relation to the processing of Your personal data. You can find out all of this in this Privacy Policy. However, if You are unsure which personal data we process about You, You can ask us to confirm whether or not personal data relating to You is being processed by us and, if so, You have the right to access that personal data. As part of Your right of access, You can ask us for a copy of the personal data we are processing and we will provide You with the first copy free of charge and subsequent copies at a charge.
If You find that the personal data we process about You is inaccurate or incomplete, You have the right to have it corrected or completed without undue delay.
In some cases, You have the right to have us delete Your personal data. We will delete Your personal data without undue delay if one of the following reasons is met:
a) We no longer need Your personal data for the purposes for which we processed it,
b) You exercise Your right to object to processing (see “Right to portability
c) You have the right to obtain from us all Your personal data that You have provided to us and that we process on the basis of Your consent and on the basis of the performance of a contract. We will provide You with Your personal data in a structured, commonly used and machine-readable format. To enable us to easily transfer the data at Your request, it may only be data that we process automatically in our electronic databases.
d) Right to object to processing ” below) and we find that we no longer have any such legitimate interests that would justify such processing, or
e) it turns out that the processing of personal data carried out by us is no longer in accordance with generally binding regulations.
However, this right does not apply if the processing of Your personal data is still necessary for:
a) to fulfill our legal obligation,
b) archival, scientific or historical research or statistical purposes,
c) to establish, exercise or defend our legal claims; or
d) We process Your personal data on the basis of another legal title.
In some cases, in addition to the right to erasure, You can exercise the right to restrict the processing of personal data. This right allows You in certain cases to request that Your personal data be marked and not subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data when:
a) You dispute the accuracy of the personal data before we agree what data is correct,
b) We process Your personal data without a sufficient legal basis (e.g. beyond what we need to process), but You will only prefer to restrict such data before deleting it (e.g. if You expect to provide us with such data in the future anyway),
c) We no longer need Your personal data for the above processing purpose, but You require it for the establishment, exercise or defence of Your legal claims, or
d) object to the processing. The right to object is described in more detail in the section “Right to portability
e) You have the right to obtain from us all Your personal data that You have provided to us and that we process on the basis of Your consent and on the basis of the performance of a contract. We will provide You with Your personal data in a structured, commonly used and machine-readable format. To enable us to easily transfer the data at Your request, it may only be data that we process automatically in our electronic databases.
f) Right to object to processing ” below. We are obliged to restrict the processing of Your personal data for the period of time that we are investigating whether Your objection is justified.
You have the right to obtain from us all Your personal data that You have provided to us and that we process on the basis of Your consent and on the basis of the performance of a contract. We will provide You with Your personal data in a structured, commonly used and machine-readable format. To enable us to easily transfer the data at Your request, it may only be data that we process automatically in our electronic databases.
You have the right to object to the processing of Your personal data based on our legitimate interest. As these are not marketing activities, we will stop processing Your personal data unless we have compelling legitimate grounds for continuing such processing.
Exercising Your rights in the above manner is without prejudice to Your right to lodge a complaint with the Office for Personal Data Protection in the manner set out in the following section. You can exercise this right in particular if You believe that we are processing Your personal data unlawfully or in violation of generally binding legal regulations.
You can file a complaint against our processing of personal data with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.
For all matters related to the processing of Your personal data, whether it is an enquiry, exercising a right, lodging a complaint or anything else, You can contact us at the following email address: gdpr@signi.com. You can also contact us by correspondence at the following address: Digital factory s.r.o., Pražákova 1008/69, Štýřice, 639 00 Brno.
We will process Your request without undue delay, but within one month at most. In exceptional cases, in particular due to the complexity of Your request, we are entitled to extend this period by a further two months. We will, of course, inform You of any such extension and the reasons for it.
