Privacy Policy

• provides an overview of how we collect and process your personal data, and informs you about your rights under the EU General Data Protection Regulation (“GDPR”)
• contains important information about, among others, the collection and use of personal data; the legal grounds for the processing of that data; disclosures of that personal data to third parties and the use of cookies on the Website

• when we refer to “personal data” we mean data which identifies or may identify you as an individual and which may include, for example, your name, address, telephone number, date of birth, occupation
• when we refer to “processing” we mean the handling of your personal data, including collecting, protecting, and storing your personal data.

Our data protection principles

• Processed lawfully, fairly and in a transparent manner (Lawfulness, Fairness and Transparency).
• Collected only for specified, explicit and legitimate purposes (Purpose Limitation).
• Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed (Data Minimisation).
• Accurate and where necessary kept up to date (Accuracy).
• Not kept in a form which permits identification of data subjects for longer than is necessary for the purposes for which the data is processed (Storage Limitation).
• Processed in a manner that ensures its security using appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage (Security, Integrity and Confidentiality).
• Not transferred to another country without appropriate safeguards being in place (Transfer Limitation).
• Made available to data subjects and data subjects are allowed to exercise certain rights in relation to their personal data (Data Subject’s Rights and Requests).

1. Data controller

2. How we collect your personal data

3. Personal data we use, purposes and legal grounds

4. Information we may provide to third parties

• To our professional advisers insofar as reasonably necessary for the purposes of managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
• Governmental and regulatory bodies, including law enforcement authorities, in connection with enquiries, proceedings or investigations by such parties or in order to enable the Company to comply with its legal and regulatory requirements.

5. Your data Protection Rights

5.1. The right to be informed

5.2. The right to access

5.3. The right to correction (rectification)

5.4. The right to erasure (right to be forgotten)

• the data are no longer required for the purposes they were acquired or otherwise processed
• you revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing
• you object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
• the data has been processed illegally

• To ensure adherence to a legal obligation that requires us to process your data
• in particular with regard to legal retention periods
• to assert, exercise or defend against legal claims

5.5. The right to restrict processing

• You dispute the correctness of the data - for the period of time we need to check the correctness of the data
• the processing is illegal, but you do not wish to have your data deleted and request a restriction of use instead
• we no longer need your data, but you need them to assert, exercise or defend against legal claims
• you have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours

5.6. The right to data portability

5.7. The right to object

5.8. The right to withdraw consent

5.9. The right to complain

6. International transfers of your personal data

• We may transfer your personal data to our offices outside the Republic of Cyprus, where the European Commission has determined that the relevant jurisdiction provides adequate protection for the privacy rights of individuals. We will only do so when it is necessary for one of the purposes set out in this Privacy Policy.
• We do not envisage that any of your personal data will be transferred to any other countries outside the European Economic Area (EEA).

7. Retaining and deleting personal data

• We will keep your personal data for as long as is necessary for the purpose for which we initially collected them. Once such period has ended, we will keep your personal data for the longest of the following periods: a) any retention period set out in our retention policy which is in line with regulatory requirements relating to retention; or (b) the end of the period in which legal action or investigations might arise in respect of the services provided.
• PDF files created, uploaded, transformed, or otherwise processed through the Services may be stored for up to two (2) years depending on the retention settings configured by the account user in the dashboard.
• Signed files and signature template documents are not automatically deleted by the platform and remain stored until the account user deletes them manually through the dashboard or through the applicable delete endpoint.
• Once the retention period of your personal data lapses, we will ensure that your personal data are either irreversibly anonymised or securely destroyed.

8. Confidentiality and security

• Strict criteria for authorisation to access your personal data on a “need-to-know” basis only and exclusively for the specified purpose
• transfer of acquired data in secured form
• storage of confidential data in our secure servers
• firewall safeguarding of IT systems to provide protection against unauthorised access
• continuous monitoring of access to IT systems to detect and prevent the misuse of personal data

9. Cookies

10. Changes to this Privacy Policy

11. Contacts