Datenschutz

Deine Privatsphäre ist uns wichtig.

Declaration on information obligation
Data protection

The protection of your personal data is very important to us. Therefore we process your data exclusively on the basis of the legal regulations (GDPR/DSGVO, TKG 2003). In this privacy policy we inform you about the most important aspects of data processing within our website.

Contact Us

If you contact us via the form on the website or by e-mail, your data will be stored for six months to process the request and in case of follow-up questions. We will not share this information with third parties without your prior consent.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your device using the browser. They do no harm. We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit. If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. Disabling cookies may limit the functionality of our website.

Web-analytics

We use Google Analytics on our website, a web analytics service provided in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland). We have integrated this service directly and via the Google Tag Manager, which is a tag management tool that does not process any data itself.

On our order, Google uses the information collected to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use.

For this purpose, Google uses the above-mentioned cookies to process information about the use of the website, e.g. browser type and version, operating system used, previously visited website, IP-address, time of the server inquiry.

We would like to point that we only use Google Analytics with active IP anonymisation. This means that the IP-address of the user will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases the full IP-address will be transferred to a Google server in the USA and shortened there. Through this shortening, the personal reference of your IP-address is omitted.

According to information from Google, the IP-address transmitted by your browser is not merged with other data from Google.

By using Google Analytics, your data is transferred to an unsafe third country. The European Court of Justice has ruled that the transfer of data to the USA is not subject to an adequate level of data protection according with EU standards due to existing security laws. In particular, there is a risk that US authorities may gain access to your data for control and surveillance purposes.

This data is only processed with your consent (Art. 6 sec. 1 lit a GDPR), which you have expressly given us on the basis of the cookie settings. With this consent you also agree, that your data may be processed in the USA, although there are no appropriate safeguards to ensure an adequate level of data protection (Art. 49 sec. 1 lit a GDPR). You can withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The data on the use of our website is stored for a period of 14 months.

You can find more detailed information on the use of data by Google, setting and objection options in the Google data protection declaration at https://marketingplatform.google.com/about/analytics/terms/us/ or https://policies.google.com/?hl=en.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP-address) from being sent to Google and used. The following link will take you to the appropriate plug-in: https://tools.google.com/dlpage/gaoptout?hl=en.

YouTube

Our website uses YouTube for the integration of videos, which is offered in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland).

The YouTube videos are integrated with an enhanced privacy mode. As a result, YouTube does not automatically store information about website visitors, but only when they click a second time to start viewing the video. By using YouTube videos, we do not collect or process any additional data. When you click on the video, the YouTube website is loaded and your data (e.g. IP-address, playing the video) is processed by Google. YouTube also uses cookies to collect information about your usage behaviour. If you are logged in at your YouTube account, this information is also assigned to your user account. You can prevent this by logging out of YouTube before calling up the video. According to YouTube, the purpose of this information is to collect video statistics, improve user-friendliness and prevent abusive behaviour.

YouTube probably processes your data in the USA. The European Court of Justice has ruled that the transfer of data to the USA is not subject to an adequate level of data protection according with EU standards due to existing security laws. In particular, there is a risk that US authorities may gain access to your data for control and surveillance purposes.

The forwarding to the YouTube website by the 2nd-Click solution takes place only with your consent (Art. 6 sec. 1 lit a GDPR), which you give by actively calling up the video. With this consent you also agree, that with the forwarding to the YouTube website your data may be processed in the USA, although there are no appropriate safeguards to ensure an adequate level of data protection (Art. 49 sec. 1 lit a GDPR). 

We have no knowledge of and no influence on the collection and use of your data by YouTube. You can find more detailed information in the YouTube or Google data protection declaration: https://policies.google.com/privacy?hl=en.

Cloudflare

To improve the availability and security of our website, we may use the “Cloudflare” service provider, 101 Townsend St, San Francisco, CA 94107, United States. Our concern in the sense of the GDPR (justified interest) is the improvement of our offer and our web appearance. We have concluded a corresponding data processing contract with the provider. The personal data will be transmitted under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission to the USA.

Google reCaptacha

We use Google reCaptacha. Provider is Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland). The Google Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms) apply.

Google Fonts

We embed fonts (“Google Fonts”). Provider is Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland). Privacy Policy: https://www.google.com/policies/privacy/. Possibility of opt-out: https://adssettings.google.com/authenticated.

Stripe

For the processing of payments we use Stripe. Provider is Stripe, Inc.
510 Townsend Street, San Francisco, CA 94103, USA. Privacy Policy: https://stripe.com/en-at/privacy.

SSL-encryption

This site may use SSL encryption for security and to protect the transmission of sensitive content. If SSL encryption is enabled, the data you submit to us can not be read by third parties.

Storing data on our servers

Only when using the sproof sign app, the data entered by you or the people that use our app will be stored on our servers. The servers are located within the EU. Data stored on this servers include your first name, last name, email address, profile picture, preferences and feedback, messages, signatures, signature pages and types of signatures you create or use (including timestamps), signature requests that you create and the associated document (including timestamps), the first name, last name and email address of the contacts you invite, as well as their signatures and signature types (including timestamps). When using payed plans we use Stripe as an external payment processor. In this case your email address and the selected payed plan id is forwarded to this provider. For obtaining a qualified digital signature your personal information (including name, phone number and date of birth) is forwarded to swisscom Trust Services (https://trustservices.swisscom.com/service-status/). Your explicit consent is required before this information is collected and forwarded. We further store login tokens from the following login providers (only if used by you): Google (https://accounts.google.com/TOS?loc=AT&hl=de&privacy=true), Facebook (https://www.facebook.com/help/568137493302217), GitHub (https://github.com/site/privacy), LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=d_checkpoint_lg_consumerLogin_oauth_ft_privacy_policy), Microsoft (https://login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=DE-DE&vv=1600&uaid=b4fa788c716a4c3487395df5502159fd), Advokat (https://www.advokat.at/AdvokatWebsite/files/2e/2e955d75-58be-4e2b-9f05-cab7e6149b6a.pdf). We retrieve your firstname, lastname, email and profile picture from these providers.

The purpose for storing this data is to provide the services of our product. We do not share your personal data with third parties (except as stated above for service fulfillment). Your data can be deleted upon request in the sproof sign app. We will send emails including your first name, last name and email to yourself and to the contacts you invite. We also contact you via email for updates regarding our products and services.

Storing data in a distributed file system and on the blockchain using “Verify a Document” and “Register a Document”

Only when using this feature in the sproof registry app, the data entered by you, as well as a cryptographic hash of that data and the uploaded document will be stored in a distributed file system (IPFS, https://ipfs.io/) and permanently and immutably on a blockchain (Ethereum, https://www.ethereum.org/). This is a voluntary transfer of your data to third parties and your data will not be stored by us. The rights to information, correction, deletion, restriction, data portability, revocation and opposition may therefore no longer be enforceable due to the blockchain technology used.

Your rights

You have the right to information, correction, deletion, restriction, data portability, revocation and objection regarding your stored data. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to us (see contact details) or to the Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Telefon: +43 1 521 52-25 69
E Mail: dsb@dsb.gv.at