Declaration on information obligation
If you contact us via the form on the website or by e-mail, your data will be stored for six months to process the request and in case of follow-up questions. We will not share this information with third parties without your prior consent.
We use Google Analytics on our website, a web analytics service provided in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland). We have integrated this service directly and via the Google Tag Manager, which is a tag management tool that does not process any data itself.
On our order, Google uses the information collected to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use.
For this purpose, Google uses the above-mentioned cookies to process information about the use of the website, e.g. browser type and version, operating system used, previously visited website, IP-address, time of the server inquiry.
We would like to point that we only use Google Analytics with active IP anonymisation. This means that the IP-address of the user will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases the full IP-address will be transferred to a Google server in the USA and shortened there. Through this shortening, the personal reference of your IP-address is omitted.
According to information from Google, the IP-address transmitted by your browser is not merged with other data from Google.
By using Google Analytics, your data is transferred to an unsafe third country. The European Court of Justice has ruled that the transfer of data to the USA is not subject to an adequate level of data protection according with EU standards due to existing security laws. In particular, there is a risk that US authorities may gain access to your data for control and surveillance purposes.
This data is only processed with your consent (Art. 6 sec. 1 lit a GDPR), which you have expressly given us on the basis of the cookie settings. With this consent you also agree, that your data may be processed in the USA, although there are no appropriate safeguards to ensure an adequate level of data protection (Art. 49 sec. 1 lit a GDPR). You can withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The data on the use of our website is stored for a period of 14 months.
You can find more detailed information on the use of data by Google, setting and objection options in the Google data protection declaration at https://marketingplatform.google.com/about/analytics/terms/us/ oder https://policies.google.com/?hl=en.
Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP-address) from being sent to Google and used. The following link will take you to the appropriate plug-in: https://tools.google.com/dlpage/gaoptout?hl=en.
Our website uses YouTube for the integration of videos, which is offered in Europe by Google Ireland Ltd (Gordon House, Barrow Street, Dublin 4, Ireland).
YouTube probably processes your data in the USA. The European Court of Justice has ruled that the transfer of data to the USA is not subject to an adequate level of data protection according with EU standards due to existing security laws. In particular, there is a risk that US authorities may gain access to your data for control and surveillance purposes.
The forwarding to the YouTube website by the 2nd-Click solution takes place only with your consent (Art. 6 sec. 1 lit a GDPR), which you give by actively calling up the video. With this consent you also agree, that with the forwarding to the YouTube website your data may be processed in the USA, although there are no appropriate safeguards to ensure an adequate level of data protection (Art. 49 sec. 1 lit a GDPR).
We have no knowledge of and no influence on the collection and use of your data by YouTube. You can find more detailed information in the YouTube or Google data protection declaration: https://policies.google.com/privacy?hl=en.
To improve the availability and security of our website, we may use the “Cloudflare” service provider, 101 Townsend St, San Francisco, CA 94107, United States. Our concern in the sense of the GDPR (justified interest) is the improvement of our offer and our web appearance. We have concluded a corresponding data processing contract with the provider. The personal data will be transmitted under the EU-US Privacy Shield on the basis of the adequacy decision of the European Commission to the USA.
For the processing of payments we use Stripe. Provider is Stripe, Inc.
This site may use SSL encryption for security and to protect the transmission of sensitive content. If SSL encryption is enabled, the data you submit to us can not be read by third parties.
Storing data on our servers
Only when using the sproof sign app, the data entered by you or the people that use our app will be stored on our servers. The servers are located within the EU. Data stored on this servers include your first name, last name, email address, profile picture, preferences and feedback, messages, signatures, signature pages and types of signatures you create or use (including timestamps), signature requests that you create and the associated document (including timestamps), the first name, last name and email address of the contacts you invite, as well as their signatures and signature types (including timestamps). When using payed plans we use Stripe as an external payment processor. In this case your email address and the selected payed plan id is forwarded to this provider. For obtaining a qualified digital signature your personal information (including name, phone number and date of birth) is forwarded to swisscom Trust Services (https://trustservices.swisscom.com/service-status/). Your explicit consent is required before this information is collected and forwarded. We further store login tokens from the following login providers (only if used by you): Google (https://accounts.google.com/TOS?loc=AT&hl=de&privacy=true), Facebook (https://www.facebook.com/help/568137493302217), GitHub (https://github.com/site/privacy), LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=d_checkpoint_lg_consumerLogin_oauth_ft_privacy_policy), Microsoft (https://login.live.com/gls.srf?urlID=MSNPrivacyStatement&mkt=DE-DE&vv=1600&uaid=b4fa788c716a4c3487395df5502159fd), Advokat (https://www.advokat.at/AdvokatWebsite/files/2e/2e955d75-58be-4e2b-9f05-cab7e6149b6a.pdf). We retrieve your firstname, lastname, email and profile picture from these providers.
The purpose for storing this data is to provide the services of our product. We do not share your personal data with third parties (except as stated above for service fulfillment). Your data can be deleted upon request in the sproof sign app. We will send emails including your first name, last name and email to yourself and to the contacts you invite. We also contact you via email for updates regarding our products and services.
Storing data in a distributed file system and on the blockchain using “Verify a Document” and “Register a Document”
Only when using this feature in the sproof registry app, the data entered by you, as well as a cryptographic hash of that data and the uploaded document will be stored in a distributed file system (IPFS, https://ipfs.io/) and permanently and immutably on a blockchain (Ethereum, https://www.ethereum.org/). This is a voluntary transfer of your data to third parties and your data will not be stored by us. The rights to information, correction, deletion, restriction, data portability, revocation and opposition may therefore no longer be enforceable due to the blockchain technology used.
You have the right to information, correction, deletion, restriction, data portability, revocation and objection regarding your stored data. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to us (see contact details) or to the Data Protection Authority:
Telefon: +43 1 521 52-25 69
E Mail: firstname.lastname@example.org