Starting May 25, 2018 Regulation 679/27-April-2016 regarding the protection of natural persons in what concerns the processing of personal data and regarding the free movement of such data and repeal of Directive 95/46 / EC (General Data Protection Regulation) (hereinafter referred to as "GDPR") it is applied in all the states of the European Union. This Information regarding the processing of personal data is intended to inform you about how we understand to regulate and integrate at our company level the GDPR policy and is an integral part of the Contract for the provision of qualified reliable services concluded with Digisign.
|The operator (the one who processes your data)||
Office: 2-6 Virgil Madgearu St., 1st District, 014135, Bucharest, Romania
Trade Registry No: J40/8069/2005
VAT No: RO17544945
The data protection officer declared at ANSPDCP is DPO DATA PROTECTION SRL, firstname.lastname@example.org
|Purposes of processing||
The processing of your personal data as a data subject is
carried out for the following purposes:
• to provide DigiSign services purchased or ordered from DigiSign;
• to be contacted and answered in connection with the services you use or expect to use from DigiSign;
• to keep in touch with you and to provide you with the necessary information through our website: www.digisign.ro but also on our social pages. https://www.facebook.com/SemnaturaElectronicaDIGISIGN
• for marketing communications. We will only make these communications if we have the consent of the data subject.
|Who are the data subjects and the legal basis of the processing||
• Customers or potential customers whose data we will use
to make offers, conclude and execute the contract and to
provide the services requested by them. We will process
the following data: name, first name, position /
position, employer, telephone number, home address, CNP,
series and no CI, date of CI release , date of birth,
photos, email address, signature. In this case, we will
base the processing on the necessity of concluding and /
or executing a contract but also on observing an
obligation of the applicable legislation in force;
|Data transfer||We do not transfer data outside the European Economic Area (EEA), the data ours being kept in locations in Romania.|
|Data retention terms||
The expected deadlines for keeping and deleting the
different categories of data will be those established by
the legislation in force including the one regarding the
archiving, respectively until the achievement for the
purpose for which they were collected, for as long as
necessary for their use as established by the legislation
in force ( (including tax) or by the competent
We have a legal obligation to keep the data for 10 years from the date of expiry of the digital certificate, according to the applicable law. After the expiration of the filing deadline, the data will be irreversibly erased.
The requests for obtaining / renewing unfinished certificates are kept
|To whom we will disclose your data||
As a rule, DigiSign SA does not disclose the data you hold
and process, about all categories of data subjects, to
other natural or legal persons.
The cases in which DigiSign SA customer data can be disclosed to other companies or individuals are those where other companies or individuals legal persons act as persons empowered in relation to. DigiSign SA In these cases, we will disclose the data for legitimate reasons related to the performance of a contract, the preparation of documentation necessary for the performance of the contract, finding, defending and exercising our rights or interests.
The categories of recipients to whom we may disclose your data are: < br> a the employees and collaborators of the Operator located in Romania;
a of third-party companies or contractual partners
a to the state authorities (ANAF, criminal investigation bodies, etc.)
In all these cases DigiSign SA will make all reasonable efforts to ensure that the data recipients we process them under conditions of security and confidentiality, in accordance with the purpose for which we have also been transmitted respecting the rights of the data subjects.
You have the following rights as a data subject:
What can happen if a person does not want to give us the data
In most cases, the data subjects are not obliged to
communicate their personal data. that are related to
principal of DigiSign SA, including the provision of
|Where can you go for exercise rights and the response time.||
The exercise of the aforementioned rights will be done on
the basis of a written request addressed to the DigiSign
office or by email to email@example.com.
The deadline for any application for your rights is 30 days. except in cases where the request is complex or there is a large number of requests, when the deadline can be extended by another 60 days. If you are not satisfied with the solution received, you can contact the National Supervisory Authority for Data Processing with Personal Character - contact details can be found at www.dataprotection.ro
This Information may be subject to changes in
content over time. Any new version will be announced and
displayed on the DigiSign website
|Date of entry into force:||This Information is valid starting with 26.05.2021|