• Customers or potential customers whose data we will use to prepare offers, conclude and execute the contract and to provide the services requested by them.
The data we process are:
a) Personal identification data: name, surname, CNP, ID card series and number, date and place of birth;
b) Contact data: home or correspondence address, telephone number, e-mail address;
c) Data from the identity document: image of the document (scanned or photographed copy), photo included on the identity document, document issuer and expiration date;
d) Biometric data (in the case of video identification): Facial image (video capture or photo taken during the identification process) Voice (if the video session is recorded with sound);
e) Data regarding professional or representative capacity: position held, organization represented, documents proving capacity (e.g. power of attorney, delegation)
f) Data from the digital certificate: name of the certificate holder, certificate identifier, information about the status of the certificate (valid, revoked, etc.):
g) Payment and billing data (if online purchase is made): account holder name, invoice number, transaction details (no sensitive banking data is stored);
h) Telephone records and correspondence: voice (in the case of calls recorded for technical support), messages and emails sent to the customer service;
i) Biometric data (facial image), if processed for automated unique identification. In this case, explicit consent is required, according to art. 9 para. (2) letter a).
• Employees of our contractual partners (companies that are our business partners), the data that is processed are: name, surname, function/position, employer, telephone number, home address, CNP, CI series and number, CI issuance date, date of birth, photos, email address, mailing address, e-mail address of the employees of our partners in order to maintain the contractual relationship with the companies they represent and to be able to collaborate. In this case, we will base our processing on our legitimate interests to be able to execute the contracts we have concluded with other companies, on the need to conclude and/or execute a contract, but also on compliance with the legislation in force;
• Staff of a public authority whose data we use to fulfill our legal obligations, such as responding to requests from authorities, keeping records provided by law and the like. For example, we will have to keep your name, surname, the authority you belong to and your signature. in the control registers that the law requires us to keep;

You have the following rights as a data subject:
• Right of information and access to personal data
The data subject has the right to request a copy of the personal data held by DigiSign
• Right of rectification of personal data
The data subject has the right to rectify the data if they are not correct.
• The right of deletion
The data subject has the right to ask the operator to delete the personal data concerning him in the following cases without delay:
• personal data are no longer required for the purposes for which they were collected or processed;
• the data subject opposes the processing and there are no legitimate reasons to prevail in the processing;
• personal data have been processed illegally;
• personal data must be deleted in order to comply with the law;
ATTENTION: Data deletion will not be carried out if:
• data is required to fulfill a legal obligation;
• for archiving purposes in the public interest;
• for finding, exercising or defending a right in court.
• The right to restrict the use of your personal data
If the data subject considers that the data that DigiSign holds about it is incorrect or should not be processed, contact DigiSign at headquarters for a discussion about its rights. In certain circumstances, processing restriction may be required.
• The right of opposition to the use of personal data
In certain circumstances, the data subject has the right to oppose the processing by DigiSign of his personal data including the processing of data for direct marketing purposes
• Right to data portability
The data subject has the right to request the personal data concerning him and provided to DIGISIGN SA in a structured format that can be read automatically.
• The right not to be the subject of a decision based solely on automatic processing
The data subject has the right to request and obtain the withdrawal / annulment / reassessment of any decision that has legal effects in his / her regard, adopted exclusively based on personal data processing
• The right of withdrawal of the consent at any time
Withdrawal of the consent can take place at any time and will produce effects for the future only, the processing carried out before the withdrawal remains valid.

Use of personal data and consequences of failure to provide it