Bienvenido/a a SignaSuite, tu plataforma de firma electrónica. La presente Política de Privacidad tiene como objetivo informarte sobre cómo PEAKWAY SL. (en adelante, "nosotros", "nuestro" o "el Responsable del Tratamiento") recopila, utiliza, protege y comparte tus datos personales cuando utilizas nuestros servicios.
We are committed to protecting your privacy and complying with applicable data protection legislation, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD).
We collect and process different types of personal data according to your interaction with our service:
Nombre, apellidos, dirección de correo electrónico, número de teléfono y otros datos necesarios para la prestación del servicio de firma electrónica.
IP address, device type, browser, activity logs on the platform, metadata associated with electronic signature (such as date, time, location if allowed).
Bank details, billing address.
The documents you upload to the platform for electronic signature. These documents may contain personal data of signers or third parties.
Name, email and other data you include about signers to manage the signing process.
Any other information you voluntarily provide us through contact forms, surveys, etc.
Información sobre tu navegación y uso de nuestra web/plataforma. Puedes consultar nuestra Política de Cookies para más detalle.
We process your personal data for the following purposes:
Article 8. Processing of data by legal obligation, public interest or exercise of public powers of the LOPDGDD establishes that processing by legal obligation must be provided for in a rule with the rank of law.
(if we have your consent or there is a prior contractual relationship and similar products are offered, in accordance with the LSSI)
The legal basis for processing your personal data varies according to the purpose:
| Legal Basis | Purpose | GDPR Article |
|---|---|---|
| Execution of a contract | For the provision of electronic signature service and management of your account | Art. 6.1.b RGPD |
| Compliance with a legal obligation | For purposes that require it | Art. 6.1.c RGPD y Artículo 8.1 de la LOPDGDD |
| Consent of the data subject | For sending commercial communications (if there is no prior contractual relationship or for non-similar products), for processing special categories of data such as biometric (if applicable and explicit consent is required, Art. 9.2.a GDPR), or for the use of certain cookies | Art. 6.1.a RGPD |
| Legitimate interest of the controller | For improving our services, fraud prevention, or sending commercial communications about products or services similar to those contracted, provided that your interests or fundamental rights and freedoms do not prevail | Art. 6.1.f RGPD |
We will keep your personal data for the time strictly necessary to fulfill the purposes for which they were collected, and while you maintain your contractual relationship with us.
Once the contractual relationship has ended or deletion has been requested (and provided there are no legal obligations requiring their retention), your data will be blocked during the legal periods established for addressing possible liabilities arising from the processing. After these periods, we will proceed to their definitive deletion.
We will keep your data while you maintain your active account
We block data during legal periods to address possible liabilities
After legal periods, we proceed to definitive deletion
We will not transfer your personal data to third parties, unless there is a legal obligation or it is strictly necessary for the provision of the service. In particular:
As data subject, you have the right to exercise the following rights, recognized in articles 15 to 22 of the GDPR and developed in Article 12. General provisions on exercise of rights of the LOPDGDD:
To know if we are processing your data and, if so, access them.
To request correction of inaccurate or incomplete data.
("right to be forgotten"): To request deletion of your data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
To request restriction of processing of your data in certain circumstances.
To receive your personal data in a structured, commonly used and machine-readable format, and to transmit them to another controller, in certain circumstances.
To object to the processing of your data for reasons related to your particular situation, in certain circumstances (e.g. processing based on legitimate interest, direct marketing, profiling).
Including profiling, which produces legal effects on you or significantly affects you in a similar way.
Puedes ejercer estos derechos enviando una solicitud por escrito a nuestra dirección postal o a través del correo electrónico rgpd@signasuite.com, adjuntando una copia de tu DNI o documento identificativo equivalente para acreditar tu identidad.
We have adopted appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 28. General obligations of the controller and processor of the LOPDGDD and article 32 of the GDPR. These measures seek to protect your personal data against accidental or unlawful destruction, loss or alteration, or unauthorized communication or access.
Implementamos medidas de seguridad técnicas y organizativas como cifrado de datos, controles de acceso, auditorías de seguridad periódicas y formación del personal en materia de protección de datos.
It is important that the personal data you provide us is truthful and accurate. You commit to notify us of any modification or error in them.
Our services are not directed to minors under 14 years of age, unless they have the consent of their parents or legal guardians.
If you are aware that a minor under 14 years of age has provided us with personal data without such consent, please let us know so we can proceed to delete it.
We may modify this Privacy Policy at any time. Any changes will be published on this page and, if the changes are significant, we will notify you by email or through a prominent notice on our platform before the change takes effect.
We recommend reviewing this policy periodically.
If you have any questions or concerns about this Privacy Policy or about the processing of your personal data, do not hesitate to contact us through: