Privacy Policy

Information about the processing of personal data of the clients and suppliers of NUBEO Technologies s.r.o.

Dear Clients, Dear Suppliers,

In this document you can find information regarding the processing of personal data by NUBEO Technologies s.r.o., ID No: 26458489, with its registered office at Zelený pruh 1560/99, Braník, 140 00 Prague 4, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 83605 ("we").

We process the personal data of our clients who use the Esigno tool as part of the contracting process with their customers and with whom we have entered into a contractual relationship. We also process the personal data of our clients, i.e. persons who directly use the Esigno service on an occasional basis, e.g. when signing documentation between themselves. We also process the personal data of our suppliers. In these cases, we are the data controller. We protect and handle this personal data in accordance with the applicable laws.

In relation to certain users of the Esigno application who use our tool as part of the contracting process with our clients, we act as a data processor where we process personal data within the framework of the service provided on the basis of instructions from our clients who are the data controllers.

The processing of personal data is based on Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and repealing Directive 95/46/EC (the "GDPR"). When processing personal data, we take great care to ensure that the processing is carried out in accordance with the law and complies with the processing principles provided by the GDPR and that we provide transparent information about the processing.

Purpose and legal basis for the processing of personal data

We only process personal data when necessary, usually on the basis of one or more of the legal grounds specified below:

1. performance of a contract - We process your identification data, contact data and payment data on the basis of the performance of the service contract for the purpose of establishing, maintaining and managing your user profile and fulfilling our obligations to you;
2. compliance with legal obligations - we process your personal data on the basis of our legal obligations under the applicable laws, such as:
   1. Act No. 89/2012 Coll., Civil Code, as amended;
   2. Act No. 634/1992 Coll., on Consumer Protection, as amended;
   3. Act No. 235/2004 Coll., on Value Added Tax, as amended;
   4. Act No. 563/1991 Coll., on Accounting;
3. our legitimate interests - we process your identification and contact data on the basis of our legitimate interests for the purpose of handling complaints, preventing potential disputes, resolving legal claims, managing client relationships and sending necessary communications;
4. consent - we process your personal data based on your consent for the purpose of sending you commercial communications or informing you about new features of our application and third party offers if you are interested in learning more about our services.

Method of collection and retention period of personal data

We collect personal data directly from you, primarily based on your registration in the Esigno application and your use of the application and services. We obtain other data in the course of our business, in particular as derived information from the data provided by you. We may also receive personal data from our customers, who may provide it to us as data controllers for the purposes of using our services.

We process personal data for the period necessary to fulfil contractual obligations, protect legitimate interests or for the period for which we are legally obliged to process the data (usually for a maximum of 10 years from the date of signature of the document). We also process personal data for the period of 9me for which you have given your consent to the processing of personal data in connection with the electronic signature.

Categories of personal data processed

Depending on the specific purpose, we process only those categories of personal data that are necessary for that purpose. Usually, it is:

1. identification data (academic degrees, name, surname, date of birth, permanent address, ID number and VAT number);
2. contact details (telephone and e-mail contact);
3. login data to the application (username and password);
4. payment details (bank details);
5. information about your device (IP address, seat ID and pair ID, operating system name and version, web browser name and version, device type);
6. signature of the data subject;
7. information on the commitments and documents that are signed, as well as their content.

Transfer of personal data to third parties

We only ever transfer personal data if such transfer is necessary. The data is transferred to our processors. Our processors are based and process personal data exclusively in the Czech Republic or in another EU country. The categories of personal data processors include mainly providers of accounting, IT and marketing services.

Personal data may also be transferred to public authorities if we are legally obliged to do so.

We do not transfer personal data to countries outside the EEA or to international organisations, except where such transfer is governed by standard contractual clauses or other similar relationship or instrument providing sufficient protection for data subjects.

Rights of the personal data subject and their exercise

In accordance with the applicable laws, you have the following rights as a data subject:

1. the right of access to personal data - you can find out whether, for what purpose and in what form your personal data is processed, however, in the event of a repeated request, we may charge a fee for any next copy;
2. the right to rectification of inaccurate or incorrect personal data - if you find that your personal data we process is inaccurate or incorrect, you have the right to request rectification of such personal data;
3. the right to withdraw consent - you can withdraw your consent to the processing of personal data at any 9me by sending an email to info@esigno.com;
4. the right to erasure - if you choose to have your personal data erased from the registration, the deletion will be made if:
   1. your personal data is no longer needed for the purposes for which it was collected;
   2. you object to processing and there is no legitimate reason for processing;
   3. the deletion is based on a legal obligation;
   4. the processing is unlawful;
5. the right to restrict the processing of personal data - if you do not want your personal data deleted but only want to temporarily restrict the processing of your personal data;
6. the right to data portability - if you yourself wish the controller to provide your personal data to other controllers and there are no legal or other serious obstacles to this, your request will be granted;
7. the right to object - you may object to the processing of your personal data at any 9me if you suspect that the processing is being carried out in breach of the law or otherwise restricts you;
8. the right to lodge a complaint with the supervisory authority - you can contact the Office for Personal Data Protection (www.uoou.cz) at any 9me, submitting a complaint or other suggestion by e-mail: posta@uoou.cz or at Pplk. Sochora 727, 170 00 Prague 7.

Automatic decision making and profiling

We do not use automated evaluation of personal data or other methods used to profile the data subject in the processing of personal data.

Method of protection of personal data

We use a wide range of security processes and measures to maintain the security, integrity and availability of your personal data. The security methods we use include:

1. restricting personal access to personal data only to persons having sufficient authorization;
2. continuous monitoring of access to IT systems securing personal data;
3. the transmission and storage of personal data only in encrypted form;
4. installing firewalls and other security measures to prevent unauthorised access.

Contact details of the controller

The controller has not appointed a data protection officer. The data controller can be contacted at Zelený pruh 1560/99, 140 00 Praha 4 or by e-mail at info@esigno.com.