Privacy policy

Your file

Your file is read and processed only by your browser, on your device. It is not sent to us or to Cloudflare, and we have no access to its content.

The same goes for the file name and for the signer’s data shown from the file.

On a computer you can check this yourself: open the developer tools (F12, on a Mac Cmd+Option+I; in Safari first turn them on in its advanced settings), go to the Network tab and choose a file on the tool page. No request carries your file.

Controller

The controller for the personal data described on this page is:

Name

Yusuf Can Samiloglu

Address (Anschrift)

Nalepastr. 19112459 BerlinDeutschland

E-mail

kontakt@sigpeek.com

We have not appointed a data protection officer, and the law does not require one in our case.

Hosting and connection data

When you load a page, your browser’s connection data reaches Cloudflare, Inc., which hosts this site. This data includes:

• your IP address
• traffic routing data
• system configuration information
• similar data about the traffic to and from the site

The purposes are delivering the pages, security and preventing abuse. The legal basis is art. 6(1)(f) GDPR. Our legitimate interest is to deliver this site to you and to keep it secure and free of abuse.

Cloudflare acts as our processor under its data processing agreement. For network data it derives for its own purposes, Cloudflare acts on its own account. Its privacy policy applies to that part.

Transfers outside the EEA

Cloudflare is a US company, so connection data and the messages you send us by e-mail or through the form can be transferred outside the European Economic Area. The transfer rests on two safeguards:

• EU-US Data Privacy Framework (art. 45 GDPR). You can look up Cloudflare’s entry on the framework’s website.
• Standard contractual clauses, module two (art. 46 GDPR). These are the fallback and take over if the certification lapses.

You can get a copy of the safeguards on request, by e-mail to kontakt@sigpeek.com.

How long data is kept

We keep no access logs ourselves. Cloudflare states that it processes this metadata for a limited period and publishes no number.

The criterion is therefore need: the data is processed for as long as delivery, security and abuse prevention require it.

Cloudflare also gives us aggregated traffic metrics, such as the number of requests. The figures we see identify no one and are kept for up to three months.

Contacting us by e-mail or through the form

If you write to us, by e-mail or through the form in the legal notice, we process your e-mail address and what you tell us, in order to answer you. The form also passes on the page’s language. The legal basis is art. 6(1)(f) GDPR, our legitimate interest being to answer your message, or art. 6(1)(b) GDPR if your message concerns a contract.

The message passes through Cloudflare’s e-mail service, which delivers it to our mailbox as our processor, and our e-mail provider receives it as a recipient. The site does not store messages from the form or keep a log of them. We keep the message for as long as the matter needs, and longer only where the law requires it.

Please do not send us signed files by e-mail, because we do not need them to answer you.

Cookies and browser storage

This site:

• sets no cookies
• uses no local storage of the browser

• uses no analytics tools (the only figures are the hosting metrics described under “How long data is kept”)

• loads no scripts or fonts from other sites

For this reason no consent banner is shown.

Links to other sites

Links to other sites, such as the gov.pl validator page or the EU DSS demo, open only when you click them. That site’s own rules then apply.

If you upload a file there, that happens outside this site.

Your rights

Under the GDPR you have the following rights regarding your personal data:

• access (art. 15)
• rectification (art. 16)
• erasure (art. 17)
• restriction of processing (art. 18)
• data portability (art. 20)

Right to object (art. 21). You can object at any time, for reasons relating to your situation, to processing based on art. 6(1)(f) GDPR.

To use any of these rights, write to kontakt@sigpeek.com. An IP address is often not enough for us to identify you, so we may be unable to link it to you.

You can also complain to a supervisory authority (art. 77 GDPR) in the place where you live or work, or where the infringement took place. In particular, you can turn to:

• the President of UODO in Poland
• the authority of the German federal state given by the address under “Controller” (list of authorities)

Do you have to provide data?

No law or contract requires you to provide personal data. Without connection data, however, the page cannot load.

We do not use automated decision-making or profiling.