Privacy policy
Privacy policy
This Privacy Policy defines how Xtension signaturiX collects and uses users information and data.
The Xtension signaturiX is a software platform available at signaturix.xtension.pl, designed and created for convenient and secure signing of electronic documents.
Xtension signaturiX respects your right to privacy and the privacy rights of those who have entrusted their data knowing the importance of protecting any information collected about you guaranteeing its security.
Xtension signaturiX informs you that your data and the data of those who have entrusted their data are processed in accordance with national and European legal requirements, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC.
The administrator of personal data is Xtension sp. z o.o. Gdańsk, ul. Opacka 12, 80-338 Gdańsk, KRS 0000890232, REGON: 388458340, NIP: 5871729592.
Xtension signaturiX offers a functionality for signing electronic documents.
Xtension signaturiX processes the entrusted data for the following purposes:
Xtension signaturiX collects and uses certain personal account data. The user selects the configuration (login, password, first name, last name, email address, email for qualified signature, model of biometric signature device). Some of these data such as (login, password, first name, last name, email address) are required to create a user account.
Xtension signaturiX collects and uses certain personal data that the user chooses to enter into the system such as: information about the recipients/signers of the documents (name, surname, e-mail address, telephone number, name of locality). This data is stored in the user's address book and can be updated by the user.
Xtension signaturiX collects and uses the signaturix user's personal information that the user has agreed to share in the Google Drive account. (Google privacy policy). You may request for your data to be deleted from Google Drive by removing the archived document(s) from the signaturiX system.
Xtension signaturiX collects and uses certain personal data contained in documents that the user chooses to upload to the system. Signed documents can be archived on Google Drive, in a local document repository or in a database (depending on configuration).
Xtension signaturiX collects and uses certain personal data such as the e-mail address that the user chooses to enter into the system. In the case of using the SimplySign Sign qualified system - the e-mail address entered is sent to the SimplySign Third Party Qualified Signature System by Asseco Data System S.A. (Asseco Data Systems S.A. privacy policy)
Xtension signaturiX collects and uses certain personal data such as names, surnames, PESEL number, ID document number, ID document expiration date the user chooses to enter. If you use the Identity Verification Service - this personal data is sent to the Automated Party Identity System of idenTT2check verification services of IDENTT Sp. z o.o. (IDENTT privacy policy)
Xtension signaturiX collects and uses certain personal data such as names, surnames, PESEL number, identity document number, expiration date of the identity document scanned from the identity document. When using Identity Verification Services - this personal data is sent to Third Party Automated System of idenTT2check identity verification services of IDENTT Sp. z o.o. (IDENTT privacy policy)
Xtension signaturiX collects and uses certain personal information such as the phone number that the user chooses to enter. When using SMS authentication or SMS signing - the personal data entered is sent to third-party message gateway services by Autopay S.A. (Autopay S.A. privacy policy)
In case of using the KIR mSzafir Qualified Signature, user is redirected to the Third Party Qualified Signature system mSzafir of Krajowa Izba Rozliczeniowa S.A. where additional data must be entered to use the Qualified Signature. (KIR S.A. privacy policy)
In case of using the biometric signature, the signature's biometric data is encrypted and stored only in the document to be signed (PDF file). To decrypt it, a key stored securely in the HSM (Hardware Security Module) is required. Access to the decrypted biometrics is only available to persons authorised by the court. The access to the decrypted biometrics is only available to persons authorised by the court in a given case, e.g. an expert witness (graphologist).
Xtension signaturiX collects and uses some non-personal data that does not enable us to identify you (the only data tracked are: IP address used to connect to the system backend and User-Agent of the browser).
Xtension signaturiX does not use any advertising services (such as Google AdMob, Facebook Audience Network, Unity Ads, etc.) that can uniquely identify mobile devices to deliver better targeted messages.
In the course of data processing, your personal data will not be used for automated decision-making, including profiling.
In the course of processing your personal data, as a rule, will not be transferred to third countries, i.e. outside the European Economic Area (EEA) or to international organizations. However, having regard to entities operating outside the EEA, providing IT services to Xtension signaturiX, there may be a transfer of your data outside the EEA.
We will update this privacy policy as needed so that it is current, accurate, and as clear as possible. Your continued use of the Xtension signaturiX confirms your acceptance of our Privacy Policy.
If you have questions about our Privacy Policy, please contact us at Xtension signaturiX or Xtension sp. z o.o. Gdańsk, ul. Opacka 12, 80-338 Gdańsk
Updated: Apr. 30, 2024
Effective as of: Apr. 30, 2024