Privacy notice
This notice is a draft awaiting legal review. The parts marked in brackets are still to be completed.
1. Who is responsible
The controller of the personal data described here is Signoria OÜ, registry code 17635613, Tallinn, Estonia ("Signoria", "we").
For any question about this notice or about personal data, write to kimmo@signoria.ai.
2. What this notice covers
This notice covers the signoria.ai website and the form on it through which a person asks for a pilot, a demonstration, security questions or another matter. It does not cover an installation of the signoria.ai platform operated by an organisation: there, that organisation decides what is processed and its own privacy notice applies.
3. What personal data is processed, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Full name, organisation (institution), work e-mail address, role and message (both optional) and the purpose chosen (pilot, demonstration, security questions or other), as entered in the request form | To answer the request and arrange the pilot, the demonstration or the answering of security questions | Article 6(1)(b): steps taken at the person's request before entering into a contract |
| The network (IP) address a request comes from, and how many requests came from it | To protect the form against abuse: at most three requests an hour from one address | Article 6(1)(f): our legitimate interest in keeping the service available and free of abuse |
| Technical records of each visit kept by the web server (network address, time, page requested, browser type) | To operate and secure the website | Article 6(1)(f): our legitimate interest in operating a secure website |
Giving the details in the form is voluntary; without a name, an organisation and an e-mail address the request cannot be answered.
4. Cookies and tracking
The website sets no cookies for analytics, advertising or tracking, and loads no scripts, fonts or content from third parties. It sets no cookie at all. Signing in to the platform happens on its own address, app.signoria.ai, which sets a cookie only to keep the session; it is strictly necessary for that purpose.
5. Who receives the data
- The request is sent by e-mail to kimmo@signoria.ai, where our staff handle it.
- The website and the e-mail are operated with the help of service providers acting on our instructions under data processing agreements: hosting by [hosting provider and location]; e-mail by [e-mail provider].
- Personal data is never sold, and is not used for newsletters or marketing lists without separate consent.
- Data may be disclosed to authorities where the law requires it.
6. Transfers outside the European Economic Area
The data is processed in the European Economic Area. Where a service provider processes it outside the EEA, the transfer relies on an adequacy decision of the European Commission or on the Commission's standard contractual clauses (Article 46(2)(c)). [to be confirmed for each provider]
7. How long the data is kept
- The request on the website's server: deleted as soon as its e-mail has been delivered, and in any case within 30 days.
- The e-mail with the request: kept for as long as needed to handle the request and any business relationship that follows, and no longer than [24 months] after the last contact.
- The count of requests per network address: one hour; the count for the whole website, one day.
- The web server's technical records: [number] days.
8. The rights of the person
Under the GDPR every person may ask for access to their personal data (Article 15), its rectification (Article 16) or erasure (Article 17), the restriction of its processing (Article 18) and its portability (Article 20), and may object to processing based on our legitimate interest (Article 21). To use any of these rights, write to kimmo@signoria.ai; we answer within one month.
Every person may also lodge a complaint with a supervisory authority, in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or with the authority of the member state where they live or work.
9. Automated decisions
No decision with legal or similarly significant effects is made about anybody by automated means alone.
10. Changes to this notice
This notice may be updated; the version in force is always published on this page with its date. Back to signoria.ai