Case Studies
Cookie PolicyPrivacy PolicyLegal NotePolicies and practicesCA CertificatesCRL & OCSPT&C VIDsigner service
Copyright © 2020 Validated ID, SL
In compliance with the provisions of Regulation(EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter, GDPR) and by Organic Law 3/2018, of 5 December on theProtection of Personal Data and Guarantees of Digital Rights (hereinafter, LOPDGDD) guarantees the due protection of users' personal data and for this purpose has prepared this Privacy Policy.
The use of this website implies the acceptance of this Privacy Policy, as well as the conditions included in the Legal Notice.
When you enter the VALIDATED ID website to make a technical, commercial, or contracting query, you are providing personal information for which VALIDATED ID is responsible for the processing. This information may include personal data such as your first and last name, email address, telephone number, or other information. By providing this information, you are giving your consent for it to be treated as described in the Legal Notice and in this Privacy Policy.
The purpose of collecting this personal data is none other than to respond to your queries or to process service contracts. In addition, there are other purposes, such as ensuring compliance with the conditions set out in the Legal Notice and by the applicable regulations.
For more information on the processing of personal data by VALIDATED ID, you can consult the following link: Record of Processing Activities
The processing of your data is carried out in order to comply with legal obligations by VALIDATED ID, as well as when the purpose of the processing requires your consent, which must be given through a clear affirmative action.
The legal basis for the processing of your data, as well as other additional information, can be found in our Record of Processing Activities.
The personal data you provide to VALIDATED ID will be kept according to its purpose, as established in current regulations or until its deletion is requested, with the legally established limits. You can check the retention periods in our Record of Processing Activities.
In general, personal data will not be communicated to third parties, except under legal obligation, which may include communications to Public Entities, the Tax Agency, Judges and Courts.
You can find the recipients for each of the processing activities carried out by the VALIDATED ID in the Record of Processing Activities.
VALIDATED ID has adopted the technical and organisational measures in accordance with the provisions of current regulations, with the security levels being adequate to the data provided and, in addition, all the means and technical measures at its disposal have been installed to prevent the loss, alteration, disclosure or destruction of information in the data provided to us.
This includes internal reviews of our information collection, storage, and processing practices, as well as physical and logical security measures to protect against unauthorized access to the systems on which information is stored.
The technical and organisational measures for data processing as well as the security measures implemented can be found in Technical and organisational measures for data processing and security measures implemented on VIDsigner.
Due to the nature of the electronic signature services provided by VALIDATED ID S.L., it has to access information provided by the Client that contains personal data, being considered a Data Processor in accordance with art. 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of this data and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR) and consequently this Privacy Policy specifies the conditions relating to such processing of personal data.
VALIDATED ID S.L., in its capacity as Data Processor, informs the recipient Users whose data are processed, that it will process the personal data of the Users or signatories provided by its Clients (Data Controller or Data Processor) for the provision of services in accordance with the order received and will keep them only for the time necessary to comply with legal and contractual obligations with its clients.
The data processed by VALIDATED ID by virtue of the order received will in no case be used for a purpose other than the provision of the signature service set out in this policy, in the contract for the provision of services or in the contract for the processing of processing, nor will they be transferred to third parties, except to the administrative or judicial authority that requests them and in cases where there is a legal obligation undertaking to store and process them by applying the technical and organisational measures necessary to comply with the provisions of this contract and current legislation. You can consult the Record of Processing Activities as a Data Processor.
In the following cases, the data subject or Recipient User must ensure that they read and accept the Privacy Policy of the Data Controller.
a) By collecting the User's handwritten electronic signature:
The handwritten electronic signature service provided by VALIDATED ID collects as evidence of the authorship of the signature, among others, the data related to the handwritten signature on a tablet-type electronic device, which allows the capture of data related to the signatory's writing behavior on a tablet-type electronic device, such as pressure, speed, tilt or acceleration. Therefore, when a signatory signs a document using our handwritten electronic signature, we will be collecting this data on behalf of our customers (Data Controller) after obtaining express consent.
b) Through the collection of data by a third-party Primary Service Provider:
It is possible that a company (Data Controller or Data Processor) that provides services or has another relationship with the Receiving User has subcontracted the services offered by VALIDATED ID to perform them. In this case, VALIDATED ID will collect your data, as Data Processor, for the purpose of providing you with the service contracted by the aforementioned company, undertaking not to use them for any purpose other than that for which they were collected.
The VALIDATED ID website uses cookies for its proper functioning. Cookies are files with information that are stored in your browser when you visit our website and in which the user's settings and preferences or the state of the browsing session are usually stored.
In our Cookies Policy you can consult all the information related to the policy of collection, purpose and processing of cookies.
VALIDATED ID informs you that you have the right to:
• To know if it is processed: anyone has, first of all, the right to know whether we process their data, regardless of whether there was a previous relationship.
• To be informed at the time of collection: when personal data is obtained directly from the individual, at the time of providing it, the individual has the right to have clear information about the purposes for which it will be used, who will be responsible for the processing, the recipients and the other aspects derived from it.
• Regarding access: anyone has the right to know what personal data is processed, the purpose for which it is processed, the communications that will be made to other people or the right to obtain a copy or to know the intended retention period.
• Regarding rectification: any person has the right to rectify inaccurate data that is subject to our processing.
• Regarding erasure: any person has the right, in certain circumstances, to request the erasure of data when, among other reasons, they are no longer necessary for the purposes for which they were collected and which justified the processing.
• Regarding the request for the restriction of processing: also in certain circumstances any person has the right to request the restriction of data processing. In this case, the data will no longer be processed and will only be kept for the exercise or defence of claims, in accordance with the General Data Protection Regulation.
• Regarding portability: any person has the right to obtain his or her own personal data in a structured and readable format and to transmit it to another entity responsible for data processing.
• Regarding the objection to processing: any person has the right to invoke reasons related to their particular situation that cause their data to stop being processed to the extent that they may involve damage, except for legitimate reasons or the exercise or defense of claims.
• Regarding not receiving information from VALIDATED ID S.L.: any person has the right not to continue receiving information from VALIDATED ID S.L.
The above rights can be exercised by sending a written request to VALIDATED ID S.L. at the postal address indicated in the header, or by sending an email to dpo@validatedid.com.
If you do not receive a satisfactory response in the exercise of your rights, you can file a complaint with the Spanish Data Protection Agency, through contact forms or other means.
VALIDATED ID S.L. will respond to the interested party regarding the exercise of the requested right within one month of receipt of the request. This deadline may be extended by a further two months if necessary, taking into account the complexity and the number of applications received. VALIDATED ID S.L. will inform the interested party of such extensions within one month of receipt of the request, indicating the reasons for the delay.
VALIDATED ID reserves the right to modify this Privacy and Data Protection Policy to adapt to new legislation, so we recommend that you read it before accessing and browsing the website. Notwithstanding the foregoing, the relations established with users, prior to the modification of the Privacy Policy, will be governed by the rules established at the time the user accessed the website for its establishment, without prejudice to the provisions of the General Data Protection Regulation.
Interested parties may communicate any questions regarding the processing of their personal data or interpretation of our policy at the following address: dpo@validatedid.com
The content of this policy is governed by the applicable Spanish and European regulations on the processing of personal data. For any question relating to the interpretation or application of this Privacy Policy, they expressly submit to the jurisdiction of the Courts and Tribunals of Barcelona.