GDPR has been a hot topic since it was implemented. In this blog, we explain exactly how SigningHub complies with GDPR.
What is GDPR?
The EU General Data Protection Regulation (GDPR) was implemented in May 2018, changing personal data security.
GDPR requires global businesses to change the way they work when dealing with the personal data of EU citizens. GDPR puts customer privacy at its core, making it a fundamental right and ensuring personal data is kept safe.
GDPR compliance is important. Failure to meet requirements could lead to penalties such as fines. For especially severe GDPR violations, fines can reach 20 million euros.
GDPR addresses many key points, covering the lawful basis for:
- Processing
- Individual rights
- Accountability and governance
- Security
- International transfers
- Personal data breaches
GDPR lets users access and manage their personal data in an entirely new way.
SigningHub GDPR Compliance: Users’ rights
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision-making and profiling
Right to be informed
This right allows users to be informed about how, when and what personal information is processed, shared and transferred.
SigningHub provides references in its privacy policy and asks for users’ consent at registration. This privacy policy explains how SigningHub processes, stores and shares your personal information.
Changes in this policy are notified to users and consent is required before executing the policy.
Right of access
The right of access allows users to request details about what personal data organisations hold about them.
SigningHub already lets you access all the personal information held inside your account from the SigningHub portal. There is no need to submit a request. After login, you can access this information from Menu > My settings.
Right to rectification
This right allows the user to amend their personal data if it is inaccurate or incomplete.
SigningHub lets customers rectify their personal information from the SigningHub portal.
These details include:
- Name
- Mobile number
- Country
- Other personal details
The only item that can't be changed is the user's email address. It is used to identify and authenticate the user. Changing your email address requires you to delete your account and create a new account.
Right to erasure
The right to erasure allows a user to delete their account from SigningHub. You can request your account to be removed from SigningHub by emailing us.
Once we receive your request, we ensure your account is removed from all third-party processors used by SigningHub. Our privacy policy explains this and any minimal traces required for legitimate purposes. Once removed, you will no longer receive any communication from SigningHub.
Right to restrict processing
Individuals have a right to ‘block’ or suppress the processing of their personal data.
Please note: SigningHub doesn't process personal data, other than what is agreed at the time of account registration.
Once restricted, you will no longer have access to SigningHub and we will no longer process your data. It means the user will also not receive emails. You can request your account to be restricted or re-enabled by emailing us.
Right to data portability
This right allows individuals to obtain and reuse their personal data for their own purposes across service providers.
It allows them to safely move, copy or transfer personal data from one IT environment to another.
SigningHub allows users to request their personal data in the standard CSV format. You can request a copy of your personal data in portable format by emailing us.
Right to object
The right to object allows the user to object to the processing based on:
- Legitimate interests or the performance of a task in the public interest
- Exercise of official authority, including profiling
- Direct marketing, including profiling
- Processing for purposes of scientific or historical research and statistics
SigningHub doesn’t use your personal data for any purpose other than for marketing. You can opt out using the ‘unsubscribe’ link from the marketing emails you receive or by contacting us.
Automated decision-making
SigningHub doesn't do automated decision-making or profiling so this right doesn’t apply.
