Information on personal data processing

Recipients of documents and Observers/Recipients of documents

on the AMODIT Trust Center Platform 

Data Controller and Data Protection Officer

1. The data controller of your personal data is ASTRAFOX Sp. z o.o. with its registered office in Warsaw (02-826) at ul. Poloneza 93, phone: +48 22 355 21 60, email address: office@astrafox.pl, hereinafter referred to as the “Controller” or “We.”

2. The Controller has appointed a Data Protection Officer (DPO) whom you can contact for any matters related to the processing and protection of personal data by sending an email to: iod@astrafox.pl.

Source of data and categories of data

3. We have received your personal data, including your name, email address, telephone number, company name, and position, from the User of the AMODIT Trust Center Platform (such as your contractor or employer) who has directed a document for you to sign, observe, initial, or download.

Purposes of processing and legal basis for processing

4. We process personal data for the purpose of providing a trusted service, which includes:
a. electronically identifying individuals to whom documents are addressed for signing/initialing or downloading,
b. enabling electronic signature, initialing, or refusal to provide a signature (if applicable),
c. verifying the correctness of initialing and electronic signatures (if applicable),
d. ensuring the integrity and authenticity of the document’s content and origin.

5. The legal basis for processing your personal data for the above purposes is our legitimate interest (Article 6(1)(f) of the General Data Protection Regulation, GDPR) in providing the trusted service in accordance with the Amodit platform’s regulations and the User’s instructions in Amodit Trust Center, who directed the document for signing, initialing, or downloading to you.

6. Personal data will also be processed for the purpose of potential claims settlement and securing claims or defending against claims, which constitutes the Data Controller’s legitimate interest based on Article 6(1)(f) of the GDPR.

Recipients of your personal data

7. Recipients of your personal data may include entities providing IT services to the Data Controller (software maintenance, server hosting), legal and advisory services, based on appropriate agreements, as well as entities authorized to receive your personal data under applicable laws and regulations.

Retention period

8. Personal data will be stored for as long as necessary to fulfill the specified purposes of processing, but no longer than the statutory limitation period for claims.

Rights of individuals

9. In accordance with the provisions of the GDPR, you have the right to:
a) access your personal data and request a copy of it (Article 15 of the GDPR);
b) request the rectification of your personal data (Article 16 of the GDPR);
c) request the erasure of your data (Article 17 of the GDPR);
d) request the restriction of processing of your data (Article 18 of the GDPR);
e) object to the processing of your personal data based on legitimate interests (Article 21 of the GDPR).

10. To exercise your rights, please contact the Data Controller or the Data Protection Officer at the email addresses provided in points 1 and 2 above, or by postal mail to the address of the Data Controller’s registered office.

11. Every individual also has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of their personal data violates the provisions of the GDPR.

Information about absence of profiling and absence of data transfer outside the EEA.

12. Your personal data will not be subject to automated decision-making, including profiling, and will not be transferred outside the European Economic Area (EEA).