What personal data does Paginio process, and why?

What and why

• Quote request: company name, tax ID, the contact person's name, email address, phone (if you give it) and your choices. For the quote and making the contract (GDPR art. 6(1)(b)).
• Contract and signature: the signer's name, the signature image or the qualified signature data, the time of signing, IP address and browser. For the contract and to prove who signed and when ((b) and (f)).
• Billing and payment: billing details and invoices; for cards only the processor's token, the last 4 digits, the expiry date and the consent. For performing the contract and the accounting obligation ((b) and (c)).
• Portal account and requests: name, email address, password (only in encrypted, irreversible form), the content you enter in the portal, your requests and the messages. For building and running the site ((b)).

Who the controller is

For the data above, the provider of Paginio. For the data collected on your site from your visitors, however, you are the controller and we are the processor: this is set out in the data processing annex of the framework contract.

Security

Encrypted connection (HTTPS), passwords stored encrypted, a daily backup kept for 30 days, and access to data only for those whose task needs it.