Privacy Policy & Data Protection (GDPR)

Data Controller: DIGITAL INNOVATION GLOBAL LLC (EIN: 35-2870448)

Server Storage Location: Data servers physically located in La Rioja, Spain (Arsys Datacenter - Tier III / ISO 27001 / High ENS).

Privacy Contact: info@digitalinnovationglobal.com

1. Purpose & Processed Data

DigFirma processes only essential data required to provide digital signature services:

• Requesters (Registered Users): Full name, email address, and encrypted password (to manage signature requests).
• Remote Signers: Full name, National ID / Passport, signature image/stroke (or X.509 digital certificate seal), IP address, and signature timestamp.

2. Legal Basis for Processing (Art. 6 GDPR)

• Service Performance (Art. 6.1.b GDPR): For registered users generating signature requests.
• Explicit Consent (Art. 6.1.a GDPR): Granted by signers checking obligatory authorization boxes prior to submission.

3. Applied Technical Security Measures (Art. 32 GDPR)

• Transport Encryption: HTTPS / TLS 1.3 protocol encryption.
• Client-Side Processing (Mode 1): Manual cropping and PDF stamping executed 100% inside user's browser memory.
• Credential Hashing: Passwords stored using irreversible hash algorithms (Bcrypt / Argon2).
• Database Isolation: SQLite database stored in a restricted server directory.
• Signature Audit Trail: Timestamp and IP address logged for auditability.

4. Data Subject Rights (GDPR)

Users and signers may exercise their rights of Access, Rectification, Erasure ("Right to be Forgotten"), Restriction, Portability, and Objection at any time by emailing info@digitalinnovationglobal.com.