Privacy Policy

1. Data Controller

The data controller for your personal data is Skiwo AS, located at Strandgata 19, 0152 Oslo, Norway.

2. Data We Collect

Account Information

• Email address
• Name (if provided)
• Phone number (for verification)

Usage Data

• Access logs and timestamps
• Actions performed in the service
• Device and browser information

3. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide services you have requested
• Consent: For optional features and communications
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

4. Data Sharing

We do not sell your personal data. We do not share your data with third parties except in the following cases:

• Service providers: We use trusted infrastructure providers (hosting, file storage, email delivery, payment processing) to operate our services.
• Law enforcement: We may disclose data to law enforcement authorities when required by law, in response to a valid legal request, or to report suspected illegal activity. This may include user account data, audit logs, IP addresses, uploaded content, and access records.
• Legal proceedings: We may disclose data as necessary to protect our rights, your safety, or the safety of others, or to comply with a court order or legal process.

5. Audit Logging

All activity on our services is logged for security and compliance purposes. This includes login events, content access, uploads, downloads, and administrative actions. Each log entry records the actor identity, timestamp, IP address, and event metadata. These logs may be provided to law enforcement upon lawful request.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Audit logs and account data may be retained for up to 12 months after account termination for legal and compliance purposes. Content you delete is removed from our systems, subject to backup retention schedules and legal hold requirements.

E-signering med VAMOSign

Når noen signerer et dokument med VAMOSign, registrerer vi navnet de skriver, e-postadressen deres, mobilnummeret hvis avsenderen oppga et, IP-adressen, tidspunktet for hvert steg og dokumentets SHA-256-kontrollsum. Ved selfie-signering beholder vi også bildet som ble tatt på signeringssiden.

Alle får den signerte PDF-en på e-post. VAMOSign har den til nedlasting i 30 dager. Etter 90 dager slettes filene, og navn, e-postadresser og IP-adresser anonymiseres, med mindre arbeidsområdet som sendte betaler for Arkiv, som beholder dem så lenge det er på. Kontrollsummene og tidspunktene beholdes, så et forseglet dokument fortsatt kan sjekkes.

Den som har et signert dokument, kan sjekke det på www.vamosign.com/verify med registreringskoden på signeringsbeviset, og kan bekrefte hvem som signerte ved å skrive inn e-postadressen til alle som signerte; vi svarer bare ja eller nei for hele settet. For et dokument signert av flere beholder vi et enveis fingeravtrykk av alle e-postadressene deres samlet (en nøkkelbasert hash) etter at adressene er anonymisert, bare for å svare på det spørsmålet. For et dokument signert av én person beholder vi ingenting til dette, og sjekken stopper når adressen er anonymisert. Behandlingsgrunnlaget er berettiget interesse: å kunne vise at en signatur har skjedd, er hensikten med å signere.

For dokumenter et arbeidsområde sender, bestemmer arbeidsområdet hvorfor opplysningene behandles, og er behandlingsansvarlig. Skiwo AS behandler dem på arbeidsområdets vegne, etter databehandleravtalen som er en del av vilkårene. Les databehandleravtalen

Den som har signert, kan protestere mot at fingeravtrykket beholdes og be om at det slettes. Skriv til privacy@skiwo.com.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to certain processing activities
• Request restriction of processing

To exercise these rights, contact our Data Protection Officer at privacy@skiwo.com.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security audits.

9. Cookies

We use essential cookies to provide our services. We use Simple Analytics for privacy-friendly usage statistics without tracking cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by email or through our services.

11. Contact Us

For privacy-related questions or to exercise your rights:

Data Protection Officer:
privacy@skiwo.com

Company:
Skiwo AS
Strandgata 19, 0152 Oslo, Norway