Does Certyneo collect personal data on my signers and must I inform them (GDPR)?

Yes, Certyneo collects certain personal data on your signers, including their name, IP address, signature timestamp, and phone number if they use SMS for advanced signature (AES).

1. Legal basis: The legal basis is the performance of the contract between you and Certyneo, as this data is necessary for the proper functioning of the electronic signature.
2. Signer notification: Certyneo does not collect additional non-essential personal information. However, it is recommended that you inform them of the nature and purpose of this data collection, as well as their right to access and deletion via the envelope signature page.
3. Data controller: Certyneo is the data controller for the collected data.

In practice, you can include a notice in your signature document or in the envelope details to inform your signers of this data collection. You can also use the signature page to provide them with additional information.

For more details on data protection and GDPR, consult our guide to electronic signature, GDPR and eIDAS.