Privacy Notice
Thank you for visiting our website.
Sign.com respects your right to privacy when you use our services, visit our website, or communicate with us. We take all necessary measures to ensure that any personal data you give us is treated in compliance with data protection laws and with this Privacy Notice.
Sign.com is owned by Smallpdf AG, a company incorporated under the laws of Switzerland, with its registered offices at Steinstrasse 21, 8003 Zürich, Switzerland, also reachable at privacy@sign.com. ‘Personal data’ is any information that relates to an identified or identifiable natural person, such as your name or email address.
In exchange for our services, when you visit our website or communicate with us, we may process personal data related to you (‘Your Personal Data’). In these cases, Smallpdf is the controller of Your Personal Data.
When you upload or otherwise provide files and information, which may contain personal data related to you or others and process such files and information using our services (‘User Files’), you remain fully responsible for such personal data contained in the User Files.
In the paragraphs below, we endeavour to provide you with information about our processing of Your Personal Data, your rights regarding Your Personal Data, and the measures we take to maintain the privacy and security of Your Personal Data.
If you provide us with the personal data of other people (such as family members or work colleagues) or provide us User Files which contain personal data related to other people, please make sure they are aware of this Privacy Notice and only provide us with their data if you are allowed to do so, and such personal data is correct.
Our website and communications may contain links to other websites. If you follow a link to any of those websites, please note that the personal information you submit will be processed according to their own privacy notices and that Sign.com/Smallpdf does not accept any responsibility or liability for those websites. Please make sure to check those privacy notices before you submit any personal information to those websites.
This Privacy Notice has been drafted to be in line with applicable privacy laws. Based on your location, this might, for example, be the Swiss Federal Data Protection Act, the California Consumer Privacy Act, or the EU General Data Protection Regulation (GDPR).
Key Questions and Answers
1. What personal data does Smallpdf collect through its sign.com website and for what purposes?
In brief: If you use our services, regardless of whether you are a free or paying user, we will collect Your Personal Data as required to provide our services to you and/or help us improve our services for you.
1.1 Use of our website
If you visit any domain or subdomain of sign.com and do not register for or log into your account, we collect and process Your Personal Data that is necessary to enable your informational use of these domains. We also use functional cookies and other technologies (see Section 8) to enable this functional use of our website and to maintain the stability and security of our website. For these purposes, we process your IP address and other usage metrics along with the date and time of your access. We process Your Personal Data to provide our website to you (Art. 6 (1) (1) b GDPR) and based on our legitimate interest in maintaining our website’s stability and security (Art. 6 (1) (1) f GDPR).
1.2 User Account
If you create a sign.com account (including for a free trial of our services) via our website we process your email address and the password you choose at registration.
You can also create a user account for our services using your pre-existing Google, Apple, or Facebook accounts and use that third-party platform’s credentials to log in to your user account with us. If you choose this option, you allow us to request and use some of Your Personal Data from the third-party account.
For Google, this involves us processing your name, surname, email address, and public profile information (e.g. profile picture). For Facebook, we will process your email address and public profile information (username and profile picture). For Apple, this involves us processing your username and email address. The third-party platform may ask for your consent to share this data with us. As the personal data we may process under this option was originally collected by the third-party platform, the initial data processing and sharing of the data with us is governed by the privacy policy of such third-party platforms (thus, either Google, Apple, or Facebook). Please refer to the relevant third-party platform and/or its settings, if you want to deactivate the connection between the third-party platform and us.
We process Your Personal Data to set up your user account and, thus, form a contractual relationship (Art. 6 (1) (1) b GDPR).
For security reasons, we also process the time, browser, IP address of your last login, and the time of your last password reset. We have a legitimate interest to process this information to filter out suspicious login requests and to detect and prevent abuse of your user credentials (Art. 6 (1) (1) f GDPR).
1.3 Sign.com paid subscription
During registration of your user account or later on, you may provide Your Personal Data as part of your profile if you purchase any of our paid subscriptions. These types of personal data vary based on the type of account (single or team), the type of subscription, and the payment method you choose. These types of data may generally include your name, address, which subscription plan you are on, your payment method (e.g. PayPal), your VAT or other tax number, user settings, your company, role, and employee status.
We process Your Personal Data to suggest the right type of subscription for your needs to you and to complete your purchase. The data processing serves to conclude and fulfill the subscription contract between you and us (Art. 6 (1) (1) b GDPR).
a) Payment
We use or shortly will be able to use payment data and information on your subscription and payment history (subscription plan, billing period, etc.) to process the regular payments for your sign.com paid subscription and, thus, fulfill our contract (Art. 6 (1) (1) b GDPR). We accomplish this through third-party payment processors, such as PayPal (in case you choose Paypal as a payment method or, in some cases, for credit card payments). For further information on these providers, please visit section 4 below.
If you choose credit card as your payment method, your full credit card number is always sent directly to the payment provider and never reaches our server. We only receive the first and last four digits of any credit card.
b) Invoices
We process your account, subscription, and payment information to fulfill our legal obligations (legal data storage obligations, e.g. under tax law) (Art. 6 (1) (1) c GDPR) and provide you with invoices under our contract (Art. 6 (1) (1) b GDPR). We also use Recurly as a subscription management provider to help us in providing the aforementioned services. For further information on this provider, please visit section 4 below.
1.4 Email communication, ation, including customer support, newsletters, and other marketing emails
When you communicate with us via email, including for customer support, you provide us with your email address and may provide us with your name, contact details, and other personal data, including the content of your email. We process this information to answer your request (Art. 6 (1) (1) b GDPR).
We may send you our newsletter or other marketing emails, generally only with your consent (Art. 6 (1) (1) a GDPR). However, where you have already purchased products and/or services from us, we may inform you about our similar products or services via email where we have informed you of such a possibility in advance and allowed you to refuse it. We do so under our legitimate interest to promote our business with existing customers (Art. 6 (1) (1) f GDPR). Please note that you can opt out of such email communication by clicking on the unsubscribe link at the end of each marketing email.
For information about third-party providers that we may use for the aforementioned purposes, please visit Section 4 below.
1.5 Service improvement and error detection
We may process information on your default system language, your device, your usage of our services, and information on the pages of our website that you have visited. For error detection, we aggregate this information by shortening your IP address, such that it is not directly attributable to specific users. We only use this information in this aggregated form. We generally use the same type of information, as well as file metadata, for analytical purposes to improve our services by identifying features our users like and how our services function with different devices. We have a legitimate interest in using this information for service improvement (Art. 6 (1) (1) f GDPR). For information on third-party providers that we use for these tasks, please visit Section 4 below.
1.6 Surveys & user feedback
We occasionally conduct voluntary surveys through our website or other methods to collect user feedback. For some of these surveys, we may process Your Personal Data, such as your name, email, and IP address in addition to your feedback/answers. In other cases, we only collect aggregated information that is not directly attributed to specific users (e.g. yes or no answers through a survey field only). We process and store all of the aforementioned information to carry out the surveys (Art. 6 (1) (1) b GDPR) and under our legitimate interest to collect user feedback (Art 6 (1) (1) f GDPR). In some cases, we may also collect your consent (Art. 6 (1) (1) a GDPR). For more information on third-party providers we use for this purpose please visit Section 4 below.
1.7 Our services
a) Signature/eSign
If you use our eSign tool, we process and store your signature(s) for future use at your convenience. If you are requesting a signature via our eSign tool from someone else, you remain fully responsible for the data processing regarding the other person. In order to verify the signing process, we also process other information on the involved persons/people, such as their email address, their IP address, the time of their signature, and the document status. This is necessary to provide the eSign tool (Art. 6 (1) (1) b GDPR) and is based on our legitimate interest to provide you with an easy-to-use and smooth service as well as to prevent its abuse (Art. 6 (1) (1) f GDPR).
2. How does sign.com protect Your Personal Data?
In brief: Ensuring the safety and security of our service and Your Personal Data is a priority.
Sign.com uses appropriate technical and organizational measures to protect Your Personal Data. Only authorized sign.com staff or third-party company staff (i.e. service providers) have access to Your Personal Data. All such staff are required to adhere to our Privacy Notice. Additionally, all third-party employees who have access to Your Personal Data must sign non-disclosure agreements. In addition, sign.com has contracts in place with third-party companies that have access to Your Personal Data in order to protect it. To protect Your Personal Data, sign.com maintains a secure IT environment and has measures in place to prevent unauthorized access to it. All communication and file transfers to and from our server are encrypted with TLS. Passwords are only stored in encrypted (hashed) form, never in plain text.
3. How does sign.com use Your Personal Data?
In brief: We use Your Personal Data to provide you with high-quality services. Your privacy is our priority. We would not use Your Personal Data for any unlawful purposes.
In specific cases, Your Personal Data may also be processed for the following purposes:
● In case we partially or fully sell the company or buy another company in whole or in part. We have a legitimate interest to further the development of our company through mergers and acquisitions (Art. 6 (1) (1) f GDPR).
● To comply with our legal obligations, including participation in investigations and proceedings conducted by the government or public authorities (Art. 6 (1) (1) c GDPR).
● In case we have a legal obligation to this effect (Art. 6 (1) (1) c GDPR), we may process Your Personal Data to protect our rights and safety, as well as those of our customers and third parties. Although we may not have a legal obligation to do so, we may still process data for this purpose based on our legitimate interest or those of other affected persons in order to assert legal claims (Art. 6 (1) (1) f GDPR).
4. To whom does sign.com disclose Your Personal Data, and why?
In brief: We share some of Your Personal Data with others in order to provide you with our services. Don’t worry, we do not sell Your Personal Data or give it to spammers.
Sign.com may share Your Personal Data with the following categories of recipients as necessary:
● External services providers (e.g. hosting providers, software and software as a service providers, app development providers, email service, email verification and email analytics providers, providers for error logging and service development, customer support providers, survey and user feedback providers, payment providers, billing service providers, and marketing providers). We have a legitimate interest to use external providers to ensure that we can provide our services in a professional and user-friendly manner and with a high level of service quality (Art. 6 (1) (1) f GDPR). Data transfers to service providers are covered by data processing agreements between us and the respective provider (in connection with Art. 28 GDPR).
● In the event that we buy or sell our company in whole or in part, data may be transferred to our potential contractual partners. We have a legitimate interest to further the development of our company in this manner (Art. 6 (1) (1) f GDPR).
● To law enforcement agencies, public authorities, and courts in order to comply with legal obligations to participate in investigations and proceedings conducted by governments or public authorities (Art. 6 (1) (1) c GDPR).
● To other companies, individuals, or government agencies where it is required to disclose personal data by law (Art. 6 (1) (1) c GDPR) or based on legitimate interests to protect our rights or safety as well as those of our customers and third parties (Art. 6 (1) (1) f GDPR).
Some of the aforementioned providers may process Your Personal Data outside the EU/EEA. For more information on protective measures used to secure data transfers in countries outside the EU/EEA, please see Section 7 below.
Among other things, sign.com may share Your Personal Data with the following third parties, but only in the circumstances set out below:
4.1 Essential providers
4.1.1 Vercel Inc, 440 N Barranca Ave #4133, Covina, CA 91723, privacy@vercel.com will process some of Your Personal Data for the legitimate interest of providing hosting services. For details of their processing please visit:https://vercel.com/legal/privacy-policy#eea
4.1.2 Amazon Web Services (AWS) EMEA Sarl, 38 Avenue John F. Kennedy, L-1855, Luxembourg will process some of Your Personal Data for the legitimate interest of document storage. For details of their processing please visit:https://aws.amazon.com/privacy/
4.1.3 PostHog Inc,2261 Market Street #4008, San Francisco, CA 94114, will process some of Your Personal Data for the legitimate interest of event tracking services. For details of their processing please visit: https://posthog.com/privacy
4.1.4 Supertokens Inc,will process some of Your Personal Data for the legitimate interest of authentication services. For details of their processing please visit: https://supertokens.com/legal/privacy-policy
4.1.5 Twilio Ireland Limited, a company registered in the Republic of Ireland, whose registered address is 3 Dublin Landings, North Wall Quay, Dublin 1, Ireland t/a Sendgridwill process some of Your Personal Data for the legitimate interest of email services. For details of their processing please visit: https://www.twilio.com/en-us/legal/privacy
All of the above essential providers must process Your Personal Data only in accordance with our instructions and to the extent permitted by data protection law. Some of these providers may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see Section 7 below.
4.1.6 PayPal
We may offer payment via PayPal, a service offered by PayPal Pte. Ltd., 5 Temasek Boulevard, #09-01 Suntec Tower Five, Singapore 038985. If you select PayPal as your payment method, you will be redirected to the PayPal website and the personal data you enter will be transmitted to PayPal in encrypted form. Paypal enables you to make payments under our contract (Art. 6 (1) (1) b GDPR) and according to our legitimate interest to offer you extended payment options and to outsource payments (Art. 6 (1) (1) f GDPR).
PayPal acts as a data controller in providing its services. Therefore, the data processing is governed by PayPal’s privacy policy, not ours. We have no control over the data that PayPal collects or the extent of data use by PayPal. For details about PayPal’s data processing, please refer tohttps://www.paypal.com/en/webapps/mpp/ua/privacy-full
PayPal may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see Section 7 below.
4.2 Personalization and advertising-related providers
4.2.1 Google Ads
a) Conversion Tracking
We use Google Ads Conversion Tracking (offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA) on our website. We use this service to determine how successful our advertisements through the Google marketing network are (so-called Google Ads) based on the display of the advertisements and clicks by users. This service makes our advertisements more interesting for you and improves our marketing campaigns.
To enable this service, Google places a conversion tracking cookie on your computer (for further information on cookies see Section 8 below). You can consent to the processing of Your Personal Data by Google (Art. 6 (1) (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.
The cookie expires within 30 days after visiting our website. It enables Google to recognize your internet browser and captures the unique cookie ID, the number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (ads that the user no longer wishes to be addressed with). If you visit our website before the cookie expires, we and Google can recognize you, for example, if you click on an ad for our services and are redirected to our website. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.
b) Google Ads Remarketing
We also use the online marketing service Google Ads Remarketing offered by Google (see 4.5 for company details) on our website. We use this function to present you with advertisements on our website based on your interests in Google Ads on other websites within the Google marketing network. For this purpose, Google analyzes your interaction with our website, e.g. which offers you were interested in, in order to be able to display relevant advertisements on other sites even after you have finished visiting our website.
To enable this service, Google places a cookie on your computer (for further information on cookies see section 8 below). You can consent to the processing of Your Personal Data by Google (Art. 6 (1) (1) a GDPR) and/or prevent it/withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.
This cookie expires 180 days after visiting our website. Google uses this cookie to analyze how you interact with Google Ads on our website and on other websites to present you relevant advertisements.
c) General information on Google Ads
Google acts as a data controller for Google Ads and may process Your Personal Data for other purposes. We have no control over the data that Google collects or the extent of the data collected by Google. We also have no knowledge of the content of the data transmitted to Google. For details about Google’s data processing, please refer to:https://policies.google.com/privacy. Google may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see Section 7 below.
4.2.2 Facebook
Our website utilizes Facebook Pixel (provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA) for the following purposes:
a) Facebook Conversion Tracking
We use the Facebook Pixel as an analytics tool to measure the effectiveness of our advertisements on Facebook by understanding the actions that Facebook users make on our website. The tool allows us to follow the actions of users after they are redirected to our website via an advertisement on Facebook (so-called “conversion”). This allows us to evaluate the efficacy of our Facebook advertisements for statistical and marketing research purposes.
b) Facebook Custom Audiences
We also use the Facebook Pixel for remarketing purposes in order to be able to show you advertisements on Facebook likely to correspond to your interests. This tool allows us to match visitors of our website to Facebook users and enables us to create Facebook advertisements for different target groups based on how they interacted with our website.
The Facebook Pixel captures information about your browser session when visiting our website and shares this information with Facebook, along with a hashed version of your Facebook ID and the viewed URL. We will only place the Facebook Pixel (for information on cookies and similar technologies, see Section 8 below) with your consent (Art. 6 (1) (1) a GDPR). Therefore, you can prevent the use of Facebook Pixel or withdraw your consent at any given time through our cookie banner. To withdraw your consent, go to the cookie settings at the bottom of our website.
The Facebook Pixel will be deleted after 180 days of your last interaction with our website. Facebook provides us with aggregated reports which enables us to improve the quality and relevance of our advertisements on Facebook and to present Facebook users with more relevant advertisements for marketing improvement.
We and Facebook are joint controllers for data processing through the Facebook Pixel under Art. 26 GDPR and have entered into a joint control agreement. You may access this agreement here:https://www.facebook.com/legal/controller_addendum. You may exercise your data protection rights directly with Facebook.
Facebook may process personal data outside the EU/EEA. For more information on protective measures for securing data transfers to countries outside the EU/EEA, please see Section 7 below.
5. What are my data protection rights, and how can I exercise them?
in brief: You have certain rights over Your Personal Data under data protection laws, including, for example, the Swiss Federal Data Protection Act, the California Consumer Privacy Act, or the EU GDPR.
Depending on the specific circumstances of the case and your place of residence, you may have some or all of the following rights:
● to withdraw your consent to the processing of Your Personal Data at any time. As a result, we may no longer process Your Personal Data based on the consent. But the withdrawal of your consent has no effect on the lawfulness of processing before the withdrawal;
● to access the personal data processed by us and/or request copies of this data. In particular, you can obtain information about the purposes of processing, categories of personal data, categories of recipients to whom your data has been or will be disclosed, planned retention period, and origin of your data if it was not collected directly from you;
● to request the rectification/correction, erasure, or restriction of processing of Your Personal Data;
● to request Your Personal Data, which you have provided to us, in a structured, commonly used, and machine-readable format and to transmit this data to another controller. You may also ask us to directly transmit this data to another controller, where technically feasible;
● to object to the processing of Your Personal Data on grounds relating to your particular situation, if we process Your Personal Data based on our legitimate interests. You may also object to the processing of Your Personal Data for direct marketing purposes at any time;
● to opt-out of the sale of Your Personal Data to third parties. We currently share some data with Google and Facebook via cookies. You may opt out of these cookies by following the instructions in 4.2.1(a) (for Google) and 4.2.3(c) (for Facebook)
. At sign.com, data security and privacy are a priority. We never sell or share user information without asking for your permission. However, please note that the term "sale" is broadly defined according to the California Consumer Privacy Act (CCPA), and could include sharing information and data related to advertising cookies. Please refer to our Cookie Policy for more information.
● to obtain information of the possibility of denying consent to the data processing and the consequences of the denial;
● to oppose the processing grounded on a legal basis other than consent;
● to request review, by a natural person, of decisions taken solely on the basis of automated processing of personal data that affects their interests, including decisions intended to define their personal, professional, consumer or credit profile, or aspects of their personality.
In general, exercising these rights requires you to be able to prove the account ownership. In order to assert these rights, please contact us at Sign.com, Smallpdf AG, Steinstrasse 21, 8003 Zürich, Switzerland or via email at
In general, exercising these rights requires you to be able to prove the account ownership. In order to assert these rights, please contact us at Sign.com, Smallpdf AG, Steinstrasse 21, 8003 Zürich, Switzerland or via email at privacy@sign.com, or using this form. After you’ve contacted us, we may ask you for some information to prove your identity; what we ask for will depend upon whether or not you have an account with us. Once we have authenticated your identity, we will fulfill your request within one month unless we inform you otherwise. You may also contact our representatives in the EU and the UK as well as our Data Protection Officer as set out in section 10You can have an agent (your attorney or another person empowered to represent your interests) make one of these requests on your behalf. We will ask the agent to provide proof of your authorization and proof of both their and your identity.
In addition, every data subject has the right to enforce their rights in court or to lodge a complaint with the competent data protection authority. We will not discriminate against you for exercising your data rights in any way; however, please be aware that the erasure of certain essential data may prevent us from continuing to provide you with the same services.
6. How and for how long do we store Your Personal Data?
In brief: We keep Your Personal Data and the User Files you upload only as long as they are needed for the provision of our services or as required by law.
We will only retain Your Personal Data and User Files you upload for as long as necessary to fulfill the purpose for which it was collected or to comply with legal requirements. To help us, we apply criteria to determine the appropriate periods for retaining Your Personal Data depending on its purpose, such as account maintenance, facilitating client relationship management, and responding to legal claims or requests from authorities.
If you do not have a User Account (see Section 1.4 above) or are not logged in when using our services (e.g. when being asked for a signature via our eSign tool, see Section 1.9 above), we will generally delete User Files within 14 days after the last time they were opened. Please note that this retention period is extended by another 14 days every time you reopen the respective User File. Please note that if you use third-party services to access our services, data retention of User Files by the respective provider may differ
If you access our services via a User Account, we delete User Files within one hour unless you save them to your file storage. When you choose to delete saved User Files, we generally delete them within 14 days.
7. Which data transfers outside the EU/EEA take place?
In brief: In some cases, we may transfer Your Personal Data outside of Switzerland and will ensure that Your Personal Data is well protected irrespective of its location.
We are located in Switzerland, which has been recognized as a safe third country in an adequacy decision of the European Commission. When you use our services, Your Personal Data may be transferred to recipients located in other countries, including outside the EU/EEA.
Where such a recipient country does not provide for an adequate level of data protection according to the European Commission, we will only transfer Your Personal Data to the recipient country on the basis of appropriate safeguards, such as binding corporate rules, the Standard Contractual Clauses of the Commission Implementing Decision (EU) 2021/915 of June 4, 2021, or when another exception under Art. 49 GDPR applies. Please contact us (see “Contact Us” section) to request information on the specific safeguards that are in use for the recipients of Your Personal Data.
8. COOKIES–How and why does sign.com use them?
In brief: We may use cookies for functional purposes without your consent, or for analytical or advertising-related purposes, if you consent to this.
A cookie is a small piece of data placed on your computer’s hard drive that permits identifying a specific device or browser. We may place our own cookies (first-party cookies) or third-party services integrated on our website may place cookies on your device (third-party cookies). Cookies may typically process personal data, such as your IP address, device information, date and time of your visit to our website, information on your activities on our website, settings you make when visiting our website, and unique identification numbers. There are different types of cookies, such as session cookies (which expire at the end of your browsing session) or persistent cookies (which are stored on your device for a longer period of time and between sessions and can enable the entity that placed the cookie to recognize your device or browser between sessions).
8.1 Cookies for functional purposes
We use cookies or similar technologies that are technically necessary to operate our website or provide its basic functions, such as our payments or keeping you logged in (if you want that). These cookies allow us to operate our site, maintain its security, and provide its key functions. We process Your Personal Data to provide our website to you (Art. 6 (1) (1) b GDPR) and based on our legitimate interest to ensure its security, a smooth user experience, and smooth access to these key functions (Art. 6 (1) (1) f GDPR).
8.2 Cookies for analytical purposes
We use cookies or similar technologies to understand your use of our website better. For example, they help us track the number of visitors to our website and see how users move around our website. This helps us improve the way our website works, for example, by ensuring that users can find what they are looking for. Some of these cookies may be placed by third-party providers (see Section 4 above for details). We only place these cookies with your consent (Art. 6 (1) (1) a GDPR).
8.3 Cookies for personalization and advertising-related purposes
We use cookies or similar technologies to capture your visit to our website, the pages you visit, and the links you follow. We may use this information based on your consent (Art. 6 (1) (1) a GDPR) and will process it to evaluate your preferences to make our website and the advertisements we display more relevant for you. We may also share this information with third parties (see Section 4 above for details). Some of these cookies may track your movements on other websites.
9. Does sign.com knowingly handle the data of minors?
Sign.com does not knowingly collect or retain the data of minors under the age of sixteen. Such persons are not permitted to use this website except where enabled by a school that has contracted with us, in which case the school is the data controller and is responsible for the respective data processing affecting minors. If you discover that a minor has been using our website, please let us know via the contact information in Section 11, and we will delete their information. We take no responsibility for your use of our website.
10. Can sign.com change the terms of this Privacy Notice?
In brief: Changes to this Privacy Notice may occur and will be made available to you.
Sign.com may occasionally make changes and corrections to this Privacy Notice. Please check this Privacy Notice regularly to see the changes and how they may affect you.
11. Contact us
In brief: Let us know if you have any questions.
If you have any requests concerning our processing of Your Personal Data or any queries with regard to these practices, please contact sign.com at the contact data given above, including via email at privacy@sign.com
Individuals and data protection supervisory authorities in the EU and the UK may contact our data protection representatives according to Art. 27 GDPR. For the EU, please reach out to DP-Dock GmbH, Attn: Sign.com/Smallpdf, Ballindamm 39, 20095 Hamburg, Germany. For the UK, please reach out to DP Data Protection Services UK Ltd., Attn: Sign.com/Smallpdf, 16 Great Queen Street, Covent Garden, London, WC2B 5AH, United Kingdom. You may also contact any of these representatives at smallpdf@gdpr-rep.com.
You can also contact our data protection officer at any time at our postal address or the following email address: dpo@smallpdf.com.