EN
Book a demo

Privacy Policy

Last updated: 19 October 2026

Your privacy is important to us. This policy explains what personal data we collect through the digisign.space website, why we collect it and what your rights are.

Who we are

DigiSign is a product of IBS Bulgaria, 4 Pimen Zografski Str., 1172 Sofia, Bulgaria. We operate this website and are the controller of the personal data described here. You can reach us at sales@digisign.space, by phone on +359 2 905 9080 or through the enquiry form.

This policy covers the website. The documents and signer data that our customers process in the DigiSign service are handled under the contract with each customer and are not covered by this policy.

What we collect and why

You choose what personal data you give us. This happens when you:

  • Send us an enquiry. When you send the form on this website, we use your name, organisation, work email and, if you give them, your phone number, the number of documents per year and the content of your message to answer you and to follow up on your enquiry. The form also records the topic you chose, the language and the page you sent it from, your country (derived from your network address) and, if you arrived from a campaign, its name.
  • Try the demo signing. When you send the form on the demo signing page, your name, e-mail address, phone number and the sample document you chose go to the DigiSign demo service, which we run. We use them only for the demonstration: we send you the document by e-mail and a signing code by SMS or Viber. We do not use them for marketing and do not give them to third parties.
  • Book a demo. The demo page shows the calendar of our meeting system meet.ibs.bg. We use the details you enter there to arrange the meeting.
  • Ask for an offer or become a customer. We use your details to prepare and fulfil the order or contract, and to support the products and services you obtained from us.
  • Subscribe to the GURU newsletter. When you enter your e-mail in the sign-up form, or tick the newsletter box in the enquiry form, we use your e-mail address to send you the newsletter (see “Newsletter” below).

We may combine the information you give us with information from other sources, to keep it accurate and complete.

Newsletter

The GURU newsletter covers DigiSign, TIMEOFF.GURU, TIMEON.GURU and PROFILE.GURU and comes out every two to three months. We send it only with your consent: after you subscribe you will get an e-mail asking you to confirm your address, and only then do we start writing to you. Every e-mail contains an unsubscribe link, and you can also simply write to us.

The newsletter is sent through Mailchimp (Intuit Mailchimp), which processes your e-mail address on our behalf as a processor. The data may be processed outside the European Union, under the standard contractual clauses approved by the European Commission. We keep your address for the newsletter until you unsubscribe.

Cookies and protection of the forms

This website does not set cookies for analytics or advertising, and that is why it does not show a consent banner.

  • Visit statistics. We count visits with Cloudflare Web Analytics, which does not use cookies and does not build profiles of individual visitors.
  • Form protection. The enquiry and newsletter forms are protected against automated submissions by Cloudflare Turnstile. It loads only when you start filling in a form, may process technical data about your browser and may set a cookie needed for that check. To limit repeated submissions we keep, for one hour, a counter linked to a one-way hash of your IP address. We do not store the IP address itself.
  • Demo signing. The demo signing form is protected by Google reCAPTCHA, a Google service. It loads only on that page and only when you start filling in the form, and it may set cookies and process data about your device and browser. The Google Privacy Policy and Terms of Service apply to it. The sample documents and their previews load from the DigiSign demo service.
  • Video. YouTube videos load only after you press the play button, through youtube-nocookie.com.
  • Fonts. Fonts load from our own server, not from third-party services.

Technical data

When you visit the website, our hosting provider processes technical data such as your IP address, the time of the request and the page requested. This is needed to deliver the pages and to keep the site secure.

Who receives your data

Your data is handled by our employees who need it for the purposes above, and by suppliers who process it on our behalf and under our instructions. We require our suppliers to protect it from unauthorized access, use and disclosure. We do not sell personal data.

How we protect it

We apply physical, administrative and technical safeguards to protect personal data from unauthorized access, use and disclosure. Our information security and privacy management systems are certified to ISO/IEC 27001 and ISO/IEC 27701.

How long we keep it

Enquiries sent through the form are stored in the European Union and are deleted automatically 12 months after they are received.

Other personal data is kept for as long as it is needed for the purpose it was collected for, and as long as the law requires, for example to meet our legal obligations, resolve disputes and enforce our agreements.

Your rights

Under the General Data Protection Regulation you have the right to:

  • ask what personal data we hold about you and receive a copy,
  • have inaccurate data corrected,
  • have your data erased or its processing restricted, where the law allows,
  • object to processing, including to direct marketing,
  • withdraw a consent you have given,
  • receive your data in a portable format.

To use any of these rights, write to us at sales@digisign.space or call +359 2 905 9080. You also have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria.

Our site links to other websites, including those of the GURU platform products, of IBS Group, of the qualified trust service providers and of YouTube. Each of them has its own privacy policy, and we are not responsible for how they handle your data.

Changes

We update this policy when the website or the law changes. The current version is always on this page, with the date of the last update.