Source: https://start2pay.com/privacy-policy/
Timestamp: 2020-04-07 07:43:35
Document Index: 800681713

Matched Legal Cases: ['art2', 'art 2', 'art2', 'art2', 'art2', 'art2', 'art2']

Privacy Policy – Start2Pay
Start 2 Pay Limited, legal form: private limited liability company, registered in the Cyprus Department of Registrar of Companies and Official Receiver on 2012-12-03, code: HE 316018, address: Spyrou Kyprianou, 79, PROTOPAPAS BLDG, 2nd floor, Flat/Office 201, 3076, Limassol, Cyprus (hereinafter – ‘we’, ‘us’, ‘our’, ‘the Company’) is a payment gateway, a technical platform that covers all the merchants’ needs quickly and easily. We successfully cooperate with companies from the following business categories in organizing receipt of payments: e-commerce, electronic goods and services etc.
When providing our services, we collect and use personal data (hereinafter – the Personal Data). Therefore, we are obligated to use and process your Personal Data only in accordance with this privacy policy (hereinafter – the Privacy Policy), as well as, applicable laws, including the General Data Protection Regulation (2016/679) (hereinafter – GDPR) and other applicable legal acts on protection of personal data.
This Privacy Policy provides basic rules for collecting, storing, processing and retention of your Personal Data and other information relating to you, as well as, the scope of processed Personal Data, the purposes, sources, recipients and other important aspects of data processing in using our services.
principle of legality, fairness and transparency – means that the Personal Data with respect to you is processed in a lawful, honest and transparent way;
purpose limitation principle – means that the Personal Data is collected for specified, clearly defined and legitimate purposes and shall not be further processed in a way that is incompatible with those purposes;
data reduction principle – means that the Personal Data must be adequate, appropriate and is only necessary for the purposes for which it is processed;
accuracy principle – means that the Personal Data must be accurate and, if necessary, updated. All reasonable steps must be taken to ensure that Personal Data which is not accurate in relation to the purposes for which it is processed shall be immediately erased or corrected;
the principle of limitation of the length of the storage –means that the Personal Data shall be kept in such a way that your identity can be determined for no longer than is necessary for the purposes for which the Personal Data is processed;
integrity and confidentiality principle – means that the Personal Data shall be managed by applying appropriate technical or organizational measures in a way, which would ensure the proper security of the Personal Data, including the protection from an unauthorized processing or processing of an unauthorized data against accidental loss, destruction or damage.
The categories of Personal data we may collect about you are as follows:
Basic Personal Data – name, surname, job title etc.
Identification information and other background verification data (your or your representative’s, ultimate beneficiary owner’s of legal entities) – name, surname, personal identity code, date of birth, address, nationality, gender, passport or ID card copy, evidence of beneficial ownership or the source of funds, number of shares held, voting rights or share capital part, title.
Transaction data –beneficiary details, date, time, amount and currency which was used, name/IP address of sender and receiver, accounts, amount of transactions, income, location, etc.
Information related to legal requirements – data resulting from enquiries made by the authorities, data that enables us to perform anti-money laundering requirements and ensure the compliance with international sanctions, including the purpose of the business relationship and whether you are a politically exposed person and other data that is required to be processed by us in order to comply with the legal obligation to “know your client”.
Contact Data – registered/actual place of residence, phone number, e–mail address etc.
We collect personal data for the purposes listed below:
Conclusion of the contract or for performance of measures at your request prior to the conclusion of the contract (to get to know, identify and verify our clients).
For this purpose, we may process your Basic Personal Data, Identification and other background verification Data, Contact Information and other Personal Data (in order to identify the possibility of providing services).
The legal basis for the processing of the above-mentioned data are the following: concluding a contract with you, to fulfilling our legitimate interests and/or fulfilling the legal obligations applicable to us.
For the fulfilment of a contract concluded with you.
For this purpose, we may process your Basic Personal Data, Identification and other background verification Data, Transaction Data, Information which is related to legal requirements, Contact Information and other Personal Data provided to us by or on behalf of you or generated by us in the course of providing services.
The legal basis for the processing of the above-mentioned data are the following: performance of a contract signed with you, fulfilling our or third parties’ legitimate interests and/or compliance with legal obligations applicable to us.
The legal basis for the processing of the above-mentioned data are the following: fulfilling our or third parties’ legitimate interests and/or compliance with legal obligations applicable to us.
To provide an answer when you contact us through our website or other communication measures
For this purpose, we may process your Basic Personal Data, Contact Information and other Personal Data provided to us by or on behalf of you.
The legal basis for the processing of the above-mentioned data are the following: your consent, fulfilling our or third parties’ legitimate interests.
We collect information you provide directly to us. For example, when becoming a new client (if you have entered into or seek to enter into an agreement with us). The Company also collects information which you provide to us, such as messages that you have sent to us, by access and use of our website or mobile application, by setting up an account with us, when you subscribe to our electronic publications (e.g. newsletters).
when it is provided to us by a third party which is connected to you and/or is dealing with us, for example, business partners, subcontractors, service providers, merchants etc.;
third party sources, for example, register held by governmental agencies or where we collect information about you to assist with “know your client” check-ups as part of our client acceptance procedures;
from other entities which we collaborate with.
We may transfer your Personal Data to some of following categories of recipients:
our business partners, agents or intermediaries who are a necessary part of the provision of our products and services of the company;
commercial banks, other financial institutions;
Law, finance, tax, business management, personnel administration, accounting advisors, etc.
group companies of the Company;
other persons with whom the Company intends to conclude or has concluded a contract (s);
other persons who are required access to the data in order to exercise their legal obligations, by a legitimate interest or with the consent of the shareholders or the beneficiary
if the recipient is located in the US, it shall be a certified member of the EU–US Privacy Shield scheme;
We ensure the implementation of appropriate technical, organizational and administrative security measures required to ensure the security of your Personal Data processing, in order to protect your Personal Data from loss, misuse, accidental or unlawful destruction, modification, disclosure, unauthorized access or any other unlawful handling.
We will keep your Personal Data for as long as it is needed for the purposes for which your data was collected and processed but no longer than it is required by the applicable laws and regulations. This means that we store your data for as long as it is necessary for providing services and as required by retention requirements in laws and regulations. If the legislation of the Republic of Cyprus does not provide any period of retention of Personal Data, this period shall be determined by us, considering the legitimate purpose of the data retention, the legal basis and the principles of lawful processing of Personal Data as well as following the principle of storage limitation.
In cases when the terms of data retention are provided by the applicable laws and regulations, such terms of retention shall apply.
get familiar with your Personal Data and how it is processed – you have the right to obtain information about scope and kind of Personal Data we process on you. Your right to access may, however, be restricted by legislation, protection of other persons’ privacy and consideration for the Company’s business concept and business practices. The Company’s know-how, business secrets as well as internal assessments and material may restrict your right of access;
demand rectifying incorrect or incomplete data – if it turns out that we process Personal Data about you that is inaccurate, you have the right to request a rectification of such Personal Data. You have the right to request us to absolute your incomplete Personal Data that is possessed by us;
erasing your Personal Data – you have the right to have any or all of your Personal Data to be erased. In certain cases, we cannot erase all of your Personal Data. In such case this would be due to our contractual obligations or requirements of applicable laws;
restricting the processing of your Personal Data – you have the right to demand that our processing of your Personal Data be restricted for a period of time. This can pertain, for example, to a situation where you believe that your Personal Data is inaccurate and we need to verify it. It can also pertain to a situation where you object to processing that we base on a legitimate interest. In such case we must verify if our grounds override yours;
lodge an appeal to the office of the Commissioner for Personal Data Protection – if you have an objection about how we have processed your Personal Data, you can turn to the supervisory authority concerned.
We will exercise your rights only after we receive your written request to exercise a particular right indicated above and only after confirming the validity of your identity. The written request shall be submitted to us by ordinary mail or by e-mail support@start2pay.com.
Your requests shall be fulfilled or fulfilment of your requests shall be refused by specifying the reasons for such refusal within 30 (thirty) calendar days from the date of submission of the request meeting our internal rules, GDPR and/or other data protection legislation. The afore-mentioned time frame may be extended for 30 (thirty) calendar days by giving a prior notice to you if the request is related to a great scope of Personal Data or other simultaneously examined requests. A response to you will be provided in a form of your choosing as the requester.
You can file a complaint regarding the Personal Data in the same manner as specified above.
You can also address the Office of the Commissioner for Personal Data Protection with a claim regarding the processing of your Personal Data if you believe that the Personal Data is processed in a way that violates your rights and legitimate interests stipulated by applicable laws. You may apply in accordance with the procedures for handling complaints that are established by the Office of the Commissioner for Personal Data Protection and which may be found by this link: http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/page1i_en/page1i_en?opendocument .
We regularly review this Privacy Policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes and clarifications will take effect immediately upon their publication on our website: https://start2pay.com/.
If you access our information or services through our website, you should be aware that we use Cookies. For more information on how to control your Cookie settings and browser settings or how to delete Cookies on your hard drive, please read the Cookies Policy available at: https://start2pay.com/cookie-policy/
You can contact us by writing to us at support@start2pay.com or post us at Start2Pay Limited – Spyrou Kyprianou, 79, PROTOPAPAS BLDG, 2nd floor, Flat/Office 201, 3076, Limassol, Cyprus.