Source: https://secupay.com/en/privacy-policy
Timestamp: 2020-01-17 17:14:14
Document Index: 721149078

Matched Legal Cases: ['Art. 15', 'Art.16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art. 20', 'Art. 77', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy policy EN | Secupay AG
Privacy Policy for secupay AG (hereinafter "secupay")
We hereby inform you about the processing of your personal data and the claims and rights to which you are entitled in accordance with the data protection regulations.
Hans-Peter Weber, Katja Hartmann
01896 Pulsnitz, Germany
Phone +49 (0) 35955 7550-0
Fax +49 (0) 35955 7550-99
E-Mail info@secupay.com
MR. Axel Hirsch
E-Mail privacy@secupay.com
For which purposes and on what legal basis do we process your data?
We process personal data that we receive from you in the course of a business initiation or business relationship in order to carry out our services, the execution of your orders, as well as all activities necessary for the operation and administration of a financial transfer service provider. We process personal data in accordance with the provisions of the European Data Protection Ordinance (GDPR) and the German Federal Data Protection Act (BDSG-neu).
Insofar as it is necessary for the provision of our services, we process data received from other companies or other third parties (e. g. infoscore GmbH) in a permissible manner. In addition, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e. g. debtor directories, land registers, commercial and association registers, the press and other media).
Relevant personal data may in particular be relevant:
Personal data (name, date of birth, place of birth, nationality and similar data)
Contact details (address, e-mail address, telephone number and similar data)
Legitimation data (identification, reporting and comparable data)
Current accounts and credit card data • Information about your financial situation (creditworthiness data including scoring, i. e. data for assessing credit risk)
Data on the use of telemedia offered by us (e. g. time of access to our websites, apps or newsletters, clicked pages of us or entries and comparable data)
Who else gets your data (receiver)?
If necessary for the provision of our services, your data will be passed on to the following companies:
infoscore Consumer Data GmbH, Baden-Baden, Germany
Transact electronic payment systems GmbH
Bluro GbR ("Serverspot")
professional bearer of secrets such as Financial Auditors, tax consultants and lawyers
Within secupay AG, those departments receive your data which need to fulfil our contractual and legal obligations.
As far as we commission service providers, your data is subject to the same security standards as with us.
In the event that the purchase price claim has been assigned to secupay AG, the data may be passed on to the following companies for the purpose of enforcing the purchase price claim:
Creditreform Munich Ganzmüller, Groher & Kollegen KG
In connection with the provision of our services, data is transferred to companies in the United States of America on the basis of EU standard contractual clauses (it is possible to consult this document) or within the framework of the EU - US Privacy Shield.
As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes the initiation and processing of a contract.
In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB), the Tax Code (AO), the German Banking Act (KWG) and the Money Laundering Act (GwG). The periods for storage and documentation specified there are two to ten years.
the right to obtain information about your personal data in accordance with Art. 15 General Data Protection Regulation, as well as under certain conditions
the right of correction in accordance with Art.16 General Data Protection Regulation if your personal data should be incorrect or
the right for deletion in accordance with Art. 17 General Data Protection Regulation, if the deletion does not conflict with any statutory storage obligations or other things or
the right to restrict processing in accordance with Art. 18 General Data Protection Regulation or
the right to object to the processing of your personal data in accordance with Art. 21 General Data Protection Regulation or
the right to transfer data in accordance with Art. 20 General Data Protection Regulation. i.e. the right to receive your data in a structured, common and machine-readable format and to transmit it to a third party.
In addition, you have a right of appeal to the data protection supervisory authority (Art. 77 General Data Protection Regulation). You can address these to the data protection supervisory authority responsible for us, whose contact details can be found at https://www.saechsdsb.de/impressum-datenschutzerklaerung.
Is there automated decision-making in individual cases (including profiling)?
We transmit your data (name, address and, if applicable, date of birth) to infoscore Consumer Data GmbH, Rheinstr. 99,76532 Baden-Baden, Germany, for the purpose of checking your creditworthiness, obtaining information for assessing the risk of non-payment on the basis of mathematical and statistical methods using address data and verifying your address (check for deliverability).
Furthermore, we transmit your data (name, address and date of birth) for credit check and address verification to the associations Creditreform e. V., Hellersbergstraße 12,41460 Neuss, Creditreform Boniversum GmbH, Hellersbergstraße 11,41460 Neuss, Creditreform München Ganzmüller, Groher & Kollegen KG, Machtlfinger Str. 13,81379 Munich and Creditreform Dresden Aumüller KG, Augsburger Str. 4,01309 Dresden.
The legal basis for these transfers is Art. 6 paragraph 1 Letter b of the General Data Protection Regulation.
Information on particularly sensitive data in accordance with Art. 9 General Data Protection Regulation is not processed.
Fraud Prevention with Device Fingerprinting
For the purposes of fraud prevention and investigation, the data provided may be used to verify the existence of an atypical payment transaction. In principle, we have a legitimate interest in carrying out such a check. The legal basis for processing is Art. 6 Para. 1 lit. f GDPR.
Therefore we make use of the services of Risk.Ident GmbH, Am Sandtorkai 50, 20457 Hamburg ("Risk.Ident") when operating our services. Risk.Ident collects and processes data using cookies and other tracking technologies to determine the terminal used by the user and other data on the use of our services. The data is not assigned to a specific user. If IP addresses are collected by Risk.Ident, they are immediately encrypted.
The data is stored by Risk.Ident in a database for fraud prevention. Data transmitted by us to Risk.Ident on end devices, which have already been used to (attempted) commit fraud, are also stored in the database. In this respect, too, there is no allocation to specific users. When using our services, we retrieve a risk assessment from the Risk.Ident database to the user's terminal device. This risk assessment of the probability of an attempted fraud takes into account, among other things, whether the terminal device has dialed in via various service providers, whether the terminal device has a frequently changing geo-reference, how many transactions were made via the terminal device and whether a proxy connection is used. The legal basis for processing is Art. 6 Para. 1 lit. f GDPR.
Which data is collected when you visit the website?
For technical reasons, exemplary the following data, which your Internet browser transmits to us or to our web space provider, is collected (so-called server logfiles):
This anonymous data are stored separately from any personal data you may have provided and thus do not allow any conclusions about a specific person. These data is stored for seven days. They are evaluated for statistical purposes in order to optimize our website and our offers. The legal basis for the processing of this data is Art. 6 Para. 1 S. 1 lit. f GDPR (legitimate interests of us as responsible party).
If you submit us enquiries using the contact form, your details from the contact form, including the contact data you have provided there, will be transmitted to us in encrypted form.
Legal basis for the processing of these data, which are transmitted in the course of the transmission of an inquiry, is Art. 6 para. 1 lit. f GDPR (justified interests of us as responsible persons). If the purpose of the request is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR (fulfilment of a contract).
If users leave comments, their IP addresses may be used on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f GDPR for 7 days. This is done for our safety if someone leaves illegal contents (insults, forbidden political propaganda, etc.) in comments and contributions. In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR, to process user data for the purpose of spam detection.
The personal information provided in the comments, any contact and website information as well as the content information will be stored permanently by us until the user objects.
We use so-called cookies on our site to recognize multiple use of our offer by the same user/internet connection owner.Cookies are small text files that your Internet browser stores and archives on your computer. They serve to optimize our website and our offers. These are usually so-called "session cookies", which are deleted after the end of your visit.
In some cases, however, these cookies provide information in order to recognize you automatically. This recognition is based on the IP address stored in the cookies. The information thus obtained is used to optimise our offers and to facilitate your access to our site.
On this website we use functions of the web analysis service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We have enabled the IP-Anonymization feature on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Usage of Google Adwords and Google Conversion-Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google LCC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google")
Coversion cookies" are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
More information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: http://www.google.de/policies/privacy/
To protect your enquiries via contact form, we use the reCAPTCHA service of Google LLC (Google). The query is used to determine whether the input is made by a human being or misused by automated, automatic processing. The query includes sending the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose, your submission will be sent to Google and used there.
By using reCaptcha, you agree that the recognition you have made will be incorporated into the digitization of old works. However, if you opt-in to the IP anonymization on this website, your Google IP address will be truncated from time to time by Member States of the European Union or other signatory states to the EEA Agreement. Only in exceptional cases the full IP address is transferred to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCaptcha will not be merged with other Google data. These data are subject to Google's different data protection regulations.
If you want to prevent reCAPTCHA, you can do this by either putting the string "https://www.google.com/recaptcha/api.js" on the block list of the AdBlocker (which prevents reCAPTCHA scripts from being reloaded from the Google server), or disabling JavaScript altogether - of course by accepting the associated disadvantages.
This page uses the free open source map service OpenStreetMap via an API. Provider is the Openstreetmap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom. To use the features of OpenStreetMap it is necessary to store your IP address. This information is usually transferred to an OpenStreetMap server within Europe and stored there. The provider of this site has no influence on this data transfer. The use of OpenStreetMap is made in the interest of an appealing presentation of our online offers and in the interest of easy locating of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. More information on the handling of user data can be found in the OpenStreetMap Foundation's data protection declaration: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
Each time you access our website with such a component, this component will cause the browser you are using to download a corresponding representation of the facebook component. Through this process, facebook will be informed about which specific page of our website you are currently visiting.
If you access our site and are logged in to facebook while you are on it, facebook will recognize which specific page you are visiting by the information collected by the component and will assign this information to your personal account on facebook. For example, if you click on the "Like" button or make comments, this information will be transferred to your personal user account on facebook and stored there. In addition, the information that you have visited our site will be passed on to facebook. This happens regardless of whether you click on the component or not.
If you wish to prevent this transmission and storage of data about you and your behaviour on our website by facebook, you must log out of facebook before you visit our site. The data protection notices of facebook provide further information on this, in particular on the collection and use of data by facebook, on your rights in this regard and on the setting options for protecting your privacy: https://de-de.facebook.com/about/privacy/
In addition, external tools are available on the market that can be used to block Facebook social plug-ins with add-ons for all common browsers.
We use components from the provider Twitter on our site. Twitter is a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
Each time you access our website with such a component, this component will cause the browser you are using to download a corresponding representation of the Twitter component. Through this process Twitter will be informed about which specific page of our website is currently being visited.
We have no influence on the data that Twitter collects through this, nor on the extent of such data collected through Twitter. To the best of our knowledge, Twitter collects the URL of the website and IP address of the user, but does not use it for purposes other than the presentation of the Twitter component. Further information can be found in the privacy policy of Twitter at http://twitter.com/privacy.
You can change your privacy settings in your account settings at http://twitter.com/account/settings
Within our online presence, functions and contents of the service Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, can be integrated. This may include, for example, content such as images, videos or text and buttons with which users can express their favor about the content, the authors of the content or subscribe to our contributions. If the users are members of the Instagram platform, Instagram can assign the call of the above contents and functions to the user profiles there. Instagram Privacy Policy: http://instagram.com/about/legal/privacy/.
We use Vimeo as the provider for the integration of videos etc. Vimeo is operated by vimeo, LLC, with headquarters at 555 West 18th Streeet, New York, New York 10011.
On some of our Internet pages we use plugins of the provider Vimeo. When you access the Internet pages on our website that are provided with such a plugin a connection to the Vimeo servers is established and the video is displayed. This transmits information to the Vimeo server about which of our Internet pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigned this information to your personal user account. When the plugin is used, e.g.g by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo account and deleting the corresponding Vimeo cookies before using our website.
For more information on Vimeo's data processing and privacy policy, please visit https://vimeo.com/privacy
Use of unbounce
We use the unbounce service for promotions and advertising campaigns (landing pages) on certain pages.
These pages are hosted by unbounce and the user's browser communicates directly with unbounce, so that the user's IP address is transmitted and cookies can be set. All data entered by the user on these pages are also saved in unbounce. secupay will then be provided with an evaluation of the activities. For more information about Unbounce and Unbounce's privacy policy, please visit http://unbounce.com/privacy/
Our online presence on Social Networks and platforms
Our presence on social networks and platforms serves as a better and active communication with our customers and prospective customers. We inform them about our services and ongoing special promotions.
When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements inside and outside the platform that presumably correspond to your interests. Cookies are generally used on your device for this purpose. The visitor behaviour and the interests of the users are stored in these cookies. In accordance with Art. 6 Para. 1 lit. f GDPR, this serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties within the framework of a weighing of interests. If you are asked by the respective social media platform operators for their consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed at https://www.privacyshield.gov/welcome .
The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options to protect your privacy, in particular opt-out options, can be found in the data protection information of the providers linked below. Should you nevertheless require help in this regard, you can contact us.
Facebook, -Pages, -Proups: (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basic principles of an agreement on the joint processing of personal data - Privacy Policy: https://www.facebook.com/about/privacy/, especially for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data - Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=A....
Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy - Opt-Out: https://adssettings.google.com/authenticated - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=A....
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/de/privacy - Opt-Out: https://twitter.com/personalization - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=A....
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy: https://www.linkedin.com/legal/privacy-policy - Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=A....
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
Vimeo (Vimeo Inc., 555 West 18th Street, New York 10011, USA) - Privacy Policy/Opt-Out: https://vimeo.com/privacy - Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=A... Shariff-sharing-function We use the privacy-secure "Shariff" buttons. "Shariff" is designed to provide more privacy on the web and to replace the usual "share" buttons on social networks. It is not the user's browser, but the server on which this online service is located, which establishes a connection with the server of the respective social media platforms and queries, for example, the number of likes, etc.. The user remains anony