PelloPay Terms & Conditions



PelloPay knows that privacy is crucial. We respect its value and pledge only to collect and use personal data following current legislation. The purpose of this document is to inform you about our role and responsibilities in collecting, processing, and storing your data. According to the Regulation (EU) 2016/679 of the European Parliament and of the European Council of 27 April 2016 on the protection of natural persons concerning the personal data processing and its free movement, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "GDPR"), personal data is any information relating to an identified or identifiable natural person. An identifiable natural person can be identified by referencing a name, an identification number, location data, etc. PelloPay obtains personal data from various sources. You may be:
• a visitor to PelloPay Website
• a person (or representative of a person) has entered into the merchant processing agreement with PelloPay
• a person whose transaction PelloPay has been processed in accord with one of the merchants
• a recipient of PelloPay marketing information
• a person that contacted PelloPay with any query This Privacy Policy applies to services provided directly and exclusively by PelloPay. Therefore, third parties websites, products, and services (such as merchants selling their products and services) are subject to their privacy policies. If you are the cardholder and PelloPay has processed your transaction, the relevant merchant should explain how your personal data will be processed and stored. PelloPay acts both as a data controller and a data processor. The GDPR defines the data controller as an entity that, alone or jointly with others, determines the purposes and means of collecting, processing, and storing personal data. The data processor is an entity that processes personal data on behalf of or under the controller's instructions. PelloPay is a data controller when it determines the purposes and means of the processing and a data processor when it is directed by the merchant to process payments. Please thoroughly get acquainted with the Privacy Policy to know your data protection rights, its execution, and ways of its protection.

1. What data does PelloPay collect

PelloPay collects different types of personal data from various sources. It happens once a visitor: • fills in forms and applications • contacts us (or third parties engaged by us) • responds to our e-mails or surveys • submits data for purposes of concluding an agreement with PelloPay and registration on our platform • acquires products or services from the merchants to whom PelloPay provides payment processing services • etc When PelloPay collects visitors' personal data, it is collected for specific, explicit, and legitimate purposes. PelloPay only collects adequate, relevant data and is limited to what is necessary for us to fulfill those purposes. Suppose PelloPay intends to use your data for any new, not previously identified purposes. In that case, you will be notified of those new purposes before that intended use. The personal data we collect, use, and store depends on your relationship with PelloPay or the merchant. 1.1. What happens when you visit the PelloPay website? When you browse PelloPay website, we process your IP address, Google Analytics ID, and location data, including which pages you visited, the time and length of your visit, and your language preferences. PelloPay uses this data to: • make sure that our website works properly • to deliver adequate content • to improve the website work • to perform statistical analyses • to provide a visitor with tailored offers • etc PelloPay collects this data using cookies and similar techniques, including tags/beacons and javascript with the visitors' prior consent. PelloPay keeps your data for as long as we reasonably need it for the above purposes. We use plugins from social media networks. Suppose you would like more information about their data processing. In that case, this can be found in the respective privacy policies on the websites of these social media networks. When you submit your contact information to PelloPay, we may get in contact with you. We collect your contact information complying with current legislation. Please review this Privacy Policy to learn more, including your right to stop our use of your data for marketing purposes. We do not share it with third parties. We use your data for a legitimate interest in undertaking marketing activities to offer you products or services depending on your preferences. PelloPay keeps clients' data for a reasonable period. When contacting PelloPay regarding queries or complaints, you must fill in a respective application form. The same procedure is applied to those who plan to become merchants. 1.2. What happens when you visit the PelloPay website? Suppose you entered into a process of the merchant processing agreement with PelloPay. In that case, we will need to confirm your identity following the KYC procedure and ask you to provide specific documents to comply with the due diligence procedures. PelloPay will ask you to provide your identification document and bank account information extracted from the commercial register. We may also collect information from third parties for mentioned purposes. PelloPay collects data about the use of our products and services and access to our platform, including login details. We may use third-party identification and verification services to assist us in verifying the identity. PelloPay communicates that it will keep the information concerning business relationships until eight years after the end of the merchant’s business relationships with us. 1.3. When we process your transactions PelloPay processes your data to comply with the current legal requirements. It provides top-notch service according to the agreements with the customers and specific payment schemes, analyzes, and protects PelloPay from possible risks and threads. We keep the received data to perform the transaction following the applicable laws for up to 8 years after the conclusion of the relevant transaction to meet our fiscal. Suppose we need to keep any information longer for our legitimate interest of protecting our legal rights. In that case, we will keep the information required for this purpose until the relevant claim is finally settled. 1.4. Other situations PelloPay reserves the right to transfer received client data in case of a company reorganization, merger, or sale. Suppose we need to keep any information longer for our legitimate interest of protecting our legal rights. In that case, we will keep the information required for this purpose until the relevant claim is finally settled.

2. What is our legal basis for using personal data?

2.1. Types of business relationships PelloPay uses personal data to enter into business relationships with prospective merchants and to perform the contractual obligations under the signed agreements. 2.2. Legal rights and responsibilities Following current legislation, PelloPay collects and stores your personal data to comply with anti-money laundering requirements or other potentially risky activities. 2.3. Legal consent If you consent to collect and process your personal data, you permit to do it in a secure, established way.

3. For what purposes does PelloPay collect and use personal data?

3.1. Service provision and contractual obligations When applying to use PelloPay services or to become our partner, you must submit an application providing your data to pass the KYC. PelloPay legal basis: • data processing is essential for the performance of a contractual and pre-contractual business relationship • data processing is necessary for service improvement • data processing is necessary for compliance with legal requirements 3.2. Risk management and fraud detection PelloPay uses personal data to conduct risk analysis and prevent fraud. We verify clients' identities to protect against fraud and confirm their eligibility for service provision. 3.3. Legal rights and responsibilities We may share your personal data with third parties to perform our legal obligations in some specific cases. For example, following the requirements of the fraud prevention agencies, providing information within legal claims, or helping detect or prevent crime. 3.4. Marketing and PR Effective marketing performance and communication require: • provide clients with information about products and services offered by PelloPay • give information on PelloPay partners • to track, collect and use clients' opinions about products and services we offer Where applicable laws require, PelloPay will ask for consent to receive the information mentioned above. You may unsubscribe or change marketing communications preferences in the merchant Data Account.

4. Data protection rights

4.1. Personal data access You can request PelloPay to confirm whether your personal data is being processed, copied, or stored and for what purposes. 4.2. Right to be informed You request PelloPay to provide information about the way we process your data. PelloPay is a transparent platform acting in strict compliance with Privacy Policy requirements. In case of questions about personal data usage, send a request to the e-mail. 4.3. Right to request personal data delete You can request PelloPay to correct wrong or incomplete information. PelloPay reserves the right to verify its accuracy. When we no longer have a lawful ground to use data, you have a right to withdraw data collecting, processing, and storage consent. 4.4. Right to data portability You can ask us to transfer your personal data to another company. Suppose PelloPay has technological instruments to perform it and doesn't contradict applicable laws and regulations. In that case, we will provide your personal data in a structured, commonly used, and machine-readable format. 4.5. Right to challenge any automated decision You can challenge PelloPays' automated decision if it produces legal effects for you. You can ask us to conduct a human review instead of an automated decision. 4.6. Right to complain Suppose you believe that your right to personal data protection has been violated. In that case, you should complain to your national supervisory data protection authority.

5. How to exercise legal rights and responsibilities

To exercise any of your rights in the previous section, send us an e-mail to PelloPay doesn't charge a fee for these actions. However, in some specific cases, we reserve the right to charge a reasonable price considering the administrative costs of providing the information or communication, taking action requested; or refusing to act on the request.

6. Personal data disclosure

6.1. PelloPay Group PelloPay may share your personal data within our affiliated and subsidiary companies to provide improved service. 6.2. Service providers and business partners PelloPay reserves the right to notice that we may share your personal data with service providers and our business partners to provide you with certain services and perform contracts we enter into with you or them. On a contractual basis, we authorize such service providers to use or disclose the personal data only to perform services on behalf of PelloPay and to comply with legal requirements. Therefore, service providers must protect the personal data they process on our behalf. Suppose we transfer your data to service providers outside the EEA. In that case, it will be performed following the regulatory enactments in the EU in the area of data protection. 6.3. Authorities and governmental institutions PelloPay reserves the right to disclose clients' personal data to the authorities, law enforcement agencies and agencies, or other public institutions under certain circumstances. For example, we may provide your data to a government authority under anti-money laundering and counter-terrorist financing legislation.

7. Personal data storage

PelloPay retains personal data based on business needs and local legal requirements. For example, to provide you with the services you requested through our Website, complying with regulatory requirements regarding data retention. So, if we use your personal data for more than one purpose, we will retain it until the purpose with the latest period expires. When personal data is no longer needed, we anonymize or securely destroy it.

8. Personal data transferring within and outside of the EU

PelloPay may transfer clients' personal data outside the EU and EEA under certain circumstances. We ensure that the transfer of personal data outside the EEA is based on a relevant and coherent decision of the European Commission or appropriate safeguards as required by applicable laws or regulations. In cases without the European Commission approving the adequate level of data protection in certain countries, we may adopt appropriate safeguards, including the use of standard data protection clauses approved by the European Commission. Where the basis of a transfer is appropriate or suitable safeguards, we are responsible for ensuring the merchant can access proper precautions.

9. Personal data use for marketing purposes

If you sign an Agreement on the provision of services with PelloPay, and if it complies with the applicable laws, PelloPay assumes that you want us to contact you by e-mail for marketing and other purposes. Where applicable laws require, we will ask for prior consent to receive marketing information. You may unsubscribe or adjust your preferences on our platform at any time. PelloPay will not sell or share your information with organizations outside affiliated and subsidiary companies for their marketing purposes without your consent.

10. Contact PelloPay

In case of any doubt, query, or complaints about PelloPay Privacy Policy, contact us by sending a written request to the legal address or by sending an e-mail to indicating the full name, request details, or contact PelloPay via customer support.