Detailed information on the processing of the personal data of a potential Merchant/Partner of PayPro S.A.

Personal Data Controller

1. The controller of your personal data is PayPro Spółka Akcyjna with its registered seat in Poznań, [address:] ul. Pastelowa 8, 60-198 Poznań, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań Nowe Miasto i Wilda, 8th Commercial Division of the National Court Register, KRS entry No.: 0000347935, NIP: 7792369887, share capital: 4 737 100,00 zł, fully paid up.

   Controller’s contact details:

   Address:	PayPro S.A. ul. Pastelowa 8, 60-198 Poznań, Polska
   Email:	ado@przelewy24.pl

Data Protection Officer

1. The Controller has appointed the Data Protection Officer (Ms. Olga Ograbisz), whom you can contact at the following email address: iod@przelewy24.pl.

Purposes and legal basis for processing

1. PayPro processes your personal data in particular in order to prepare and present to you a personalised offer adjusted to your business based on the information you have provided.

   PayPro processes these personal data pursuant to art. 6 para. 1 letter a of the Regulation, i.e. based on your voluntary consent.

2. PayPro processes your personal data for marketing-information purposes, including the provision of information on new services, products, promotions or solutions. The information is delivered on the email address or the telephone number you have indicated.

   PayPro processes these personal data pursuant to art. 6 para. 1 letter a of the Regulation, i.e. based on your voluntary consent.

Categories of the personal data processed

1. PayPro processes the personal data necessary to prepare an offer and contact you, i.e. name and surname, email address, telephone number, as well as the financial data regarding your financial condition (the financial condition of the business activity you conduct).

Information on categories of data recipients

Data recipients are natural or legal persons, public authorities, units or other bodies to whom PayPro discloses your personal data, irrespective of whether they are third parties, whereby the public authorities authorised to receive personal data in the course of the specific proceedings conducted pursuant to the E.U. law or member state law are not deemed recipients.

1. entities rendering IT services connected with the activity of PayPro, including hosting services;
2. entities belonging to PayPro capital group;
3. other entities (not indicated above) authorised to receive information (which may include your personal data) from PayPro relating to PayPro’s activity pursuant to the law, in particular the supervisory authorities with respect to PayPro.

Intention to transfer personal data to a third country or an international organisation.

PayPro does not intend to transfer your personal data to a third country (i.e. a country outside the European Economic Area) or an international organisation.

The period for which the data will be stored or the criteria used to determine that period

PayPro stores personal data for the period necessary to prepare and present the offer. In case you decide to cooperate with PayPro, the data will feed other processes connected with the conclusion and performance of the agreement.

The data processed for marketing-information purposes will be processed until you withdraw your consent for processing, with the reservation that the said withdrawal will not affect the lawful character of the processing performed prior to the withdrawal of the above-mentioned consent.

Obligatory or voluntary character of provision of personal data

The provision of personal data is voluntary, yet necessary to obtain the offer.

Information on rights

With regard to the processing of the personal data by PayPro, you have the right to:

1. demand access to personal data,
2. rectify personal data,
3. delete personal data,
4. limit the scope of personal data processing,
5. transfer personal data,
6. lodge a complaint against the processing of personal data pursuant to art. 6 para. 1 lit. f) of the Regulation,
7. withdraw the previously granted consent,
8. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.

Information on automated decision making, including profiling

Your personal data will not be processed by automated means, including profiling.