Privacy Statement

Payment Service User

Are you registered with us as an Affiliate, Merchant, or Partner? If so, you are using our PayPro payment system. This makes you a Payment Service User, and we are the Payment Service Provider. As a Payment Service Provider, we are a financial institution, which means we have a legal obligation to verify your identity and ensure we know who we are serving.

The personal data we are required by law to request from you include: name, address, city, and any conversation notes. Additionally, we require a copy/scan of a valid and unredacted ID, showing your date and place of birth, document number, Citizen Service Number (BSN), nationality, and photo.

If you are registered with us under a sole proprietorship or general partnership (VOF), we also process the following information: your trade name, business address, phone number, VAT number, and Chamber of Commerce (KvK) number.

In addition to the information you provide us, we also consult several lists and registers. Most of these contain the same details you have already provided. We also check lists and registers that contain individuals and entities subject to sanctions, those who have committed fraud, or who may otherwise pose a risk to our business operations. Furthermore, we ask you to provide your email address and phone number so we can contact you if necessary.

In addition to this information, we ask you to provide your IBAN. This is used to fulfill our agreement with you regarding the payout of your PayPro balance.

Finally, we register your IP address to ensure the security of your account.

Below, we have provided an overview of all the data processing related to your (personal) information.

Gegevens	Bewaartermijn	Doel	Grondslag	Ontvangers
Name, Address, City, Date and Place of Birth, Document Number, Citizen Service Number, Nationality, Photo on ID, Chat and Email Messages, Conversation Notes, Call Recording	5 years after the termination of the business relationship or up to 5 years after the relevant transaction.	Conducting client due diligence	Legal obligation	Authorities when an investigation (e.g., criminal) is conducted on a specific individual.
Trade Name, Business Address, Organization Phone Number, VAT Number, Chamber of Commerce (KvK) Number	1 Year	Conducting client due diligence	Legal obligation	Authorities when an investigation (e.g., criminal) is conducted on a specific individual.
Phone Number, Email Address	5 years after the termination of the business relationship or up to 5 years after the relevant transaction.	Correspondence regarding the service	Performance of the agreement
IBAN	5 years after the termination of the business relationship or up to 5 years after the relevant transaction.	Paying out PayPro balance to the payment service user	Performance of the agreement
IP-address	5 years after the termination of the business relationship or up to 5 years after the relevant transaction.	Account security and fraud prevention	Legal obligation
Criminal records (does not apply to Affiliates)	5 years after the termination of the business relationship or up to 5 years after the relevant transaction	Conducting client due diligence	Legitimate interest

If we are unable to process the above data from you, we are not allowed or able to enter into a business relationship with you.

Customer

Have you made a payment, or has an amount been debited from your account, and was the transaction processed by us? Then the respective seller instructed us to do so. We have an agreement with this seller to process the transaction of your payment. To facilitate this, certain personal data about you is processed. The specific data depends on what the seller requests from you. The seller determines in advance what information you need to provide on the payment screen. Additionally, the data required can vary depending on the payment method used to process your transaction.

To process your transaction, we work with other parties known as acquirers. These are banks or payment institutions that accept and process (electronic) payments on behalf of a party. To ensure the security of your personal data, agreements have been made with these parties regarding the processing of this data.

PayPro does not focus on processing personal data categorized as “sensitive data.” This includes information about race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a person, health, sexual behavior, or sexual orientation. However, the payment for your purchase may include a product or service description that implies such information. We process the payment but do not use this data in any way.

Finally, it is possible that while browsing the internet, you clicked a link that redirected you to the checkout page of a product or service offered by one of our clients. Regardless of whether you completed the payment, an affiliate cookie is placed. This cookie allows us to link the IP address (which we anonymize) to the visit to the checkout page. We retain this data for a maximum of 5 years. If you complete the payment through that checkout page within this period, the relevant affiliate is rewarded for their promotional activities. This is the sole purpose of such a cookie. We do not use it to identify you or create ‘behavioral’ customer profiles! If you have any questions about this, please let us know.

The seller is responsible for your personal data. If you have any questions about this, you can contact the seller.

Below, we have provided an overview of all data processing related to your (personal) information.

Gegevens	Bewaartermijn	Doel	Grondslag	Ontvangers
Name associated with the purchase Product description Address City Phone Number Email Address IBAN Card Number (for CC payments)	5 years after the termination of the business relationship with the respective seller or up to 5 years after the relevant transaction.	Providing services to the Seller to execute any refunds, etc.	Performance of the agreement	Acquirers, or parties with whom PayPro has an agreement to contribute to successful transaction processing.
In case of sole proprietorship or general partnership (VOF) Trade Name Business Address Chamber of Commerce (KVK) Number Vat Number	5 years after the termination of the business relationship with the respective seller or up to 5 years after the relevant transaction.	To retain transaction data related to the seller.	Legal obligation	Acquirers, or parties with whom PayPro has an agreement to contribute to successful transaction processing.
IP Address (affiliate cookie)	5 years	Paying affiliate commissions	Legitimate interest

Website Visitor

Welcome! We are always happy to serve new “faces.” If you have any questions after browsing our website, please don’t hesitate to contact us. A contact form and a “call me back” button are available on the website for your convenience. If you choose to use these, please be aware that we will process your personal data. Depending on the channel you select, we may store the following information: your email address, phone number, and any personal data you provide. Our correspondence, including all data, will be deleted once the conversation is fully resolved, unless we make other arrangements regarding this.

Whether or not you ultimately contact us does not change the fact that your IP address (which we anonymize) will be registered by us. The reason for this is to detect and resolve any errors on the website that may arise during your visit. We use this IP address solely for this purpose. If you have any questions about this, you should still leave your details via the contact form or the “call me back” button. We would be happy to assist you!

Below, we have provided an overview of all data processing related to your (personal) information.

Gegevens	Bewaartermijn	Doel	Grondslag
Name Email Address Phone Number Data you provide yourself Call Recordings	In consultation with the individual in question, but typically until the correspondence is fully resolved.	Providing services	Legitimate interest
IP Address	5 years	Het traceren en oplossen van eventuele fouten die optreden op de website van PayPro.	Legitimate interest

Safety

The Algemene Verordening Gegevensbescherming (AVG) and the associated organizational measures enhance your privacy better than ever. Additionally, PayPro has implemented extra technical measures regarding the storage of your documents. These are anonymized, encrypted, and can only be accessed by employees who have been granted special access through a secret key that has read-only rights. Furthermore, PayPro’s servers are managed at separate locations, where the hosting providers have implemented numerous security measures, such as: cameras, intrusion detection systems, two independent surveillance services, dual authentication with RFID access cards and iris scanners, VEB certification level 4, ISO/IEC 27001, and NEN 7510 certificates. PayPro goes to great lengths to prevent your data or documents from being leaked.

Your rights

When we are responsible for the processing of your personal data, you have the right to request access to, modification of, or deletion of your personal data, as well as the right to transfer it. Finally, you may also object to the processing of your personal data. If we do not respond to your request, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).