Privacy statement Plug&Pay BV

Plug&Pay BV (''we''), based in the Netherlands, is responsible for the processing of personal data as reflected in this privacy statement.

Personal data is carefully processed and secured. When processing, we adhere to the requirements of the General Data Protection Regulation (the GDPR). This Privacy Statement explains how we collect and use your data, in accordance with the GDPR.

In this Privacy Statement, we explain what personal data we collect and use, and for what purpose. We encourage you to read this Privacy Statement carefully. This Privacy Statement covers our website, https://plugandpay.com and related websites and Services.

This Privacy Statement was last updated on: 1 January 2019

Use of personal data

If you use websites and related services offered by Plug&Pay BV, you may share personal data with us. We collect and use personal data that you, or your company, directly share with us. We will not use the personal data for purposes other than those described in this statement, unless you have given your prior consent.

Types of data collected

When you use our services, we may collect the following data:

• First name and surname
• Address
• Phone number
• Email address
• IP address
• Other personal data that you actively provide e.g. by creating a profile on this website, in correspondence and by telephone
• Data about your activities on our website
• Data about your browsing behaviour across different websites (e.g. because this company is part of an advertising network)
• Internet browser and device type
• Bank account number

Grounds for processing

We generally process your personal data for the following purposes:

• Handling your payment
• Sending our newsletter
• Calling or emailing you if necessary to perform our services
• Informing you of changes to our services and products
• Plug&Pay BV analyses your behaviour on the website in order to improve the website and tailor the offer of products and services to your preferences.
• Plug&Pay BV also processes personal data if we are legally obliged to do so, such as data we need for our tax return. 
• We collect your personal data based on legitimate interests or your consent, which you can withdraw at any time.

Retention of personal data

We retain your personal data for as long as necessary to fulfil the purposes of this Privacy Statement. In general, we keep personal data of our website visitors for 3 months.

Your rights

You have the right to access the information we process. If you wish, you can contact us directly. We will ensure that we provide you with a copy of the data we process about you. We may need to verify your identity to comply with your request. If you believe that the provided information we process about you is incorrect, you can contact us to update your information. You also have the right to object to data processing. If you want us to delete your information, you can inform us at any time. You can contact us at any time regarding these requests. We will always respond in a timely manner, in accordance with the GDPR. If you are not satisfied with the response you receive, you can take your complaint to the relevant regulator.

Sharing with others

We will not share your information with others without your consent, unless it is necessary in the context of performing the agreement you, or your organisation, have entered into with us, or unless it is a legal obligation.

Transfer of personal data

To fulfil the purposes described in this Privacy Statement, we may transfer your data outside the EEA. We will take appropriate measures to ensure that personal data is properly secured. For transfers to the United States, we will ensure that such US party complies with the Privacy Shield. For other transfers, we may transfer your data to a country recognised by the European Commission as providing an adequate level of protection with respect to Personal Data.

Analytics

Data you provide may be retained for statistical analysis, including through Google Analytics and Piwik. These statistics are used to optimise the Services. This allows us to see how our visitors use the website and improve the website on that basis. Where possible, we will pseudonymise this data.

Cookies

We want to be able to offer you relevant and personalised information in a user-friendly way. To this end, we use different types of cookies on our websites. For instance, we place cookies that are necessary for the functioning of the site. Examples include the ability to respond, the operation of spam filters, video playback and caching to make the website faster. We also use analytical cookies that do not invade your privacy.

We also place cookies that track your browsing behaviour so that we can offer tailored content and advertisements. On your first visit to our website, we have already informed you about these cookies and asked your permission to place them. Our website uses the Google Ads Remarketing service to advertise on third-party websites (including Google). These ads are targeted to visitors who have visited our website.

In general, cookies are stored for the duration of the (browser) session. In addition, your IP address may be stored in our web server's log files when you use our Services. This is necessary to properly manage and secure our Services. We do not use your IP address to track or record your online behaviour. Typically, we are not able to link your IP address to your name, address or other identifying information, except when you provide us with such information and continue to use the same IP address.

You can opt out of cookies by setting your internet browser to stop storing cookies. In addition, you can also delete any information previously stored via your browser's settings.

Security

We ensure that your personal data are protected against loss or against unlawful processing. Among other things, we have taken the following technical and organisational measures:

• Logical access control, use of passwords and 2FA;
• Encryption of data;
• Pseudonymisation of data;
• Using Virtual Private Servers (VPN) accessible with the SSH key;
• Transfers only over SSL;
• Purpose-bound access restrictions;
• Control of recognised authorisations.

Third-party websites and services

Our Services include activities related to providing software that allows our customers to build their own professional websites. Our clients determine what kind of data they collect on or through their websites. We process such data only on behalf of our clients. If you have any questions about information our clients collect on or through their website, please contact the organisation that set up the website. Our clients determine which other services or plug-ins they use. This Privacy Statement does not apply to such other services or plug-ins, nor to third-party websites accessed through links. We cannot guarantee that these third parties will treat your personal data securely and reliably. We advise you to read the privacy statements of these parties.