What personal data do we process?
We process your personal data when you use our services or provide them to us.
Below is an overview of the personal data we process:

• First and last name;
• Address details;
• Phone number;
• Email address;
• IP address;
• Data from your internet browser and device.

Depending on the service (SAAS integration), we also store the following data:

• Transaction data (customer information and status/reference);
• Configuration data of the app, such as data from the payment provider.

Depending on the service (HUB), we also store the following data:

• Transaction data: To process transactions and manage your account, we collect information about transactions you perform with our services;
• Basic information about your business: To manage your account, we collect basic information about your business, such as your company name, address, phone number, email address, and contact person;
• Basic information about your webshop/website, including URL and Webshop/Software name;
• Configuration data from the payment provider;
• Username: This is necessary for your identification and access to our services;
• Password: Your password is encrypted and accessible only to you.

What special and/or sensitive personal data do we process?
Our website and services are not intended to collect data from visitors under the age of 16, unless they have permission from their parents or guardian. However, we cannot verify if a visitor is older than 16. Therefore, we recommend that parents be involved in the online activities of their children to prevent data from being collected from children without parental consent. If you are convinced that we have collected personal data from a minor without permission, please contact us at persoonsgegevens@codebrain.nl. We will then delete this data.

For what purpose and on what basis do we process personal data?
We process your personal data for the following purposes:


• Handling payments;
• Providing licenses;
• Handling job applications;
• Contacting you by phone or email when necessary for our services;
• Informing you about changes to our services and products;
• Additionally, we process personal data when required by law, for example, for tax returns.

How long do we retain personal data?
We do not retain your personal data longer than necessary to achieve the purposes for which the data was collected.
The retention periods differ per category:


• Support, installation, and controls: up to 5 to 10 working days;
• Development: 2 to 18 weeks;
• Licenses and subscriptions: during the period you are a customer of PayoCity. If you terminate the customer relationship, we will retain your data for a maximum of one year, except for data for which a legal obligation exists, such as invoices;
• Job applications: a maximum of one month after completing an application procedure, unless you have given permission to retain them longer, in which case your data will be deleted after a maximum of one year;
• SAAS: data for the operation of the app is stored for 1.5 years. Transaction data is automatically deleted after 1.5 years. Configuration data is stored until the app is uninstalled.

Do we share personal data with third parties?
We do not sell your data to third parties and only share it when necessary to fulfill our agreement with you or to comply with a legal obligation. We have a data processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. We remain responsible for these processing activities.

What cookies do we use?
We only use technical and functional cookies, as well as analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit our website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remember your preferences. We also use cookies to optimize our website. You can opt-out of cookies by setting your internet browser so that it no longer stores cookies. You can also delete all previously stored information through the settings of your browser.

Access, correction, or deletion of personal data
You have the right to access, correct, or delete your personal data. You can also withdraw your consent for data processing or object to the processing of your personal data by PayoCity. Additionally, you have the right to data portability, which means you can request to send your personal data, which we have, to you or another organization in a computer file. Send your request to persoonsgegevens@codebrain.nl.

To ensure that the request is made by you, we ask you to include a copy of your identity document, where you can black out your photo, MRZ (machine-readable zone), passport number, and BSN (citizen service number) to protect your privacy. We will respond as soon as possible, but within four weeks, to your request.

How do we secure personal data?
We take the protection of your data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. If you have the impression that your data is not properly secured or if there are indications of abuse, please contact our customer service or persoonsgegevens@codebrain.nl.
Here are some measures we have taken to secure your personal data:


• Security software such as a virus scanner and firewall;
• TLS (formerly SSL) to send your data via a secure internet connection. You can recognize this by the address bar starting with 'https' and the lock icon in the address bar;
• DKIM and SPF are internet standards we use to prevent you from receiving emails that contain viruses, are spam, or are intended to obtain personal (login) data.

PayoCity and other websites
Our website contains links to other websites. We are not responsible for the way those websites handle your data. Please read the privacy policy of those websites when you visit them.

Changes
We reserve the right to make changes to this privacy statement. Therefore, please regularly check PayoCity's privacy statement for our privacy policy.