PRIVACY POLICY

Last Updated:

PagoNxt Solutions, S.L. is committed to respecting the privacy of the users of its portal for developers (hereinafter, the "Portal"), as well as protecting their personal data.  

THIS PRIVACY POLICY IS SEPARATE FROM AND SUPPLEMENTS THE PRIVACY NOTICE FOR ANY PRODUCT DISPLAYED ON OUR PORTAL, APPLICATION PROGRAMMING INTERFACE (API), SOFTWARE, SOURCE CODE OR PRODUCT THAT IS USED, DOWNLOADED OR EXECUTED BY THE USER ON OR THROUGH THE PORTAL. 

I. BASIC AND GENERAL INFORMATION 

DATA CONTROLLER    

PagoNxt Solutions, S.L. (hereinafter, "PagoNxt").

Registered office: Avda. Cantabria s/n, Boadilla del Monte, Madrid.

Email: privacy@pagonxt.com

PURPOSES OF PROCESSING    

The main purpose is for PagoNxt to provide Portal services to users.

LEGITIMATE BASES    

Personal data processing will be based primarily on the contract to which the data subject is a party, or for the implementation of pre-contractual measures at the request of the data subject. However, the processing of personal data may have other legal basis, which will be specified in the privacy policy.

RECIPIENTS    

For these purposes, personal data of users will not be transferred to third parties, unless there is a legal obligation, or it is necessary for the provision of services.Some of these PagoNxt service providers are located outside the European Union; therefore, international data transfers may take place.

RIGHTS    

Access, rectification, erasure, restriction, data portability, objection, revocation of consent.

SOURCE    

Personal data will be collected from the data subject, except in the event that the user wants to register from their Google account, in which case we will receive certain data from Google Ireland Limited.

II. NECESSARY AND UP-TO-DATE INFORMATION: COMPULSORY NATURE OF THE PROVISION OF DATA. 

You can browse our Portal without registering. In this case, the only personal data that we would process is that collected through the installation of the cookies that you have authorised us to install. For more details, see the cookie policy here.

However, if you want to access the content of the Portal reserved for registered users, you must register on the Portal, for which you will need to fill out a registration form. This form indicates the mandatory data that will be collected. 

You must provide the requested data correctly, otherwise it will not be possible to contact you or complete your registration on the Portal. To ensure that the information provided is up to date and does not contain errors, you must inform PagoNxt as soon as possible of any changes and corrections to your personal data by sending an email to: privacy@pagonxt.com. 

Whenever the personal data provided through the registration form is obtained from a third party, you must inform the third party of the conditions contained in this Privacy Policy.  

III. DETAILED DESCRIPTION OF PROCESSING  

A. ALL USERS

MANAGEMENT OF BROWSING DATA OBTAINED FROM THE COOKIES USED ON THE PORTAL

DESCRIPTION

Processing of data from cookies implemented on the user's devices, in order to learn about browsing habits and preferences, to develop and improve the products and services offered on the Portal, and to carry out statistical studies on its performance.

CATEGORIES OF PERSONAL DATA

IP, browsing data

LEGITIMATE BASES

Consent

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

Your data will be transferred to the company Google Ireland Limited, whose registered office is in Ireland, which carries out international data transfers to the United States. For more details, see the cookie policy.

CONTACT FORM

DESCRIPTION

Answering queries and suggestions made through the Portal form.

CATEGORIES OF PERSONAL DATA

Name, surname(s), description and type of communication

LEGITIMATE BASES

Consent

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

B. REGISTERED USERS

REGISTRATION OF USERS IN THE PORTAL (MANAGEMENT OF REGISTRATIONS AND CANCELLATIONS OF USERS)

DESCRIPTION

  1. Email verification of the user's identity before registering on the Portal.
  2. Collection of user data during the Portal registration process.
    When registering through a Google account, the login will take place on Google's own website. Once the user is authenticated, Google will provide the email address to PagoNxt.
  3. Management of the cancellation of the user's profile, when requested.

CATEGORIES OF PERSONAL DATA

  1. Email
  2. Name, surname(s)
  3. First name, surname(s), email, and user profile history

LEGITIMATE BASES

Contractual relationship

SOURCE

  1. The data subject
  2. The data subject and/or Google
  3. The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

PROVISION OF THE SERVICE

DESCRIPTION

  1. Provision of services to users: subscription management, creation of organisations, etc.
  2. Reception, management and responding to incidents raised by users regarding the functioning of the Portal.
  3. Sending operational and transactional communications related to the Portal.

CATEGORIES OF PERSONAL DATA

Name, surname(s), email

LEGITIMATE BASES

Contractual relationship

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

COMMUNICATION OF THE DATA OF THE PORTAL USERS TO THE OWNERS OF THE APIS

DESCRIPTION

If the user wishes to subscribe to an API in sandbox or in production, the user will contract directly with the owner of the API. PagoNxt will share with this company the data of the users interested in said APIs so that both parties can enter into a contract. PagoNxt will not be involved, as data controller, in the contracting process and provision of services by the company that owns the APIs.

CATEGORIES OF PERSONAL DATA

Name, surname(s), email

LEGITIMATE BASES

Contractual relationship

SOURCE

The data subject

RECIPIENTS

PagoNxt company that owns the API.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made unless the company owning the API is registered outside the European Union or a country without an equivalent level of protection. In this case, PagoNxt will sign the corresponding standard clauses approved by the European Commission to establish adequate protection measures, in accordance with the regulations.

MANAGEMENT OF REQUESTS FOR THE EXERCISE OF RIGHTS

DESCRIPTION

PagoNxt will be responsible for managing the requests for rights exercised by users with respect to the data that has been processed through the Portal, as well as those related to the sectoral regulations and the defence of consumers and users.

CATEGORIES OF PERSONAL DATA

Name, surname(s), email

LEGITIMATE BASES

Legal requirements

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

LAWSUIT MANAGEMENT

DESCRIPTION

Processing and management of judicial and extrajudicial proceedings.

CATEGORIES OF PERSONAL DATA

Name, surname(s), email, and any other information necessary under the proceedings

LEGITIMATE BASES

Legal requirements

SOURCE

The data subject/Spanish Data Protection Agency (AEPD)

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

MANAGEMENT OF APPLICATION BACKUPS

DESCRIPTION

Management of backup copies of the Portal.

CATEGORIES OF PERSONAL DATA

First name, surname(s), email, and user profile history

LEGITIMATE BASES

Contractual relationship

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

C. OTHERS

CONTRACTUAL RELATIONSHIP WITH THE LEGAL REPRESENTATIVES OR ATTORNEYS-IN-FACT TO SIGN CONTRACTS

DESCRIPTION

Formalisation, documentation and management (including in relation to billing and payments) of the contractual relationship with suppliers and customers. In these cases, the personal data of the legal representatives or attorneys-in-fact will be processed for the management and maintenance of the contractual relationship.

CATEGORIES OF PERSONAL DATA

Name, surname(s), ID, details of granting of power of attorney or legal representation, corporate email, signature

LEGITIMATE BASES

Legitimate interest

SOURCE

The data subject

RECIPIENTS

Only service providers who are data processors.

INTERNATIONAL DATA TRANSFERS

No international transfers of your data will be made during this process.

IV. RETENTION PERIOD 

Personal data will be used for the duration of the contractual relationship with the customer. Once the relationship has ended, or if the user had requested their right to erasure, the data will be blocked for a period of 5 years, a period during which personal actions are barred in accordance with Article 1964 of the Civil Code. 

V. RIGHTS OF USERS 

In accordance with the applicable legislation on the protection of personal data, we inform you that you can exercise the following rights: 

  1. Access. You may request access to your personal data and the processing PagoNxt is doing at any time, along with a copy of the processed information. 
  2. Rectification. You may request the modification of your personal data when they are inaccurate or incomplete. 
  3. Deletion. You may request the deletion of your personal data if: (i) they are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) if you withdraw your consent, or (iii) when you understand that they have been processed unlawfully or (iv) otherwise legally established. 
  4. Limitation of processing. You may request the limitation of the processing of your personal data, in particular, while contesting its accuracy, when you understand that the processing is unlawful, when your data are no longer necessary for the purposes for which they were collected, but are necessary for the formulation, exercise or defence of claims, or in case of opposition while we verify the applicability of your right. 
  5. Opposition to the processing. You may object to the processing of your personal data, for reasons related to your particular situation, when your personal data are processed on the basis of legitimate interest or for marketing purposes and sending commercial information, including profiling. In such a case, PagoNxt will stop processing your personal data, unless there are overriding legitimate reasons or the personal data is necessary for the formulation, exercise or defence of claims. 
  6. Portability. You may request the receipt of personal data in a structured, commonly used and machine-readable format, and its transmission to another controller, when the processing is based on consent or the performance of a contract and the processing is carried out by automated means. 
  7. Withdrawal of consent. You may also withdraw the consent given at any time. The withdrawal of consent will not affect the lawfulness of the processing based on the consent prior to its withdrawal. 
  8. Right not to be subject to automated decisions. 

You can exercise any of these rights at any time, by sending an email to: privacy@pagonxt.com. Please indicate the right you wish to exercise. We may also request additional information in order to confirm your identity.  

If you feel that we have not treated your personal data properly, you can also email us at privacy@pagonxt.com. However, please note that you also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that a breach of data protection legislation has been committed with regard to the processing of your personal data. 

VI. SECURITY MEASURES 

In accordance with the applicable legislation, PagoNxt has adopted the appropriate technical and organisational measures to maintain the level of security required to protect personal data. PagoNxt has implemented specific mechanisms in order to prevent, as far as possible, unauthorised access, unlawful removal or modification or loss of data. 

VII. MINORS 

Minors may not use the services available through the Portal without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Portal by the minors in their care, including the filling out of forms with the personal data of said minors and the ticking of the boxes that accompany them, as the case may be. 

VIII. CHANGES IN THE PRIVACY POLICY 

PagoNxt reserves the right to review its Privacy Policy whenever it deems it necessary, in which case it will inform users of any such changes. In view of this, we recommend that you periodically review the up-to-date version of the Privacy Policy. 

© 2022 PagoNxt Solutions, S.L. All rights reserved.