Privacy
Policy
How we collect, use, and protect your personal data. Your privacy is our priority.
Privacy Focused
Your Data, Protected
Privacy Policy
Data Protection Policy of Paysolo Application
This Policy is addressed to Paysolo users. The Policy describes the rules for the collection and use of Paysolo users' data obtained directly from them or via cookies and similar technologies.
We assure each user that we will exercise the utmost diligence when caring for the protection of personal data. We do not transfer personal data without the consent of our users. We enable users to familiarize themselves with the personal data collected and processed by us, with their consent, and to change them or withdraw their consent.
1. Personal Data Controller
The controller of data collected in connection with the use of the Paysolo application is Paysolo Ltd (also referred to as "Paysolo", "we", "our", "us"), a Limited Liability Company with its registered office in str. ul. TODOR ALEXANDROV No 41, Blagoevgrad, pc 2700, Bulgaria, entered into the Commercial register and register of non-profit legal entities (NPLE) under UIC number 207268330, e-mail: contact@paysolo.io
In matters related to the processing of your data by the Controller, you can contact the above address data or the Data Protection Officer appointed by the Data Controller, at the following e-mail address: support@paysolo.io
2. Scope of Collected Personal Data
3. Data Source
4. Purpose and Legal Basis
For the processing of personal data
User data may be processed for the purpose of:
Network Traffic Analysis & Security
Network traffic analysis, ensuring security as part of the provision of services by Paysolo and adapting the content to the user's needs based on the legitimate interest of the Data Controller (Article 6 (1) (f) of the GDPR).
Analytics and Advertising Technologies
Including Google Analytics and Meta (Facebook) Ads tools such as the Meta Pixel - to understand how our services are used, improve performance and user experience, detect and fix defects, and measure the effectiveness of our marketing.
Subject to your settings and consent where required, these tools may process:
- device and network data (cookie IDs or similar identifiers, IP addresses, browser/OS type and version, screen size, mobile identifiers);
- usage data (pages viewed, clicks, scrolls, session duration, crash/diagnostic events);
- campaign data (referrers, UTM parameters, ad impression/clicks, conversions);
- approximate location derived from IP; and
- optionally, hashed contact identifiers or advertising IDs if you provide them or your device permits.
Analytical Activities
Analytical activities related to the functioning or optimization of Services or applications and other available services, including their optimal selection, as well as for the purposes of building knowledge about the Customer's needs, researching their satisfaction, including obtaining market opinions, qualitative information, conducting after-sales research. For this purpose, the processing is carried out on the basis of the premise specified in Article 6 sec. 1 (f) of the GDPR, i.e. in the legitimate interest of the Controller.
Marketing Activities
Marketing activities undertaken, in particular in the field of promotion of goods and services of the company or its cooperating entities, including sending commercial information. For this purpose, the processing is carried out on the basis of the premise specified in Article 6 sec. 1 (f) of the GDPR.
Legal Claims
Establishing, investigating or defending against claims. For this purpose, the processing is carried out on the basis of the premise specified in Article 6 sec. 1 (f) of the GDPR, i.e. in the legitimate interest of the Controller, which manifests itself in the right of every person to assert their rights.
Data Sharing for Marketing
Sharing data with other entities cooperating with the Controller, for marketing purposes - the basis for data processing is voluntary consent, provided that such consent has been granted; if consent is not given, personal data is not processed for this purpose. The basis for data processing is the consent referred to in Article 6 sec. 1 (f) of the GDPR.
Profiling
Offering products and services according to customer needs, i.e. profiling. The basis for data processing is the consent referred to in Article 6 sec. 1 (f) of the GDPR.
Complaints
Exercise of rights arising from complaints. The basis for processing is the performance of the controller's obligations arising from the rights of consumers, and in the other category of customers in the legitimate interest of the controller, which is the right to establish, assert and defend claims. For this purpose, the processing is carried out on the basis of the premise specified in Article 6 sec. 1 (f) of the GDPR.
5. Right to Withdraw Consent
6. Obligation or Voluntary Provision of Data
7. Rights Resulting from the GDPR
The user has the right to:
- request the Data Controller to provide the user with access to their data, as well as a copy of it (Article 15 of the GDPR);
- request the Data Controller to rectify or correct their data (Article 16 of the GDPR) - in reference to the request for rectification of data when the user notices that their data is incorrect or incomplete;
- request the Data Controller to delete their data (Article 17 of the GDPR);
- request the Data Controller to limit processing (18 GDPR) - e.g. when the user notices that their data is incorrect - the user may request the restriction of the processing of their data for a period that allows to check the correctness of this data);
- lodge a complaint in connection with the processing of their personal data by the Controller to the supervisory body dealing with the protection of personal data.
Commission for Personal Data Protection
Address: 2 Tsvetan Lazarov Bvd, 1592, Boulevard "Professor Tsvetan Lazarov" 2, 1784 Sofia, Bulgaria
8. Recipients of Personal Data
9. Duration of Data Storage
Personal data processed in connection with the concluded Agreement are stored for the period of its validity and until the claims in this respect are time-barred.
- Personal data processed on the basis of consent or the legitimate interest of the Controller - until an objection is raised or the consent is withdrawn by the data subject or the purpose of processing ceases to exist.
- Personal data processed for the purpose of a complaint - until the end of its consideration or until the dispute in this respect is resolved.
- Personal data processed in order to exercise consumer rights - for the period necessary to assert them.
10. Co-administration of Personal Data
Co-administration of data may take place if the Data Controller and at least one other entity jointly determines the purposes and methods of personal data processing. This means that in a given process of personal data processing, three conditions must be met simultaneously, i.e. the Data Controller and at least one other entity must:
- be a controller within the meaning of Article 4 point 7 of the GDPR,
- jointly determine the purposes of data processing,
- jointly determine the methods (technical and organizational) of data processing.
11. Disclosure to Public Authorities
12. Risk-based Approach
As regards the applied solutions relating to the processing of personal data, in particular with regard to security, the Data Controller applies the risk-based approach.
14. Automated Decision Making
And Profiling
The processing of the user's personal data may be automated, which may involve automated decision-making, including profiling, which is performed by the Data Controller under applicable law. This applies to the following cases:
- verifying the identity of the Paysolo user, where the assessment is made by SumSub (www.sumsub.com) based on the established criteria.
- assessing the risk of violating the law, where the assessment is made on the basis of the obtained data and established criteria.
15. Policy Review and Updates
Contact & Inquiries
Data Controller
Paysolo Ltd
UIC: 207268330
Bulgaria
General Contact
contact@paysolo.io
Data Protection Officer
support@paysolo.io