1. Scope

This data protection declaration explains the type, scope and purpose of the collection and use of personal data by PAYUCA GmbH (hereinafter "PAYUCA") when you visit our website, use our online applications, mobile platforms and apps that have a link about this data protection declaration, as well as how you can prevent the collection of such data if necessary. The personal data is treated with care and collected, processed and used in accordance with the legal data protection regulations in order to optimize the use of our website and our online offer.
This data protection declaration does not apply to websites, online applications, mobile platforms, apps and/or other online offers that are not linked to this data protection declaration or to those of third parties.
By using this website, our online applications and our mobile platforms and apps, you consent to PAYUCA's present data protection declaration.
This consent can be revoked at any time in writing.
The data protection declaration can be accessed online at any time at https://payuca.com/en/b2b/privacy-policy/. If additional online services from PAYUCA are used, the general terms and conditions of the respective product apply in the currently valid version.

2. Collection and use of personal data

The Google Analytics service and similar services collect information from you in two ways: directly from your input and automatically through the technologies of the respective service.

2.1. Information Provided by You

The information that we expressly ask you to enter and submit to the respective service, which the respective service collects directly through your input, may contain the following information:

• E-mail address
• phone number
• First and Last Name
• mailing address

2.2. Information Collected Automatically

For data security and user-friendliness purposes, Google Analytics and similar services automatically collect information about your use of our website, our online applications, mobile platforms and apps:

• The IP address used to connect your computer to the Internet;
• Computer, device and connection information, such as browser type and version, operating system, mobile platform and unique device identifiers (“UDID”) and other technical identifiers;
• URL clickstream data, including the date and time and the content you viewed or searched for on a service and the URL that referred you to that service.

2.3. Cookies

PAYUCA uses so-called session cookies on its website, whereby no personal data other than the IP is stored in these cookies. Cookies are text files that are stored on your computer and enable PAYUCA to analyze the use of the website in order to facilitate use and, if necessary, optimize it. You can restrict or prevent the installation of cookies by setting your browser software accordingly, although PAYUCA cannot guarantee that you will be able to use all the functions of our website to their full extent even if you have deactivated the use of cookies in your browser. If you want to disable cookies, the help button on most browser toolbars will show you how to stop accepting cookies, how to be notified when a new cookie is set, and how to block cookies.
By using this website and our apps, you agree to the reading, processing, transmission and storage of information by cookies.

3. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94043, United States. ("Google"). Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for PAYUCA and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; However, PAYUCA would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
By using this website and our apps, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
If Google AdSense, a web advertising service provided by Google Inc., USA ("Google"), places advertising (text ads, banners, etc.) on this website, your browser may store a cookie sent by Google Inc. or a third party. The information stored in the cookie can be recorded, collected and evaluated by Google Inc. or third parties. In addition, Google AdSense also uses so-called "web beacons" to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon about your use of this website is transmitted to a Google server in the USA and stored there. Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. Google will not associate your IP address with other data stored by Google. You can prevent the storage of cookies on your hard drive and the display of web beacons. To do this, you must select "do not accept cookies" in your browser settings (in Internet Explorer under "Extras / Internet Options / Data Protection / Settings", in Firefox under "Extras / Settings / Data Protection / Cookies").
You can find more information about Google's data protection regulations on the Google Analytics website at https://www.google.at/intl/de_ALL/analytics/learn/privacy.html and about the terms of use at https://www.google. com/analytics/terms/en.html.
By using this website and our apps, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

4. Google Remarketing

PAYUCA uses Google Remarketing Technology, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States. With the help of this function, we can address you as a website visitor with advertising in a targeted manner by placing personalized, interest-based advertisements when you visit other websites in the Google or DoubleClick display visit network. Google uses cookies, which are stored on your computer, to evaluate your use of the website, your demographic characteristics and your interests. To carry out the analysis of your website usage, which is the prerequisite for the use of interest-based advertisements, Google uses cookies, which are stored on your computer. By The information generated by the cookie is transmitted to a Google server, stored there and can be evaluated by PAYUCA in the context of statistics and used to create interest-based advertisements. Google may transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. You can object to the collection and storage of data at any time with effect for the future. You can disable Google's use of cookies by visiting http://www.google.com/policies/technologies/ads/ to disable Google advertising.
Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative opt-out page at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google's data protection regulations can be found at http://www.google.com/intl/de/privacy.
By using this website and our apps, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

5. Use of social plugins

This website uses so-called social plugins (hereinafter "plugins") from the social network Facebook and the microblogging services Twitter and Instagram. These services are provided by the companies Facebook Inc., Twitter Inc. and Instagram LLC. offered (hereinafter “Provider”).
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter "Facebook"). You can find an overview of the Facebook plugins under the link https://developers.facebook.com/docs/plugins.
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (hereinafter "Twitter"). You can find an overview of the Twitter buttons under the link https://twitter.com/about/resources/buttons.
Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (hereinafter "Instagram"). You can find an overview of the Instagram buttons under the link http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
If you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook, Twitter or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there. If you are logged in to one of the services at this time, the providers can immediately assign your visit to our website to your profile on Facebook, Twitter or Instagram. If you interact with the plugins, e.g. If you click the "Share", "Like", "Tweet" or "Instagram" button, the corresponding information is also transmitted directly to the provider's server and stored there. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection guidelines of the respective provider. You can find Facebook's privacy policy at https://www.facebook.com/about/privacy, Twitter's privacy policy at https://twitter.com/privacy and Instagram's privacy policy at https:/ /help.instagram.com/155833707900388/
By using this website and our apps, you consent to the processing of data about you by the respective social media service in the manner and for the purposes set out above.

6. Use of YouTube

We have integrated components from YouTube on our website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why both complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective YouTube component caused to download a representation of the relevant YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.
If the person concerned is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the person concerned has visited our website if the person concerned is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
The data protection regulations published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
By using this website and our apps, you consent to the processing of data about you by YouTube in the manner and for the purposes set out above.

7. Facebook Remarketing

PAYUCA uses Facebook "Custom Audience" technology, a service of Facebook Ireland Limited Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland. The data collected through the integration of cookies, web beacons or similar third-party technologies allow us to measure and design our advertising activities on Facebook more effectively and, for example, to display posts or advertisements only for visitors to our website. To collect this data, we only use cookies, web beacons and similar, tested and widely used third-party technologies. We do not share or upload lists of personally identifiable information to Facebook. The data collected is only transmitted to Facebook in encrypted form. Any personal data of individual users cannot be viewed by us. You can find more information on this in Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you do not want data to be collected via "Custom Audience", you can deactivate "Custom Audience" at https://www.facebook.com/ads/website_custom_audiences/.
The use of these web analysis services serves to continuously improve the functions and services of PAYUCA. Only non-personal data is used for analysis and reporting purposes. PAYUCA does not merge this data with other personal data.
By using this website and our apps, you consent to the processing of data about you by analysis services in the manner and for the purposes set out above.

8. App-specific data

We use Crashlytics, a web analytics service operated by Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107 ("Twitter"), in our app fabric to improve the app and fix errors such as crashes . The data collected for this purpose is made available to us anonymously and becomes the property of Twitter. We are notified of crashes and see the line of code that caused the crash, the type of mobile device and operating system installed, the amount of free RAM and flash memory, and whether the operating system has been jailbroken. We use this data to reproduce the error as well as possible and then fix it in one of the next versions.
The data stored by Fabric is described in Fabric's terms and conditions (https://fabric.io/terms).
Our app also uses technology from Google Firebase (Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, "Google"). Firebase is part of the Google Cloud Platform and offers numerous services for developers. You can find a list of them here: https://firebase.google.com/terms/. Some Firebase Services process personal data. In most cases, the personal data is limited to so-called "instance IDs", which are provided with a time stamp. These "Instance IDs" assigned by Firebase are unique and thus allow different events or processes to be linked. This data does not constitute personally identifiable information for us, nor do we make any efforts to subsequently personalize it. We process this aggregated data to analyze and optimize usage behavior, for example by evaluating crash reports.
For Firebase Analytics, Google uses the advertising ID of the end device in addition to the "Instance ID" described above. You can restrict the use of the advertising ID in the device settings of your mobile device.
For Android: Settings > Google > Ads > Reset advertising ID
For iOS: Settings > Privacy > Advertising > No ad tracking
We use the Amazon Web Services ("AWS") service of Amazon Web Services, Inc., P.O. to host the database and web content. Box 81226, Seattle, WA 98108-1226, USA. The data is stored exclusively in European data centers that are certified according to ISO 27001, 27017 and 2018 as well as PCI DSS Level 1.
Of course, we have very limited access rights and the data is automatically encrypted. You can find more information about AWS and data protection at https://aws.amazon.com/de/compliance/eu-data-protection/ and at https://aws.amazon.com/de/privacy/
To analyze user behavior, we use Amplitude, an analysis service provided by Amplitude Inc. (631 Howard St 5th floor, San Francisco, CA 94105, US). For this purpose, anonymized information about your use is transmitted to an Amplitude server. There is no transmission of data that allows conclusions to be drawn about an individual user. For more information about Amplitude and privacy, please visit https://amplitude.com/privacy
To improve user guidance, we use the Branch.io service, a service provided by Branch Metrics, Inc. at 2443 Ash Street, Palo Alto, CA 94306, USA. This service is an open source solution that makes it possible to generate targeted smart links to content within an app using the appropriate software development kits (SDKs) for web, iOS and Android operating systems. Furthermore, the service allows users to share content using social media platforms connected to the service. Branch Metrics collects data as part of the provision of the service and its functions. The purpose and scope of data collection and processing by Branch Metrics and your rights in this regard can be found in Branch Metrics' data protection information at the URL https://branch.io/policies/#privacy.
By using our apps, you consent to the processing of the data collected about you by analysis services in the manner and for the purposes set out above.

9. Use of payment service providers in the app

Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands, acts as the payment service provider, to whom we transmit the information you provide during the ordering process together with the information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art 6 paragraph 1 letter b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Adyen and only to the extent that it is necessary for this.
If you select the "Klarna Sofort" payment method, payment will be processed by Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna") To enable payment, your personal data (name, address, IBAN, BIC, invoice amount, currency and transaction number) will be forwarded to Klarna.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal information will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf or for Data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf are treated.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further. The transfer takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR and only to the extent that this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

10. Use of Personal Data

In accordance with § 24 Data Protection Act (DSG 2000), you are informed that, with your consent, we will process the personal information collected by the respective service within the meaning of § 8 Para. 3 Z 4 DSG 2000 and use it to carry out the following actions:

• to provide and improve our service and support;
• to be able to contact you according to your request;
• to invite you to participate in surveys or similar promotions;
• for data analysis;
• for internal audits;
• for new product development;
• for determining usage trends;
• to determine the effectiveness of our marketing activities where you have expressly consented to them in a customer agreement with us;
• to prevent and detect security threats, fraud and other malicious activity;
• to comply with our legal obligations and enforce our agreements;
• to create statistics about access behavior (e.g. number of accesses to a source, number of customer accesses in total and per source, changes in access frequency);

We may also, from time to time, match or match the personal information you provide to us with information we have obtained from other sources or already had in our records, whether collected online or offline, or inherited from a legal predecessor, for the purposes described above merge.

11. Newsletter

On our website we offer you the opportunity to register for our newsletter. With your registration, we save your first name and surname, your e-mail address, your IP address and the date and time of registration, if specified. We do not collect any further data. The data collected will only be used to subscribe to our newsletter and will not be passed on to third parties. You can unsubscribe from the newsletter at any time via an unsubscribe link in the newsletter.
We use Brevo, a service provided by Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, to send the newsletter.
If you would like more detailed information about the security of your data, you can find this in the company's data protection guidelines and in a special information sheet at https://www.brevo.com/legal/privacypolicy/ or https://www.brevo.com/de/informationen-newsletter-empfaenger/

12. Access to your personal information and its accuracy

You can request a copy of the data stored about you in writing and request the deletion of your data. You can also request verification and correction of any such personal information. For this purpose, please contact PAYUCA.

13. Data subject rights

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right of appeal, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• according to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;
• according to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you use them to assert, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
• pursuant to Art. 7 Para. 3 GDPR, to revoke the consent you have given to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent for the future and
• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

14. Data security

We use a variety of data security measures to ensure the confidentiality and integrity of your personal information. By using our website and our apps, you agree to the transfer of your data to countries outside your country of residence, which may have different data protection regulations than in your country.

15. EU online dispute resolution

The European Commission provides a platform for online dispute resolution, which you can find at http://ec.europa.eu/consumers/odr/.

16. Disclaimer

Our offer contains links to external third-party websites, the content of which we have no influence on. Therefore we cannot assume any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent control of the content of the linked pages is not reasonable without concrete evidence of an infringement. As soon as we become aware of legal violations, we will remove such links immediately.

17. Change to the privacy policy

The current version of the data protection declaration applies. PAYUCA reserves the right to change the data protection declaration. Any changes or additions must be made in writing.

18. Reachability

Information according to § 24 para. 1 Z 2 DSG 2000:
PAYUCA GmbH
Handelskai 92, Gate 1, 1.OG
1200 Vienna
Austria

T: +43 1 307 5622
F: +43 1 307 5622 – 9
E: office@payuca.com

Commercial register number: FN 440762f
VAT number: ATU69942315
Commercial Court: Vienna, Austria
DVR: 4017740

Managing directors:
Dominik Wegmayer
Wolfgang Wegmayer