Preamble
GlobalPayments Germany takes the protection of personal data and thus your privacy very seriously. At this point we would like to explain how Global Payments Germany protects your data and what it means for you when you use our customizable services. In order to guarantee the greatest possible protection of your privacy, we comply with all legal provisions concerning data protection. We comply with the provisions of the of the EU General Data Protection Regulation (GDPR) as well as those of the Bundesdatenschutzgesetz Neu (Federal Data Protection Act – New), which was passed to adapt data protection law to the EU regulation 2016/679 and to implement the EU directive (EU) 2016/680 (Datenschutz-Anpassungs- und -Umsetzungsgesetz – DSAnpUG-EU – German Act to Adapt Data Protection Law to Regulation (EU) and to Implement Directive (EU)).
1. Name and address of the responsible person
The responsible body and service provider is GP Payments Acquiring International GmbH, Elsa-Brändström-Str. 10–12, 50668 Cologne, Germany (hereinafter referred to as "Global Payments Germany").
2. Name and address of the data protection officer
Our data protection officer is Bird & Bird DPO Services SRL, Avenue Louise 235 b 1, 1050 Brussels, Belgium. You can also contact our data protection officer at any time with any questions concerning data protection, preferably by e-mail to dpo@globalpay.com or by mail to GP Payments Acquiring International GmbH, Elsa-Brändström-Str. 10–12, 50668 Köln, Germany.
3. Scope of application
This Data Protection Declaration applies to the internet offer of GP Payments Acquiring International GmbH, which can be accessed under the domain https://www.globalpayments.de/ and the various subdomains (hereinafter referred to as "our website").
4. Principles of data processing
Personal data is all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that cannot be used to identify you (or only with disproportionate effort), e. g. by anonymizing the information, is no personal data. The processing of personal data (e. g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be erased as soon as the purpose of the processing has been achieved and no legally prescribed retention obligations must be observed.
If we process your personal data for the provision of certain offers, we will inform you subsequently about the specific processes, the scope and purpose of data processing, the legal basis for the processing and the corresponding storage period.
5. Use of service providers for the processing of personal data / processing of data in countries outside the European Economic Area
The data and information provided in the context of the contractual relationship will be processed within the 'Global Payments Germany' group with its affiliated corporations for the management of merchants. Considering this, contractual regulations or other approved instruments provide sufficient guarantees for protecting your personal data adequately.
Service providers in countries such as the USA or in countries of the European Economic Area are subject to a data protection law that does not generally protect personal data to the same extent as in the member states of the European Union. As far as your data is processed in a country which does not provide an adequate level of data protection such as the European Union does, we ensure the adequate protection of your personal data with contractual regulations or other approved instruments.
6. Various processing operations
6.1 Provision and use of the website
6.1.1 Nature and scope of data processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is stored temporarily in a so-called log file. When you use our website, we collect the following data that is technically necessary for us to provide you with access to our website and to ensure its stability and security:
- IP address of the requesting computer
- date and time of access
- name and URL of the retrieved file
- website from which access is made (referrer URL)
- the browser used and, if applicable, the operating system of your computer as well as the name of your access providers.
6.1.2 Period of storage
As soon as the data is no longer required for providing the website, it will be erased. The collection of data for the provision of the website and the storage of data in log files is necessary for the performance of the website. Consequently, the user cannot object processing in this respect. Further storage may take place in individual cases if this is prescribed by law.
6.1.3 Legal basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves as a legitimate interest of our company.
6.2 Contact form
6.2.1 Nature and scope of data processing
If you would like to contact us online, we will ask for your name and e-mail address. You can also enter your company’s name and your telephone number and send us a message containing your issues.
It is your free decision whether you provide us with this data or not. However, without this information we are not able to answer your contact request.
6.2.2 Period of storage
The data collected for the purpose of contact will be erased as soon as your request has been processed.
6.2.3 Legal basis
Data is processed in accordance with Art. 6 para. 1 lit. b and f GDPR.
6.3 Chat
6.3.1 Nature and scope of data processing
If you would like to participate in the online chat we collect the following data:
- website from which access is made (referrer URL)
- the browser used and, if applicable, the operating system of your computer
- date and time of access
- IP address of the requesting computer
- e-mail address
- first name and surname
- Number of page views and visits
It is your free decision whether you provide us with this data. However, without this information we cannot fulfil your contact request.
6.3.2 Period of storage
The data collected for the purpose of the online chat will be erased after your enquiry has been finally answered.
6.3.3 Legal basis
Data is processed in accordance with Art. 6 para. 1 lit. b and f GDPR.
6.4 Customer portal
6.4.1 Nature and scope of data processing
On our website we offer you the opportunity to register by providing your personal data. With the processed data we create a personalized user account for you, with which we make certain contents and services accessible to you. When you visit the website in the future, you can log in conveniently with your user name and password of your choice. We process your e-mail address so that we can send you new access data in case you forget it.
The following overview shows you in detail which of your personal data (authorized representatives 1 and 2, contact persons 1 and 2) we process during registration:
- form of address
- first name and surname
- telephone number
- mobile phone number (optional)
- fax number (optional)
- e-mail address
- company
- power of attorney or contact person for ...
6.4.2 Period of storage
As soon as the registration on our website is cancelled or modified, the data processed during the registration process will be erased. Further storage may take place in individual cases if it is required by law.
6.4.3 Legal basis
Pursuant to Art. 6 para. 1 lit. b GDPR, the processing of the aforementioned personal data serves to take steps prior to entering into a contract.
6.5 Data processing of applicants
6.5.1 Nature and scope of data processing
If you would like to apply online, we need some personal data in terms of processing your application. The following application data is therefore collected and processed within the scope of the online application:
- form of address
- first name
- surname
- e-mail address
- how did you hear about us?
- upload of attachments for cover letter, curriculum vitae, certificates or other files.
6.5.2 Period of storage
The data collected for the purpose of the application procedure will be stored for a maximum duration of 6 months after the end of the application procedure.
6.5.3 Legal basis
Personal data of our users is regularly only collected after the user’s given consent. Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR and Art. 9 para. 2 lit. a GDPR serve as the legal basis for the processing of personal data.
You have the right to withdraw your consent to the use of your personal data with future effect at any time. For doing so, please send an e-mail to dpo@globalpay.com or a letter to GP Payments Acquiring International GmbH, Elsa-Brändström-Str. 10–12, 50668 Köln (please write “Global Payments Germany Data Protection” in the subject line).
7. Use of cookies
Please visit the page Cookies for detailed information.
8. Use of Google Analytics within this website
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so called "cookies", which are text files placed on your computer, to help you analyze how the website is used. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
This website automatically anonymizes your IP address; your Google IP address within member states of the European Union or in signatory states to the Agreement on the European Economic Area will be reduced before it is stored. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data of Google.
You may prevent the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so you may not be able to use this website to its full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
We also use Google Analytics to evaluate data from double-click cookies and AdWords for statistical purposes. If you do not want this, you can disable it using the Ads Preferences Manager: www.google.com/settings/ads.
9. Google Remarketing
Our website uses the remarketing function of Google Inc. "("Google"). This function is generally used to present personalized advertisement that is part of Google's advertising network to website users. To enable this, cookies are stored on your computer. When you visit our website and then visit a website that is part of the Google advertising network, you may be exposed to advertising from GP Payments Acquiring International GmbH.
According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use Google's remarketing feature, you can always deactivate it by making the appropriate settings at www.google.com/settings/ads.
As an alternative, you can disable the use of cookies for personalized advertising through the Advertising Network Initiative by following the instructions at www.networkadvertising.org/managing/opt_out.asp. For more information about Google Remarketing and Google's privacy policy, please visit: www.google.com/privacy/ads/.
10. Google AdWords
The data controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. Google AdWords allows an advertiser to define certain keywords in advance, which are used to display an ad in Google's search engine results only if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are spread to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.
The operator of Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying personalized advertising on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertising on our website.
If a person concerned enters our website via a Google ad, Google stores a so-called Conversion-Cookie on the information technology system of the person concerned. The subject of cookies has already been explained above. A Conversion-Cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not expired yet, the Conversion-Cookie is used to determine whether certain sub-pages, such as the shopping basket of an online shop system, have been accessed on our website. The Conversion-Cookie enables both us and Google to track whether a person who has accessed our website via an AdWords ad has generated revenue, i. e. has completed or cancelled a purchase of goods.
The data and information collected through the use of the Conversion-Cookie is used by Google to generate user statistics for our website. These statistics are used by us to determine the total number of users who have been referred to us via AdWords ads, i. e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the person concerned.
The Conversion-Cookie is used to store personal information, such as the websites visited by the person concerned. Personal data, including the IP address of the internet connection used by the person concerned, is therefore transferred to Google in the United States of America each time they visit our website. The personal data is stored by Google in the United States of America. Google may transfer the personal data collected via the technical process to third parties.
The person concerned can block the setting of cookies through our website at any time, as already described above, by means of an appropriate setting of the internet browser used and thus permanently block the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a Conversion-Cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be erased at any time via the internet browser or other software programs.
Furthermore, the person concerned has the possibility to object to personalized advertising by Google. To do this, the person concerned must access the www.google.de/settings/ads link from each of the internet browsers he/she uses and change the required settings there.
Further information and Google's current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.
11. Rights of data subjects
The GDPR provides the following rights for you as a data subject with regard to the processing of personal data:
11.1 Right of access
According to Art. 15 GDPR you can request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of a right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from the data subject, any available information as to their source, transfer to third countries or to international organizations as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information on their details.
11.2 Right to rectification
According to Art. 16 GDPR you can immediately demand without undue delay the rectification of inaccurate personal data or the completion of your personal data stored with us.
11.3 Right to erasure
According to Art. 17 GDPR you have the right to obtain the erasure of your personal data stored with us, as far as processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public Interest or for the establishment, exercise or defence of legal claims.
11.4 Right to object
In accordance with Art. 18 GDPR, you have the right to obtain from the controller restriction of processing if you dispute the accuracy of the personal data, the processing is unlawful, we no longer need the data and you refuse their erasion because they are required by you for the establishment, exercise or defence of legal claims. You also have the right according to Art. 18 GDPR if you have filed an objection against the processing in accordance with Art. 21 GDPR.
11.5 Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data provided by you to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
11.6 Right to withdraw
According to Art. 7 para. 3 GDPR you have the right to withdraw your consent to us at any time. As a result, we may no longer continue the processing of data based on this consent in the future.
11.7 Right to lodge a complaint with a supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Usually you can contact the supervisory authority of your habitual residence, your place of work or our company headquarters.
12. Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. If these hyperlinks are activated, you will be redirected from our website directly to the website of the other provider. You can recognize this, among other things, by the change of the URL. We cannot take responsibility for the confidential handling of your data on these third party websites, as we have no influence on whether these companies comply with the data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on their websites.
