1. Data controller

The entity responsible for processing personal data on this website is:

Payrexx AG Burgstrasse 20 3600 Thun Switzerland

Telephone: +41 33 550 00 10 E-mail: privacy@payrexx.com

For questions regarding data protection, Payrexx AG can be reached at privacy@payrexx.com. The data protection officer of Payrexx AG is Daniel Franco Faustino, who can also be reached at this address.

2. Scope

This privacy policy applies to the website payrexx.com and the information offers and forms available there.

This privacy policy does not cover the Comerciante account and the payment services of Payrexx AG. As soon as a Comerciante account is opened, a separate processing context begins — this includes, among other things, the identification and verification of customers, fraud prevention, the processing of payments and payouts, and the fulfilment of regulatory obligations. Payrexx AG provides separate information about these processing operations.

Payrexx AG processes personal data in accordance with the Swiss Data Protection Act (DPA) and, where applicable, the European General Data Protection Regulation (GDPR).

3. Which data we process

The website can be used without providing personal details. Certain data is generated technically, while other data is transmitted by the data subject themselves.

Accessing the website IP address, date and time, accessed page, referrer, browser type and version, operating system, internet provider. This data is stored in server log files, separately from other data.

Contact and sales form, e-mail Name, e-mail address, telephone number, company and content of the enquiry. Retention until the enquiry has been processed, thereafter in accordance with statutory retention periods.

Newsletter subscription E-mail address, IP address as well as date and time of registration. Retention until unsubscription.

Job application All details from the submitted application documents. Deletion two months after completion of the process, unless employment is offered.

Registration for a Comerciante account Details from the registration form as well as IP address, date and time. This privacy policy covers the registration process on the website. Opening a Comerciante account starts the processing context of the payment platform, about which Payrexx AG provides separate information (see Section 2).

Payrexx AG analyses the data from the server log files statistically in order to deliver the website correctly, ensure its stability and defend against attacks. No conclusions are drawn about individual persons.

The newsletter of Payrexx AG is confirmed using the double opt-in procedure and contains tracking pixels that show whether and when an e-mail was opened and which links in it were clicked. The newsletter can be unsubscribed from at any time via the link at the end of every e-mail; unsubscribing also counts as revoking consent to tracking.

4. Purposes and legal bases

Payrexx AG only processes personal data if there is a legal basis for doing so. Within the scope of application of the GDPR, the following bases apply:

• Provision and security of the website — legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR

• Answering enquiries via form or e-mail — contract or pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR

• Newsletter and newsletter tracking — consent pursuant to Art. 6 para. 1 lit. a GDPR

• Analysis and reach measurement — consent pursuant to Art. 6 para. 1 lit. a GDPR

• Advertising and Remarketing — consent pursuant to Art. 6 para. 1 lit. a GDPR

• Application process — initiation of an employment relationship pursuant to Art. 6 para. 1 lit. b GDPR

• Fulfilment of legal obligations, such as under money laundering or tax law — legal obligation pursuant to Art. 6 para. 1 lit. c GDPR

Under Swiss law, Payrexx AG processes personal data based on the DPA. Consent is required where the law demands it; otherwise, processing is based on an overriding private interest or a legal basis.

The legitimate interest of Payrexx AG consists of operating the website securely and functionally, improving the offer and carrying out its business activities.

Consent given can be revoked at any time with effect for the future — directly in the list of services in Section 5 or via the privacy settings.

5. Services used on this website

On payrexx.com, Payrexx AG uses services from External providers, such as for reach measurement, advertising, embedded content and technical operation. Which ones these are in detail, what purpose they serve, on what legal basis they run, how long data is stored and whether a transfer abroad takes place is shown in the following list.

The list is continuously updated and forms part of this privacy policy. Consent for individual services can be granted or revoked at any time using the switches in the list.

The details refer to this website. What data is processed when payments are handled via the Payrexx AG platform is not subject of this list.