1. Data Controller

Responsible for the processing of personal data on this website is:

Payrexx AG Burgstrasse 20 3600 Thun Switzerland

Phone: +41 33 550 00 10 E-mail: privacy@payrexx.com

For questions regarding data protection, Payrexx AG can be reached at privacy@payrexx.com. The Data Protection Officer of Payrexx AG is Daniel Franco Faustino, who can also be reached at this address.

2. Scope of Application

This privacy policy applies to the website payrexx.com and the information offers and forms available there.

This privacy policy does not cover the Comerciante account and the payment services of Payrexx AG. As soon as a Comerciante account is opened, a separate processing context begins — this includes, among other things, the identification and verification of customers, fraud prevention, the processing of payments and payouts, and compliance with regulatory obligations. Payrexx AG provides separate information about this processing.

Payrexx AG processes personal data in accordance with the Swiss Data Protection Act (DPA) and, where applicable, the European General Data Protection Regulation (GDPR).

3. Which Data We Process

The website can be used without providing personal details. Certain data is generated technically, while other data is transmitted by the data subject themselves.

Accessing the Website IP address, date and time, page accessed, referrer, browser type and version, operating system, internet provider. This data is stored in server log files, separated from other data.

Contact and Sales Form, E-mail Name, e-mail address, telephone number, company, and content of the inquiry. Retention until the inquiry is resolved, thereafter according to statutory retention periods.

Newsletter Registration E-mail address, IP address, as well as the date and time of registration. Retention until unsubscription.

Job Application All details from the submitted application documents. Deletion two months after completion of the process, unless employment occurs.

Registration for a Comerciante Account Details from the registration form as well as IP address, date, and time. This privacy policy covers the registration process on the website. With the opening of the Comerciante account, the processing context of the payment platform begins, about which Payrexx AG provides separate information (see Section 2).

Payrexx AG analyzes the data from the server log files statistically in order to deliver the website correctly, ensure its stability, and ward off attacks. No conclusions are drawn about individual persons.

The newsletter of Payrexx AG is confirmed using the double opt-in procedure and contains tracking pixels that show whether and when an e-mail was opened and which links in it were clicked. The newsletter can be unsubscribed from at any time via the link at the end of each e-mail; unsubscription is also considered a withdrawal of consent for tracking.

4. Purposes and Legal Bases

Payrexx AG only processes personal data if there is a legal basis for doing so. Within the scope of application of the GDPR, the following bases apply:

• Provision and Security of the Website — legitimate interest according to Art. 6 para. 1 lit. f GDPR

• Answering Inquiries via Form or E-mail — contract or pre-contractual measures according to Art. 6 para. 1 lit. b GDPR

• Newsletter and Newsletter Tracking — consent according to Art. 6 para. 1 lit. a GDPR

• Analysis and Audience Measurement — consent according to Art. 6 para. 1 lit. a GDPR

• Advertising and Remarketing — consent according to Art. 6 para. 1 lit. a GDPR

• Application Process — initiation of an employment relationship according to Art. 6 para. 1 lit. b GDPR

• Compliance with Legal Obligations, such as anti-money laundering or tax law — legal obligation according to Art. 6 para. 1 lit. c GDPR

Under Swiss law, Payrexx AG processes personal data based on the DPA. Consent is required where the law demands it; otherwise, processing is based on an overriding private interest or a legal basis.

The legitimate interest of Payrexx AG is to operate the website securely and functionally, to improve the offer, and to carry out business activities.

Consent given can be withdrawn at any time with effect for the future — directly in the services list in Section 5 or via the privacy settings.

5. Services Used on This Website

Payrexx AG uses services of External providers on payrexx.com, such as for audience measurement, advertising, embedded content, and technical operation. The following list shows which services these are in detail, what purpose they serve, on what legal basis they run, how long data is stored, and whether a transfer abroad takes place.

The list is continuously updated and is part of this privacy policy. Consent for individual services can be granted or withdrawn at any time using the switches in the list.

The details refer to this website. What data is processed during the processing of payments via the Payrexx AG platform is not subject to this list.