Privacy & cookie policy

WSPay is a secure system for real time credit and debit card payments. WSPay ensures the buyer and the merchant with the secure card data entry and transfer, which is also confirmed by PCI DSS certificate. WSPay uses 256-bit SSL encryption and TLS 1.2 cryptographic protocol as the highest protection standards for data entry and transfer.
WSPay personal data protection

WSPay, being the processor of authorization and payment made by credit cards, uses personal data as the processor pursuant to the General Data Protection Regulation of the European Parliament and the Council no. 2016/679, and compliant with PCI DSS Level 1 Regulations for data transfers.

WSPay uses 256-bit SSL encryption and TLS 1.2 cryptographic protocol as the highest protection standards for data entry and transfer.

Personal data used for the purposes of authorization and payment are deemed to be confidential data.

The following customer's personal data are necessary to fulfil the Agreement (authorization and payment):

• Name and Surname
• E-mail
• Telephone number
• Address
• City
• Post Code
• Country
• Type of credit card
• Credit card number
• Expiry date (credit card)
• CVV number for credit card

WSPay does not process or use these personal data except for the purpose of fulfilling the Agreement, the authorization and the payment.

WSPay ensures to meet the requirements determined by applicable personal data protection regulations, for the processors of personal data, especially taking all necessary technical, organizational or security measures confirmed by PCI DSS Level 1 certificate.

• Right to be informed according to Art. 12., 13. i 14. General Data Protection Regulation – Individuals have the right to be informed and, therefore, may at any time request information and details on how the Processing Manager processes their personal data, which the Processing Manager will verbally communicate or provide in writing through the channel from which that right is claimed;
  
• Right to access personal data according to Art.15. General Data Protection Regulation - At any time, an individual may request access to his or her personal data held by the Processing Manager in order to be informed about the processing of his or her personal data, or to ascertain whether or not his personal data are processed by the Processing Manager and to be informed of the purpose the processing, the legal basis and the conditions under which the processing manager processes his personal data;
  
• Right for correction according to Art. 16. General Data Protection Regulation – At any time, individuals may request the correction of their personal information, including the completion of a supplementary statement, to ensure the accuracy, completeness or up-to-date of personal information;
  
• Right for deletion (“to be forgotten”) according to Art.17. General Data Protection Regulation – Individuals may request the deletion of their personal information processed by the Processing Manager if (i) it no longer exists or the purpose for which it was collected is fulfilled; (ii) the individual withdraws the consent and the processing is done on the basis of that consent, and there is no other legal basis to continue the processing; (iii) the individual opposes the processing of the data and there are no other legitimate reasons for further processing; (iv) the personal data of individuals have been processed without a valid legal basis. The personal data for which the right of erasure has been requested may be further processed in the following situations: (i) for the fulfillment of the legal obligations governing the processing, (ii) as well as for the exercise / protection of rights in court proceedings.
  
• Right to limitation of processing according to Art.18. General Data Protection Regulation;
• Right for transfer personal data according to Art.20. General Data Protection Regulation;
• Right to object on processing of personal data according to Art.1. General Data Protection Regulation- For reasons relating to the specific situation of individuals, they may object to the processing of their personal data based on the legitimate interest of the Processing Manager;
  
• Right to withdraw acceptance- in cases where processing is based on the consent of individuals, the individual may withdraw the consent at any time. Withdrawal will only have effects for future processing. The processing performed before the withdrawal of the privilege remains valid.