Updated time: Oct 25, 2021, 11:40 (UTC+03:00)
Account means PayCEC account.
Personal Data means information that can be associated with an identified or identifiable person. “Personal Data” can include name, postal address (including billing and shipping addresses), telephone number, email address, financial account information, account number, and date of birth. Personal Data does not include information that does not identify a specific user.
Process describes any method or way that we handle Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, and consultation, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of Personal Data.
Services means all PayCEC products, services, content, features, technologies, or functions (including integrations with third party services) offered by PayPal and all related sites, applications and services.
Site means the PayCEC websites, mobile apps, official social media platforms, or other online properties through which PayPal offers the Services.
User means you or anyone else who has established a relationship with PayCEC (for example, by opening an Account) or otherwise uses the Services or accesses the Sites.
Data Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
You should be aware that by providing you with PayCEC Services we act as a data controller and you may act as a data subject or as a joint data controller as a case may be. The terms personal data, data subject, data controller and data processor are used in the meaning given by the general data protection regulation (GDPR).
By opening a PayCEC account for you, we collect your personal data, so in this case we act as data controller, and you act as a data subject, therefore we are subject to respective rights and obligations under applicable data protection laws.
In some cases, when you are a business, you transfer to us personal data of your clients or the personal data of your officers. Insofar you and we jointly determine to process personal data for the purposes of our cooperation we and you are joint data controllers and bear several liabilities for data protection infringements. You shall warrant that you have appropriate legal grounds to collect, process and transfer to the third parties the personal data of your clients or officers. In more details your and our obligations and responsibilities will be allocated in the data protection agreement with you.
We processed your personal data in accordance with valid legal acts and following principles:
In case you access your PayCEC Account, use PayCEC Site or use any of the PayCEC Services, the following type of personal data might be gathered:
Personal information, used for opening PayCEC account, manage and administer PayCEC Services:
Contact details, used to maintain permanent communication with you, to send you legal and information notices:
Information used for carrying out the Know Your Client (KYC) procedure and anti-money laundering (AML) check:
When you are an entity, we collect personal code, identity card, surname, address, nationality, name, photograph, signature, number of shares held, voting rights or share capital part, data about the beneficiary of funds of the ultimate beneficial owners (natural persons who directly or indirectly own or control an entity).
Information generated or collected in the course of providing PayCEC Services, which PayCEC uses to develop and improve its services.
Financial information including your full bank account number and/or credit card number, IBAN number (used for payments to you and full use of PayCEC Service);
Also, pay attention to the fact we may acquire information related to you provided by third parties like services for person verification, marketing agencies, your publicly available profile information (LinkedIn, Facebook, Twitter, Google Accounts), information related to payments to or from your accounts with us, provided by payment processing services, banks, card schemes and other financial services firms, information from fraud prevention agencies.
We do not collect any extra data but only that information that is necessary for the purpose of providing PayCEC Services to you.
Please be aware that the list of information types mentioned above is not exhaustive. Additional information about you might be gathered in some other way, for instance by contacting our Customer Support hotline or taking part in surveys, etc.
When required by AML legislation we may collect biometric information (such as facial photographs or fingerprints) of their clients for the identification purpose. Such information is defined by GDPR as sensitive information and can be processed only if the law requires this or the data subject has given express consent. Clients who refuse to provide such information cannot obtain PayCEC Services in full. Clients may contact PayCEC support to obtain information on what services may be used without providing biometrics.
We do not intentionally collect any other sensitive personal data, such as religious beliefs, health information, racial or ethnic origin etc. Nevertheless, there might be cases when information or documents data subject submits to us contain sensitive information or we can obtain it in the course of providing our services (e.g. during KYC procedure or information that follows from payment transactions of certain types). To allow us to process your sensitive personal data you will be requested to provide explicit consent by means of PayCEC Account functionality or by email. In some cases, we may be required to process such data for the reasons of substantial public interest, on the basis of EU or local law.
The main goal of gathering and processing your personal data is to deliver an effective, scalable, smooth, and personalized PayCEC experience. Hence, personal data we collect might be used to:
In some cases, we may make automated decisions regarding you using your information. When you instruct us to make a payment from your account, or to request a payment into your account from a bank or other payment services provider, our systems (or systems provided to us by our suppliers) make an automated check for authorization and automated checks to detect an unusual transaction pattern or location of your transaction and help us to fight fraud. You are entitled to contest automated decision making by contacting us.
We warrant and represent that PayCEC has implemented the technical and organizational security measures and technological development to ensure an appropriate level of security of personal data. Your data is protected by the means of physical, technical, and administrative resources to lower the risks of loss, misusage, unauthorized entry, disclosure, or alteration by a third party. To keep your data be safe we apply:
And many more things.
As PayCEC is PCI DSS V3.2.1 certified, we maintain all required technologies, methods and business processes to protect cardholder data, and also use such technologies and methods as regards the security of your personal data.
We monitor our systems 24/7 and our staff is always ready to respond to your notifications and queries within a short time.
PayCEC respects your privacy and your personal data and warrants that:
We will notify you of any personal data breaches (including any unauthorized or accidental access) without undue delay after becoming aware of a personal data breach.
We will notify you of personal data breaches where the breach is likely to create significant risks to your rights and freedoms (including any unauthorized or accidental access) without undue delay after becoming aware of a personal data breach.
We are not obliged to give the notification to you if at least of the following conditions is fulfilled:
PayCEC warrants that it will not disclose your personal data to any unauthorized third party.
PayCEC may share your data with PayCEC’s contractors who may use such information only for the limited purpose of providing services to you and who are obligated to keep the information confidential, including without limitation:
To ensure the payment process runs smoothly, some of your personal information may be shared with a company or entity you cooperate with inside PayCEC’s ecosystem. Your registration date, number of payments you have issued/received via PayCEC, info whether you have an authorized control over a bank account – all that information might be shown to PayCEC users you work with at the moment.
We may also transfer your personal data to our professional advisers (such as lawyers, accountants, auditors, IT consultants, management consultants), who are under a professional obligation to maintain confidentiality and security of personal data.
Your personal information may be shared with third parties if so required by applicable laws, regulations, instructions we must obey or in the response of valid court order or requirements of other government bodies.
In addition, we may convert your personal information into anonymous or aggregated form, in which case it will cease to be personal data.
For the purpose to provide you with PayCEC Services we can engage the third-party service providers outside the EU. In such cases, personal data may be transferred outside the EU, including to the United States. Data protection law of third countries may be different from EU data protection laws and not guarantee adequate levels of security. However, we will take measures to ensure that any such transfers comply with applicable data protection laws and that personal data remains protected.
We use European commission-approved standard contractual clauses as a legal mechanism for data transfers from the EU. These clauses are contractual commitments between companies transferring personal data, binding them to protect the privacy and security of the data. PayCEC does not participate in the privacy shield at this time. Nevertheless, we rely on the EU-US privacy shield to transfer personal information to some of our third party service providers in the united states, where they are certified to receive such information under the privacy shield program.
When you act as a joint data controller, you shall inform your clients about risks of cross-border transfers and obtain their consent for that.
A cookie is a small text file stored in a computer’s web browser memory.
There are three main types of cookies:
Session cookies – they help you do not re-enter information and stay logged in each time you change web–pages. Session cookies are deleted automatically after you leave the site or when you close your browser.
Persistent cookies – they help us to recognize you each time you return to the PayCEC Site and remember your preferences for viewing the site. Such cookies are stored on your computer until deleted by you or automatically after its expiration.
Third-party cookies - are the persistent cookies placed not by PayCEC which help to gather browsing activity across numerous websites and during several sessions. Such cookies are stored on your computer until deleted by you or automatically after its expiration.
You can find out more from https://www.aboutcookies.org/
With the help of cookies we can obtain information about the security of your computer and web browser used to access PayCEC Site or PayCEC Account and to detect harmful or illegal use of PayCEC Services.
There are other technologies used by us to track your activity on the site or PayCEC Account portal.
Web beacons (web pixels) are small graphics helping to understand browsing activity, track conversion and optimize ads. These graphics files are downloaded when you visit the site or PayCEC Account portal.
Local storage objects (flash cookies) are files that can be stored on your browser and can be used to detect preferences, to record the history of usage, or remember settings of the site or PayCEC Account. You can block or control flash cookies at any time by modifying the settings of your browser.
You can delete and disable cookies using the setting of your browser. You can find out more about how to manage cookies from the following links:
For Chrome browser: https://support.google.com/chrome/answer/95647?hl=en
For Explorer browser: https://support.microsoft.com/en-us/products/windows?os=windows-10
For safari browser: https://support.apple.com/kb/ph21411
For Firefox browser: https://support.mozilla.org/products/firefox/cookies
For Opera browser: http://www.opera.com/help/tutorials/security/cookies/
We may use your data for as long as reasonably necessary for the limited purpose of providing PayCEC Services to you.
PayCEC as a regulated electronic money institution is obliged under PSD2 and AML laws to keep your data so long as mentioned below:
|Type of data||Retention period|
|The data of our registers||At least 8 (eight) years from the day of termination of transactions or other business relationship with you|
|Documents confirming monetary operation or transaction or other documents having legal force related to the performance of the monetary operations or conclusion of the transactions||For a period of 8 (eight) years from the day of the performance of the monetary operation or conclusion of the transaction|
|Copies of the documents proving your identity, invoices and/or contractual documentation (original documents)||For a period of 8 (eight) years from the day of termination of the transactions or business relationship with you|
|Written or electronic correspondence relating to the business relationship with you||For a period of 5 (five) years from the day of the termination of the transactions or business relationship with you|
|Results of investigations of complex or unusually large transactions and unusual transaction structures||For a period of 5 (five) years in paper format or on an electronic medium|
The storage period may be extended additionally upon a reasoned instruction of a competent institution, nevertheless the extension cannot last longer than 2 (two) years. Moreover, we follow the requirements of legal acts of Lithuania while keeping your personal data.
After the termination of the agreement between PayCEC and you, you may request deletion of your data. We are able to consider your request and delete your data within ninety days. Nevertheless, we may retain some of your personal information for the purpose to comply with technical and legal requirements related to the security, integrity and operation of PayCEC Services. For instance, if PayCEC Account has been terminated by the reasons of fraud or security reasons, we may retain certain information from that account to prevent opening a new PayCEC Account by the same user.
Please be aware that applicable law may prevent us from returning or destroying all or part of the personal data or require storage of the personal data for some period to comply with AML requirements, tax reporting or auditing. In which case we will protect the confidentiality of the personal data and will not actively process the personal data anymore after the termination of the legal relations with you.
Your personal data processed for the purposes of the sending personalized offers of services and products or to or find out your opinion on different issues in relation to us and our services (direct marketing) are used so long as we have contract with you or until you unsubscribe from receiving such messages using the link in the bottom of the e-mail or by using functionality of PayCEC Account.
When we act as data controller, you have the following rights for personal data that we have about you.
You may contact us using the contact information below to make the request or ask us about your rights.
If you reasonably believe that processing of personal data related to you is performed in violation of the applicable legal requirements you have the right to submit a complaint to us. You can submit a complaint by post or e-mail, specifying your name, surname, contact details, relevant information, which would indicate why you reasonably believe that the processing of the data related to you is performed in violation of the applicable legal requirements. Upon receipt of a complaint from you, we confirm receipt of the complaint and indicate the time limit within which the reply will be submitted. In each case, the deadline for submitting a reply may vary as it directly depends on the extent and complexity of the complaint filed, but we will make the maximum effort to provide the response to you within the shortest possible time. We, after examining the complaint, report the results and actions taken to satisfy your complaint, or provide relevant information on what further actions you may take if your complaint was not satisfied.
Our legal basis for collecting and using personal data depends on the type of personal information collected and the specific context in which we collect it.
We can process your personal data to fulfill our contractual obligations. We rely on contract as a legal basis to process personal data submitted by you in case you are an individual or your transfers personal data of your officers. Processing of your personal data is necessary to provide you with PayCEC Services. We cannot provide you with payment services without carrying out the KYC procedure or business risk assessment.
You acknowledge and agree that your personal data may be transferred to the countries situated outside the EU when it is necessary for the conclusion or performance of a contract concluded in your interest between us and another legal person.
We may process your personal data on the basis of our legitimate interests provided that such processing shall not outweigh your rights and freedoms. We rely on this legal basis when we carry out procedures which are part of our services or which are transparent, expectable and are the stable business practice. For example, to:
Please note that in most cases, if you do not provide the requested information, PayCEC will not be able to provide the requested service to you, e.g. our support cannot reach you in case of emergency without collecting your e-mail address or phone number.
If we process your information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.
We can request from you a consent for processing when we are required to do so by law or when we do not have another legal basis for processing of your data. Where we rely on your consent to process your personal data, you have the right to withdraw or decline consent at any time.
We do not rely on consent in common cases, because the right to withdraw a consent can be used for fraudulent activity. This would jeopardize the financial stability of PayCEC, reliability and integrity of PayCEC Services, thereby harming all legitimate parties in the payment process.
In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.
You shall maintain the confidentiality of your password and login from PayCEC account. You are recommended to sign out of the PayCEC account when you have finished work with it. In any case responsibility for any loss of passwords and misuse of PayCEC account by third parties lay with you.
PayCEC does not voluntarily collect, use or disclose personal data of minors, according to the minimum age equivalent in the relevant jurisdiction. The PayCEC Services are not designed to attract minors. If you are minor, you may not submit any personal information to us or subscribe for the PayCEC Services. If we become aware that we collected the personal information of a minor, we will take steps to delete the information as soon as possible.
We ensure you that we have all the necessary technologies and methods to prevent, detect and investigate a personal data breach. In case of any data breach, we will endeavor our best efforts to notify you and any applicable regulator of becoming aware of the breach as soon as possible.
Please feel free to contact our data protection officer to:
We are honored to serve as your reliable business partner and financial service provider in the industry and other business-related services. With the help of our professional staff, to help merchants to achieve their goals for the development and expansion of the international business market.
Our payment flow has developed in the e-commerce world to perform seamlessly and effectively across all platforms and devices. We take pleasure in combining technology with customer service, to solve your concerns at the moment.
PayCEC is a fully worldwide payment network that not only allows merchants to be paid immediately and securely, but also allows them to withdraw money in multiple currencies to their company accounts.