Data Privacy Policy
We thank you for your visit to our websites http://www.paymentgarage.com as well as
http://www.paymentgarage.app and your interest in our company and our offers. Despite careful
control of the contents, we do not assume any liability for external links to third-party contents,
as we have not initiated the transfer of this information, did not select the addressee of the
transmitted information and the transmitted information ourselves or have amended any such
information ourselves.
The protection of your personal data in connection with the collection, processing of use on
the occasion of your visit to our Internet pages is an important concern for us. The collection,
processing and use of your personal data takes place within the scope of the statutory
provisions on which you may for instance obtain information on the website http://www.bfd.bund.de .
In the following, we explain which information we record on the occasion of your visit to our
websites and how this information is used.
1. Collection and Storage of Personal Data as well as Nature and Purpose of their Use
a) When visiting the Website
Whenever a customer (or any other visitor) visits our website, the Internet browser used on
your device (computer, laptop, tablet, smartphone, etc.) automatically sends information to the
server of our website occasionally and irregularly. This information is temporarily stored in a
so-called log file.
The following data is in this connection collected and stored, without any action on your part,
until the time of automatic deletion:
- IP-address of the accessing computer as well as device-ID or individual device identifier
and type of device, - the name of the retrieved file and the transmitted data volume, as well as date and time of
the retrieval, - report on successful retrieval,
- accessing domain,
- description of the type of Internet browser used and of the operating system of your device
as well as the name of your access provider, as the case may be, - your browser history data as well as your default web log information.
We do not collect any location data ourselves. However, we would like to point out that a rough
location can always be determined from the IP address - however, no third-party provider is
instructed by us to do this.
Our justified interest in accordance with Art. 6 para. 1 cl. 1 lit. f GDPR is based on the following
purposes:
- ensuring the smooth establishment of a connection and comfortable use of the website,
- analysis of system security and system stability, and
- other administrative purposes.
In no event will we use the collected data for the purpose of drawing any conclusions as to
your person.
The above data will be deleted after you leave the website.
b) When using our Contact Form
Should you have questions of any kind, we offer you the possibility to contact us via a Contact
Form provided on our website. In this connection, the specification of a valid email address
and your name is at least required, so that we know, who sent the enquiry and are able to
answer it. Further information may be provided on a voluntary basis.
The data processing for the purpose of establishing contact with us takes place in accordance
with Art. 6 para. 1 cl. 1 lit. a GDPR on the basis of your voluntarily granted consent.
The personal data collected by us for the use of the Contact Form will be automatically erased
after the inquiry you have sent us has been answered.
To protect your inquiries via internet form, we use the service offered by Blackpoint GmbH.
c) Use of payment provider
To process your order we also work together with the payment service provider(s) listed below.
Within the scope of payment processing, we will pass on your order data to the payment
service provider selected by you - earmarked for the payment - if this is necessary for payment
processing. The legal basis for the transfer of data is in each case Art. 6 para. 1 cl. 1 lit. b
GDPR.
2. Credit assessment
If we advance funds, we may obtain a credit report from CRIF GmbH, Leopoldstr. 244, 80807
Munich (hereinafter referred to as CRIF) and SCHUFA Holding AG, Kormoranweg 5, 65201
Wiesbaden (hereinafter referred to as SCHUFA), to safeguard our legitimate interests in
accordance with Art. 6 para. 1 cl. 1 lit. f GDPR, if necessary. To this end, we transmit the
personal data required for a credit check to CRIF and SCHUFA and use the information
received about the statistical probability of a payment default for a balanced decision on the
establishment, implementation, or termination of the contractual relationship.
The credit report may include probability values (score values) calculated on the basis of
scientifically recognized mathematical-statistical procedures, which, among other things,
include address data in their calculation. Your legitimate interests will be considered in
accordance with legal provisions.
Further information about CRIF and SCHUFA can be found at https://crif.de/datenschutz/ or
https://www.meineschufa.de/de/datenschutzhinweis .
We would like to point out that, in accordance with Art. 6 para. 1 cl. 1 lit. f GDPR, we may
transmit data on outstanding claims despite the due date to SCHUFA and CRIF and they may
be taken into account in the determination of probability values (scoring), provided that after
the due date of the claim, you have been reminded in writing at least twice, the first reminder
is at least four weeks old, and you have not contested the claim.
3. Disclosure of personal data
Your data will not be transferred to third parties for purposes other than those listed below.
We only pass on your data to third parties if:
- you have given your express consent to do so in accordance with (Art. 6 para. 1 cl. 1
lit. a GDPR), - this is necessary for the processing of contractual relationships with you (Art. 6 para. 1 cl. 1
lit. b GDPR), - there is a legal obligation to disclose (Art. 6 para. 1 cl. 1 lit. c GDPR),
- the disclosure is necessary for the assertion, exercise or defence of legal claims and there
is no reason to assume that you have an overriding interest worthy of protection in not
disclosing your data (Art. 6 para. 1 cl. 1 lit. f GDPR).
In these cases, however, the scope of the transmitted data is limited to the necessary minimum.
Our data protection regulations are in accordance with the applicable data protection
regulations and the data is only processed in the Federal Republic of Germany. However, we
also work together with third parties who can process the data outside the EU. All third-party
providers with whom we work are listed in our data protection declaration.
4. Rights of data subjects
On request, we will be pleased to inform you whether and which personal data relating to your
person are stored (Art. 15 GDPR), in particular about the purposes of processing, the category
of personal data, the categories of recipients to whom your data have been or will be disclosed,
the planned storage period, the existence of a right of rectification, deletion, restriction of
processing or opposition, the existence of a right of appeal, the origin of your data if they have
not been collected by us, and the existence of automated decision making including profiling.
You also have the right to have any incorrectly collected personal data corrected or
incompletely collected data completed (Art. 16 GDPR).
Furthermore, you have the right to demand that we restrict the processing of your data,
provided that the legal requirements for this are met (Art. 18 GDPR).
You have the right to receive the personal data concerning you in a structured, common and
machine-readable format or to request that it be transferred to another responsible party
(Art. 20 GDPR).
In addition, you have the so-called "right to be forgotten", i.e. you can demand that we delete
your personal data, provided that the legal requirements are met (Art. 17 GDPR).
Irrespective of this, your personal data will be automatically deleted by us if the purpose for
which the data was collected ceases to apply or if the data processing is unlawful.
According to Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time.
As a result, we may no longer continue the data processing based on this consent in the future.
You also have the right to object to the processing of your personal data at any time,
provided that a right of objection is provided for by law. In the event of an effective
revocation, your personal data will also be automatically deleted by us (Art. 21 GDPR).
If you wish to exercise your right of revocation or objection, simply send an e-mail to:
office@paymentgarage.com
In the event of infringements of the data protection regulations, you have the opportunity to
lodge a complaint with the responsible supervisory authority in accordance with Art. 77 GDPR.
The competent supervisory authority is both the State Commissioner for Data Protection of
Hessen (https://datenschutz.hessen.de/) and any other supervisory authority.
5. Duration of data storage
The data collected will be stored by us for as long as is necessary to execute the contracts
entered into with us or if you have not exercised your right to deletion or your right to transfer
data to another company.
6. Cookies
If we use cookies on our website, we will inform you via cookie banners. These are small text
files that are automatically created by your browser and stored on your device when you visit
our website. The cookie contains information that is related to the specific device used. This
does not mean, however, that we immediately obtain knowledge of your identity.
These cookies are set as so-called first-party cookies (“own cookies”) or third-party cookies
(“third-party cookies”). First-party cookies are set by the website you are currently visiting and
are not made available by browsers across domains. A third party cookie, on the other hand,
is set by a third party, i.e. not by the actual website you are currently on.
Furthermore, cookies are divided into technically necessary and technically unnecessary
cookies. On our website technically necessary cookies are set only.
Technically necessary cookies are absolutely necessary for the operation of our website and
lead, for example, to certain functions being made possible for you in the first place. These
technically necessary cookies, which are only required and set for the individual necessary
online session, are automatically deleted after leaving our website.
The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 cl. 1 lit. f
GDPR.
7. blackpoint GmbH
Our website is hosted on servers provided by blackpoint GmbH, located in Bad Vilbel. All data
collected on our website is processed on servers located within the EU by blackpoint GmbH.
The legal basis for processing is our legitimate interest pursuant to Art. 6 para. 1 cl. 1 lit. f
GDPR.
8. Social media
We do not use social media plugins of social networks on our website, because these social
media plugins normally lead to the fact that every visitor of the website is immediately recorded
by these services with his IP address. This means that all further activities on the internet are
logged; even if you do not click on one of the buttons at all.
Therefore, we have only used links to our presence on the social networks listed below or
utilize the so-called Shariff solution. The Shariff solution, which ensures that initially no
personal data is passed on to the providers of the individual social media plugins when you
visit our website. Only when you click on one of the social media graphics can data be
transmitted to the respective service provider and stored there. With the Shariff solution, the
buttons of the individual providers are only integrated as graphics that contain a link to the9. Data security
individual social media services. A connection to the social media services is only established
when you click on the respective button. After clicking on the button and being redirected to
the website of the social network, the duty to provide information no longer lies with us, but
with the operator of the social network. Information on the collection and use of your data in
the social networks can be found in the respective terms of use of the corresponding provider.
9. Data security
We make every effort to take all necessary technical and organizational security measures to
store your personal data in such a way that they are not accessible to third parties or the public.
Should you wish to contact us by e-mail, we would like to point out that the confidentiality of
the information transmitted cannot be completely guaranteed with this method of
communication. We therefore recommend sending us confidential information exclusively by
post.
10. Topicality and amendment of this data protection declaration
This data protection declaration is currently valid and is dated 23/04/.
It may become necessary to amend this data protection declaration as a result of the further
development of our website and offers above or due to changes in legal or official
requirements.
11. Name and contact details of the data controller and the data protection officer
This privacy information applies to data processing by:
Responsible:
Payment Garage GmbH, Am Drais 7, 61118 Bad Vilbel
Data protection officer: Dirk Wonka, Am Drais 7, 61118 Bad Vilbel