Please read this privacy statement if you would like to know more about the way AltaPay collect and further process your personal data.
It is important to us that your personal data is treated with care and that you are well informed about the way we process your personal data. We have written this privacy statement to tell you which data we process, how, why and how long we do this for and to inform you about your rights. When you visit the AltaPay website hosted by AltaPay, correspond with us, are (or are in the process of becoming) one of our merchants or partners, we process personal data about you.
Version as of January 2021
AltaPay is a fintech company headquartered in Denmark. AltaPay offers an international omni-channel payment solution for online, mobile and in-store, creating transparency and reducing the need for manual tasks with one centralized payment platform. AltaPay’s platform automizes, simplifies, and protects the transaction flow for shop owners and global retail and e-commerce companies, supporting and integrating smoothly into the major ERP-systems. AltaPay performs as a Payment Service Provider operating under The Payment Card Industry Data Security Standard (PCI DSS). This means that AltaPay handles payments for merchants via credit card, bank transfer, and other payment methods.
When you browse our website, we process your IP address, Google Analytics ID, internet browser and device type, location data and your use of our website, including which pages you visited, how you got to our website, the time and length of your visit and your language preferences. For this we use Google Analytics. We use this data for our legitimate interests of making sure our website works properly, including debugging, to be able to deliver you content and for DDOS mitigation on our website, and improving our website and to perform statistical analyses for optimizing our website.
When we collect information about how you use our website, such as which landing pages you visit and which items you look at, we do so in order to decide how we could best provide our services to you. For example, if you read about our products and services on our website, we might classify you as a user or a website visitor who is interested in our products and services and therefore as a potential merchant or partner. Based on the audience we expect you belong to, we may act, for example by contacting you with offers about our products and services, if we have your consent for this.
In order to make the most accurate assessment about which audience you likely belong to, and as you can also read in our Cookies Policy, we also use tracking cookies. These cookies track information about how you use our website and which other websites you visit, for example to show you advertisements if we suspect that you might be interested in our products and services. We only place these tracking/targeting cookies with your prior consent. For more information about these tracking cookies, please view our Cookies Policy.
We will always only keep your data for as long as we reasonably need it for the purposes listed above. For example, data about your visits to our website will be retained until your use or browsing session ends, except where it concerns data collected for the analytical and marketing purposes specified above. In those cases, we will keep your information for 1 year after collection, except if you have become a customer with AltaPay (see section 2.3).
You can contact us by calling us or e-mailing us using for example the contact details listed on our website. If you do so, we will collect your name, company and contact details needed to be of further assistance to you and/or communicate with you.
Via our website, you can ask to be contacted to become a merchant. When you do this, we collect the information that you fill out, including your name, company, contact details, the reason you are contacting us, who has referred you to us, verification that you are not a robot, consent and other information you decide to provide us
We collect this data in our CRM system and/or our Support system. We use this data above to answer your question, comment or complaint and respond to your queries and (support) requests. As such, this data is used by us to establish or perform our (future) contract with you and for our legitimate interests in following up with you. We also use the data above for our legitimate interest of conducting business with you and managing our internal administration, for training purposes, for establishing and performing our contract with you, for our legitimate interest of conducting marketing research so we can improve our products and services and to be able to offer our (future) merchants tailored products and services.
Data about any questions, comments or support requests you have made to us, we will only keep your data for as long as we reasonably need it for the purposes listed above which will be at least two years.
If you are involved in the buying process and in signing up to become one of our customers by entering into a merchant agreement with AltaPay, we collect the information we need to establish and perform a contract with you, including your contact information.
We use this information to set up our products and services for you, including technical support, the onboarding process, integration to our platform, helping you with settings in the AltaPay gateway, POS terminal field services and to replace old/damaged POS terminals, and other actions which need to be taken to establish or perform our contract with you.
We ensure collection of the information you need to establish an acquiring agreement with acquiring banks and/or alternative payment methods. They have an obligation to act in compliance with national and international laws, regulations and sanctions and to prevent fraud, money laundering and financing terrorism. The acquiring banks are active in the financial sector, they are not allowed to accept just any customer without checking them and they have to determine and report when suspicious transactions take place. Therefore, if you are applying for an acquiring agreement, you need to provide up to date information and documents to:
- Verify your identity,
- Identify the ultimate beneficial owners of your business,
- Identify the purpose and intended nature of your future business relationship with us,
- Monitor your behavior and transactions using automated systems which detect risks and verify the origins of your capital/assets,
- Check whether a natural person representing you is competent to do so (and verify the identity of this person), and
- Check whether you act on behalf of yourself or on behalf of a third party.
To carry out the above checks, we pass this information to an acquirer (including personal data) that you have provided to us and other information created by your use of the AltaPay services. This may include your name, your contact information, a copy of your identification document, the address of your legal representative and shareholders, your company bank account numbers, information contained in correspondence between us, bank statements, your signature and an extract of your company registration document.
We also collect data about your use of our products and services, including your login details, and the questions, queries, comments and complaints you send us in relation to our business relationship. We process this data to be able to perform our contract with you by following up with you and providing you with support and for our legitimate interest of being able to optimize and improve our products and services.
We can also use your (company) e-mail address for: keeping you up to date with our products and services; making you offers tailored to your needs (meaning similar products and services you have already purchased from us); or inviting you to events. We may use third party identification and verification services in order to assist us to verify your identity and the documents provided to AltaPay.
We use this data to ensure the safety and integrity of the financial sector by aiming to identify, prevent and counter illegal conduct and to comply with our legal know-your-customer and anti-money laundering obligations, for example under The Danish Financial Supervisory Authority (Finanstilsynet) and The Financial supervisory Authority of the Acquiring Banks.
If you are or soon to become one of our merchants, we will keep information relating to our business relationship until 5 years after the end of your contract with us. If you are not engaging in any contract or agreement with AltaPay we will keep your data based on your consent. Any information provided to us for the purposes of entering an agreement with an acquiring bank via 3rd party providers by yourself, you are responsible for erasing yourself. Any additional information which we may possess that required for entering into an agreement with an acquiring bank agreement will be erased upon rejection of your application (exceptions applies see next paragraph). Data we have collected in relation to our legal obligation to verify our customers will be kept by us for as long as we are legally obligated to, which is generally 5 years after end of relationship. We may also share some of your information with competent authorities and/or regulators in case this is required to comply with the obligations of our acquiring partners as a financial institution, for example for the purpose of preventing money laundering and terrorist financing. Please also refer to section Your Rights.
You can sign up for our newsletter or receive invitations to events using your name and e-mail address. When you sign up, you indicate your consent to receive our newsletter and invitations. You can at any time unsubscribe from receiving these e-mails by following the instructions provided in the newsletters. If you are one of our merchants, we may contact you in relation to relevant products or services, for our legitimate interest of developing our business. We can do this via e-mail or phone. If you are not yet one of our merchants, we will only contact you, if we have consent from you, for example via e-mail, with offers or about our products or services. When we contact you in this context via e-mail, you always have an opportunity to opt out.
If necessary, we can also process any of your information above for our legitimate interest of protecting our legal rights, for example in connection with legal claims, and when we have a legal obligation to process your information. We may also transfer your data in the event of a company reorganization, merger, or sale.
We will always only keep your data for as long as we reasonably need it for the purposes listed above. The retention terms above can be longer if we are required to keep data longer based on applicable law or to administer our business. If we need to keep any information longer for our legitimate interest of protecting our legal rights, we will keep the necessary information for this purpose until the relevant claim(s) has/have been settled.
We need the help of third parties to be able to offer you our website and our products and services. Where necessary we will share your information with our service providers and professional advisers (e.g. IT providers, KYC partners, CRM providers, marketing support providers, customer service providers, and legal service providers). We have concluded data processing agreements with our service providers to protect your personal data.
If our business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business. Otherwise we will not share your information with any third party, unless we have your permission, (for instance with the partner who referred you to us), where this is necessary in connection with the purposes above or with legal claims or when we have a legal obligation to do so.
We are committed to securing your personal data and have taken steps in this regard. In order to prevent unauthorized people or parties from being able to access your data, we have put in place a range of technical and organizational measures to safeguard and secure the information we process from you. AltaPay performs as a Payment Service Provider operating under The Payment Card Industry Data Security Standard (PCI DSS), where the international card companies have set up some security standards that apply to all card payments. The standard deals with rules for the environment (payment terminal/ payment solutions/ systems/ network) where the merchants and their service provider/ processor handle and store card data. PCI DSS describes the requirements that apply for all merchants transmitting, handling or storing card data. The standard applies for Visa, Mastercard, American Express, Diners, Discover, JCB and Dankort (in Denmark).
You are entitled to object to us processing your personal data, including profiling. You may also ask us for an overview of your information or ask for a copy. You may also request us to correct or delete certain data, restrict processing of your data, or ask us to transfer some of this information to other organizations. In some cases, you may object to the processing of your data and, where we have asked for your consent to process personal data, you can withdraw this consent at any time. Where we process your data for our legitimate interests, you can contact us if you want more information about these.
There are some exceptions to these rights, however. For example, it will not be possible for us to delete your data if we are required by law to keep it or if we hold it in connection with a contract with you. Similarly, access to your data may be refused if making the information available would reveal personal information about another person or if we are legally prevented from disclosing such information. If you wish to exercise any of these rights, please contact us using the details below.
Questions, comments, requests or complaints concerning this privacy notice and the way we process your personal data are welcomed and can be addressed to our Data Protection Officer at dpo@AltaPay.com If you have a complaint about the way we handle your personal data, you also have the right to address this with the data protection authority of the country in which you live or work or the country in which we are located.