Privacy Policy
Who is the controller of your data?
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR) and to rest of the legislation applicable in Spain on personal data protection, we inform you that the personal data provided when completing and sending forms published on this website will be included in the processing activities of PECUNIA CARDS EDE, S.L.U., with Tax Code B86972346, and with registered office at Avenida de Bruselas Nº35, 28108, Alcobendas, Madrid (Pecunpay).
Pecunpay, in compliance with the regulations in force on data protection, has appointed a Data Protection Officer, who can be contacted at datosdpo@minsait.com, or by post at Avenida de Bruselas Nº35, 28108, Alcobendas, Madrid.
For what purpose and on what lawful basis do we process your data?
- Contact: The purpose of the data collection is to manage and answer the requests you make through the contact area of our website. The processing is legitimised on the basis of the express consent given upon sending the query (art. 6.1 a) GDPR).
- Commercial communications: Sending commercial communications of interest to you, processing based on your express consent (art. 6.1 a) GDPR) in the case of being a potential customer, and based on legitimate interest (art. 6.1 f) GDPR) in the case you have hired our products and/or services.
- Hiring: Execution and management of the hiring process of Pecunpay products and/or services, associated with the registration and execution of the service. The processing is legitimised by the execution of a contract (art. 6.1 b) GDPR), and compliance with legal obligations (art. 6.1 c) GDPR), especially with regard to compliance with Spanish Act 10/2010, of 28 April, on anti-money laundering and counter-terrorism financing, due to the fact that Pecunpay is a subject bound by the said regulation.
- Job applicants: The purpose of the processing consists of the inclusion of your CV in our recruitment processes. The processing is legitimised on the basis of your express consent provided by sending your CV (art. 6.1 a) GDPR).
- Recruitment: The purpose of the processing is the management of our recruitment processes. The processing is legitimised on the basis of the execution of pre-contractual measures upon your request (art. 6.1 b) GDPR), as well as on the legitimate interest of the company (art. 6.1 f) GDPR).
To whom will we disclose your personal data?
Pecunpay shall only communicate your personal data to:
- Third parties, bodies and public institutions of the General State Administration, Regional and Local Administrations, including the jurisdictional bodies to which we have the legal obligation to provide them the information.
- Institutions linked to the financial or insurance sectors, credit score and fraud prevention companies in case you hire our products and services. Check our General Terms and Conditions to read all the information on the processing of your data as a customer of Pecunpay.
- External technology service suppliers, such as IT, development, hosting and maintenance services and other similar ones, that provide services to Pecunpay and will process your data strictly following Pecunpay’s guidelines and under their responsibility.
How long will we keep your data?
The personal data obtained through the contact form for information request will be kept until we complete the management process of your inquiry.
The personal data collected to hire our products and services will be kept for the time necessary for the execution of the contract between Pecunpay and the client, and subsequently until limitation period to file legal actions expires. The maximum period is set at 10 years in compliance with current legislation on anti-money laundering and counter-terrorism financing.
In the event you have given your express consent to receive commercial information, your data will be kept until you express your wish to revoke your consent.
Finally, in the event that you have sent us your CV to be included in our recruitment processes, the personal data included in the CV and any other data you may have provided us with for this purpose will be kept for a period of two years from the date of receipt. In the event that Pecunpay needs to keep your CV for a longer period of time, we will request your consent again or ask you to send us your updated CV.
The details of the CVs and any other data provided to enter our recruitment processes will be kept for 2 years from the time they are received. If we consider that your CV may still be of interest for future recruitment processes, we will ask you to update it before a period of two years elapses following its receipt. If you do not respond to this request, your CV will be deleted after the aforementioned two-year period.
What security measures will be applied to your personal data?
We will process your personal data according to the technical and organisational measures required to prevent their loss, misuse, alteration and unauthorised access to the same, considering the state of technology, the nature of the data and the risk analysis carried out. In this sense, Pecunpay has implemented an Information Security Management System in accordance with ISO/IEC 27001.
International data transfers
Acceptance of some of the cookies may involve the transfer of data to third countries necessary for the operation of the services of our suppliers.
The information obtained through Google Analytics Cookies may be stored on Google servers located in the United States. Therefore, in order to ensure that an equivalent level of protection to that offered by the EU is provided, Google has been certified under the new privacy framework (EU-US Data Privacy Framework).
How can you exercise your rights regarding your personal data?
In the event that you wish to revoke the consents granted, as well as to exercise your rights of access, rectification, cancellation, erasure, opposition, limitation, portability and the right not to be subject to automated decisions, you may contact Pecunpay’s Data Protection Officer by writing to the postal address Avenida de Bruselas Nº35, 28108, Alcobendas, Madrid, or by e-mail to the following address datosdpo@minsait.com.
In the event that the data subject considers that Pecunpay has not observed the aforementioned rights in accordance with current legislation, they may file the corresponding claim for the protection of rights before the Spanish Data Protection Agency.
Mandatory or optional nature of the data requested
The mandatory data on each form are identified as such. We cannot communicate with users if they do not provide such information, nor provide them with the information and/or service requested.
User commitments
Users undertake to inform Pecunpay of any changes to the information they provided. To do so, they may send an email to datosdpo@minsait.com.