Privacy & Cookie Policy

Last updated: 21.11.2025

This Privacy & Cookie Policy (“Policy”) explains how PayTeria (“we”, “us”, “our”) collects, uses, stores and protects your personal data when you visit this website (“Website”) or contact us regarding our technology and payment-orchestration services (“Services”).

We wrote this Policy to be clear, transparent and compliant with the EU General Data Protection Regulation (GDPR) and other applicable data-protection principles.

If you do not agree with this Policy, please do not use the Website or submit your details.

1. Who We Are

PayTeria provides information about its Services through this Website. This Policy applies only to personal data processed when you browse the Website or contact us through it. For this processing, we act as a data controller.

This Policy does not apply to the processing of customer or transaction data performed when PayTeria provides payment-orchestration or related Services to Merchants. Such processing is covered under separate contracts, including data-processing agreements, where applicable.

You may contact us at any time using the contact form on the Website.

2. What Personal Data We Collect

Given the nature of our Services (payment-orchestration, integrations, fintech development), we may collect a broad spectrum of data, including both direct inputs from you and automatically generated or derived data.

2.1. Data you actively provide

2.1. Information you provide to us

When you submit a request through the contact form on the Website, you may provide:

• Full name
• E-mail address
• Your message or any information you choose to include

2.2. Information collected automatically

When you access or use the Website, we may automatically collect certain technical data, including:

• IP address
• Browser type and version
• Device and operating system information
• Pages visited, navigation paths, and time spent on the Website
• Cookies and similar technologies (see Section 9)

This information is collected to ensure website functionality, security, and analytics.

3. Why We Process Personal Data

We rely on one or more of the following legal bases under GDPR:

Legitimate interests:

• when you’ve submitted an inquiry for our Services and we engage in discussions with you
• operating, managing and securing the Website and its content
• analysing how the Website is used, improving usability and performance
• managing requests and communications from potential clients
• preventing fraudulent or malicious use of the Website or our Services

Consent:

• for non-essential cookies and tracking technologies
• for optional marketing communications (if offered)

Legal obligation:

• to comply with applicable laws, regulatory requirements

4. How We Use Personal Data

We use personal data for the following core purposes:

• To respond to your inquiry, review your business/technical requirements and propose our Services.
• To communicate with you about Services, scheduling meetings, sending relevant materials.
• To maintain the Website: ensure it functions correctly, secure it against threats, analyse performance.
• To develop, improve, and personalise the Website and our marketing and content features (e.g., showing you relevant blog posts or case studies).
• To protect our business and minimise risk of misuse, fraud or security incidents (especially important given payment-orchestration context).
• To fulfil regulatory obligations or internal compliance (e.g., audit, record-keeping).

5. How We Store and Protect Personal Data

We take reasonable technical and organisational measures to protect personal data submitted through the Website. These measures include:

• secure encrypted connection (HTTPS)
• hosting on reputable infrastructure providers with standard security controls
• basic security logs that help detect unusual or potentially harmful activity
• regular review of our Website to maintain its security and proper functioning

Although we apply appropriate safeguards, no website or Internet transmission is completely secure. By using the Website and submitting information, you acknowledge that some level of residual risk is unavoidable.

6. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, and in accordance with the GDPR storage-limitation principle.

Contact form submissions: kept for up to 12 months after our last interaction. This allows us to respond, follow up on your request, maintain communication history and manage potential business discussions.

Website analytics data: stored for between 3 and 24 months, depending on the settings of the analytics tools we use. This data is typically aggregated and used to improve Website performance.

Security and technical logs: kept for up to 12 months to protect the Website from fraud, misuse, spam and security incidents.

Cookies and similar technologies: retained until their individual expiry date (see Section 9).

Data required for legal, regulatory or audit purposes: retained for the period necessary to comply with applicable laws or for the establishment, exercise or defence of legal claims.

After the applicable retention period ends, we delete, anonymise or securely archive the data in accordance with legal requirements.

7. Data Sharing

We do not sell or share your personal data with third parties for marketing or advertising purposes.

We may share your personal data only where necessary for operating the Website, responding to your inquiry, or ensuring security. This may include:

• providers of hosting and IT infrastructure
• website analytics providers (for aggregated, pseudonymised usage data)
• communication tools used to process your request
• professional advisors (legal, audit, compliance), if needed

If any personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place as required by applicable data-protection laws.

8. Your Rights

You have the following rights in relation to your personal data:

• Access your personal data and obtain a copy of it;
• Rectify or delete inaccurate or outdated information;
• Restrict or object to processing in certain circumstances;
• Request portability of your data to another service provider, where technically feasible;
• Lodge a complaint with your local Data Protection Authority if you believe your data has been mishandled.

To exercise any of these rights, please contact us via e-mail at info@payteria.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure our website works smoothly, to improve user experience, and to analyze performance.

You can adjust or disable cookies in your browser settings at any time. Please note that essential cookies are required for the operation of payment services and cannot be disabled.

9.1. What are cookies?

Cookies are small text files placed on your device (computer, tablet, smartphone) when you visit the Website. They help us remember your preferences, understand how you use the Website, and improve your experience.

9.2. Why we use cookies

We use cookies for:

• enabling core Website functionality (session management, security)
• recognising returning Users and saving preferences (e.g., language)
• analysing how the Website is used and where performance can be improved
• supporting security functions and fraud-monitoring related to our Service context
• tracking the source of traffic (which campaign or referral)

9.3. Types of cookies used

• Essential cookies: required for Website operation (no consent required)
• Analytics/performance cookies: track how you use the Website to help us improve (consent required)
• Functionality cookies: remember certain preferences such as language, region (consent required)
• Third-party cookies: placed by analytics/security/tools (consent required)

10. Data Breach Notification

We take the security of your information very seriously. In the unlikely event of a data breach that may pose a risk to your rights and freedoms, we will:

• take immediate steps to contain and assess the incident;
• notify affected individuals without undue delay, where legally required; and
• cooperate with supervisory authorities and provide relevant details of the breach and remedial measures taken.

11. Changes to This Policy

We may update this Policy to reflect:

• changes in applicable laws or regulations
• updates to our data-processing practices or Services
• improvements to our Website or how we collect/use data

We will publish the revised Policy with a new “Last updated” date at the top. Your continued use of the Website after the update signifies your acceptance of those changes.

12. Contact Us

If you have questions about this Policy, your personal data or your rights, you can contact us via the contact form provided or via e-mail at info@payteria.com.