Privacy policy

Privacy policy

Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we explain in detail how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

I. Name and address of the data controller

The data controller according to Article 4(7) GDPR and other data protection regulations is:

Paysistant GmbH
Bischof-von-Henle Straße 2b
93051 Regensburg

Email: [email protected]

II. Visiting the website 

  1. Description and scope of the processing of personal data

When you access our website, i.e. if you do not register or otherwise submit any information, information of a general nature is automatically collected. This information (server log files) includes the type of browser and operating system you are using, the domain name of your internet service provider, your IP address and the like. This exclusively relates to information that cannot be used to identify you. It is processed for the following purposes in particular:

  • to ensure connection to the website without any problems,
  • to ensure seamless use of our website,
  • to evaluate system security and stability and
  • other administrative purposes.

This involves collecting the following data:

– information about the type of browser
– the user’s operating system
– the user’s IP address
– the user’s internet service provider
– date and time of access
– websites from which the user’s system reaches our site.

We do not use your data to identify you. If necessary, we statistically evaluate information of this kind in order to optimise our website and the technology on which it is based.

  1. Legal basis for the data processing

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

  1. Duration of storage

The data will be erased as soon as they are no longer needed for the purpose for which they were collected. If data are collected for the provision of the website, they will be erased when the respective session ends.

  1. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.

III. Use of cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and are used to transmit certain information to the site that places the cookie (in this case, our site). They serve the purpose of making the website altogether more user-friendly and effective.

We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be limited and (b) optional cookies for website analysis and marketing purposes.

The legal basis for the processing of personal data using essential cookies is Article 6(1)(f) GDPR.

The use of optional cookies is based on your consent in accordance with Article 6(1)(a) GDPR. When accessing our website, there is an information banner informing users of the use of cookies for analysis purposes and referring them to this privacy policy. In this context, it is also possible to consent to the use of optional cookies.

Under the following link, we describe in detail the optional cookies used on this website. {Link}

This cookie policy has been created and updated by CookieFirst.com.

This cookie table was created and updated by the CookieFirst consent management platform.

Which cookie banner do we use?

This website uses CookieFirst’s cookie-consent technology to obtain your consent to the storage of certain cookies on your device and to document this consent in accordance with data protection regulations. This technology is provided by Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018DH Amsterdam.

Website: https://cookiefirst.com (hereinafter “CookieFirst”).

When you access our website, the following personal information is transferred to CookieFirst:

  • your consent(s) or the withdrawal of your consent(s)
  • your IP address
  • information about your browser
  • information about your device
  • the time at which you visit our website.

In addition, CookieFirst stores a cookie in your browser in order to be able to assign the consents given or their withdrawal to you. The data collected in this way are stored until you ask us to erase them, until you delete the CookieFirst cookie yourself or until the purpose for which the data are stored no longer applies. Mandatory statutory obligations to keep records remain unaffected.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) GDPR.

We have concluded a contract with CookieFirst for contract processing. This is a contract governed by data protection law which guarantees that CookieFirst processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

IV. Contact form and email contact 

  1. Description and scope of data processing

On our website, there is a contact form which can be used to contact us electronically. If a user takes advantage of this option, the data entered on the input screen are transmitted to us and stored. This relates to the following data:

  • email address
  • salutation
  • first and last names
  • customer number
  • telephone number
  • communication data.

Alternatively, it is possible to contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.

The data will be used exclusively for processing the correspondence.

  1. Legal basis for the data processing

The processing of the data provided is based on a legitimate interest (Article 6(1)(f) GDPR). By providing the contact form and our email address, we aim to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions. If you contact us with a query about one of our offers, the data entered will be processed in order to take steps prior to entering into a contract (Article 6(1)(b) GDPR).

  1. Purpose of the data processing

The personal data from the input screen are only processed by us for the purpose of facilitating communication. In the case of contacting us by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

  1. Duration of storage

The data will be erased as soon as they are no longer needed for the purpose for which they were collected. After this, they will be erased, provided that there are no legal obligations to keep records.

  1. Possibility of objection and removal

The user has the option of objecting to the processing of his or her personal data at any time. In such a case, the correspondence cannot be continued. 

In this case, all personal data stored during the course of the communication will be erased, provided that there are no legal obligations to keep records.

V. Transfer of personal data to third parties

  1. Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager allows us to integrate various codes and services on our website in an organised and streamlined way. Google Tag Manager implements the tags or “triggers” the included tags. When a tag is triggered, Google may process and handle information (including personal data).

In particular, the following personal data are processed by Google Tag Manager:

  • online identifiers (including cookie identifiers)
  • IP address

In addition, you can find more detailed information about Google Tag Manager on the websites https://www.google.de/tagmanager/use-policy.html and https://www.google.com/intlde/policies/privacy/index.html under the section “Information we receive as a result of your use of our services”.

Furthermore, we have concluded a contract processing contract with Google for the use of Google Tag Manager. Google processes the data on our behalf to trigger the stored tags and to display the services on our website. Google may transfer this information to third parties if required by law or if third parties process these data on behalf of Google. The legal basis for the use of Google Tag Manager is Article 6(1)(a) GDPR. If you have disabled individual tracking services (e.g. by rejecting a cookie), the deactivation will remain in effect for all tracking tags concerned that are integrated by Google Tag Manager. Google Tag Manager integration is for the purpose of integrating different services in a simple and clear way. In addition, Google Tag Manager integration optimises the loading times of the various services.  You can also change the use of cookies by adjusting your browser software or cookie settings accordingly. Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

The processing of the data entered is based on the user’s consent (Article 6(1)(a) GDPR), which is obtained in the cookie banner.

  1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building – Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, text files that are stored on your computer and allow your use of the website to be analysed. The information generated by the cookie on your use of this website is usually transferred to and stored on a Google server in the USA. However, as IP anonymisation is activated on these websites, Google will first truncate your IP address within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on the website activities and to provide the website operator with other services associated with use of the website and the internet. The IP address provided by your browser for Google Analytics will not be combined with other data held by Google. The purposes of the data processing are to evaluate the use of the website and to compile reports on activities on the website. Further related services will then be provided based on the use of the website and the internet.

You can stop Google from recording and processing the data generated by the cookie relating to your use of the website (including your IP address) by downloading and installing the browser plugin that is available at the following link: “Browser Add-on to disable Google Analytics”.

The Google Analytics tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.

The processing of the data entered is based on the user’s consent (Article 6(1)(a) GDPR), which is obtained in the cookie banner.

  1. Google AdWords and Google Display Network

Our website uses the online advertising systems Google AdWords and Google Display Network provided by Google Ireland Limited, Google Building – Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google assures that it protects the data of its customers and users. Google AdWords places a cookie on your computer. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords client’s website and the cookie has not expired, Google and the client will be able to tell that the user clicked on the ad and was redirected to that page. The information obtained in this way is used to compile statistics which are evaluated in an anonymous form. We also use these Google AdWords functions to refer this website’s visitors once again to third-party websites or internet users with specific interest profiles based on their internet use. We do not collect any personal information. This assessment is used for the billing and evaluation of advertisements and does not contain any personal data about you. Please note that Google has its own privacy policy. We assume no responsibility or liability for these policies and procedures. Please read Google’s privacy policy before using our website.

The processing of the data entered is based on the user’s consent (Article 6(1)(a) GDPR), which is obtained in the cookie banner.

VI. Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the data controller:

  1. Right of access

You can request confirmation from the data controller as to whether or not personal data concerning you are being processed by us.

In the event of such processing, you may request the following information from the data controller:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipient to whom the personal data concerning you have been or will be disclosed;

(4) the envisaged period for which the personal data concerning you will be stored, or, if it is not possible to give specific details, the criteria used to determine that period;

(5) the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;

(6) the existence of the right to lodge a complaint with a supervisory authority;

(7) where the personal data are not collected from the data subject, any available information as to their source;

(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Article 46 GDPR in connection with the transfer.

  1. Right to rectification

You have the right to ask the data controller to rectify and/or complete the data if the processed personal data concerning you is incorrect or incomplete. The data controller must make the rectification without delay.

  1. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

(1) if you contest the accuracy of the personal data concerning you, for a period enabling the data controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the data controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;

(4) if you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the data controller override your grounds.

Where the processing of personal data concerning you has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction of processing is lifted.

  1. Right to erasure

 a) Obligation to erase

You can obtain from the data controller the erasure of personal data concerning you without undue delay and the data controller has the obligation to erase these data without undue delay where one of the following grounds applies:

(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.

(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.

(4) The personal data concerning you have been unlawfully processed.

(5) The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.

(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Informing third parties

Where the data controller has made the personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the data controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform data controllers which are processing the personal data that you, as the data subject, have requested the erasure by such data controllers of any links to, or copy or replication of, those personal data.

  1. Exceptions

There is no right to erasure to the extent that processing is necessary:

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

(3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defence of legal claims.

  1. Right to be informed

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the data controller, the data controller must communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to be informed of these recipients by the data controller.

  1. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided, where:

(1) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one data controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

  1. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

The data controller shall no longer process the personal data concerning you unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is carried out for the establishment, exercise or defence of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

  1. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

  1. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the data controller;

(2) is authorised by Union or Member State law to which the data controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and your legitimate interests are in place.

In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the data controller, to express your point of view and to contest the decision.

  1. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.