PASTEAZA DIGITAL SOLUTIONS - PRIVACY POLICY

1 Introduction

This Privacy Policy explains how PASTEAZA DIGITAL SOLUTIONS ("we," "us," "our") collects, uses, discloses, and protects your personal information when you use our platform for purchasing, sending, or redeeming digital value-added services (VAS) and gift cards. By using our service, you agree to the practices described here.

2 Information We Collect

We collect the following categories of personal data:

• · Basic Identification Data: Such as your name and email address.
• · Contact Data: Your email address and, optionally, your phone number.
• · Transaction Data: Details of your purchases, including transaction ID, amount, and linked digital card information (encrypted).
• · Technical Data: Such as your IP address and device information, collected automatically.

3 How We Use Your Information (Lawful Basis)

We use your personal data for the following purposes:

• · To Fulfill Your Orders: To process your payments and deliver your digital gifts and receipts (Lawful basis: Performance of a Contract).
• · To Communicate With You: To send transaction updates, verification codes, and respond to your support inquiries (Lawful basis: Legitimate Interests).
• · To Secure Our Services: To detect and prevent fraud and ensure the security of our platform (Lawful basis: Legitimate Interests).
• · To Comply with the Law: To meet our financial and regulatory obligations (Lawful basis: Legal Obligation).

4 How We Share Your Information

We do not sell your personal data. We only share it with:

• · Our Payment Partners strictly process you transactions
• · Regulatory Authorities: When required by law.
• · Service Providers: Such as our cloud hosting provider, who are bound by strict data protection agreements.

5 Data Retention

We retain your personal data only as long as necessary:

• · User & Contact Data: Up to 24 months after your last activity.
• · Transaction Data: For 5 years to comply with financial regulations.
• · Technical Logs: For 90 days for security monitoring.

After these periods, your data is securely deleted or anonymized.

6 Your Data Protection Rights

You have the right to:

• · Access the personal data we hold about you.
• · Correct inaccurate or incomplete data.
• · Request Deletion of your personal data, subject to legal obligations.

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by law.

7 Data Security

We implement robust security measures to protect your data, including encryption, secure access controls, and regular security monitoring.

8 Contact Us

For any questions about this Privacy Policy or your data, please contact our Data Protection Officer at [email protected].