Webbilling AG
Döttingerstraße 14
5303 Würenlingen
Schweiz
For questions regarding data protection or for the exercise of your data protection claims, please contact the above-mentioned contact data.
This privacy policy applies to payments made by customers we process on behalf of website operators.
We process the data entered by you in the corresponding screen mask for the execution of your payment transaction. Furthermore, we process the IP address of the terminal device you are using. The IP address is a unique numerical address under which your terminal device sends or retrieves data to the Internet.
In the first step, we check the address data provided by you for correctness by contractors. We check whether the address you entered really exists and whether typing errors may have crept in. We will then correct any errors or inform you, that the address cannot be verified. In this way, we want to prevent payment transactions being carried out with incorrect address details, which would possibly prevent us from asserting claims against you when a payment is returned. The legal basis of the processing is Art. 6 para. 1 f) General Data Protection Regulation (GDPR).
If you enter your bank details according to the "old pattern", i.e. not as IBAN, a service provider will carry out this conversion for us, so that we can process your payment according to the instructions of the banks. The legal basis of the processing is Art. 6 para. 1 f) General Data Protection Regulation (GDPR).
The IBAN you specify is checked by a service provider for accuracy and plausibility. We do not rely solely on the check digit contained in the IBAN, but also check whether the bank code contained in the IBAN is correct in order to exclude prescribers who would accidentally lead to a correct check digit. The legal basis of the processing is Art. 6 para. 1 f) General Data Protection Regulation (GDPR).
For payment transactions for websites, which in our opinion entail an increased risk of fraud (e.g. indication of the bank details of a third party), we additionally request your telephone number in order to carry out an identification procedure via this by entering a PIN, which has been communicated to you. If you have a mobile phone number, we may send you the PIN by SMS, in other cases you will receive a call informing you of the PIN. In our experience, this significantly reduces the rate of fraud. The legal basis of the processing is Art. 6 para. 1 f)) General Data Protection Regulation (GDPR).
We store the IP address and browser data (browser type, user agent, referer, language, cache settings) of the terminal you are using in order to make it available to law enforcement authorities in the event of a fraudulent or otherwise illegal payment in order to simplify the identification of lawbreakers. Additionally, we use these data to simplify the payment process (changing the country selection to your supposed country). The legal basis of the processing is Art. 6 para. 1 f) General Data Protection Regulation (GDPR).
We use the data you provide and your IP address, taking into account the chosen means of payment, for an
automated check whether our experience shows that we have a higher risk of non-payment than we normally
incur. If we say yes, the payment will not be made.
You have the right to ask for the reasons for your refusal and to have your payment request checked
manually. To do so, contact us at . Alternatively, you can try paying
by another means of payment (e.g. credit card instead of direct debit). The legal basis for processing is
Art. 6 para. 1 f) General Data Protection Regulation (GDPR), as we have a legitimate interest in protecting
ourselves against fraud attempts with non-payment.
Possibly you have the option to buy other offers. For this the offer of contract and the data policies from our partner applies, too. If you activate the checkbox, you accept the offer and we use your specified data to execute the additional payment (see next paragraph „execution of the payment transaction“) and to activate your account at the service provider. The legal basis of the processing is Art. 6 para. 1 b) General Data Protection Regulation (GDPR).
Finally, we use the data provided by you to the extent necessary for the execution of the payment and pass it on to third parties (other payment processors, banks, credit card companies and service provider as well) accordingly, insofar as it is necessary for the execution of the payment or for collections - the legal basis is Art. 6 para. 1 b) GDPR. If we receive data from third parties (name, IBAN, BIC, etc.) and these are required for further payment for a subscription, the legal basis is Art. 6 para. 1 b). For further one-time payments we will process these for the purpose of simplifying your payment transaction. The legal basis of the processing is Art. 6 para. 1 f) General Data Protection Regulation (GDPR), as it is in your presumed interest to make the payment on the basis of your details.
We send you E-mails for your transaction confirmation / information. The legal basis is Art. 6 para. 1 b) GDPR. For sending the E-mails, we partly use an external service provider and provide him the needed personal data.
We delete personal data, when the statutory retention obligations cease to apply. If these do not exist or no longer exist, we will delete them when our legitimate interest in further storage ceases to exist. This usually exists for as long as we have to use this data to be able to prove the existence or non-existence of claims against us or by us for use in court.
According to Art. 15 of the General Data Protection Regulation (GDPR), you have the right to demand a confirmation from our side, stating whether we are processing personal data concerning you. If that is the case, you are entitled to intelligence about these personal data and to further information, as stated in Art. 15 of the General Data Protection Regulation (GDPR).
According to Art. 16 of the General Data Protection Regulation (GDPR), you are entitled to demand of us to rectify any incorrect personal data concerning you with no delay. With regard to the processing purposes, you are also entitled to demand incomplete personal data to be completed – also by an additional statement.
You have the right to demand of us to delete your personal data with no delay. We are obligated to delete any personal data immediately, if the relevant conditions according to Art. 17 of the General Data Protection Regulation (GDPR) are met. For details, we would like to refer you to Art. 17 of the General Data Protection Regulation (GDPR).
According to Art. 18 of the General Data Protection Regulation (GDPR), you are entitled to demand of us to limit the processing of your personal data, provided certain pre-conditions are met.
In accordance with Art. 18 General Data Protection Regulation (GDPR), you have the right, under certain conditions, to request us to restrict the processing of your personal data.
According to Art. 20 of the General Data Protection Regulation (GDPR), you are entitled to receive your personal data you have provided to us in a structured, established and machine-readable format. You are also entitled to transfer the data to another responsible party without any hindrance from our side, provided the processing is based on any agreement based on Art. 6 para. 1 letter a, or Art. 9 para. 2 letter a, or on a contract according to Art. 6 para. 1 letter b, and the transfer is done via automated tools.
According to Art. 21 of the General Data Protection Regulation (GDPR), you are entitled to object against
your personal data’s processing based on Art. 6 para. e or f of the General Data Protection Regulation
(GDPR). This does also apply for profiling based on these regulations.
If you would like to exercise any of the rights you are entitled to, please contact us as the responsible party
via the contact data given above, or use any of the other ways of contact provided to notify us. If you have
any questions regarding this, please contact us.
According to Art. 77 of the General Data Protection Regulation (GDPR), you are entitled to the right of appeal to the supervisory authority without prejudice to any wider administrative or judicial remedy. This right applies particularly within the member state of your abode, of your working place or of the suspected contravention, if you consider the processing of your personal data to be a violation of the General Data Protection Regulation (GDPR).