Privacy policy for end-users
We at Paylike ApS (operating under the official name Lunar Payments ApS) hereafter referred to as ”‘we”, “us” are fully committed to protecting your privacy.
Paylike ApS (Lunar Payments ApS) is a part of the Lunar Group, which consists of Lunar Bank, Lunar Way and Lunar Block. Paylike ApS (Lunar Payments ApS) has the following contact information Lunar Payments, Hack Kampmanns Pl. 10, 8000 Aarhus, Danish Central Business Registration Number no.: 36 68 32 79
This privacy policy describes how and for what purposes we - as the data controller - process your personal data, when you initiate a payment on a webpage that uses Paylike as the payment provider.
All information about you is processed in accordance with the General Data Protection Regulation 2016/679 (hereafter referred to as ‘GDPR’) and supplementary national regulation.
Contact us
If you have any questions to this privacy policy or the way we process your personal data or wish to exercise your rights according to the GDPR then you can contact our data protection officer via mail: dpo@lunar.app
Purposes with processing personal data
We process personal data about you in order for you to conduct a card payment on a webpage that uses Paylike as an integrated payment provider.
Legal grounds for processing personal data
The processing is necessary for our legitimate interest in accordance with the GDPR article 6 (1), point (f). Our legitimate interest is to ensure that the payment is carried out correctly.
Recipients of personal data
We use data processors with whom we have entered data protection agreements. We disclose personal data to our data processors.
Transfers of personal data outside the EU/EEA
In certain situations Paylike does transfer personal data to data processors that use sub-processors located outside of the EU/EEA (third countries) in order for us to be able to provide the particular service to you. These transfers are regulated in the data protection agreements (and subprocessor data protection agreements) we have entered with our data processors. All transfers are based on EU-Commission’s Standard Contractual Clauses from 2021 supported by supplementary safety measures. You can find the clauses that Paylike uses by clicking here.
Storage of personal data
We store your personal data only as long as we need to pursue the above mentioned purposes.
Your rights as data subject
According to the GDPR you as data subject have some rights in relation to the processings that we conduct, which you - with specific exemptions - can exercise. If you wish to exercise your rights then you can write to our data protection officer (DPO) to dpo@lunar.app.
Right of access
You have the right to obtain information about whether or not personal data is being processed about you and, where that is the case, information about the types of personal data being processed, the purpose for processing the personal data and, where possible, the expected period the personal data will be stored.
Right to rectification
If any of the information we have about you somehow is incorrect, incomplete or irrelevant, you have the right to have it corrected.
Right to erasure
In certain situations you have the right to have your information deleted within us and thereby be forgotten. There are, however, some limitations to this right, e.g. when we need the information to comply with documentation requirements or to defend Paylike against legal claims.
Right to restriction of processing
In some situations, typically related to the fulfilment of other requests to exercise your rights, you have the right to restrict the processing of your personal data. That will, in nature, limit Paylike’s ability to process your personal data without your consent for other purposes than storage and the establishment, exercise or defence of legal claims.
Right to data portability
You have the right to receive the personal data, which you have provided to Paylike, in a structured, commonly used and machine-readable format and to have the personal data transmitted from Paylike to a new data controller.
Right to object
You have the right to object against certain processing activities, such as the processing performed in relation to direct marketing, including profiling.This right applies in case the processing is based on legitimate interests in accordance with the GDPR article 6 (1) (f).
Complaints
If you are unsatisfied with the way we process personal data about you, then you can file a complaint to the Danish Data Protection Agency. The Danish Data Protection Agency has the following contact information: + 45 33 19 32 00 and dt@datatilsynet.dk and the following address: Carl Jacobsens Vej 35, 2500 Valby, Denmark.