Data Protection

  • General information on how EVO deals with the General Data Protection Regulation (“GDPR”) valid from 25.05.2018 can be found here (Download).
  • Our data protection declaration for the merchant agreements can be found here (Download).

Data Protection Declaration

Preamble
EVO takes the protection of personal data and thus your privacy very seriously. At this point we would like to explain how EVO protects your data and what it means for you when you use our customizable services. In order to guarantee the greatest possible protection of your privacy, we comply with all legal provisions concerning data protection. We comply with the provisions of the of the EU General Data Protection Regulation (GDPR) as well as those of the Bundesdatenschutzgesetz Neu (Federal Data Protection Act – New), which was passed to adapt data protection law to the EU regulation 2016/679 and to implement the EU directive (EU) 2016/680 (Datenschutz-Anpassungs- und -Umsetzungsgesetz – DSAnpUG-EU – German Act to Adapt Data Protection Law to Regulation (EU) and to Implement Directive (EU)).

1. Name and address of the responsible person
The responsible body and service provider is EVO Payments International GmbH, Elsa-Brändström-Str. 10–12, 50668 Cologne, Germany (hereinafter referred to as "EVO").

2. Name and address of the data protection officer
Our data protection officer is Dr. Karsten Kinast, KINAST Rechtsanwaltsgesellschaft mbH, Hohenzollernring 54, 50672 Cologne, Germany. You can also contact our data protection officer at any time with any questions concerning data protection, preferably by mail to: EVO Payments International GmbH, Elsa-Brändström-Str. 10–12, 50668 Köln, Germany.

3. Scope of application
This Data Protection Declaration applies to the internet offer of EVO Payments International GmbH, which can be accessed under the domain www.evopayments.eu and the various subdomains (hereinafter referred to as "our website").

4. Principles of data processing
Personal data is all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that cannot be used to identify you (or only with disproportionate effort), e. g. by anonymizing the information, is no personal data. The processing of personal data (e. g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be erased as soon as the purpose of the processing has been achieved and no legally prescribed retention obligations must be observed.

If we process your personal data for the provision of certain offers, we will inform you subsequently about the specific processes, the scope and purpose of data processing, the legal basis for the processing and the corresponding storage period.

5. Use of service providers for the processing of personal data / processing of data in countries outside the European Economic Area
The data and information provided in the context of the contractual relationship will be processed within the 'EVO Payments International' group with its affiliated corporations for the management of merchants. Considering this, contractual regulations or other approved instruments provide sufficient guarantees for protecting your personal data adequately.

Service providers in countries such as the USA or in countries of the European Economic Area are subject to a data protection law that does not generally protect personal data to the same extent as in the member states of the European Union. As far as your data is processed in a country which does not provide an adequate level of data protection such as the European Union does, we ensure the adequate protection of your personal data with contractual regulations or other approved instruments.

6. Various processing operations

6.1 Provision and use of the website

6.1.1 Nature and scope of data processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is stored temporarily in a so-called log file. When you use our website, we collect the following data that is technically necessary for us to provide you with access to our website and to ensure its stability and security:

  • IP address of the requesting computer
  • date and time of access
  • name and URL of the retrieved file
  • website from which access is made (referrer URL)
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access providers.

6.1.2 Period of storage
As soon as the data is no longer required for providing the website, it will be erased. The collection of data for the provision of the website and the storage of data in log files is necessary for the performance of the website. Consequently, the user cannot object processing in this respect. Further storage may take place in individual cases if this is prescribed by law.

6.1.3 Legal basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves as a legitimate interest of our company.

6.2 Contact form

6.2.1 Nature and scope of data processing
If you would like to contact us online, we will ask for your name and e-mail address. You can also enter your company’s name and your telephone number and send us a message containing your issues.

It is your free decision whether you provide us with this data or not. However, without this information we are not able to answer your contact request.

6.2.2 Period of storage
The data collected for the purpose of contact will be erased as soon as your request has been processed.

6.2.3 Legal basis
Data is processed in accordance with Art. 6 para. 1 lit. b and f GDPR.

6.3 Chat

6.3.1 Nature and scope of data processing
If you would like to participate in the online chat we collect the following data:

  • website from which access is made (referrer URL)
  • the browser used and, if applicable, the operating system of your computer
  • date and time of access
  • IP address of the requesting computer
  • e-mail address
  • first name and surname
  • Number of page views and visits

It is your free decision whether you provide us with this data. However, without this information we cannot fulfil your contact request.

6.3.2 Period of storage
The data collected for the purpose of the online chat will be erased after your enquiry has been finally answered.

6.3.3 Legal basis
 Data is processed in accordance with Art. 6 para. 1 lit. b and f GDPR.

6.4 Customer portal

6.4.1 Nature and scope of data processing
On our website we offer you the opportunity to register by providing your personal data. With the processed data we create a personalized user account for you, with which we make certain contents and services accessible to you. When you visit the website in the future, you can log in conveniently with your user name and password of your choice. We process your e-mail address so that we can send you new access data in case you forget it.

The following overview shows you in detail which of your personal data (authorized representatives 1 and 2, contact persons 1 and 2) we process during registration:

  • form of address
  • first name and surname
  • telephone number
  • mobile phone number (optional)
  • fax number (optional)
  • e-mail address
  • company
  • power of attorney or contact person for ...

6.4.2 Period of storage
As soon as the registration on our website is cancelled or modified, the data processed during the registration process will be erased. Further storage may take place in individual cases if it is required by law.

6.4.3 Legal basis
Pursuant to Art. 6 para. 1 lit. b GDPR, the processing of the aforementioned personal data serves to take steps prior to entering into a contract.

6.5 Data processing of applicants

6.5.1 Nature and scope of data processing
If you would like to apply online, we need some personal data in terms of processing your application. The following application data is therefore collected and processed within the scope of the online application:

  • form of address
  • first name
  • surname
  • e-mail address
  • how did you hear about us?
  • upload of attachments for cover letter, curriculum vitae, certificates or other files.

6.5.2 Period of storage
The data collected for the purpose of the application procedure will be stored for a maximum duration of 6 months after the end of the application procedure.

6.5.3 Legal basis
Personal data of our users is regularly only collected after the user’s given consent. Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR and Art. 9 para. 2 lit. a GDPR serve as the legal basis for the processing of personal data.

You have the right to withdraw your consent to the use of your personal data with future effect at any time. For doing so, please send an e-mail to evo@kinast-partner.de or a letter to EVO Payments International GmbH, Elsa-Brändström-Str. 10–12, 50668 Köln (please write “EVO Data Protection” in the subject line).

7. Use of cookies

7.1 Nature and scope of data processing
On our website we use cookies. Cookies are small files sent to the browser of your device during your visit to our website and stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. However, other cookies allow us to perform various analyses. For example, cookies are able to recognize the browser you are using the next time you visit our website and to transmit information to us. With the help of cookies, we can make our internet offer more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e. g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs or contain viruses.

We use various types of cookies on our website; the different types and functions will be explained in more detail below.

On our website we use transient cookies, which are automatically deleted when you close your browser. This type of cookie allows us to collect your session-ID. This makes it possible for you to assign different requests of your browser to a shared session and we are able to recognize your device during subsequent website visits.

Furthermore, we use persistent cookies  on our website. Persistent cookies are cookies that are stored in your browser for a prolonged period of time and transfer information to us. The respective duration of storage differs depending on the cookie. You can erase persistent cookies independently in your browser settings.

These cookies enable us to analyze the use of the website and improve its performance and functionality. For example, information is collected on how visitors use our website, which pages are accessed most frequently, or whether error messages are displayed on certain pages.

We also use these cookies for marketing and social media purposes. Cookies in advertising (third party providers) allow us to show you various offers that match your interests. With the help of such cookies, the web activities of users can be recorded over a prolonged period. You may recognize the cookies on various devices you use.

Third parties may also use cookies to collect information on websites. The third parties collect data directly from your internet browser and processing of these data is subject to the companies’ own data protection regulations.

Furthermore, certain cookies allow us to connect to your social networks and share content from our website within your networks.

7.2 Legal basis
Due to the described purposes (cf. 7.1), Art. 6 para. 1 lit. f GDPR serves as legal basis for the processing of personal data using cookies. If you have given us your consent to the use of cookies due to a notification ("cookie banner") provided by us on the website, the lawfulness is additionally regulated by Art. 6 para. 1 S. 1 lit. a GDPR.

7.2.1 Period of storage
As soon as the data transmitted to us via the cookies is no longer necessary for the purposes described above (cf. 7.1), this information will be erased. Further storage may take place in individual cases if this is required by law.

7.2.2 Configuration of browser settings
Most browsers are set to accept cookies by default. However, you can configure your browser in a way that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may not be able to use all functions of our website if cookies are deactivated in your browser settings on our website. You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is also possible to set your browser in a way that it informs you before cookies are saved. Since the different browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

 If you would like to receive a comprehensive overview of the accesses to your internet browser performed by third parties, we recommend that you install specially developed plug-ins.

8. Use of Google Analytics within this website
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so called "cookies", which are text files placed on your computer, to help you analyze how the website is used. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

This website automatically anonymizes your IP address; your Google IP address within member states of the European Union or in signatory states to the Agreement on the European Economic Area will be reduced before it is stored. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services associated with website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data of Google.

You may prevent the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so you may not be able to use this website to its full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link https://tools.google.com/dlpage/gaoptout?hl=de.

We also use Google Analytics to evaluate data from double-click cookies and AdWords for statistical purposes. If you do not want this, you can disable it using the Ads Preferences Manager: www.google.com/settings/ads.

9. Google remarketing
Our website uses the remarketing function of Google Inc. "("Google"). This function is generally used to present personalized advertisement that is part of Google's advertising network to website users. To enable this, cookies are stored on your computer. When you visit our website and then visit a website that is part of the Google advertising network, you may be exposed to advertising from EVO Payments International GmbH.

According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use Google's remarketing feature, you can always deactivate it by making the appropriate settings at www.google.com/settings/ads.

As an alternative, you can disable the use of cookies for personalized advertising through the Advertising Network Initiative by following the instructions at www.networkadvertising.org/managing/opt_out.asp. For more information about Google Remarketing and Google's privacy policy, please visit: www.google.com/privacy/ads/.

10. Google Ad Words
The data controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google Advertising Network. Google AdWords allows an advertiser to define certain keywords in advance, which are used to display an ad in Google's search engine results only if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are spread to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operator of Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying personalized advertising on the websites of third parties and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If a person concerned enters our website via a Google ad, Google stores a so-called Conversion-Cookie on the information technology system of the person concerned. The subject of cookies has already been explained above. A Conversion-Cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not expired yet, the Conversion-Cookie is used to determine whether certain sub-pages, such as the shopping basket of an online shop system, have been accessed on our website. The Conversion-Cookie enables both us and Google to track whether a person who has accessed our website via an AdWords ad has generated revenue, i. e. has completed or cancelled a purchase of goods.

The data and information collected through the use of the Conversion-Cookie is used by Google to generate user statistics for our website. These statistics are used by us to determine the total number of users who have been referred to us via AdWords ads, i. e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the person concerned.

The Conversion-Cookie is used to store personal information, such as the websites visited by the person concerned. Personal data, including the IP address of the internet connection used by the person concerned, is therefore transferred to Google in the United States of America each time they visit our website. The personal data is stored by Google in the United States of America. Google may transfer the personal data collected via the technical process to third parties.

The person concerned can block the setting of cookies through our website at any time, as already described above, by means of an appropriate setting of the internet browser used and thus permanently block the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a Conversion-Cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be erased at any time via the internet browser or other software programs.

Furthermore, the person concerned has the possibility to object to personalized advertising by Google. To do this, the person concerned must access the www.google.de/settings/ads link from each of the internet browsers he/she uses and change the required settings there.

Further information and Google's current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

11. Rights of data subjects
The GDPR provides the following rights for you as a data subject with regard to the processing of personal data:

11.1 Right of access
According to Art. 15 GDPR you can request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of a right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from the data subject, any available information as to their source, transfer to third countries or to international organizations as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information on their details.

11.2 Right to rectification
According to Art. 16 GDPR you can immediately demand without undue delay the rectification of inaccurate personal data or the completion of your personal data stored with us.

11.3 Right to erasure
According to Art. 17 GDPR you have the right to obtain the erasure of your personal data stored with us, as far as processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public Interest or for the establishment, exercise or defence of legal claims.

11.4 Right to object
In accordance with Art. 18 GDPR, you have the right to obtain from the controller restriction of processing if you dispute the accuracy of the personal data, the processing is unlawful, we no longer need the data and you refuse their erasion because they are required by you for the establishment, exercise or defence of legal claims. You also have the right according to Art. 18 GDPR if you have filed an objection against the processing in accordance with Art. 21 GDPR.

11.5 Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data provided by you to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

11.6 Right to withdraw
According to Art. 7 para. 3 GDPR you have the right to withdraw your consent to us at any time. As a result, we may no longer continue the processing of data based on this consent in the future.

11.7 Right to lodge a complaint with a supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Usually you can contact the supervisory authority of your habitual residence, your place of work or our company headquarters.

12. Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. If these hyperlinks are activated, you will be redirected from our website directly to the website of the other provider. You can recognize this, among other things, by the change of the URL. We cannot take responsibility for the confidential handling of your data on these third party websites, as we have no influence on whether these companies comply with the data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on their websites.

13. Data security and safety regulations
We commit ourselves to protect your privacy and to treat your personal data confidentially. In order to avoid manipulation, loss or misuse of your data stored with us, we take extensive technical and organizational security precautions, which are regularly checked and adapted to technological progress. This includes the use of established encryption methods (SSL or TLS). However, we would like to point out that due to the structure of the internet, it is possible that the regulations of data protection and the above-mentioned security measures may not be complied with by other persons or institutions for which we are not responsible. In particular, unencrypted data – e. g. if transferred by e-mail – can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.