Privacy Policy

Online payment sites are a service provided by the PAIR Finance Group (hereinafter: “PAIR Finance” or “we”, “us”, etc.). The companies that belong to PAIR Finance are PAIR Finance GmbH (Berlin, Germany), PAIR Collect Ltd (Vienna, Austria), PAIR Finance Suisse Gmbh (Zurich, Switzerland), PAIR Finance B.V. (Amsterdam, The Netherlands) and PAIR Finance Sweden AB (Stockholm, Sweden).

Each of the companies maintains a separate online payment site.

On the respective online payment site, you can select several payment options and fulfil a claim quickly, securely and conveniently. If it is deemed appropriate and possible in your case, we may also offer to arrange an instalment payment online that suits you. Of course, you can also arrange an instalment payment by phone or by letter.

We value your trust, respect your privacy and are diligent in protecting your data and its confidentiality.

The following privacy policy describes

– under A. –

for data processing performed by the companies of the PAIR Group within the EU/EEA in pursuance to Art. 13 and Art. 14 of the European Data Protection Regulation (hereinafter: GDPR) – Regulation (EU) 2016/679 which data we collect and process

• within the scope of the collection service, including communication with us as well as
• the use of our online payment site

and what we utilise this data for.

Relevant information is provided on the data processing activities of PAIR Finance Suisse GmbH in Switzerland in accordance with Art. 19 of the Swiss Federal Act on Data Protection (hereinafter: DPA). The GDPR does not apply to data processing (in debt collection matters) by PAIR Finance Suisse GmbH, as Switzerland is not a member state of the EU or the EEA.

The Swiss Federal Data Protection Act (DSG) applies to the data processing activities of PAIR Finance Suisse GmbH. Corresponding legal grounds (“justification grounds”) can be found there, particularly in Art. 31 DSG.

Furthermore, you will find additional information below,

– under B. –

• How cookies are used when using the online payment site.

A. Data protection information related to our legal services to consumers and, where applicable, other persons involved in the respective matter for debt collection purposes in pursuance to Art. 13 or Art. 14 of the Data Protection Regulation (EU/EEA) or Art. 19 of the Data Protection Act (Switzerland)

I. With regard to the processing of my data, who is the data controller or owner of the data collection?

1.The entity responsible within the meaning of the GDPR for collecting and using personal data in debt collection matters in which PAIR Finance GmbH is commissioned is

PAIR Finance GmbH
Hardenbergstraße 32, 10623 Berlin
Germany
Tel.: +49 30 340 602 950
E-mail: kundenservice@pairfinance.de
Website: www.pairfinance.com

The CEO, Stephan Stricker represents Pair Finance GmbH.

2.The entity responsible within the meaning of the GDPR for collecting and using personal data in debt collection matters in which PAIR Collect GmbH is commissioned is

PAIR Collect GmbH
Postgasse 8B, 1010 Vienna
Austria
Tel: +43 7 208 17 530
E-mail: kundenservice@pairfinance.at
Website: www.pairfinance.com

The CEOs, Jennifer Schimanko and Robert Witte represent PAIR Collect GmbH.

PAIR Finance GmbH, Hardenberg Strasse 32, 10623 Berlin, represented by the CEO, Stephan Stricker, is jointly responsible with PAIR Collect GmbH for specific processing activities as described hereinafter.

3.The entity responsible within the meaning of the GDPR for collecting and using personal data in debt collection matters in which PAIR Finance B.V. is commissioned is

PAIR Finance B.V.
Vijzelstraat 68, NL-1017 HL Amsterdam
Postadres – Postbus 15685, NL-1001 ND Amsterdam
Netherlands
Tel.: +31 20 532 18 42
E-mail: klantenservice@pairfinance.nl
Website: www.incassomethart.nl

The CEOs, Daniela Straube represent PAIR Finance B.V.

PAIR Finance GmbH, Hardenberg Strasse 32, 10623 Berlin, represented by the CEO, Stephan Stricker, is jointly responsible with PAIR Finance B.V. for specific processing activities as described hereinafter.

4. The entity responsible within the meaning of the GDPR for collecting and using personal data in debt collection matters in which PAIR Finance Sweden AB is commissioned is

PAIR Finance Sweden AB
Vasagatan 12, 111 20 Stockholm
Sweden
Tel.:+46 852 515 791
E-mail: kundservice@pairfinance.se
Website: www.pairfinance.se

The CEOs, Jan Gackenholz and Frederik Green, represent PAIR Finance Sweden AB.

PAIR Finance GmbH, Hardenbergstraße 32, 10623 Berlin, represented by the Managing Director, Stephan Stricker, is jointly responsible with PAIR Finance Sweden AB for individual processing activities described below.

5. The entity responsible within the meaning of the GDPR for collecting and using personal data in debt collection matters in which PAIR Finance Suisse GmbH is commissioned is

PAIR Finance Suisse GmbH
Tessinerplatz 7, CH-8002 Zurich
Switzerland
Tel.: +33 2 46840342
E-mail: customerservice@pairfinance.ch
Website: www.pairfinance.com

The CEOs, Marko Kusigerski and Robert Witte represent PAIR Finance Suisse GmbH.

II. How can I contact the Data Protection Officer?

1.Options for contacting the PAIR Finance GmbH Data Protection Officer (Berlin, Germany):

For all queries and concerns regarding data protection at PAIR Finance GmbH, please contact the data protection team by email at datenschutz@pairfinance.de. Moreover, it is also possible to contact the Data Protection Officer by post at the address given in the legal notice (keyword: “Data Protection Officer DE”).

2.Options for contacting the PAIR Collect GmbH Data Protection Officer (Vienna, Austria):

For all queries and concerns regarding data protection at PAIR Collect GmbH, please contact the data protection team by email at datenschutz@pairfinance.at. Moreover, it is also possible to contact the Data Protection Officer by post at the address given in the legal notice (keyword: “Data Protection Officer AT”).

3.Options for contacting the PAIR Finance B.V. Data Protection Officer (Amsterdam, Netherlands):

For all queries and concerns regarding data protection at PAIR Finance B.V., please contact the data protection team by email at gegevensbescherming@pairfinance.nl. Moreover, it is also possible to contact the Data Protection Officer by post at the address given in the legal notice (keyword: “Data Protection Officer NL”).

4. Options for contacting the PAIR Finance Sweden AB Data Protection Officer (Stockholm, Sweden):

For all queries and concerns regarding data protection at PAIR Finance Sweden AB, please contact the data protection team by e-mail at dataskydd@pairfinance.se. Moreover, It is also possible to contact the data protection officer by post at the address given in the legal notice (keyword: ‘Data Protection Officer SE’).

5. Options for contacting the PAIR Finance Suisse GmbH Data Protection Officer (Zurich, Switzerland):

For all queries and concerns regarding data protection at PAIR Finance Suisse GmbH, please contact the data protection team by email at datenschutz@pairfinance.ch. Moreover, it is also possible to contact the Data Protection Officer by post at the address given in the legal notice (keyword: “Data Protection Officer CH”).

III. For what purposes and on what legal grounds is my data processed? Where did PAIR Finance get my data from?

We process data within the scope

• of the collection service, including communication with us,
• and the use of our online payment site.

1. Data processing within the framework of the debt collection service, including communication with us

a) debt collection in the context of legal prosecution / claims management:

Creditors (in most cases companies) instruct us to assert and collect claims against people. These entities have concluded contracts with the creditors or have another legal relationship with them prior to our commissioning. So far, they have not fulfilled their payment obligations arising from the contracts or other legal relationships, as a result the creditors have decided to initiate debt collection proceedings against these persons through us and have provided us with the data required for debt collection.

Thus, we first receive personal and claims data from our customers. The information has usually been included due to a contractual obligation to pay for a service provided by the principal, but possibly due to a legal obligation to pay the principal (e.g. because you provided the information when processing payment or creating a user account).

If you have received a request for payment from us, then we have been commissioned to collect the debt from you in pursuance to this description.

When you write an email to our customer service or call our hotline, we regularly collect – directly from you – your e-mail address, your phone number and, if applicable, your name, depending on the contact method. We may require further information (e.g. a file number, address or date of birth, if you live in Sweden, your personal number and BankID) in order to process your request properly and in accordance with data protection regulations. We also use this information to put you through to the responsible entity and to process your enquiry.

As a general rule, we perform personal data processing within the scope of the debt collection service for the purpose of fulfilling a contract concluded by the respective entities with our customer, the creditor, and based on the legal basis Art. 6 (1) letter b) GDPR*. Furthermore, the collection is necessary pursuant to Art. 6 para. 1 letter f) GDPR*, Art. 6 para. 4 GDPR in connection with the claims handed over to us in order to protect our legitimate interests or those of the creditor or principal (or in Germany as a supplement in pursuance to § 24 para. 1 no. 2 BDSG for the assertion, exercise or defence of claims under civil law). The legal grounds for data processing in the context of contacting our customer service is Art. 6 para. 1 letter b) or letter f) GDPR*.

In order to provide the debt collection service, aggregated, i.e. initially pseudonymised, and then – no longer subject to data protection laws – anonymised data from your information is used for machine learning in order to design a custom-fit communication with you. The legal grounds for this are Art. 6 para. 1 letter f) GDPR*.

The purpose of the processing and the legitimate interest therein lies in the extrajudicial and judicial enforcement of outstanding claims and claims management, including in order to comply with the duty of our customer to mitigate damages. After the end of the debt collection, the processing is carried out to fulfil legal obligations pursuant to Art. 6 (1) letter c) GDPR*, which consist in particular in fulfilling legal storage obligations. *Further detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

b) Information on opening our emails and information on clicking on links in SMS and messages sent through the messenger service:

If you have received a payment reminder from us by e-mail and open it, we will – depending on your e-mail settings – save this information. We use service providers that enable us to receive the confirmation of the opening of an email as soon as it is opened.

We process the information as to whether you have opened an email from us or clicked on the link contained therein in order to be able to document the receipt of the information.

Note:

You can prevent the collection of the read receipt by blocking the loading of images in the settings of your email customers.

If you receive a message from us regarding an outstanding debt by SMS or through a messenger service and click on the link it contains to our online payment page, we shall record and save that this link has been clicked on.

The processing of the information that emails have been opened and links in SMS or messages from the messenger service used have been clicked on is carried out for the purpose

• of establishing the suitability of the respective communication channel
• for receiving the payment request and,
• in the case of SMS/messages sent through the messenger service, to verify the existence

of the phone number. The legal grounds for the processing are Art. 6 (1) (f) GDPR*.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

c) Collection of data from service providers:

We also collect personal data from service providers. This is a way to check that contact information is up to date and correct, and to add geostatistical attributes to addresses. Such processing is carried out on the basis of our legitimate interest in being able to establish and ensure successful and targeted communication with you.

Furthermore, we collect data from a credit agency for each claim we processed. Our purpose in processing this data is to be able to decide which measures are appropriate and economical in the respective process. This helps us to assess the financial default risk in individual cases and to reach a carefully weighed decision on whether to initiate measures that entail further costs.

In the end, in individual cases we collect data from service providers for address and personal research in order to complete data records on addresses or people or to request current contact information.

If you live in Sweden, we also collect information on your birthday from service providers to ensure that you were of legal age at the time the claim to be asserted arose. This data processing serves to fulfil our legal obligation as a debt collection service provider. 

We process data to confirm your identity and contact details. We need to establish your identity to ensure we are contacting the right person. In this way, we prevent information about your contractually owed payment from being transmitted to people with similar names or addresses;

The legal basis for this data processing is Art. 6 para. 1 letter f) of the GDPR*.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

d) Recording of phone conversations for quality assurance:

Where applicable, for training purposes and to improve our quality of service, we may record incoming phone calls if and to the extent that you have given your express consent to do so prior to recording. You can, of course, also have a phone conversation with us without any need for consent and without being recorded. The legal grounds for the recording and the associated data processing is your consent pursuant to Art. 6 (1) (a)* and Art. 7 GDPR*.

Note:

You have the right to revoke your consent pursuant to Art. 7 (3) GDPR* with effect for the future.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

e) Information for other parties involved in the collection procedure:

We shall process your personal data if you act as a representative or an organ of the administration of justice (e.g. bailiff, insolvency administrator, lawyer) or as any other representative of the person against whom debt collection proceedings are being conducted in connection with the debt collection proceedings we are conducting. Finally, personal data may also be processed in case it has become known as part of an enforcement procedure (statement of assets, third-party information, bailiff\u0027s report). The processing of personal data that takes place in this context, its type, scope, purpose and necessity are determined by the respective status of the procedure.

There is no legal or contractual obligation to provide us with the data. Generally, the processing of personal data is carried out for the fulfilment of a contract that the entity has concluded with our customers in respect to our customer in pursuance to Art. 6 para. 1 letter b) GDPR*. Furthermore, the collection is necessary in pursuance to Art. 6 (1) letter f) GDPR*, Art. 6 (4) GDPR in connection with the claims against you handed over to us in order to protect our legitimate interests or those of the creditor or principal. The purpose of data processing and the legitimate interest therein lies in the extrajudicial and judicial enforcement of outstanding claims and claims management. Moreover, the processing is carried out for the fulfilment of legal obligations pursuant to Art. 6 para. 1 letter c) GDPR)*, which are particularly concerned with the fulfilment of legal obligations to keep records.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

2. Data processing in the context of using our online payment site

If you

• receive a payment request from us and click on the link to the online payment site in an email from us (e.g. “Pay bill online now”),
• click on the link to the online payment site (e.g. “I agree”) after receiving an SMS or a WhatsApp message,
• scan the QR code contained therein after receiving a letter or
• visiting the online payment site via the website “inkassomitherz.de”,

you consent to us collecting and processing technical data about your terminal device and information about the use of the online payment site.
Insofar as you have given us consent to process data in the context of visiting the online payment site, the collection of data is conducted on the basis of this consent in pursuance to Art. 6 para. 1 letter a) GDPR*. If you have given your consent, we shall utilise the usage data in order to customise the presentation of the content for you and to be able to offer you a user-friendly and secure repayment. This way, consideration can be given to whether texts need to be adapted for small displays or buttons and logos used on the payment page need to be arranged differently to make the page neat and simple. The language settings can also be customised in this way.

Note:
You can revoke your consent for the future at any time by sending a message to datenschutz@pairfinance.de. You may, of course, make a payment by bank transfer to us even after you have withdrawn your consent.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

3. What is the information used for?

a) Personalised repayment option offers

We process data to provide you with personalised approaches and repayment options. To this end, we evaluate the data for ourselves on the basis of statistical experience in order to be able to offer optimised communication channels as well as a suitable payment modality. This involves assigning specific information about the process to a (sub-)category in order to be able to select a coherent approach based on this information. Depending on the composition of the different selected (sub)categories, the simplicity, design and content of the approach as well as the frequency and timing but also the repayment options offered can thereby be controlled. Our actions are driven by the desire to make repayment user-friendly and efficient, while maintaining an appropriate tone when requesting payment.

We process personal and claim data on the basis of Art. 6 (1) (f) GDPR* in order to be able to implement the personalisation described above and thus protect our legitimate interests and those of our customers in the efficient enforcement of claims and the interests of consumers in comprehensible, low-threshold communication in connection with the claim.

We process technical usage data in this context on the basis of consent, Art. 6 para. 1 letter a) GDPR*. This may be revoked at any time. In this case, however, it is no longer possible to use the online payment site.

b) Payment processing

We shall also use personal and claims data to be able to process a payment. When using a bank transfer, payment-related data is transmitted directly from you to our bank. In the case that we receive a direct debit authorisation, we shall transmit the provided account data to our bank. In addition, payment-related data is collected directly by the payment service providers offered on the online payment site. Upon receipt of a (partial) payment, PAIR Finance and the Customers shall receive a notification of the receipt of the payment, the amount, the time and, if applicable, the stated purpose of use in order to be able to allocate the payment and track the progress of the respective transaction.

The legal grounds for processing data in the context of payment processing is Art. 6 (1) (f) GDPR*, based on your and our interest in being able to complete the process quickly, to be able to allocate all individual payments to the correct case and to always be able to ensure that proof of all payments is possible.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

c) Statistical evaluation to optimise our business model

We process personal data, claims data and usage data in order to continuously improve the personalisation of our approach and the determination of the most suitable communication channel, as well as the design and presentation of the best possible repayment options for each individual person concerned. For this purpose, data is summarised immediately after collection in order to subsequently analyse it statistically and identify correlations between specific pieces of information that help to better identify repayment problems.

The data aggregated in this way does not allow any conclusions to be drawn about any individual person.
The processing is carried out on the grounds of our legitimate interest in further developing our receivables management business model for the benefit of the data subjects, in order to develop more coherent and simple approaches and, ultimately, in this way to prevent the incurring of costs for traditional debt collection, such as the commissioning of debt collectors. The legal grounds for this are Art. 6 para. 1 letter f) GDPR*.

*More detailed information on data processing by PAIR Finance Suisse GmbH is provided in Section 5.

4. Origin of data:

Personal data relating to you may – depending on the course of the debt collection matter – originate in particular

• from our respective customers who have commissioned us with the debt collection,
• from yourself or from authorised people representing you,
• from service providers, including credit agencies and address service providers,
• from third-party debtors,
• from courts,
• from bailiffs,
• from publicly accessible sources,
• from (judicial) administrative authorities.

5. Country-specific features of data processing by PAIR Finance Suisse GmbH (Zurich, Switzerland):

Data processing is permitted on the grounds of consent in pursuance to Art. 31 Sentence 1 DSG. Further data processing for the execution of a contract or for an overriding private interest is also justified, pursuant to Art. 31, Sentence 1 in conjunction with Sentence 2 DSG.

IV. What categories of data does PAIR Finance process?

Over the course of our activities, we process a range of information about the person against whom debt collection proceedings are being conducted in pursuance to the order placed with us or in relation to other parties involved in the proceedings, such as regular personal/master data (e.g. name and, if applicable, date of birth), contact data (e.g. address, e-mail address, phone number) as well as contract and claim data (e.g. date of contract, type of contract, amount of claim), creditworthiness or assessment data, payment information and, if applicable, information on legal proceedings.

1. Information about your person

In this respect, we collect and process personal data related to the identification of a person, in particular:

• Name
• Gender / Salutation
• Date of birth
• Address
• E-mail address
• Phone number
• Where required, creditworthiness data from credit agencies

If you live in Sweden, we also collect and process your personal number and bank ID in addition to the personal data provided above. 

The information may be updated or supplemented when you contact us.

2. Information on the claim to be recovered in pursuance to the order

Furthermore, we collect and process data in connection with the outstanding debt that we have been commissioned to collect, in particular:

• the name or company name of the creditor, as well as its summonable address
• the reason for the claim
• in case of contracts, the subject matter of the contract as well as the key circumstances and the date of the conclusion
• of the contract, in case of tortious acts, stating the nature and date of the act,
• if applicable, the name or company name of the person against whom the claim arose
• the essential circumstances of the conclusion of the contract, if applicable
• Amount of the claim to be collected, incl. ancillary claims if applicable
• Payment information
• Status of repayment and successful repayment

3. Information about communication with us or about a use of our online payment site

Lastly, we collect and process data that arises in the course of communication with us or use of our online payment site:

• Receipt of our emails, including date and time
• Delivery of our letters
• Receipt of your responses
• Date and time of phone calls
• Contents of communication
• Operating system of your end device (e.g. Windows, Android or iOS)
• Model of your end device (e.g. iPhone, Samsung Galaxy)
• Settings of your end device, e.g. screen resolution
• Browser settings e.g. language setting, time zone, installed plug-ins and fonts
• Your approximate location (we do not use GPS data, but only information derived from the IP address and inferred from the postcode).
• Time and date of the call of our online payment site
• If applicable – should you choose direct debit bank details

V. Who receives this information as a recipient?

Personal and claims data are shared with PAIR Finance GmbH and service providers, specifically for the purpose of establishing communication (mail provider, electronic mail and message services as well as for our ticket and support solution) and the provision of outsourced business processes.

Furthermore, we may share information with service providers who supply us with address and creditworthiness data in order to find the records for which we require additional and up-to-date information and also, in the case of credit agencies, information on negative payment history (notifications of undisputed debts due after reminders and notices).

We transmit usage data to our respective customers only to the extent of communication that has taken place.

Technical usage data of our services is not passed on.

In the end, we transmit information on the status of a claim, in particular on payments or objections to the claim to our respective customer.

Service providers carry out some of the data processing. More particularly, PAIR Finance GmbH provides the IT infrastructure on behalf of the other companies in the PAIR Finance Group, hosts online payment sites and provides the transaction databases. Operation of the online and service offering requires hosting and infrastructure services, for which corresponding service providers are used.

Furthermore, PAIR Finance GmbH provides essential business processes within the scope of debt collection for the other companies of the PAIR Finance Group, for which the data is shared with PAIR Finance.

In the event that we pass on data to service providers, they may use the data exclusively for the fulfilment of their tasks. We carefully select, commission and monitor our service providers. They are also bound by our instructions and have suitable technical and organisational measures in place to protect your rights as a data subject. All our service providers who process personal data and for whose processing we are the responsible party within the meaning of Art. 4 No. 7 of the GDPR are bound by contractual agreements pursuant to Art. 28 of the GDPR.

Moreover, depending on the situation, we may transmit data to involved third parties such as lawyers, guardians, authorised representatives, third-party debtors, courts, bailiffs, legal representatives, (judicial) administrative authorities.

Insofar as we transfer data to service providers who process data outside the European Economic Area (EEA) or the processing takes place using third-party services outside the EEA, this is done in pursuance to the legal requirements. For instance, we only transfer data to service providers in countries with a recognised level of data protection or who are subject to a sufficient contractual obligation through so-called standard data protection clauses of the EU Commission or binding internal data protection regulations (Art. 44 to 49 DSGVO or Art. 16 DSG).

As a matter of principle, the data we collect is only passed on if consent has been granted in pursuance to Art. 6 Para. 1 Letter a) GDPR, if the passing on of data is necessary for the processing of contractual relationships in accordance with Art. 6 Para. 1 Letter b) GDPR, if the passing on of data is necessary for the processing of contractual relationships in accordance with Art. 6 Para. 1 Letter f) GDPR and there is no reason to assume that there is an overriding interest worthy of protection in not disclosing the data or that we are legally obliged to disclose the data pursuant to Art. 6 para. 1 letter c) GDPR. The same applies to data processing by PAIR Finance Suisse GmbH on the grounds of consent pursuant to Art. 31 Sentence 1 DSG, for the purpose of executing a contract or for an overriding private interest, Art. 31 Sentence 1 in conjunction with Sentence 2 DSG.

We offer various payment options, such as payment by credit card, Apple Pay or instant bank transfer. As part of the payment process, payment data and other information may be transmitted to the respective payment service provider with whom we work. The integration of payment service providers is undertaken for the purpose of payment processing on the grounds of Art. 6 Para. 1 Letter b) GDPR (or Art. 31 Sentence 2 Letter a) GDPR) as well as on the basis of our legitimate interest pursuant to Art. 6 Para. 1 Letter f) GDPR (Art. 31 Sentence 1 GDPR) in order to offer an effective and secure payment option.

VI. How long will my data be stored?

We process data for as long as claims arising from the processing of the claim can be asserted, meaning in any case for the duration of the regular country-specific period of limitation. The legal grounds for this are our legitimate interest in defending against legal claims, Art. 6 para. 1 letter f) GDPR or Art. 31 GDPR.

Moreover, there is data that is exempt from a duty to delete and for which we are obliged by law to continue to store. For example, there are obligations to keep records

• on the part of PAIR Finance GmbH (Berlin, Germany) in pursuance to Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB). The storage period due to these legal obligations is usually six or ten years. The legal grounds for this retention is Art. 6 para. 1 letter c) GDPR.
  
• For PAIR Collect GmbH (Vienna, Austria) pursuant to Section 212 of the Austrian Commercial Code (UGB) and Section 132 of the Austrian Federal Fiscal Code (BAO). The retention period pursuant to these legal obligations is generally seven years. The legal grounds for this storage is Art. 6 para. 1 letter c) GDPR.
  
• For PAIR Finance B.V. (Amsterdam, Netherlands) under Art. 52 of the General Law on State Taxes (Algemene wet inzake rijksbelastingen), possibly under Art. 34 of the Law on Value Added Tax 1968 (Wet op de omzetbelasting 1968). The retention period pursuant to these legal obligations is usually seven years, in some cases ten years. The legal grounds for this storage is Art. 6 para. 1 letter c) GDPR.
  
• For PAIR Finance Sweden AB (Stockholm, Sweden) in accordance with Chapter 7 § 2 Bokföringslag (1999:1078). The retention period based on these legal obligations is generally seven years. 
  
• For PAIR Finance Suisse GmbH (Zurich, Switzerland) pursuant to Art. 958f of the Swiss Code of Obligations, further special legal provisions, if any. The retention period pursuant to these legal obligations is usually ten years.

VII. What rights do I have against PAIR Finance in regards to data processing?

You have the right to request information about the processing of your personal data by us at any time. We shall explain the data processing to you within the scope of providing information and provide you with an overview of the data stored about your person.

If any data we have stored is incorrect or out of date, you have the right to have this data corrected. You can also request that your data be deleted. Should deletion in exceptional cases not be possible due to other legal provisions, the data will be blocked so that they are only available for this legal purpose.

Note:

As long as the data processing is necessary for the assertion, exercise or defence of legal claims, we are not obliged to delete the data.

You can also have the processing of your data restricted, for example if you believe that the data we hold is incorrect.

You also have the right to data portability, which means that we shall provide you with a digital copy of the personal data you have provided if you request it.

RIGHT TO OBJECT:

Insofar as we process your data on the grounds of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. The latter case gives you a general right to object, which shall also be implemented without the need to provide reasons.

Right to revoke consent granted:

In pursuance to Article 7 (3) GDPR (EU/EEA) or Art. 30 sentence 3 DSG (Switzerland), you have the right to revoke your consent at any time. The consequence of this is that we shall no longer continue processing data based on this consent in the future. The revocation of the consent shall have no effect on the lawfulness of the processing carried out on the basis of the consent prior to the revocation.

To exercise your rights as described here or for any other data protection queries, you can contact us at any time by sending an informal message to the contact details mentioned above under Item I. and Item II. in particular to datenschutz@pairfinance.de.

Lastly, you have the right to submit a complaint to the data protection supervisory authority that has jurisdiction over us. You may exercise this right before a supervisory authority in the Member State of your residence, place of work or the place of the alleged infringement.

For PAIR Finance GmbH (Berlin, Germany), the competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) in Berlin.

For PAIR Collect GmbH (Vienna, Austria), the competent supervisory authority is the Austrian Data Protection Authority (DPA) in Vienna.

For PAIR Finance B.V. (Amsterdam, The Netherlands), the competent supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens – AP) in The Hague.

Fpr PAIR Finance Sweden AB (Stockholm, Sweden), the competent supervisory authority is Integritetsskyddsmyndigheten in Stockholm.

For PAIR Finance Suisse GmbH (Zurich, Switzerland), the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern.

B. Data protection information related to the use of cookies on the online payment site

In addition to the data protection information under A. regarding our legal services towards users and, if applicable, other persons involved in the respective matter for debt collection pursuant to Art. 13 or Art. 14 GDPR (EU/EEA) or Art. 19 DSG (Switzerland), we inform you in the following which cookies are processed on the online payment site of PAIR Finance.
For some of the services it is necessary that we use so-called cookies.
A cookie is a small text file that the browser stores on a terminal device. Cookies are not used to run programmes or load viruses on a terminal device. These cookies are mainly intended to make the use of our services as time-saving as possible.
In particular, we use cookies to collect terminal and usage data on the online payment site. By doing so, we want to enable a more customised use of our online payment site. Unless individual cookies are required for technical reasons to ensure the general functioning of the payment site, cookies are only activated if you have given us your consent within the meaning of Art. 6 para. 1 letter a) GDPR or Art. 31 sentence 1 GDPR when visiting the online payment site.
We also use cookies that are required by our partners to offer you certain payment services. This processing is based on our legitimate interests in being able to offer you a variety of payment options. The legal grounds for this processing are Art. 6 para. 1 letter f) GDPR and Art. 31 GDPR.
Cookies are saved on your computer and transmitted from it to our website. Therefore, you as a user also have full control over the use of cookies:
By changing the settings in the internet browser you use, the transfer of cookies can be deactivated or restricted.
Cookies that have already been saved can be deleted at any time. This can also be done automatically through your browser settings.

We may occasionally update this privacy policy, for example, if we change our online payment site or if legal or regulatory requirements change.

Version as of: August 2024