Mobilize Pay privacy policy

Thank you for visiting our website. The protection of your personal data is very important to us. In the following, we will inform you about the processing of data when you visit our website and contact us. In addition, we will inform you which data subject rights you can assert.

1. responsible body and data protection officer

The entity responsible for data processing is:

Mobilize Pay S.A.S
15 rue d'Uzes
75 002 Paris
France

E-mail: contact@mobilize-pay.com

You will find further information in the Imprint
‍
If you have any questions regarding data processing or your rights, our data protection officer will be happy to assist you. You can reach him at: dataprotectionofficer@rcibanque.com

2. which personal data are processed

In the following, we inform you about which data is processed when you visit our websites and for which purposes it is processed. 

2.1 Visiting our websites

Log files

a. When you visit our websites, your browser automatically transmits the following data: 

- Timestamp(s) of the time of the visit or of the completion of the questionnaire.
- IP address (server-side)

Cookies

a. When visiting our website for the survey, we set a so-called technically necessary cookie, for the use of which we have a legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. This is a small text file that contains an anonymous alphanumeric identifier (e.g. AB34FR), whereby your browser can be identified.

b. The cookie prevents multiple completion and allows you to pause and continue filling out the questionnaire.

The cookie initially remains on your terminal device (so-called persistent cookie) and is deleted by your browser. You can completely deactivate the storage of cookies in your browser or selectively accept certain cookies. Please use the help functions of your browser to learn how to change these settings. This may limit the functionality of our websites.

2.2 Participation Testing Community

‍If you accept the offer on our website to become part of the Testing Community, we need an e-mail address and your first and last name from you in order to send you product information, newsletters and advertisements about the new card. If you provide us with additional data, we will also use it exclusively for sending the requested information. Your data will not be passed on to third parties.

3. On which legal basis the data are processed

The processing of data entered on our website is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). This consent is given voluntarily. You can revoke your consent to the storage of data, e-mail address, first and last name and their use for mailing at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Pursuant to Art. 6 (1) f DSGVO, data processing may also be necessary to protect the legitimate interests of our company or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.

4 Who is the recipient of the data?

Mobilize Pay S.A.S is a subsidiary of RCI Banque S.A. Regular internal recipients of personal data are those entities entrusted with the implementation of the testing phase of the Card and serving the Testing Community. As a global organization with offices and business operations around the world, the Personal Data we collect may be transferred or accessible between Mobilize Pay S.A.S and all the RCI Banque S.A. offices entrusted with the implementation of the Testing Phase.These transfers within RCI Banque S.A. global operations will be in accordance with applicable data protection laws as well as our mandatory internal data protection rules. RCI Banque S.A. has entered into an Intragroup Agreement with its subsidiaries. This complies with the standards of European data protection laws (including the General Data Protection Regulation). Through the Intragroup Agreement, all our group companies that have signed this are required to comply with the same internal rules. This also means that you always have the same rights (see "What rights do you have in relation to the processing of your personal data?"), regardless of where your data is processed by RCI Banque S.A..Employees are bound to data protection by their employment contracts.

In addition, we have selected an external service provider, Accenture SAS, 118 avenue de France - 75013 Paris in France, which processes personal data on our behalf as part of the test phase for the card on the basis of commissioned data processing. The external service provider processes your data on the basis of a closed order processing exclusively on our instructions and is obligated to comply with the data protection requirements.

5. Is there any data transfer to third countries?

We use Salesforce CRM on this website. The provider is Salesforce Inc.,Tower415 Mission Street, 3rd Floor, San Francisco, California 94105, USA (hereinafter Salesforce CRM). Salesforce CRM enables us, among other things, to manage existing and potential customers as well as customer contacts. With the help of Salesforce CRM, we are able to capture, sort and analyze customer interactions via email, social media or phone across different channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings). Salesforce CRM also enables us to record and analyze the user behavior of our contacts on our website. The use of Salesforce CRM is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 (1) a DSGVO; the consent can be revoked at any time.

For details, please refer to the privacy policy of Salesforce: www.salesforce.com/de/company/privacy/

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/EU-Data-Transfer-Mechanisms-FAQ.pdf

6. How long is the data stored?

The data we have stored about you will be kept until you unsubscribe from the mailing list and are removed, and in any case immediately if you exercise your right to object and the purpose for which the data was stored no longer exists.We reserve the right to delete or block e-mail addresses as well as the names from our mailing list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. Data that has been stored by us for other purposes, e.g. the right to retention for other legal and/or contractual reasons, remains unaffected by this.After your removal from the distribution list, your e-mail address and your first and last name will be stored by us in a blacklist, if necessary, to prevent future mailings. The data from the blacklist will only be used for the purpose of preventing further future mailings and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending product information, newsletters and advertising (legitimate interest within the meaning of Art. 6 para.1 lit. f DSGVO). The storage in the blacklist is not limited in time.  If your interests in the storage do not conflict with other legal retention obligations, you can object to the storage at any time.

7. Your data subject rights:

Revocation of consent you may revoke any consent you may have given for the processing of your personal data at any time with effect for the future. The revocation can be sent by e-mail to dataprotectionofficer@rcibanque.com or in writing to the address given above. Please note that the revocation has no effect on the lawfulness of the previous data processing and that it does not extend to such data processing for which there is a legal reason for permission and which may therefore also be processed without your consent.

Further data subject rights  In addition, you are entitled to the following data subject rights in accordance with Articles 15 to 21 (Chapter III) and 77 of the EU General Data Protection Regulation (GDPR) if the legal requirements are met:

- Information: information about which of your personal data we process and how, Art. 15 DSGVO.

- Correction of incorrect personal data and completion of incomplete personal data, Art. 16 DSGVO.

- Deletion of your personal data: Please note, excluded from deletion is data that we need for the performance and execution of contracts and for the assertion, exercise and defense of legal claims, as well as data for which there are legal, statutory or contractual retention obligations, Art. 17 DSGVO. 

- Restriction of processing: this means that your data may only be processed in a very restricted manner without your consent, e.g. for the assertion, exercise and defense of legal claims or to protect the rights of other natural and legal persons, Art. 18 DSGVO.

- Objection to data processing: An objection is possible at any time if the data processing is based on a legitimate interest or for direct marketing purposes and related profiling, Art. 21 DSGVO.

- Data portability: you have the right to receive the data you have provided to us in a common, machine-readable format and, within the limits of what is technically feasible, to request direct transfer of this data to third parties. 

To exercise these rights, please contact our data protection officer by e-mail at dataprotectionofficer@rcibanque.com or in writing to the address given above.

In addition, you have the right to lodge a complaint with a data protection supervisory authority.