This page outlines the terms and conditions governing the processing of personal data in compliance with data protection regulations. As part of this agreement, we will establish a clear and transparent framework for handling and safeguarding your personal data when you use our payment gateway services. As a commitment to protecting your rights and interests, this agreement ensures the privacy and security of your personal information. This document defines the roles and responsibilities of both parties involved in the data processing activities and clarifies the purposes of data processing.
In the context of our payment gateway services, the Data Controller determines the purposes and means of processing personal data. In order to initiate and complete payment transactions, the Data Controller collects and processes certain types of personal data. In compliance with applicable data protection laws and regulations, we take measures to protect your personal data and ensure its security and confidentiality. In accordance with this Data Processing Agreement, the Data Controller defines the lawful basis for processing, implements data protection policies, and responds to data subject requests.
The Data Processor is the entity responsible for processing personal data on behalf of the Data Controller. The Data Processor acts only in accordance with the instructions provided by the Data Controller. It is the Data Processor's responsibility to maintain the security and confidentiality of the personal data entrusted to them in accordance with applicable data protection laws and regulations.
Generally, personal data refers to any information about an identified or identifiable natural person, commonly referred to as a data subject. Examples of personal data that may be processed within the scope of our payment gateway services include names, contact details, financial information, and transaction-related data. Personal data is processed solely for specific and legitimate purposes, as outlined in this agreement, and in compliance with applicable data protection laws and regulations. In the context of our payment gateway services, we are committed to protecting and handling personal data responsibly. This agreement outlines how that data will be processed.
This Data Processing Agreement outlines all actions and operations performed on personal data within the framework of our payment gateway services. Personal data may be collected, recorded, organized, structured, stored, retrieved, used, disclosed, or deleted as part of these activities. Data processing is carried out exclusively for specific and lawful purposes defined by the Data Controller, in compliance with data protection laws and regulations.
The security of personal data processed within the scope of our payment gateway services is of paramount importance to us. Encryption, access controls, firewalls, and regular security assessments protect personal data from unauthorized access, disclosure, alteration, or destruction. In case of a security incident, we have established a data breach response plan in order to ensure the confidentiality, integrity, and availability of personal data. Data protection best practices are taught to our employees, and we conduct regular security audits to ensure our security measures are effective.
The confidentiality of our data processing activities is a fundamental principle of this Data Processing Agreement. All personal data entrusted to us is treated with strict confidentiality, ensuring that only authorized personnel can access it for legitimate processing purposes. To protect personal data from unauthorized disclosure or use, our employees and subcontractors are bound by strict confidentiality agreements. In accordance with this agreement, confidentiality extends to all phases of data processing, from collection and storage to transmission and eventual deletion.
This Data Processing Agreement outlines the rights of data subjects regarding the processing of their personal data. As part of these rights, you have the right to access, rectify, and delete your personal data, as well as the right to restrict or object to specific processing activities. When applicable, data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format. In accordance with the procedures defined in this agreement, we will promptly respond to any requests submitted by data subjects exercising these rights.
In the event of a data breach, we have developed a comprehensive data breach response plan. A breach response plan identifies and assesses the breach, notifies the appropriate authorities, and communicates with affected data subjects, if necessary. To mitigate the impact of a data breach, we will take all necessary steps, including implementing remedial measures and preventing further unauthorized access.
Sub-processors may be engaged by us to assist in the processing of personal data within the scope of our payment gateway services, as outlined in this Data Processing Agreement. Our sub-processors are carefully selected and assessed to ensure they meet the same stringent data protection standards and obligations. In compliance with applicable data protection laws, we only use sub-processors with the prior written consent of the Data Controller.
When personal data is processed or stored outside the jurisdiction in which the Data Controller operates, international data transfers may occur. Our commitment is to ensure that any international data transfers comply with applicable data protection laws, including implementing appropriate safeguards where necessary. By using standard contractual clauses, binding corporate rules, or relying on data protection mechanisms recognized by relevant data protection authorities, these safeguards may be implemented.
The Data Controller reserves the right to audit our data processing activities to verify compliance with this Data Processing Agreement and applicable data protection laws. Audit requests must be submitted in writing and should specify the scope, purpose, and timeframe of the audit. The Data Controller will cooperate fully with our audit activities, providing access to relevant documentation and information as needed. During audits, we will ensure transparency and accountability in data processing while minimizing disruption to our operations.
Our payment gateway services will retain personal data only for as long as necessary to fulfill the purposes outlined in this Data Processing Agreement. Upon expiration of the data retention period or upon request by the Data Controller, we will ensure the secure and complete deletion of personal data, including any copies or backups. The deletion of data will be carried out using secure methods to prevent accidental or unlawful destruction, loss, alteration, or disclosure.
Our payment gateway services will retain personal data only as long as necessary to achieve the purposes outlined in this Data Processing Agreement. Retention periods may vary depending on the specific processing activity, regulatory requirements, and the instructions of the Data Controller. If your personal data is no longer needed for the defined purposes, we will securely delete or anonymize it, ensuring that it can no longer be identified or accessed.
Our commitment is to promptly notify the Data Controller of any breach of personal data that poses a risk to the rights and freedoms of data subjects. All relevant information about the breach, its potential consequences, and the measures taken or proposed to address the breach will be included in the notification. As part of our cooperation with the Data Controller, we will investigate the breach and mitigate its effects as well as take necessary steps to prevent its occurrence in the future.
This Data Processing Agreement limits our liability to the extent permitted by applicable data protection laws. We are responsible for processing personal data in accordance with the Data Controller's instructions and this agreement's obligations. As a result of the processing of personal data, we will not be liable for any indirect, incidental, special, or consequential damages, including, but not limited to, loss of profits, revenue, or data. In addition, our liability is subject to the Data Controller's compliance with data protection laws and regulations.
Whenever the Data Controller breaches any obligations under this Data Processing Agreement or any applicable data protection laws, the Data Controller agrees to indemnify and hold the Data Processor harmless. It includes, but is not limited to, legal fees, costs, and expenses incurred by the Data Processor in defending against such claims or liabilities. Data Controller is liable to indemnify the Data Processor for any breaches of data protection laws, unauthorized processing, or failure to comply with this agreement. In the event of a potential claim, the Data Processor agrees to notify the Data Controller as soon as possible, so the Data Controller can take appropriate action.
The laws of India shall govern and construe this Data Processing Agreement. Indian courts shall have exclusive jurisdiction over any disputes arising from or related to this agreement.
Throughout the lifecycle of this Data Processing Agreement, we reserve the right to make changes and updates to ensure its alignment with evolving data protection laws and business practices. When possible, modifications to this agreement will be communicated to the Data Controller by written notice or by electronic means. If the Data Controller does not object within a reasonable timeframe, the revised terms will be deemed accepted.