GDPR Compliance

1. Our Commitment

Paytix ("paytix", "we", "us", or "our") is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We recognize our obligations in updating and expanding our program to meet the demands of the GDPR (General Data Protection Regulation). The GDPR applies to organizations processing the personal data of individuals residing in the European Union and the European Economic Area (EEA).

2. GDPR Principles

We adhere to the principles relating to the processing of personal data set out in the GDPR which require personal data to be:

• Processed lawfully, fairly, and in a transparent manner.
• Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
• Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
• Accurate and, where necessary, kept up to date.
• Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
• Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

3. Your Rights Under GDPR

Under GDPR, individuals residing in the EU/EEA have specific rights regarding their personal data. Paytix is committed to facilitating these rights:

• Right of Access: You can request details about the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data, under certain conditions.
• Right to Restrict Processing: You can request the limitation of how we use your personal data, under certain conditions.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used format or have it transferred to another controller, under certain conditions.
• Right to Object: You can object to the processing of your personal data, under certain conditions (e.g., for direct marketing).

To exercise any of these rights, please contact us using the details provided in Section 6 below or refer to our main Privacy Policy. We will respond to your request within one month, as required by GDPR.

4. Lawful Basis for Processing

We process personal data based on lawful grounds as defined under GDPR. This typically includes processing necessary for the performance of a contract (e.g., providing the ticketing service you signed up for), processing based on your consent (where applicable), processing necessary for compliance with a legal obligation, or processing based on our legitimate interests (e.g., improving our service, preventing fraud), provided these interests do not override your fundamental rights and freedoms. More details can be found in our Privacy Policy.

5. Data Security and Transfers

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

[Optional: Add if applicable] If personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to ensure your data receives an adequate level of protection. Details are available in our Privacy Policy.

6. Contact Information for GDPR Inquiries

For any questions regarding our GDPR compliance, your data protection rights, or if you wish to make a request regarding your personal data, please contact us:

• Email: [Your GDPR/Privacy Contact Email Address]
• Postal Address: [Your Company Address, if applicable]

[Optional: If you have appointed a Data Protection Officer (DPO), provide their specific contact details here.]

You also have the right to lodge a complaint with the relevant supervisory authority, such as the National Commission for Data Protection (CNPD) in Luxembourg.

7. Further Information

For a comprehensive overview of how we collect, use, store, and protect your personal data, please refer to our full Privacy Policy.